# Time of Day Thread Module API Return Value Error Duration 1 4:54:13.938 AM 1 SHELL32.dll IsOS ( 33 ) FALSE 0.0000064 2 4:54:15.630 AM 1 SHELL32.dll IsOS ( 33 ) FALSE 0.0000073 3 4:54:15.751 AM 1 SHELL32.dll PathRemoveBlanksW ( "iexplore" ) 0.0000056 4 4:54:15.751 AM 1 SHELL32.dll StrCpyNW ( 0x01dbda6c, "iexplore", 2084 ) 0x01dbda6c 0.0000045 5 4:54:15.751 AM 1 SHELL32.dll PathRemoveArgsW ( "iexplore" ) 0.0000232 6 4:54:15.751 AM 1 SHELL32.dll PathUnquoteSpacesW ( "iexplore" ) 0.0000047 7 4:54:15.751 AM 1 SHELL32.dll PathGetDriveNumberW ( "iexplore" ) -1 0.0000045 8 4:54:15.761 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000056 9 4:54:15.761 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2fc64 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000047 10 4:54:15.761 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 11 4:54:15.761 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) S_OK 0.0000047 12 4:54:15.761 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x0001005e, 0x000e0242 ) S_FALSE 0.0000047 13 4:54:15.761 AM 1 SHELL32.dll UrlIsW ( "iexplore", URLIS_URL ) FALSE 0.0000059 14 4:54:15.761 AM 1 SHELL32.dll StrChrW ( "iexplore", ' ' ) NULL 0.0000047 15 4:54:15.761 AM 1 SHELL32.dll PathUnquoteSpacesW ( "iexplore" ) 0.0000045 16 4:54:15.761 AM 1 SHELL32.dll UrlIsW ( "iexplore", URLIS_URL ) FALSE 0.0000045 17 4:54:15.761 AM 1 SHELL32.dll StrChrW ( "iexplore", '\' ) NULL 0.0000047 18 4:54:15.761 AM 1 SHELL32.dll StrChrW ( "iexplore", ':' ) NULL 0.0000045 19 4:54:15.761 AM 1 SHELL32.dll SHRegGetBoolUSValueW ( "Software\Microsoft\Windows\CurrentVersion\Explorer", "MaximizeApps", FALSE, FALSE ) FALSE 0.0000969 20 4:54:15.761 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer", 0, KEY_QUERY_VALUE, 0x02181440 ) ERROR_SUCCESS 0.0000221 21 4:54:15.761 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000648, "MaximizeApps", NULL, 0x01dbe320, 0x01dbe324, 0x01dbe31c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 22 4:54:15.761 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Explorer", 0, KEY_QUERY_VALUE, 0x02181448 ) ERROR_SUCCESS 0.0000137 23 4:54:15.761 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000754, "MaximizeApps", NULL, 0x01dbe320, 0x01dbe324, 0x01dbe31c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000056 24 4:54:15.761 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000061 25 4:54:15.761 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000648 ) ERROR_SUCCESS 0.0000059 26 4:54:15.761 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2fc64 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000047 27 4:54:15.761 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 28 4:54:15.761 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) S_OK 0.0000045 29 4:54:15.761 AM 1 SHELL32.dll IsOS ( 28 ) FALSE 0.0000056 30 4:54:15.761 AM 1 SHELL32.dll StrCpyNW ( 0x0275ad7c, "C:\Documents and Settings\Administrator", 260 ) 0x0275ad7c 0.0000047 31 4:54:15.761 AM 1 SHELL32.dll PathIsDirectoryW ( "C:\Documents and Settings\Administrator" ) TRUE 0.0000204 32 4:54:15.761 AM 1 SHELL32.dll StrCmpICW ( "C:\Documents and Settings\Administrator", ".\" ) 53 0.0000045 33 4:54:15.761 AM 1 SHELL32.dll UrlIsW ( "iexplore", URLIS_URL ) FALSE 0.0000047 34 4:54:15.761 AM 1 SHELL32.dll StrCpyNW ( 0x02759d34, "iexplore", 2084 ) 0x02759d34 0.0000042 35 4:54:15.761 AM 1 SHELL32.dll PathUnquoteSpacesW ( "iexplore" ) 0.0000042 36 4:54:15.761 AM 1 SHELL32.dll PathIsRootW ( "iexplore" ) FALSE 0.0000047 37 4:54:15.761 AM 1 SHELL32.dll StrDupW ( "iexplore" ) 0x0218cf78 0.0000050 38 4:54:15.761 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbe5d0 ) S_OK 0.0000047 39 4:54:15.761 AM 1 SHELL32.dll PathIsUNCW ( "iexplore" ) FALSE 0.0000042 40 4:54:15.761 AM 1 SHELL32.dll UrlIsW ( "iexplore", URLIS_URL ) FALSE 0.0000047 41 4:54:15.761 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace", 0, KEY_READ, 0x01dbe490 ) ERROR_SUCCESS 0.0000151 42 4:54:15.761 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000648, "{11016101-E366-4D22-BC06-4ADA335C892B}", 0, KEY_READ, 0x01dbe488 ) ERROR_SUCCESS 0.0000126 43 4:54:15.761 AM 1 SHELL32.dll SHGetValueW ( 0x00000754, NULL, "SuppressionPolicy", NULL, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 44 4:54:15.761 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000754, "SuppressionPolicy", NULL, 0x01dbe318, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 45 4:54:15.761 AM 1 SHELL32.dll GUIDFromStringW ( "{11016101-E366-4D22-BC06-4ADA335C892B}", {00140008-23ff-77e6-0000-000038d31802} ) TRUE 0.0000059 46 4:54:15.761 AM 1 SHELL32.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000061 47 4:54:15.761 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000648, "{1f4de370-d627-11d1-ba4f-00a0c91eedba}", 0, KEY_READ, 0x01dbe488 ) ERROR_SUCCESS 0.0000106 48 4:54:15.761 AM 1 SHELL32.dll SHGetValueW ( 0x00000754, NULL, "SuppressionPolicy", NULL, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 49 4:54:15.761 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000754, "SuppressionPolicy", NULL, 0x01dbe318, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 50 4:54:15.761 AM 1 SHELL32.dll GUIDFromStringW ( "{1f4de370-d627-11d1-ba4f-00a0c91eedba}", IE History and Feeds Shell Data Source for Windows Search ) TRUE 0.0000056 51 4:54:15.761 AM 1 SHELL32.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000059 52 4:54:15.761 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000648, "{450D8FBA-AD25-11D0-98A8-0800361B1103}", 0, KEY_READ, 0x01dbe488 ) ERROR_SUCCESS 0.0000106 53 4:54:15.761 AM 1 SHELL32.dll SHGetValueW ( 0x00000754, NULL, "SuppressionPolicy", NULL, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 54 4:54:15.761 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000754, "SuppressionPolicy", NULL, 0x01dbe318, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 55 4:54:15.761 AM 1 SHELL32.dll GUIDFromStringW ( "{450D8FBA-AD25-11D0-98A8-0800361B1103}", Computer Search Results Folder ) TRUE 0.0000056 56 4:54:15.761 AM 1 SHELL32.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000061 57 4:54:15.761 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000648, "{645FF040-5081-101B-9F08-00AA002F954E}", 0, KEY_READ, 0x01dbe488 ) ERROR_SUCCESS 0.0000106 58 4:54:15.761 AM 1 SHELL32.dll SHGetValueW ( 0x00000754, NULL, "SuppressionPolicy", NULL, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 59 4:54:15.761 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000754, "SuppressionPolicy", NULL, 0x01dbe318, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 60 4:54:15.761 AM 1 SHELL32.dll GUIDFromStringW ( "{645FF040-5081-101B-9F08-00AA002F954E}", {450d8fba-ad25-11d0-98a8-0800361b1103} ) TRUE 0.0000053 61 4:54:15.761 AM 1 SHELL32.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000059 62 4:54:15.761 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000648, "{e17d4fc0-5564-11d1-83f2-00a0c90dc849}", 0, KEY_READ, 0x01dbe488 ) ERROR_SUCCESS 0.0000106 63 4:54:15.761 AM 1 SHELL32.dll SHGetValueW ( 0x00000754, NULL, "SuppressionPolicy", NULL, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 64 4:54:15.761 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000754, "SuppressionPolicy", NULL, 0x01dbe318, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 65 4:54:15.761 AM 1 SHELL32.dll GUIDFromStringW ( "{e17d4fc0-5564-11d1-83f2-00a0c90dc849}", Recycle Bin ) TRUE 0.0000006 66 4:54:15.771 AM 1 SHELL32.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000067 67 4:54:15.771 AM 1 SHELL32.dll RegCloseKey ( 0x00000648 ) ERROR_SUCCESS 0.0000061 68 4:54:15.771 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace", 0, KEY_READ, 0x01dbe490 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000126 69 4:54:15.771 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x000000c8, NULL, 0, MAXIMUM_ALLOWED, 0x01dbe4a0 ) ERROR_SUCCESS 0.0000106 70 4:54:15.771 AM 1 SHELL32.dll RegCreateKeyExW ( 0x00000648, "SessionInfo\0000000000012002", 0, NULL, REG_OPTION_VOLATILE, KEY_QUERY_VALUE, NULL, 0x01dbe548, 0x01dbe53c ) ERROR_SUCCESS 0.0000117 71 4:54:15.771 AM 1 SHELL32.dll RegCloseKey ( 0x00000648 ) ERROR_SUCCESS 0.0000056 72 4:54:15.771 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000754, "Desktop\NameSpace", 0, KEY_READ, 0x01dbe494 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 73 4:54:15.771 AM 1 SHELL32.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000056 74 4:54:15.771 AM 1 SHELL32.dll SHSkipJunction ( 0x00167a78, My Computer ) FALSE 0.0000053 75 4:54:15.771 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe53c ) ERROR_SUCCESS 0.0000271 76 4:54:15.771 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000332 77 4:54:15.771 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, 0x01dbe3f4, NULL, 0x01dbe3d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000240 78 4:54:15.771 AM 1 SHELL32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000075 79 4:54:15.771 AM 1 SHELL32.dll SHSkipJunction ( 0x00167a78, My Network Places ) FALSE 0.0000050 80 4:54:15.771 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe53c ) ERROR_SUCCESS 0.0000221 81 4:54:15.771 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000296 82 4:54:15.771 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, 0x01dbe3f4, NULL, 0x01dbe3d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000207 83 4:54:15.771 AM 1 SHELL32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000059 84 4:54:15.771 AM 1 SHELL32.dll SHSkipJunction ( 0x00167a78, {871c5380-42a0-1069-a2ea-08002b30309d} ) FALSE 0.0000047 85 4:54:15.771 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe53c ) ERROR_SUCCESS 0.0000207 86 4:54:15.771 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000291 87 4:54:15.771 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, 0x01dbe3f4, NULL, 0x01dbe3d4 ) ERROR_SUCCESS 0.0000204 88 4:54:15.771 AM 1 SHELL32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000056 89 4:54:15.771 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_QUERY_VALUE, 0x01dbe330 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000179 90 4:54:15.771 AM 1 SHELL32.dll StrCpyNW ( 0x01dbe350, "{871C5380-42A0-1069-A2EA-08002B30309D}", 103 ) 0x01dbe350 0.0000045 91 4:54:15.771 AM 1 SHELL32.dll StrCpyNW ( 0x01dbde9c, "CLSID\", 167 ) 0x01dbde9c 0.0000045 92 4:54:15.771 AM 1 SHELL32.dll StrCatBuffW ( "CLSID\", "{871C5380-42A0-1069-A2EA-08002B30309D}", 167 ) 0x01dbde9c 0.0000047 93 4:54:15.771 AM 1 SHELL32.dll StrCatBuffW ( "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", "\InProcServer32", 167 ) 0x01dbde9c 0.0000047 94 4:54:15.771 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\InProcServer32", 0, KEY_QUERY_VALUE, 0x01dbde98 ) ERROR_SUCCESS 0.0000198 95 4:54:15.771 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000756, NULL, NULL, NULL, 0x01dbe148, 0x01dbde90 ) ERROR_SUCCESS 0.0000296 96 4:54:15.771 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, NULL, NULL, 0x01dbdd38, 0x01dbe148, 0x01dbde90 ) ERROR_SUCCESS 0.0000204 97 4:54:15.771 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000756, "LoadWithoutCOM", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000279 98 4:54:15.771 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, "LoadWithoutCOM", NULL, 0x01dbdd38, NULL, 0x01dbdd18 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 99 4:54:15.771 AM 1 SHELL32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000059 100 4:54:15.771 AM 1 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\system32\ieframe.dll" ) 0x01dbe170 0.0000045 101 4:54:15.771 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000340, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000291 102 4:54:15.771 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000340, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, 0x01dbded4, NULL, 0x01dbdeb4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 103 4:54:15.771 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000328, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 104 4:54:15.771 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000328, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, 0x01dbded4, NULL, 0x01dbdeb4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 105 4:54:15.771 AM 1 SHELL32.dll RegQueryValueExW ( 0x00000334, "{871C5380-42A0-1069-A2EA-08002B30309D} {000214E6-0000-0000-C000-000000000046} 0x401", NULL, 0x01dbdc90, 0x01dbdc84, 0x01dbdc98 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 106 4:54:15.771 AM 1 SHELL32.dll RegQueryValueExW ( 0x00000330, "{871C5380-42A0-1069-A2EA-08002B30309D} {000214E6-0000-0000-C000-000000000046} 0x401", NULL, 0x01dbdc90, 0x01dbdc74, 0x01dbdc98 ) ERROR_SUCCESS 0.0000087 107 4:54:15.771 AM 1 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x01dbd8e8 ) ERROR_SUCCESS 0.0000117 108 4:54:15.771 AM 1 CLBCatQ.DLL RegQueryValueExW ( 0x00000754, "REGDBVersion", NULL, NULL, 0x01dbd964, 0x01dbd8e4 ) ERROR_SUCCESS 0.0000067 109 4:54:15.771 AM 1 CLBCatQ.DLL RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000053 110 4:54:15.771 AM 1 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x01dbd990 ) ERROR_SUCCESS 0.0000101 111 4:54:15.771 AM 1 CLBCatQ.DLL RegQueryValueExW ( 0x00000754, "REGDBVersion", NULL, NULL, 0x01dbda0c, 0x01dbd98c ) ERROR_SUCCESS 0.0000059 112 4:54:15.771 AM 1 CLBCatQ.DLL RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000056 113 4:54:15.771 AM 1 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_READ, 0x01dbdb8c ) ERROR_SUCCESS 0.0000190 114 4:54:15.771 AM 1 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x0218a888 ) ERROR_SUCCESS 0.0000120 115 4:54:15.771 AM 1 ole32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000056 116 4:54:15.771 AM 1 ole32.dll RegOpenKeyExW ( 0x0000064a, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_READ, 0x01dbdc58 ) ERROR_SUCCESS 0.0000170 117 4:54:15.771 AM 1 ole32.dll RegOpenKeyExW ( 0x00000756, "InprocServer32", 0, KEY_READ, 0x01dbdbf4 ) ERROR_SUCCESS 0.0000218 118 4:54:15.771 AM 1 ole32.dll RegQueryValueExW ( 0x0000077a, "InprocServer32", NULL, 0x01dbdc00, 0x02194ca0, 0x01dbdbe8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000212 119 4:54:15.771 AM 1 ole32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000059 120 4:54:15.771 AM 1 ole32.dll RegOpenKeyExW ( 0x00000756, "LocalServer32", 0, KEY_READ, 0x01dbdc14 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 121 4:54:15.771 AM 1 ole32.dll RegOpenKeyExW ( 0x00000756, "InprocServer32", 0, KEY_READ, 0x01dbdc14 ) ERROR_SUCCESS 0.0000215 122 4:54:15.771 AM 1 ole32.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x01dbdc20, 0x02194ca0, 0x01dbdc08 ) ERROR_SUCCESS 0.0000182 123 4:54:15.771 AM 1 ole32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000056 124 4:54:15.771 AM 1 ole32.dll RegOpenKeyExW ( 0x00000756, "InprocHandler32", 0, KEY_READ, 0x01dbdc14 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000207 125 4:54:15.771 AM 1 ole32.dll RegOpenKeyExW ( 0x00000756, "LocalServer32", 0, KEY_READ, 0x01dbdc14 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 126 4:54:15.771 AM 1 ole32.dll RegOpenKeyExW ( 0x00000756, "LocalServer", 0, KEY_READ, 0x01dbdc14 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 127 4:54:15.771 AM 1 ole32.dll RegOpenKeyExW ( 0x0000064a, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_READ, 0x01dbdbb8 ) ERROR_SUCCESS 0.0000168 128 4:54:15.771 AM 1 ole32.dll RegQueryValueExW ( 0x0000077a, "AppID", NULL, 0x01dbdb8c, 0x01dbdbbc, 0x01dbdb7c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000176 129 4:54:15.771 AM 1 ole32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000059 130 4:54:15.771 AM 1 ole32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000053 131 4:54:15.771 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_QUERY_VALUE, 0x01dbdeec ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 132 4:54:15.771 AM 1 urlmon.dll PathIsUNCW ( "iexplore" ) FALSE 0.0000045 133 4:54:15.771 AM 1 SHELL32.dll SHSkipJunction ( 0x00167a78, IE History and Feeds Shell Data Source for Windows Search ) FALSE 0.0000075 134 4:54:15.771 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{11016101-E366-4D22-BC06-4ADA335C892B}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe53c ) ERROR_SUCCESS 0.0000226 135 4:54:15.771 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000285 136 4:54:15.771 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, 0x01dbe3f4, NULL, 0x01dbe3d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 137 4:54:15.771 AM 1 SHELL32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000059 138 4:54:15.771 AM 1 SHELL32.dll SHSkipJunction ( 0x00167a78, Computer Search Results Folder ) FALSE 0.0000050 139 4:54:15.771 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{1F4DE370-D627-11D1-BA4F-00A0C91EEDBA}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe53c ) ERROR_SUCCESS 0.0000204 140 4:54:15.771 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000316 141 4:54:15.771 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, 0x01dbe3f4, NULL, 0x01dbe3d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000229 142 4:54:15.771 AM 1 SHELL32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000056 143 4:54:15.771 AM 1 SHELL32.dll SHSkipJunction ( 0x00167a78, {450d8fba-ad25-11d0-98a8-0800361b1103} ) FALSE 0.0000050 144 4:54:15.771 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe53c ) ERROR_SUCCESS 0.0000198 145 4:54:15.771 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000307 146 4:54:15.771 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, 0x01dbe3f4, NULL, 0x01dbe3d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000218 147 4:54:15.771 AM 1 SHELL32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000059 148 4:54:15.771 AM 1 SHELL32.dll SHSkipJunction ( 0x00167a78, Recycle Bin ) FALSE 0.0000047 149 4:54:15.771 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe53c ) ERROR_SUCCESS 0.0000204 150 4:54:15.771 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000274 151 4:54:15.771 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, 0x01dbe3f4, NULL, 0x01dbe3d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000190 152 4:54:15.771 AM 1 SHELL32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000070 153 4:54:15.771 AM 1 SHELL32.dll SHSkipJunction ( 0x00167a78, Search Results Folder ) FALSE 0.0000047 154 4:54:15.771 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{E17D4FC0-5564-11D1-83F2-00A0C90DC849}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe53c ) ERROR_SUCCESS 0.0000223 155 4:54:15.771 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000285 156 4:54:15.771 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, 0x01dbe3f4, NULL, 0x01dbe3d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 157 4:54:15.771 AM 1 SHELL32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000095 158 4:54:15.771 AM 1 SHELL32.dll UrlIsW ( "iexplore", URLIS_URL ) FALSE 0.0000047 159 4:54:15.771 AM 1 SHELL32.dll PathIsUNCW ( "iexplore" ) FALSE 0.0000056 160 4:54:15.771 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks", 0, KEY_READ, 0x01dbe584 ) ERROR_SUCCESS 0.0000201 161 4:54:15.771 AM 1 SHELL32.dll RegEnumValueW ( 0x00000754, 0, 0x01dbe598, 0x01dbe580, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000087 162 4:54:15.771 AM 1 SHELL32.dll GUIDFromStringW ( "{AEB6717E-7E19-11d0-97EE-00C04FD91972}", IID_NULL ) TRUE 0.0000061 163 4:54:15.771 AM 1 SHELL32.dll StrCpyNW ( 0x01dbe398, "{AEB6717E-7E19-11D0-97EE-00C04FD91972}", 103 ) 0x01dbe398 0.0000042 164 4:54:15.771 AM 1 SHELL32.dll StrCpyNW ( 0x01dbdee4, "CLSID\", 167 ) 0x01dbdee4 0.0000061 165 4:54:15.771 AM 1 SHELL32.dll StrCatBuffW ( "CLSID\", "{AEB6717E-7E19-11D0-97EE-00C04FD91972}", 167 ) 0x01dbdee4 0.0000059 166 4:54:15.771 AM 1 SHELL32.dll StrCatBuffW ( "CLSID\{AEB6717E-7E19-11D0-97EE-00C04FD91972}", "\InProcServer32", 167 ) 0x01dbdee4 0.0000087 167 4:54:15.781 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{AEB6717E-7E19-11D0-97EE-00C04FD91972}\InProcServer32", 0, KEY_QUERY_VALUE, 0x01dbdee0 ) ERROR_SUCCESS 0.0000511 168 4:54:15.781 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000077a, NULL, NULL, NULL, 0x01dbe190, 0x01dbded8 ) ERROR_SUCCESS 0.0000486 169 4:54:15.781 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x01dbdd80, 0x01dbe190, 0x01dbded8 ) ERROR_SUCCESS 0.0000360 170 4:54:15.781 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000077a, "LoadWithoutCOM", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000377 171 4:54:15.781 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, "LoadWithoutCOM", NULL, 0x01dbdd80, NULL, 0x01dbdd60 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000263 172 4:54:15.781 AM 1 SHELL32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000095 173 4:54:15.781 AM 1 SHELL32.dll PathFindFileNameW ( "shell32.dll" ) 0x01dbe190 0.0000056 174 4:54:15.781 AM 1 SHELL32.dll RegEnumValueW ( 0x00000754, 1, 0x01dbe598, 0x01dbe580, NULL, NULL, NULL, NULL ) ERROR_NO_MORE_ITEMS 259 = No more data is available. 0.0000092 175 4:54:15.781 AM 1 SHELL32.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000078 176 4:54:15.781 AM 1 SHELL32.dll PathFindFileNameW ( "iexplore" ) 0x02759d34 0.0000056 177 4:54:15.781 AM 1 SHELL32.dll PathFindFileNameW ( "iexplore" ) 0x02759d34 0.0000056 178 4:54:15.781 AM 1 SHELL32.dll PathFindExtensionW ( "Software\Microsoft\Windows\CurrentVersion\App Paths\iexplore" ) 0x01dbe214 0.0000061 179 4:54:15.781 AM 1 SHELL32.dll SHRegGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\iexplore.exe", NULL, SRRF_RT_REG_SZ, NULL, 0x01dbe3bc, 0x01dbe198 ) ERROR_SUCCESS 0.0000654 180 4:54:15.781 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\iexplore.exe", 0, KEY_QUERY_VALUE, 0x01dbe07c ) ERROR_SUCCESS 0.0000249 181 4:54:15.781 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000754, NULL, NULL, 0x01dbe064, 0x01dbe3bc, 0x01dbe198 ) ERROR_SUCCESS 0.0000098 182 4:54:15.781 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000075 183 4:54:15.781 AM 1 SHELL32.dll PathUnquoteSpacesW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0.0000061 184 4:54:15.781 AM 1 SHELL32.dll PathIsRootW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) FALSE 0.0000061 185 4:54:15.781 AM 1 SHELL32.dll PathIsFileSpecW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) FALSE 0.0000059 186 4:54:15.781 AM 1 SHELL32.dll PathIsURLW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) FALSE 0.0000061 187 4:54:15.781 AM 1 SHELL32.dll PathFindFileNameW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x01dbe1ba 0.0000059 188 4:54:15.781 AM 1 SHELL32.dll PathIsUNCW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) FALSE 0.0000053 189 4:54:15.781 AM 1 SHELL32.dll PathGetDriveNumberW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 2 0.0000056 190 4:54:15.781 AM 1 SHELL32.dll PathBuildRootW ( 0x01dbdf6c, 2 ) 0x01dbdf6c 0.0000059 191 4:54:15.781 AM 1 SHELL32.dll PathIsUNCW ( "C:\" ) FALSE 0.0000059 192 4:54:15.781 AM 1 SHELL32.dll PathBuildRootW ( 0x01dbdd10, 2 ) 0x01dbdd10 0.0000056 193 4:54:15.781 AM 1 SHELL32.dll PathAddBackslashW ( "C:\" ) 0x01dbe3c2 0.0000070 194 4:54:15.781 AM 1 SHELL32.dll PathAddBackslashW ( "C:\Program Files" ) 0x01dbe3de 0.0000061 195 4:54:15.781 AM 1 SHELL32.dll PathAddBackslashW ( "C:\Program Files\Internet Explorer" ) 0x01dbe402 0.0000059 196 4:54:15.781 AM 1 SHELL32.dll PathRemoveBackslashW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x01dbe418 0.0000064 197 4:54:15.781 AM 1 SHELL32.dll PathFindExtensionW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x01dbe412 0.0000061 198 4:54:15.781 AM 1 SHELL32.dll PathIsDirectoryW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) FALSE 0.0000187 199 4:54:15.781 AM 1 SHELL32.dll StrCpyNW ( 0x02759d34, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", 2084 ) 0x02759d34 0.0000059 200 4:54:15.781 AM 1 SHELL32.dll PathFindExtensionW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x02759d8a 0.0000061 201 4:54:15.781 AM 1 SHELL32.dll PathFindExtensionW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x02759d8a 0.0000061 202 4:54:15.781 AM 1 SHELL32.dll PathFindExtensionW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x02759d8a 0.0000059 203 4:54:15.781 AM 1 SHELL32.dll AssocIsDangerous ( ".EXE" ) TRUE 0.0008401 204 4:54:15.781 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".EXE", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0000246 205 4:54:15.781 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, NULL, NULL, 0x01dbe014, 0x01dbe084, 0x01dbe078 ) ERROR_SUCCESS 0.0000246 206 4:54:15.781 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000081 207 4:54:15.781 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".ade", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000215 208 4:54:15.781 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".adp", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000207 209 4:54:15.781 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".app", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 210 4:54:15.781 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".asp", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0000223 211 4:54:15.781 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, NULL, NULL, 0x01dbe014, 0x01dbe28c, 0x01dbe074 ) ERROR_SUCCESS 0.0000229 212 4:54:15.781 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000078 213 4:54:15.781 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".bas", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000190 214 4:54:15.781 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".bat", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0000218 215 4:54:15.781 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, NULL, NULL, 0x01dbe014, 0x01dbe28c, 0x01dbe074 ) ERROR_SUCCESS 0.0000226 216 4:54:15.781 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000081 217 4:54:15.781 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".cer", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0000240 218 4:54:15.781 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, NULL, NULL, 0x01dbe014, 0x01dbe28c, 0x01dbe074 ) ERROR_SUCCESS 0.0000240 219 4:54:15.781 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000081 220 4:54:15.781 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".chm", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0000218 221 4:54:15.781 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, NULL, NULL, 0x01dbe014, 0x01dbe28c, 0x01dbe074 ) ERROR_SUCCESS 0.0000223 222 4:54:15.781 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000078 223 4:54:15.781 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".cmd", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0000218 224 4:54:15.781 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, NULL, NULL, 0x01dbe014, 0x01dbe28c, 0x01dbe074 ) ERROR_SUCCESS 0.0000221 225 4:54:15.781 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000078 226 4:54:15.781 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".com", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0000235 227 4:54:15.781 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, NULL, NULL, 0x01dbe014, 0x01dbe28c, 0x01dbe074 ) ERROR_SUCCESS 0.0000223 228 4:54:15.781 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000075 229 4:54:15.781 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".cpl", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0000210 230 4:54:15.781 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, NULL, NULL, 0x01dbe014, 0x01dbe28c, 0x01dbe074 ) ERROR_SUCCESS 0.0000221 231 4:54:15.781 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000078 232 4:54:15.781 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".crt", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0000218 233 4:54:15.781 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, NULL, NULL, 0x01dbe014, 0x01dbe28c, 0x01dbe074 ) ERROR_SUCCESS 0.0000221 234 4:54:15.781 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000084 235 4:54:15.781 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".csh", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 236 4:54:15.781 AM 1 urlmon.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\", 0, KEY_READ, 0x02190178 ) ERROR_SUCCESS 0.0000187 237 4:54:15.781 AM 1 urlmon.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\", 0, KEY_READ, 0x02190a18 ) ERROR_SUCCESS 0.0000162 238 4:54:15.781 AM 1 urlmon.dll StrCmpNW ( "C:\Program%20Files\Internet%20Explorer\IEXPLORE.EXE", "..", 2 ) 1 0.0000064 239 4:54:15.781 AM 1 urlmon.dll StrCmpNICW ( "file", "http", 4 ) -2 0.0000059 240 4:54:15.781 AM 1 urlmon.dll StrCmpNICW ( "file", "file", 4 ) 0 0.0000056 241 4:54:15.781 AM 1 iertutil.dll RegOpenKeyExW ( 0x00000428, "Microsoft\Internet Explorer\Security", 0, KEY_READ, 0x01dbdf68 ) ERROR_SUCCESS 0.0000215 242 4:54:15.781 AM 1 iertutil.dll RegQueryValueExW ( 0x00000578, "DisableSecuritySettingsCheck", NULL, 0x01dbdf64, 0x01dbe1d8, 0x01dbdf6c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 243 4:54:15.781 AM 1 iertutil.dll RegCloseKey ( 0x00000578 ) ERROR_SUCCESS 0.0000073 244 4:54:15.781 AM 1 iertutil.dll RegOpenKeyExW ( 0x0000042c, "Microsoft\Internet Explorer\Security", 0, KEY_READ, 0x01dbdf68 ) ERROR_SUCCESS 0.0000156 245 4:54:15.781 AM 1 iertutil.dll RegQueryValueExW ( 0x00000578, "DisableSecuritySettingsCheck", NULL, 0x01dbdf64, 0x01dbe1d8, 0x01dbdf6c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 246 4:54:15.781 AM 1 iertutil.dll RegCloseKey ( 0x00000578 ) ERROR_SUCCESS 0.0000087 247 4:54:15.781 AM 1 urlmon.dll StrCmpW ( "file:///C:/Documents%20and%20Settings/Administrator/Desktop", "file:///C:/Program%20Files/Internet%20Explorer/IEXPLORE.EXE" ) -1 0.0000061 248 4:54:15.781 AM 1 urlmon.dll StrCmpNICW ( "file:///C:/Program%20Files/Internet%20Explorer/IEXPLORE.EXE", "http", 4 ) -2 0.0000056 249 4:54:15.781 AM 1 urlmon.dll StrCmpNICW ( "file:///C:/Program%20Files/Internet%20Explorer/IEXPLORE.EXE", "file", 4 ) 0 0.0000056 250 4:54:15.781 AM 1 urlmon.dll StrCmpNICW ( "file:///C:/Program%20Files/Internet%20Explorer/IEXPLORE.EXE", "http", 4 ) -2 0.0000053 251 4:54:15.781 AM 1 urlmon.dll StrCmpNICW ( "file:///C:/Program%20Files/Internet%20Explorer/IEXPLORE.EXE", "file", 4 ) 0 0.0000056 252 4:54:15.781 AM 1 urlmon.dll StrCmpNICW ( "file:///C:/Program%20Files/Internet%20Explorer/IEXPLORE.EXE", "http", 4 ) -2 0.0000056 253 4:54:15.781 AM 1 urlmon.dll StrCmpNICW ( "file:///C:/Program%20Files/Internet%20Explorer/IEXPLORE.EXE", "file", 4 ) 0 0.0000056 254 4:54:15.781 AM 1 urlmon.dll PathCreateFromUrlW ( "file:///C:/Program%20Files/Internet%20Explorer/IEXPLORE.EXE", "", 0x01dbdafc, 131072 ) S_OK 0.0000176 255 4:54:15.781 AM 1 urlmon.dll PathIsUNCW ( "C:\Program%20Files\Internet%20Explorer\IEXPLORE.EXE" ) FALSE 0.0000056 256 4:54:15.791 AM 1 urlmon.dll PathCreateFromUrlW ( "file:///C:/Program%20Files/Internet%20Explorer/IEXPLORE.EXE", "C:\Program%20Files\Internet%20Explorer\IEXPLORE.EXE", 0x01dbdafc, 0 ) S_OK 0.0000179 257 4:54:15.791 AM 1 urlmon.dll StrCmpNW ( "C:\Program%20Files\Internet%20Explorer\IEXPLORE.EXE", "..", 2 ) 1 0.0000059 258 4:54:15.791 AM 1 urlmon.dll StrCmpNICW ( "file", "http", 4 ) -2 0.0000056 259 4:54:15.791 AM 1 urlmon.dll StrCmpNICW ( "file", "file", 4 ) 0 0.0000053 260 4:54:15.791 AM 1 urlmon.dll UrlIsW ( "file:///C:/Program%20Files/Internet%20Explorer/IEXPLORE.EXE", URLIS_FILEURL ) TRUE 0.0000064 261 4:54:15.791 AM 1 urlmon.dll PathCreateFromUrlW ( "file:///C:/Program%20Files/Internet%20Explorer/IEXPLORE.EXE", "", 0x01dbdc68, 0 ) S_OK 0.0000159 262 4:54:15.791 AM 1 urlmon.dll PathIsRootW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) FALSE 0.0000061 263 4:54:15.791 AM 1 urlmon.dll PathIsUNCW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) FALSE 0.0000056 264 4:54:15.791 AM 1 urlmon.dll PathRemoveFileSpecW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) TRUE 0.0000061 265 4:54:15.791 AM 1 urlmon.dll PathIsPrefixW ( "C:\Documents and Settings\Administrator\Cookies", "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) FALSE 0.0000075 266 4:54:15.791 AM 1 urlmon.dll PathIsPrefixW ( "C:\Documents and Settings\Administrator\Cookies", "C:\Program Files\Internet Explorer\iexplore.exe" ) FALSE 0.0000070 267 4:54:15.791 AM 1 urlmon.dll PathIsPrefixW ( "C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files", "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) FALSE 0.0000067 268 4:54:15.791 AM 1 urlmon.dll PathIsPrefixW ( "C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files", "C:\Program Files\Internet Explorer\iexplore.exe" ) FALSE 0.0000070 269 4:54:15.791 AM 1 urlmon.dll StrDupW ( "C:\Program Files\Internet Explorer" ) 0x00170e60 0.0000070 270 4:54:15.791 AM 1 urlmon.dll PathIsUNCW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) FALSE 0.0000053 271 4:54:15.791 AM 1 urlmon.dll PathIsUNCServerW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE:Zone.Identifier" ) FALSE 0.0000059 272 4:54:15.791 AM 1 urlmon.dll PathIsUNCServerShareW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE:Zone.Identifier" ) FALSE 0.0000056 273 4:54:15.791 AM 1 urlmon.dll PathFindExtensionW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x01dbddb6 0.0000061 274 4:54:15.791 AM 1 urlmon.dll StrCmpICW ( ".EXE", ".HTM" ) -3 0.0000059 275 4:54:15.791 AM 1 urlmon.dll StrCmpICW ( ".EXE", ".HTML" ) -3 0.0000056 276 4:54:15.791 AM 1 urlmon.dll StrCmpICW ( ".EXE", ".MHT" ) -8 0.0000056 277 4:54:15.791 AM 1 urlmon.dll StrCmpICW ( ".EXE", ".HTC" ) -3 0.0000056 278 4:54:15.791 AM 1 urlmon.dll StrCmpICW ( ".EXE", ".HTT" ) -3 0.0000053 279 4:54:15.791 AM 1 urlmon.dll StrCmpICW ( ".EXE", ".XML" ) -19 0.0000056 280 4:54:15.791 AM 1 urlmon.dll StrCmpICW ( ".EXE", ".XSL" ) -19 0.0000056 281 4:54:15.791 AM 1 urlmon.dll StrCmpICW ( ".EXE", ".XSLT" ) -19 0.0000056 282 4:54:15.791 AM 1 urlmon.dll StrCmpICW ( ".EXE", ".ENT" ) 10 0.0000056 283 4:54:15.791 AM 1 urlmon.dll StrCmpICW ( ".EXE", ".DTD" ) 1 0.0000056 284 4:54:15.791 AM 1 urlmon.dll StrCmpICW ( ".EXE", ".XDR" ) -19 0.0000056 285 4:54:15.791 AM 1 urlmon.dll StrCmpICW ( ".EXE", ".XSD" ) -19 0.0000056 286 4:54:15.791 AM 1 urlmon.dll StrCmpICW ( ".EXE", ".JS" ) -5 0.0000056 287 4:54:15.791 AM 1 urlmon.dll StrCmpICW ( ".EXE", ".VBS" ) -17 0.0000056 288 4:54:15.791 AM 1 urlmon.dll StrCmpW ( "file:///C:/Documents%20and%20Settings/Administrator/Desktop", "file:///C:/Program%20Files/Internet%20Explorer/IEXPLORE.EXE" ) -1 0.0000059 289 4:54:15.791 AM 1 urlmon.dll RegCloseKey ( 0x00000778 ) ERROR_SUCCESS 0.0000087 290 4:54:15.791 AM 1 urlmon.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000078 291 4:54:15.791 AM 1 SHELL32.dll StrDupW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x021603b0 0.0000073 292 4:54:15.791 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbe578 ) S_OK 0.0000061 293 4:54:15.791 AM 1 SHELL32.dll StrDupW ( "::{20D04FE0-3AEA-1069-A2D8-08002B30309D}" ) 0x0217fed8 0.0000070 294 4:54:15.791 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbe420 ) S_OK 0.0000056 295 4:54:15.791 AM 1 SHELL32.dll GUIDFromStringW ( "{20D04FE0-3AEA-1069-A2D8-08002B30309D}", IID_NULL ) TRUE 0.0000078 296 4:54:15.791 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbe460 ) S_OK 0.0000059 297 4:54:15.791 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{20D04FE0-3AEA-1069-A2D8-08002B30309D}", 0, KEY_QUERY_VALUE, 0x01dbe230 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000411 298 4:54:15.791 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x01dbe4d0 ) S_OK 0.0000089 299 4:54:15.791 AM 1 SHELL32.dll QISearch ( 0x000c12f0, 0x7c8d6f10, IPersistFolder, 0x01dbe3b8 ) S_OK 0.0000061 300 4:54:15.791 AM 1 SHELL32.dll QISearch ( 0x000c12f0, 0x7c8d6f10, {c7264bf0-edb6-11d1-8546-006008059368}, 0x01dbe3b4 ) S_OK 0.0000059 301 4:54:15.791 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_CLASSES_ROOT, "CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32", 0, KEY_QUERY_VALUE, 0x01dbe11c ) ERROR_SUCCESS 0.0000416 302 4:54:15.791 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, NULL, NULL, 0x01dbe0bc, 0x01dbe120, 0x01dbe118 ) ERROR_SUCCESS 0.0000321 303 4:54:15.791 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000095 304 4:54:15.791 AM 1 SHELL32.dll PathBuildRootA ( 0x01dbe3cf, 2 ) 0x01dbe3cf 0.0000056 305 4:54:15.791 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions", 0, KEY_ENUMERATE_SUB_KEYS, 0x01dbe304 ) ERROR_SUCCESS 0.0000274 306 4:54:15.791 AM 1 SHELL32.dll SHGetValueW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}", "DriveMask", NULL, 0x01dbe0cc, 0x01dbe0c8 ) ERROR_SUCCESS 0.0000880 307 4:54:15.791 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}", 0, KEY_QUERY_VALUE, 0x01dbdf88 ) ERROR_SUCCESS 0.0000288 308 4:54:15.791 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, "DriveMask", NULL, 0x01dbdf70, 0x01dbe0cc, 0x01dbe0c8 ) ERROR_SUCCESS 0.0000279 309 4:54:15.791 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000081 310 4:54:15.791 AM 1 SHELL32.dll PathBuildRootW ( 0x01dbe2d8, 2 ) 0x01dbe2d8 0.0000056 311 4:54:15.791 AM 1 SHELL32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000078 312 4:54:15.791 AM 1 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x01dbdf08, 260 ) 4 0.0000061 313 4:54:15.791 AM 1 SHELL32.dll StrDupW ( "C:\" ) 0x0215fa30 0.0000070 314 4:54:15.791 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x01dbe3c8 ) S_OK 0.0000059 315 4:54:15.791 AM 1 SHELL32.dll StrChrW ( "Program Files\Internet Explorer\IEXPLORE.EXE", '\' ) 0x021603d0 0.0000059 316 4:54:15.791 AM 1 SHELL32.dll PathAppendW ( "C:\", "Program Files" ) TRUE 0.0000087 317 4:54:15.791 AM 1 SHELL32.dll PathAppendW ( "C:\", "Program Files" ) TRUE 0.0000075 318 4:54:15.791 AM 1 SHELL32.dll PathCombineW ( 0x01dbd830, "C:\Program Files", "desktop.ini" ) 0x01dbd830 0.0000078 319 4:54:15.791 AM 1 SHELL32.dll PathIsNetworkPathW ( "C:\Program Files\desktop.ini" ) FALSE 0.0000299 320 4:54:15.791 AM 1 SHELL32.dll PathBuildRootW ( 0x01dbcae4, 2 ) 0x01dbcae4 0.0000056 321 4:54:15.791 AM 1 SHELL32.dll PathBuildRootW ( 0x01dbc894, 2 ) 0x01dbc894 0.0000056 322 4:54:15.791 AM 1 SHELL32.dll PathFileExistsW ( "C:\Program Files\desktop.ini" ) FALSE 0 = The operation completed successfully. 0.0000494 323 4:54:15.791 AM 1 SHELL32.dll PathCombineW ( 0x01dbd814, "C:\Program Files", "desktop.ini" ) 0x01dbd814 0.0000078 324 4:54:15.791 AM 1 SHELL32.dll PathIsNetworkPathW ( "C:\Program Files\desktop.ini" ) FALSE 0.0000293 325 4:54:15.791 AM 1 SHELL32.dll PathBuildRootW ( 0x01dbcac8, 2 ) 0x01dbcac8 0.0000056 326 4:54:15.791 AM 1 SHELL32.dll PathBuildRootW ( 0x01dbc878, 2 ) 0x01dbc878 0.0000056 327 4:54:15.791 AM 1 SHELL32.dll PathFileExistsW ( "C:\Program Files\desktop.ini" ) FALSE 0 = The operation completed successfully. 0.0000263 328 4:54:15.791 AM 1 SHELL32.dll StrCpyW ( "", "Program Files" ) 0x0215df14 0.0000059 329 4:54:15.791 AM 1 SHELL32.dll PathFindExtensionW ( "Program Files" ) 0x0017c82e 0.0000056 330 4:54:15.791 AM 1 SHELL32.dll StrCpyNW ( 0x01dbdc7e, "Program Files", 257 ) 0x01dbdc7e 0.0000059 331 4:54:15.791 AM 1 SHELL32.dll PathCombineW ( 0x01dbda3c, "C:\Program Files", "desktop.ini" ) 0x01dbda3c 0.0000078 332 4:54:15.791 AM 1 SHELL32.dll PathIsNetworkPathW ( "C:\Program Files\desktop.ini" ) FALSE 0.0000296 333 4:54:15.791 AM 1 SHELL32.dll PathBuildRootW ( 0x01dbccdc, 2 ) 0x01dbccdc 0.0000053 334 4:54:15.791 AM 1 SHELL32.dll PathBuildRootW ( 0x01dbca8c, 2 ) 0x01dbca8c 0.0000059 335 4:54:15.791 AM 1 SHELL32.dll PathFileExistsW ( "C:\Program Files\desktop.ini" ) FALSE 0 = The operation completed successfully. 0.0000268 336 4:54:15.791 AM 1 SHELL32.dll PathFindExtensionW ( "Program Files" ) 0x0215df2e 0.0000056 337 4:54:15.791 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder, 0x01dbe394 ) S_OK 0.0000059 338 4:54:15.791 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IPersistFolder3, 0x01dbdc58 ) S_OK 0.0000061 339 4:54:15.791 AM 1 SHELL32.dll StrCpyNW ( 0x01dbdc72, "Program Files", 257 ) 0x01dbdc72 0.0000056 340 4:54:15.791 AM 1 SHELL32.dll StrDupW ( "C:\Program Files" ) 0x00123878 0.0000067 341 4:54:15.791 AM 1 SHELL32.dll StrChrW ( "Internet Explorer\IEXPLORE.EXE", '\' ) 0x021603f4 0.0000056 342 4:54:15.791 AM 1 SHELL32.dll PathAppendW ( "C:\Program Files", "Internet Explorer" ) TRUE 0.0000081 343 4:54:15.791 AM 1 SHELL32.dll PathCombineW ( 0x01dbd7cc, "C:\Program Files", "desktop.ini" ) 0x01dbd7cc 0.0000081 344 4:54:15.791 AM 1 SHELL32.dll PathIsNetworkPathW ( "C:\Program Files\desktop.ini" ) FALSE 0.0000296 345 4:54:15.791 AM 1 SHELL32.dll PathBuildRootW ( 0x01dbd080, 2 ) 0x01dbd080 0.0000056 346 4:54:15.791 AM 1 SHELL32.dll PathBuildRootW ( 0x01dbce30, 2 ) 0x01dbce30 0.0000056 347 4:54:15.791 AM 1 SHELL32.dll PathFileExistsW ( "C:\Program Files\desktop.ini" ) FALSE 0 = The operation completed successfully. 0.0000265 348 4:54:15.791 AM 1 SHELL32.dll StrCpyW ( "", "Internet Explorer" ) 0x0217ff04 0.0000056 349 4:54:15.791 AM 1 SHELL32.dll PathFindExtensionW ( "Internet Explorer" ) 0x0017c836 0.0000056 350 4:54:15.791 AM 1 SHELL32.dll PathFindExtensionW ( "Internet Explorer" ) 0x0217ff26 0.0000056 351 4:54:15.791 AM 1 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000056 352 4:54:15.791 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IShellFolder, 0x01dbe304 ) S_OK 0.0000059 353 4:54:15.791 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IPersistFolder3, 0x01dbdbe4 ) S_OK 0.0000064 354 4:54:15.801 AM 1 SHELL32.dll StrCpyNW ( 0x01dbdc1a, "Internet Explorer", 243 ) 0x01dbdc1a 0.0000061 355 4:54:15.801 AM 1 SHELL32.dll StrDupW ( "C:\Program Files\Internet Explorer" ) 0x00170aa0 0.0000067 356 4:54:15.801 AM 1 SHELL32.dll StrChrW ( "IEXPLORE.EXE", '\' ) NULL 0.0000059 357 4:54:15.801 AM 1 SHELL32.dll SHUnicodeToUnicode ( "IEXPLORE.EXE", 0x01dbe25c, 13 ) 13 0.0000059 358 4:54:15.801 AM 1 SHELL32.dll PathAppendW ( "C:\Program Files\Internet Explorer", "IEXPLORE.EXE" ) TRUE 0.0000087 359 4:54:15.801 AM 1 SHELL32.dll StrCpyW ( "", "iexplore.exe" ) 0x0215dec0 0.0000059 360 4:54:15.801 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbe550 ) S_OK 0.0000059 361 4:54:15.801 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x01dbe518 ) S_OK 0.0000059 362 4:54:15.801 AM 1 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x01dbe024, 260 ) 4 0.0000064 363 4:54:15.801 AM 1 SHELL32.dll StrDupW ( "C:\" ) 0x0215fa30 0.0000067 364 4:54:15.801 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x01dbe4c8 ) S_OK 0.0000059 365 4:54:15.801 AM 1 SHELL32.dll StrCpyNW ( 0x01dbe000, "Internet Explorer", 260 ) 0x01dbe000 0.0000059 366 4:54:15.801 AM 1 SHELL32.dll PathFindExtensionW ( "Internet Explorer" ) 0x01dbe022 0.0000056 367 4:54:15.801 AM 1 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000056 368 4:54:15.801 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder, 0x01dbe5bc ) S_OK 0.0000059 369 4:54:15.801 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IPersistFolder3, 0x01dbdddc ) S_OK 0.0000059 370 4:54:15.801 AM 1 SHELL32.dll StrCpyNW ( 0x01dbdb94, "Program Files", 260 ) 0x01dbdb94 0.0000059 371 4:54:15.801 AM 1 SHELL32.dll StrCpyNW ( 0x01dbddf6, "Program Files", 257 ) 0x01dbddf6 0.0000059 372 4:54:15.801 AM 1 SHELL32.dll StrCpyNW ( 0x01dbdb94, "Internet Explorer", 260 ) 0x01dbdb94 0.0000056 373 4:54:15.801 AM 1 SHELL32.dll StrCpyNW ( 0x01dbde12, "Internet Explorer", 243 ) 0x01dbde12 0.0000059 374 4:54:15.801 AM 1 SHELL32.dll StrDupW ( "C:\Program Files\Internet Explorer" ) 0x00170fa0 0.0000070 375 4:54:15.801 AM 1 SHELL32.dll AssocCreate ( Query file associations, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x01dbe2a8 ) S_OK 0.0000196 376 4:54:15.801 AM 1 SHELL32.dll QISearch ( 0x00171090, 0x7c92b550, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x01dbe2a8 ) S_OK 0.0000059 377 4:54:15.801 AM 1 SHELL32.dll StrCpyNW ( 0x01dbe304, "iexplore.exe", 260 ) 0x01dbe304 0.0000056 378 4:54:15.801 AM 1 SHELL32.dll PathFindExtensionW ( "iexplore.exe" ) 0x01dbe314 0.0000059 379 4:54:15.801 AM 1 SHELL32.dll SHStrDupW ( ".exe", 0x001710a4 ) S_OK 0.0000067 380 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x000001c8, ".exe", 0, MAXIMUM_ALLOWED, 0x01dbe0f8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 381 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x000001c8, ".exe", 0, MAXIMUM_ALLOWED, 0x01dbe0f8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000101 382 4:54:15.801 AM 1 SHELL32.dll AssocCreate ( {9016d0dd-7c41-46cc-a664-bf22f7cb186a}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x01dbe204 ) S_OK 0.0000075 383 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".exe", 0, MAXIMUM_ALLOWED, 0x0015e73c ) ERROR_SUCCESS 0.0000282 384 4:54:15.801 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, NULL, NULL, 0x01dbe0a4, 0x01dbe0ac, 0x01dbe0a0 ) ERROR_SUCCESS 0.0000257 385 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "exefile", 0, MAXIMUM_ALLOWED, 0x01dbe134 ) ERROR_SUCCESS 0.0000243 386 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x0000077a, "CurVer", 0, KEY_QUERY_VALUE, 0x01dbe0e4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000265 387 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x0000077a, NULL, 0, MAXIMUM_ALLOWED, 0x0015e6ac ) ERROR_SUCCESS 0.0000265 388 4:54:15.801 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000084 389 4:54:15.801 AM 1 SHELL32.dll StrCpyNW ( 0x01dbe03c, "iexplore.exe", 260 ) 0x01dbe03c 0.0000056 390 4:54:15.801 AM 1 SHELL32.dll StrCpyNW ( 0x021901d2, "iexplore.exe", 225 ) 0x021901d2 0.0000059 391 4:54:15.801 AM 1 SHELL32.dll QISearch ( 0x00171090, 0x7c92b550, IQueryAssociations, 0x0275fd60 ) S_OK 0.0000056 392 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x0000057a, "shell", 0, MAXIMUM_ALLOWED, 0x0015e6c4 ) ERROR_SUCCESS 0.0000307 393 4:54:15.801 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x01dbe3a8, 0x01dbe3b0, 0x01dbe3a4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000229 394 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x0000077a, "open", 0, MAXIMUM_ALLOWED, 0x0015e79c ) ERROR_SUCCESS 0.0000285 395 4:54:15.801 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000078 396 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000786, "command", 0, KEY_QUERY_VALUE, 0x01dbe208 ) ERROR_SUCCESS 0.0000296 397 4:54:15.801 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x01dbe258, 0x01dbe260, 0x01dbe254 ) ERROR_SUCCESS 0.0000246 398 4:54:15.801 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000092 399 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000786, "command", 0, KEY_QUERY_VALUE, 0x01dbe270 ) ERROR_SUCCESS 0.0000288 400 4:54:15.801 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, "command", NULL, 0x01dbe26c, 0x01dbe27c, 0x01dbe274 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000237 401 4:54:15.801 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000081 402 4:54:15.801 AM 1 SHELL32.dll PathFindExtensionW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x02759d8a 0.0000059 403 4:54:15.801 AM 1 SHELL32.dll PathFindFileNameW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x02759d7a 0.0000059 404 4:54:15.801 AM 1 SHELL32.dll PathFindExtensionW ( "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE" ) 0x0275f99c 0.0000061 405 4:54:15.801 AM 1 SHELL32.dll SHGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE", "RunAsCommand", NULL, 0x0275bfcc, 0x01dbe5e4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000592 406 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE", 0, KEY_QUERY_VALUE, 0x01dbe4a8 ) ERROR_SUCCESS 0.0000182 407 4:54:15.801 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000778, "RunAsCommand", NULL, 0x01dbe490, 0x0275bfcc, 0x01dbe5e4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000101 408 4:54:15.801 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000778 ) ERROR_SUCCESS 0.0000081 409 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000786, "command", 0, KEY_QUERY_VALUE, 0x01dbe208 ) ERROR_SUCCESS 0.0000285 410 4:54:15.801 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x01dbe258, 0x01dbe260, 0x01dbe254 ) ERROR_SUCCESS 0.0000232 411 4:54:15.801 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000075 412 4:54:15.801 AM 1 SHELL32.dll StrCpyNW ( 0x0275e8dc, ""%1" %*", 2084 ) 0x0275e8dc 0.0000056 413 4:54:15.801 AM 1 SHELL32.dll SHUnicodeToUnicode ( ""%1" %*", 0x0275bfcc, 2084 ) 8 0.0000056 414 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000786, "ddeexec", 0, KEY_QUERY_VALUE, 0x01dbe1fc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000249 415 4:54:15.801 AM 1 SHELL32.dll StrCmpNW ( ""%1" %*", "%1", 2 ) -1 0.0000064 416 4:54:15.801 AM 1 SHELL32.dll StrCmpNW ( ""%1" %*", ""%1"", 4 ) 0 0.0000056 417 4:54:15.801 AM 1 SHELL32.dll AssocQueryStringW ( 66, ASSOCSTR_FRIENDLYAPPNAME, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x0275d62c, 0x01dbe3c0 ) S_OK 0.0003322 418 4:54:15.801 AM 1 SHELL32.dll QISearch ( 0x00170aa0, 0x7c92b550, IQueryAssociations, 0x01dbe298 ) S_OK 0.0000056 419 4:54:15.801 AM 1 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x01dbe25c ) S_OK 0.0000070 420 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\IEXPLORE.EXE", 0, MAXIMUM_ALLOWED, 0x0015e6c4 ) ERROR_SUCCESS 0.0000265 421 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x0000077a, "shell", 0, MAXIMUM_ALLOWED, 0x0015e88c ) ERROR_SUCCESS 0.0000291 422 4:54:15.801 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000196, NULL, NULL, 0x01dbe048, 0x01dbe050, 0x01dbe044 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000226 423 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000196, "open", 0, MAXIMUM_ALLOWED, 0x0015e634 ) ERROR_SUCCESS 0.0000282 424 4:54:15.801 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000075 425 4:54:15.801 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000078a, "FriendlyAppName", NULL, 0x01dbdeb0, 0x01dbdeb8, 0x01dbdeac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000240 426 4:54:15.801 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000078a ) ERROR_SUCCESS 0.0000101 427 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x000002c0, NULL, 0, MAXIMUM_ALLOWED, 0x01dbdf44 ) ERROR_SUCCESS 0.0000165 428 4:54:15.801 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000788, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x01dbdf34, 0x01dbdfcc, 0x01dbdfbc ) ERROR_SUCCESS 0.0000274 429 4:54:15.801 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000788 ) ERROR_SUCCESS 0.0000067 430 4:54:15.801 AM 1 SHELL32.dll StrCpyNW ( 0x0275d62c, "Internet Explorer", 260 ) 0x0275d62c 0.0000059 431 4:54:15.801 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000098 432 4:54:15.801 AM 1 SHELL32.dll StrCpyNW ( 0x0275af86, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", 48 ) 0x0275af86 0.0000047 433 4:54:15.801 AM 1 SHELL32.dll PathIsUNCW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) FALSE 0.0000045 434 4:54:15.801 AM 1 SHELL32.dll PathFindFileNameW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x0275d262 0.0000045 435 4:54:15.801 AM 1 SHELL32.dll PathFindExtensionW ( "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE" ) 0x0275e954 0.0000056 436 4:54:15.801 AM 1 SHELL32.dll SHGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE", "AppendPath", NULL, 0x01dbe5cc, 0x01dbe5d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0008155 437 4:54:15.801 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE", 0, KEY_QUERY_VALUE, 0x01dbe48c ) ERROR_SUCCESS 0.0000221 438 4:54:15.801 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000778, "AppendPath", NULL, 0x01dbe474, 0x01dbe5cc, 0x01dbe5d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 439 4:54:15.801 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000778 ) ERROR_SUCCESS 0.0007671 440 4:54:15.811 AM 1 SHELL32.dll SHGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE", "PATH", NULL, 0x0275e8dc, 0x01dbe5d4 ) ERROR_SUCCESS 0.0000481 441 4:54:15.811 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE", 0, KEY_QUERY_VALUE, 0x01dbe48c ) ERROR_SUCCESS 0.0000142 442 4:54:15.811 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000778, "PATH", NULL, 0x01dbe474, 0x0275e8dc, 0x01dbe5d4 ) ERROR_SUCCESS 0.0000115 443 4:54:15.811 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000778 ) ERROR_SUCCESS 0.0000061 444 4:54:15.811 AM 1 SHELL32.dll StrCpyW ( "C:\WINDOWS\system32;C:\WINDOWS;C:\WIC:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem", "C:\Program Files\Internet Explorer;" ) 0x00150a7e 0.0000039 445 4:54:15.811 AM 1 SHELL32.dll IsOS ( 24 ) FALSE 0.0000042 446 4:54:15.811 AM 1 SHELL32.dll PathFindFileNameW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x0275d262 0.0000039 447 4:54:15.811 AM 1 SHELL32.dll PathFindExtensionW ( "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE" ) 0x01dbd920 0.0000042 448 4:54:15.811 AM 1 SHELL32.dll SHGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE", "RunAsOnNonAdminInstall", NULL, 0x01dbd8a4, 0x01dbd8a0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000676 449 4:54:15.811 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE", 0, KEY_QUERY_VALUE, 0x01dbd768 ) ERROR_SUCCESS 0.0000123 450 4:54:15.811 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000778, "RunAsOnNonAdminInstall", NULL, 0x01dbd750, 0x01dbd8a4, 0x01dbd8a0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000053 451 4:54:15.811 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000778 ) ERROR_SUCCESS 0.0000330 452 4:54:15.811 AM 1 SHELL32.dll PathFindFileNameW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x0275d262 0.0000047 453 4:54:15.811 AM 1 SHELL32.dll PathMatchSpecW ( "I", "*" ) FALSE 0 = The operation completed successfully. 0.0000103 454 4:54:15.831 AM 2 Explorer.EXE PathFindFileNameW ( "" ) 0x00f2f8fc 0.0000056 455 4:54:15.831 AM 2 comctl32.dll QISearch ( 0x000c0880, 0x77422f6c, {01e13875-2e58-4671-be46-59945432be6e}, 0x021603e0 ) S_OK 0.0000045 456 4:54:15.831 AM 2 comctl32.dll QISearch ( 0x021603b0, 0x77423034, {50cf8c58-029d-41bf-b8dd-4ce4f95d9257}, 0x000ec7f4 ) S_OK 0.0000042 457 4:54:15.831 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f624 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000682 458 4:54:15.831 AM 2 SHELL32.dll QISearch ( 0x00170aa0, 0x7c92b550, IQueryAssociations, 0x00f2f500 ) S_OK 0.0000061 459 4:54:15.831 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f4c4 ) S_OK 0.0000061 460 4:54:15.831 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e784 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000291 461 4:54:15.831 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000042 462 4:54:15.831 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3c4, "", 260 ) 0x00f2f3c4 0.0000042 463 4:54:15.831 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000039 464 4:54:15.831 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f38c, "", 260 ) 0x00f2f38c 0.0000042 465 4:54:15.831 AM 2 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000042 466 4:54:15.831 AM 2 SHELL32.dll PathIsUNCW ( "" ) FALSE 0.0000042 467 4:54:15.831 AM 2 SHELL32.dll PathGetDriveNumberW ( "" ) -1 0.0000042 468 4:54:15.831 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000042 469 4:54:15.831 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f384, "", 260 ) 0x00f2f384 0.0000042 470 4:54:15.831 AM 2 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000042 471 4:54:15.831 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f810 ) S_OK 0.0000042 472 4:54:15.831 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2f8d0, 0x00f2f8c8 ) ERROR_SUCCESS 0.0000156 473 4:54:15.831 AM 2 Explorer.EXE RegSetValueExW ( 0x00000798, "ProgramCount", 0, REG_DWORD, 0x00f2f8cc, 4 ) ERROR_SUCCESS 0.0000254 474 4:54:15.831 AM 2 Explorer.EXE RegCloseKey ( 0x00000798 ) ERROR_SUCCESS 0.0000061 475 4:54:15.831 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f048 ) S_OK 0.0000045 476 4:54:15.831 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e3a8 ) S_OK 0.0000045 477 4:54:15.831 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e3a8 ) S_OK 0.0000045 478 4:54:15.831 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f0b0 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000522 479 4:54:15.831 AM 2 SHELL32.dll QISearch ( 0x00170fa0, 0x7c92b550, IQueryAssociations, 0x00f2ef58 ) S_OK 0.0000042 480 4:54:15.831 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2ef1c ) S_OK 0.0000053 481 4:54:15.831 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e784 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 482 4:54:15.931 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000056 483 4:54:15.931 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000045 484 4:54:15.931 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000729 485 4:54:15.931 AM 2 SHELL32.dll QISearch ( 0x00170aa0, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000045 486 4:54:15.931 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000059 487 4:54:15.931 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e634 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000360 488 4:54:16.362 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000056 489 4:54:16.362 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000061 490 4:54:16.362 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000668 491 4:54:16.362 AM 2 SHELL32.dll QISearch ( 0x00170aa0, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000045 492 4:54:16.362 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000061 493 4:54:16.362 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e634 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000296 494 4:54:16.972 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000059 495 4:54:16.972 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000050 496 4:54:16.972 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000659 497 4:54:16.972 AM 2 SHELL32.dll QISearch ( 0x00170aa0, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000042 498 4:54:16.972 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000061 499 4:54:16.972 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e634 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000291 500 4:54:16.992 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000056 501 4:54:16.992 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000045 502 4:54:16.992 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000662 503 4:54:16.992 AM 2 SHELL32.dll QISearch ( 0x00170aa0, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000045 504 4:54:16.992 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000061 505 4:54:16.992 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e634 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000285 506 4:54:17.053 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2fa78 ) S_OK 0.0000059 507 4:54:17.053 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2faec, 0x00f2fae4 ) ERROR_SUCCESS 0.0000170 508 4:54:17.053 AM 2 Explorer.EXE RegSetValueExW ( 0x000004dc, "ProgramCount", 0, REG_DWORD, 0x00f2fae8, 4 ) ERROR_SUCCESS 0.0000098 509 4:54:17.053 AM 2 Explorer.EXE RegCloseKey ( 0x000004dc ) ERROR_SUCCESS 0.0000059 510 4:54:17.053 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000045 511 4:54:17.053 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLSESSION" ) 1 0.0000053 512 4:54:17.053 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLCUACount:ctor" ) 1 0.0000042 513 4:54:17.053 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU", NULL, 0x01dbb96c, 0x01dbca24, 0x01dbc9d8 ) ERROR_SUCCESS 0.0000198 514 4:54:17.053 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU", NULL, 0x01dbb96c, 0x01dbca24, 0x01dbc9d8 ) ERROR_SUCCESS 0.0000103 515 4:54:17.053 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLSESSION" ) 1 0.0000042 516 4:54:17.053 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLCUACount:ctor" ) 1 0.0000042 517 4:54:17.053 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 518 4:54:17.053 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLSESSION" ) 1 0.0000042 519 4:54:17.053 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLCUACount:ctor" ) 1 0.0000042 520 4:54:17.053 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\IEXPLORE.EXE", "UEME_CTLSESSION" ) 1 0.0000047 521 4:54:17.053 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\IEXPLORE.EXE", "UEME_CTLCUACount:ctor" ) 1 0.0000045 522 4:54:17.053 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Vagrearg Rkcybere\VRKCYBER.RKR", NULL, 0x01dbb96c, 0x01dbca24, 0x01dbc9d8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000176 523 4:54:17.053 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Vagrearg Rkcybere\VRKCYBER.RKR", NULL, 0x01dbb96c, 0x01dbca24, 0x01dbc9d8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 524 4:54:17.053 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\IEXPLORE.EXE", "UEME_CTLSESSION" ) 1 0.0000042 525 4:54:17.053 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\IEXPLORE.EXE", "UEME_CTLCUACount:ctor" ) 1 0.0000042 526 4:54:17.053 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 527 4:54:17.053 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 528 4:54:17.053 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 529 4:54:17.053 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\IEXPLORE.EXE", "UEME_CTLSESSION" ) 1 0.0000042 530 4:54:17.053 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\IEXPLORE.EXE", "UEME_CTLCUACount:ctor" ) 1 0.0000045 531 4:54:17.053 AM 1 SHELL32.dll PathFindExtensionW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x02759d8a 0.0059994 532 4:54:17.063 AM 1 SHELL32.dll StrCmpICW ( ".EXE", ".exe" ) 0 0.0000047 533 4:54:17.063 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2fc64 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000050 534 4:54:17.063 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 535 4:54:17.063 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) S_OK 0.0000045 536 4:54:17.063 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000786 ) ERROR_SUCCESS 0.0000112 537 4:54:17.063 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000061 538 4:54:17.063 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000057a ) ERROR_SUCCESS 0.0000059 539 4:54:17.063 AM 1 SHELL32.dll StrCatBuffW ( "iexplore", "\1", 262 ) 0x01dbece4 0.0000047 540 4:54:17.063 AM 1 comctl32.dll RegSetValueExW ( 0x000003d4, "b", 0, REG_SZ, 0x01dbece4, 22 ) ERROR_SUCCESS 0.0001738 541 4:54:17.063 AM 1 comctl32.dll RegSetValueExW ( 0x000003d4, "MRUList", 0, REG_SZ, 0x0215e560, 6 ) ERROR_SUCCESS 0.0000265 542 4:54:17.063 AM 1 comctl32.dll RegCloseKey ( 0x00000768 ) ERROR_SUCCESS 0.0000064 543 4:54:17.063 AM 1 BROWSEUI.dll RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000059 544 4:54:18.445 AM 2 Explorer.EXE PathFindFileNameW ( "" ) 0x00f2f8fc 0.0000056 545 4:54:18.445 AM 2 comctl32.dll QISearch ( 0x000c0880, 0x77422f6c, {01e13875-2e58-4671-be46-59945432be6e}, 0x02160a60 ) S_OK 0.0000045 546 4:54:18.445 AM 2 comctl32.dll QISearch ( 0x02160a30, 0x77423034, {50cf8c58-029d-41bf-b8dd-4ce4f95d9257}, 0x000ec7f4 ) S_OK 0.0000042 547 4:54:18.445 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f624 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000682 548 4:54:18.445 AM 2 SHELL32.dll QISearch ( 0x00170dc0, 0x7c92b550, IQueryAssociations, 0x00f2f500 ) S_OK 0.0000042 549 4:54:18.445 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f4c4 ) S_OK 0.0000059 550 4:54:18.445 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e79c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000310 551 4:54:18.445 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000039 552 4:54:18.445 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3c4, "", 260 ) 0x00f2f3c4 0.0000042 553 4:54:18.445 AM 2 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000045 554 4:54:18.445 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000042 555 4:54:18.445 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f38c, "", 260 ) 0x00f2f38c 0.0000042 556 4:54:18.445 AM 2 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000042 557 4:54:18.445 AM 2 SHELL32.dll PathIsUNCW ( "" ) FALSE 0.0000045 558 4:54:18.445 AM 2 SHELL32.dll PathGetDriveNumberW ( "" ) -1 0.0000042 559 4:54:18.445 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000045 560 4:54:18.445 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f384, "", 260 ) 0x00f2f384 0.0000042 561 4:54:18.445 AM 2 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000042 562 4:54:18.445 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f810 ) S_OK 0.0000045 563 4:54:18.445 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2f8d0, 0x00f2f8c8 ) ERROR_SUCCESS 0.0000168 564 4:54:18.445 AM 2 Explorer.EXE RegSetValueExW ( 0x00000574, "ProgramCount", 0, REG_DWORD, 0x00f2f8cc, 4 ) ERROR_SUCCESS 0.0000089 565 4:54:18.445 AM 2 Explorer.EXE RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000064 566 4:54:18.445 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000075 567 4:54:18.445 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000053 568 4:54:18.455 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000047 569 4:54:18.455 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000047 570 4:54:18.455 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000793 571 4:54:18.455 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000042 572 4:54:18.455 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000061 573 4:54:18.455 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e79c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000427 574 4:54:18.785 AM 2 Explorer.EXE PathFindFileNameW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x00f2f942 0.0000070 575 4:54:18.785 AM 2 comctl32.dll QISearch ( 0x000c0880, 0x77422f6c, {01e13875-2e58-4671-be46-59945432be6e}, 0x021603e0 ) S_OK 0.0000061 576 4:54:18.785 AM 2 comctl32.dll QISearch ( 0x021603b0, 0x77423034, {50cf8c58-029d-41bf-b8dd-4ce4f95d9257}, 0x000ec824 ) S_OK 0.0000059 577 4:54:18.785 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x00f2f624 ) S_OK 0.0001461 578 4:54:18.785 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, IQueryAssociations, 0x00f2f500 ) S_OK 0.0000056 579 4:54:18.785 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f4c4 ) S_OK 0.0000078 580 4:54:18.785 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\IEXPLORE.EXE", 0, MAXIMUM_ALLOWED, 0x0015e73c ) ERROR_SUCCESS 0.0000397 581 4:54:18.785 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x0000076a, NULL, 0, MAXIMUM_ALLOWED, 0x00f2f498 ) ERROR_SUCCESS 0.0000346 582 4:54:18.785 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000076a ) ERROR_SUCCESS 0.0000089 583 4:54:18.785 AM 2 Explorer.EXE SHGetValueW ( 0x00000576, NULL, "TaskbarGroupIcon", NULL, 0x00f2f628, 0x00f2f620 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000366 584 4:54:18.785 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000576, "TaskbarGroupIcon", NULL, 0x00f2f4c8, 0x00f2f628, 0x00f2f620 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000249 585 4:54:18.785 AM 2 Explorer.EXE RegCloseKey ( 0x00000576 ) ERROR_SUCCESS 0.0000078 586 4:54:18.785 AM 2 SHELL32.dll PathFindFileNameW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x02160666 0.0000061 587 4:54:18.785 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3c4, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", 260 ) 0x00f2f3c4 0.0000059 588 4:54:18.785 AM 2 Explorer.EXE AssocQueryStringW ( 66, ASSOCSTR_FRIENDLYAPPNAME, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x00f2f7e4, 0x00f2f598 ) S_OK 0.0003411 589 4:54:18.785 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, IQueryAssociations, 0x00f2f470 ) S_OK 0.0000059 590 4:54:18.785 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f434 ) S_OK 0.0000070 591 4:54:18.785 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\IEXPLORE.EXE", 0, MAXIMUM_ALLOWED, 0x0015e73c ) ERROR_SUCCESS 0.0000260 592 4:54:18.785 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000576, "shell", 0, MAXIMUM_ALLOWED, 0x0015e6ac ) ERROR_SUCCESS 0.0000307 593 4:54:18.785 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000076a, NULL, NULL, 0x00f2f220, 0x00f2f228, 0x00f2f21c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000240 594 4:54:18.785 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x0000076a, "open", 0, MAXIMUM_ALLOWED, 0x0015e814 ) ERROR_SUCCESS 0.0000302 595 4:54:18.785 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000076a ) ERROR_SUCCESS 0.0000081 596 4:54:18.785 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000056e, "FriendlyAppName", NULL, 0x00f2f088, 0x00f2f090, 0x00f2f084 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000254 597 4:54:18.785 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000056e ) ERROR_SUCCESS 0.0000078 598 4:54:18.785 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000002c0, NULL, 0, MAXIMUM_ALLOWED, 0x00f2f11c ) ERROR_SUCCESS 0.0000137 599 4:54:18.785 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000056c, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x00f2f10c, 0x00f2f1a4, 0x00f2f194 ) ERROR_SUCCESS 0.0000332 600 4:54:18.785 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000056c ) ERROR_SUCCESS 0.0000081 601 4:54:18.785 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f7e4, "Internet Explorer", 80 ) 0x00f2f7e4 0.0000059 602 4:54:18.785 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000576 ) ERROR_SUCCESS 0.0000078 603 4:54:18.785 AM 2 comctl32.dll QISearch ( 0x000c0880, 0x77422f6c, {01e13875-2e58-4671-be46-59945432be6e}, 0x02160170 ) S_OK 0.0000056 604 4:54:18.785 AM 2 comctl32.dll QISearch ( 0x02160140, 0x77423034, {50cf8c58-029d-41bf-b8dd-4ce4f95d9257}, 0x000ec854 ) S_OK 0.0000059 605 4:54:18.785 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f80c ) S_OK 0.0000061 606 4:54:18.785 AM 2 Explorer.EXE AssocQueryStringW ( 66, ASSOCSTR_FRIENDLYAPPNAME, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x00f2f606, 0x00f2f3c8 ) S_OK 0.0003210 607 4:54:18.785 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, IQueryAssociations, 0x00f2f2a0 ) S_OK 0.0000059 608 4:54:18.785 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f264 ) S_OK 0.0000067 609 4:54:18.785 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\IEXPLORE.EXE", 0, MAXIMUM_ALLOWED, 0x0015e79c ) ERROR_SUCCESS 0.0000274 610 4:54:18.785 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000576, "shell", 0, MAXIMUM_ALLOWED, 0x0015e724 ) ERROR_SUCCESS 0.0000293 611 4:54:18.785 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000056e, NULL, NULL, 0x00f2f050, 0x00f2f058, 0x00f2f04c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000240 612 4:54:18.785 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x0000056e, "open", 0, MAXIMUM_ALLOWED, 0x0015e844 ) ERROR_SUCCESS 0.0000291 613 4:54:18.785 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000056e ) ERROR_SUCCESS 0.0000084 614 4:54:18.785 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000076a, "FriendlyAppName", NULL, 0x00f2eeb8, 0x00f2eec0, 0x00f2eeb4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000260 615 4:54:18.785 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000076a ) ERROR_SUCCESS 0.0000078 616 4:54:18.785 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000002c0, NULL, 0, MAXIMUM_ALLOWED, 0x00f2ef4c ) ERROR_SUCCESS 0.0000126 617 4:54:18.785 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000768, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x00f2ef3c, 0x00f2efd4, 0x00f2efc4 ) ERROR_SUCCESS 0.0000184 618 4:54:18.785 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000768 ) ERROR_SUCCESS 0.0000078 619 4:54:18.785 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f606, "Internet Explorer", 257 ) 0x00f2f606 0.0000056 620 4:54:18.785 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000576 ) ERROR_SUCCESS 0.0000075 621 4:54:18.785 AM 2 Explorer.EXE StrCmpW ( "ws Internet Explorer", " - Internet Explorer" ) 1 0.0000061 622 4:54:18.785 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2f8d0, 0x00f2f8c8 ) ERROR_SUCCESS 0.0000162 623 4:54:18.785 AM 2 Explorer.EXE RegSetValueExW ( 0x00000574, "ProgramCount", 0, REG_DWORD, 0x00f2f8cc, 4 ) ERROR_SUCCESS 0.0000332 624 4:54:18.785 AM 2 Explorer.EXE RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000095 625 4:54:18.785 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000059 626 4:54:18.785 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000059 627 4:54:18.785 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000061 628 4:54:18.845 AM 2 Explorer.EXE PathFindFileNameW ( "" ) 0x00f2f8fc 0.0000067 629 4:54:18.845 AM 2 comctl32.dll QISearch ( 0x000c0880, 0x77422f6c, {01e13875-2e58-4671-be46-59945432be6e}, 0x02160448 ) S_OK 0.0000059 630 4:54:18.845 AM 2 comctl32.dll QISearch ( 0x02160418, 0x77423034, {50cf8c58-029d-41bf-b8dd-4ce4f95d9257}, 0x000f5a5c ) S_OK 0.0000056 631 4:54:18.845 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f624 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000874 632 4:54:18.845 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, IQueryAssociations, 0x00f2f500 ) S_OK 0.0000056 633 4:54:18.845 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f4c4 ) S_OK 0.0000078 634 4:54:18.845 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e88c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000430 635 4:54:18.845 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000050 636 4:54:18.845 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3c4, "", 260 ) 0x00f2f3c4 0.0000053 637 4:54:18.845 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000050 638 4:54:18.845 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f38c, "", 260 ) 0x00f2f38c 0.0000050 639 4:54:18.845 AM 2 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000053 640 4:54:18.845 AM 2 SHELL32.dll PathIsUNCW ( "" ) FALSE 0.0000050 641 4:54:18.845 AM 2 SHELL32.dll PathGetDriveNumberW ( "" ) -1 0.0000053 642 4:54:18.845 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000053 643 4:54:18.845 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f384, "", 260 ) 0x00f2f384 0.0000050 644 4:54:18.845 AM 2 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000050 645 4:54:18.845 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f810 ) S_OK 0.0000053 646 4:54:18.845 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2f8d0, 0x00f2f8c8 ) ERROR_SUCCESS 0.0000168 647 4:54:18.845 AM 2 Explorer.EXE RegSetValueExW ( 0x00000574, "ProgramCount", 0, REG_DWORD, 0x00f2f8cc, 4 ) ERROR_SUCCESS 0.0000109 648 4:54:18.845 AM 2 Explorer.EXE RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000078 649 4:54:18.845 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000059 650 4:54:18.845 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000056 651 4:54:18.845 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000053 652 4:54:18.845 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000059 653 4:54:18.845 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000061 654 4:54:18.845 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000059 655 4:54:18.845 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000768 656 4:54:18.845 AM 2 SHELL32.dll QISearch ( 0x00171090, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000056 657 4:54:18.845 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000078 658 4:54:18.845 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e88c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000310 659 4:54:20.738 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2fa78 ) S_OK 0.0000061 660 4:54:20.738 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2faec, 0x00f2fae4 ) ERROR_SUCCESS 0.0000207 661 4:54:20.738 AM 2 Explorer.EXE RegSetValueExW ( 0x00000768, "ProgramCount", 0, REG_DWORD, 0x00f2fae8, 4 ) ERROR_SUCCESS 0.0000081 662 4:54:20.738 AM 2 Explorer.EXE RegCloseKey ( 0x00000768 ) ERROR_SUCCESS 0.0000061 663 4:54:20.738 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000061 664 4:54:20.738 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000059 665 4:54:20.738 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000061 666 4:54:20.738 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000321 667 4:54:20.738 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000045 668 4:54:20.738 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x00f2f704 ) S_OK 0.0001115 669 4:54:20.738 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000045 670 4:54:20.738 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000059 671 4:54:20.738 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\IEXPLORE.EXE", 0, MAXIMUM_ALLOWED, 0x0015e724 ) ERROR_SUCCESS 0.0000282 672 4:54:20.738 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x0000076a, NULL, 0, MAXIMUM_ALLOWED, 0x00f2f544 ) ERROR_SUCCESS 0.0000254 673 4:54:20.738 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000076a ) ERROR_SUCCESS 0.0000078 674 4:54:20.738 AM 2 Explorer.EXE RegOpenKeyExW ( 0x00000576, "TaskbarExceptionsIcons", 0, KEY_READ, 0x00f2f71c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000265 675 4:54:20.738 AM 2 Explorer.EXE RegCloseKey ( 0x00000576 ) ERROR_SUCCESS 0.0000059 676 4:54:21.899 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2fa78 ) S_OK 0.0000059 677 4:54:21.899 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2faec, 0x00f2fae4 ) ERROR_SUCCESS 0.0000453 678 4:54:21.910 AM 2 Explorer.EXE RegSetValueExW ( 0x00000574, "ProgramCount", 0, REG_DWORD, 0x00f2fae8, 4 ) ERROR_SUCCESS 0.0000900 679 4:54:21.910 AM 2 Explorer.EXE RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000201 680 4:54:21.910 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000078 681 4:54:21.910 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000061 682 4:54:22.040 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb44 ) S_OK 0.0000053 683 4:54:22.040 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb18 ) S_OK 0.0000045 684 4:54:22.040 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000045 685 4:54:22.040 AM 4 SHELL32.dll QISearch ( 0x000c1cb0, 0x7c8d7268, IShellFolder2, 0x0149faac ) S_OK 0.0000045 686 4:54:22.040 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 687 4:54:22.040 AM 4 SHELL32.dll QISearch ( 0x000c6fd0, 0x7c8d7268, IShellFolder2, 0x0149fa98 ) S_OK 0.0000045 688 4:54:22.040 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000047 689 4:54:22.040 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000045 690 4:54:22.040 AM 4 SHELL32.dll StrCmpICW ( "Start Menu", "Favorites" ) 13 0.0000042 691 4:54:22.040 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000045 692 4:54:22.040 AM 4 SHELL32.dll StrCmpICW ( "Local Settings", "Favorites" ) 6 0.0000042 693 4:54:22.040 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000045 694 4:54:22.040 AM 4 SHELL32.dll StrCmpICW ( "Desktop", "Favorites" ) -2 0.0000042 695 4:54:22.040 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000042 696 4:54:22.040 AM 4 SHELL32.dll StrCmpICW ( "Application Data", "Favorites" ) -5 0.0000042 697 4:54:22.040 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000045 698 4:54:22.040 AM 4 SHELL32.dll StrCmpICW ( "PrintHood", "Favorites" ) 10 0.0000042 699 4:54:22.040 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000045 700 4:54:22.040 AM 4 SHELL32.dll StrCmpICW ( "NetHood", "Favorites" ) 8 0.0000042 701 4:54:22.040 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000045 702 4:54:22.040 AM 4 SHELL32.dll StrCmpICW ( "My Documents", "Favorites" ) 7 0.0000042 703 4:54:22.040 AM 4 SHELL32.dll PathFindExtensionW ( "Favorites" ) 0x02180456 0.0000042 704 4:54:22.040 AM 4 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder, 0x0217cd0c ) S_OK 0.0000045 705 4:54:22.040 AM 4 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IPersistFolder3, 0x0149f3f0 ) S_OK 0.0008996 706 4:54:22.050 AM 4 SHELL32.dll StrCpyNW ( 0x0149f454, "Favorites", 220 ) 0x0149f454 0.0000042 707 4:54:22.050 AM 4 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator\Favorites" ) 0x0016f5b0 0.0000053 708 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f290 ) S_OK 0.0000042 709 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0149f258 ) S_OK 0.0000042 710 4:54:22.050 AM 4 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0149ed64, 260 ) 4 0.0000050 711 4:54:22.050 AM 4 SHELL32.dll StrDupW ( "C:\" ) 0x0215f8b0 0.0000050 712 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x0149f208 ) S_OK 0.0000045 713 4:54:22.050 AM 4 SHELL32.dll StrCpyNW ( 0x0149ed40, "Favorites", 260 ) 0x0149ed40 0.0000042 714 4:54:22.050 AM 4 SHELL32.dll PathFindExtensionW ( "Favorites" ) 0x0149ed52 0.0000042 715 4:54:22.050 AM 4 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 716 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0149f2f8 ) S_OK 0.0000045 717 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IPersistFolder3, 0x0149eb1c ) S_OK 0.0000045 718 4:54:22.050 AM 4 SHELL32.dll StrCpyNW ( 0x0149e8d4, "Documents and Settings", 260 ) 0x0149e8d4 0.0000045 719 4:54:22.050 AM 4 SHELL32.dll StrCpyNW ( 0x0149eb36, "Documents and Settings", 257 ) 0x0149eb36 0.0000042 720 4:54:22.050 AM 4 SHELL32.dll StrCpyNW ( 0x0149e8d4, "Administrator", 260 ) 0x0149e8d4 0.0000042 721 4:54:22.050 AM 4 SHELL32.dll StrCpyNW ( 0x0149eb64, "Administrator", 234 ) 0x0149eb64 0.0000042 722 4:54:22.050 AM 4 SHELL32.dll StrCpyNW ( 0x0149e8d4, "Favorites", 260 ) 0x0149e8d4 0.0000042 723 4:54:22.050 AM 4 SHELL32.dll StrCpyNW ( 0x0149eb80, "Favorites", 220 ) 0x0149eb80 0.0000042 724 4:54:22.050 AM 4 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator\Favorites" ) 0x0016f3f0 0.0000061 725 4:54:22.050 AM 4 SHELL32.dll StrCpyNW ( 0x0149eaf0, "Links", 260 ) 0x0149eaf0 0.0000042 726 4:54:22.050 AM 4 SHELL32.dll StrCpyNW ( 0x0149eff8, "Links", 210 ) 0x0149eff8 0.0000042 727 4:54:22.050 AM 4 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Favorites\Links", 0x0149f1c0 ) S_OK 0.0000053 728 4:54:22.050 AM 4 SHELL32.dll StrRetToBufW ( 0x0149f1bc, 0x0092015d, 0x0149f9a0, 260 ) S_OK 0.0000047 729 4:54:22.050 AM 4 SHELL32.dll StrCpyNW ( 0x0149eea4, "Links", 260 ) 0x0149eea4 0.0000042 730 4:54:22.050 AM 4 SHELL32.dll PathFindExtensionW ( "Links" ) 0x0149eeae 0.0000042 731 4:54:22.050 AM 4 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 732 4:54:22.050 AM 4 SHELL32.dll StrCpyNW ( 0x0149f798, "C:\Documents and Settings\Administrator\Favorites\Links", 260 ) 0x0149f798 0.0000045 733 4:54:22.050 AM 4 SHELL32.dll PathStripToRootW ( "C:\Documents and Settings\Administrator\Favorites\Links" ) TRUE 0.0000067 734 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f310 ) S_OK 0.0000042 735 4:54:22.050 AM 4 SHELL32.dll SHUnicodeToUnicode ( "C:\Documents and Settings\Administrator\Favorites\Links", 0x0149f318, 260 ) 56 0.0000045 736 4:54:22.050 AM 4 SHELL32.dll StrDupW ( "::{20D04FE0-3AEA-1069-A2D8-08002B30309D}" ) 0x0217fed8 0.0000196 737 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f1b8 ) S_OK 0.0000045 738 4:54:22.050 AM 4 SHELL32.dll GUIDFromStringW ( "{20D04FE0-3AEA-1069-A2D8-08002B30309D}", IID_NULL ) TRUE 0.0000059 739 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f1f8 ) S_OK 0.0000042 740 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0149f268 ) S_OK 0.0000045 741 4:54:22.050 AM 4 SHELL32.dll PathBuildRootA ( 0x0149f167, 2 ) 0x0149f167 0.0000045 742 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x0017ca50, 0x7c8d81e0, IFileSystemBindData, 0x0149f108 ) S_OK 0.0000064 743 4:54:22.050 AM 4 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions", 0, KEY_ENUMERATE_SUB_KEYS, 0x0149f09c ) ERROR_SUCCESS 0.0000318 744 4:54:22.050 AM 4 SHELL32.dll SHGetValueW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}", "DriveMask", NULL, 0x0149ee64, 0x0149ee60 ) ERROR_SUCCESS 0.0000941 745 4:54:22.050 AM 4 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}", 0, KEY_QUERY_VALUE, 0x0149ed20 ) ERROR_SUCCESS 0.0000330 746 4:54:22.050 AM 4 SHLWAPI.dll RegQueryValueExW ( 0x0000056e, "DriveMask", NULL, 0x0149ed08, 0x0149ee64, 0x0149ee60 ) ERROR_SUCCESS 0.0000260 747 4:54:22.050 AM 4 SHLWAPI.dll RegCloseKey ( 0x0000056e ) ERROR_SUCCESS 0.0000123 748 4:54:22.050 AM 4 SHELL32.dll PathBuildRootW ( 0x0149f070, 2 ) 0x0149f070 0.0000059 749 4:54:22.050 AM 4 SHELL32.dll RegCloseKey ( 0x0000076a ) ERROR_SUCCESS 0.0000064 750 4:54:22.050 AM 4 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0149eca0, 260 ) 4 0.0000050 751 4:54:22.050 AM 4 SHELL32.dll StrDupW ( "C:\" ) 0x0215f8b0 0.0000056 752 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0149f160 ) S_OK 0.0000045 753 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x0017ca50, 0x7c8d81e0, IFileSystemBindData, 0x0149f10c ) S_OK 0.0000042 754 4:54:22.050 AM 4 SHELL32.dll StrChrW ( "Documents and Settings\Administrator\Favorites\Links", '\' ) 0x0149f34a 0.0000045 755 4:54:22.050 AM 4 SHELL32.dll StrCpyW ( "", "Documents and Settings" ) 0x0219f3e2 0.0000042 756 4:54:22.050 AM 4 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x0149ef04 0.0000042 757 4:54:22.050 AM 4 SHELL32.dll StrChrW ( "Administrator\Favorites\Links", '\' ) 0x0149f366 0.0000042 758 4:54:22.050 AM 4 SHELL32.dll StrCpyW ( "", "Administrator" ) 0x0215df18 0.0000042 759 4:54:22.050 AM 4 SHELL32.dll PathFindExtensionW ( "Administrator" ) 0x0149eef2 0.0000042 760 4:54:22.050 AM 4 SHELL32.dll StrChrW ( "Favorites\Links", '\' ) 0x0149f37a 0.0000042 761 4:54:22.050 AM 4 SHELL32.dll StrCpyW ( "", "Favorites" ) 0x00170e3c 0.0000045 762 4:54:22.050 AM 4 SHELL32.dll PathFindExtensionW ( "Favorites" ) 0x0149eeea 0.0000042 763 4:54:22.050 AM 4 SHELL32.dll StrChrW ( "Links", '\' ) NULL 0.0000042 764 4:54:22.050 AM 4 SHELL32.dll SHUnicodeToUnicode ( "Links", 0x0149eed8, 260 ) 6 0.0000047 765 4:54:22.050 AM 4 SHELL32.dll StrCpyNW ( 0x0149f0e0, "", 14 ) 0x0149f0e0 0.0000042 766 4:54:22.050 AM 4 SHELL32.dll StrCpyW ( "", "Links" ) 0x0215e188 0.0000042 767 4:54:22.050 AM 4 SHELL32.dll PathFindExtensionW ( "Links" ) 0x0149eee2 0.0000042 768 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fafc ) S_OK 0.0000045 769 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fad0 ) S_OK 0.0000042 770 4:54:22.050 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 771 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x000ccd70, 0x7c8d7268, IShellFolder2, 0x0149fa58 ) S_OK 0.0000045 772 4:54:22.050 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000053 773 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x000ccc98, 0x7c8d7268, IShellFolder2, 0x0149fa4c ) S_OK 0.0000045 774 4:54:22.050 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000045 775 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa30 ) S_OK 0.0000047 776 4:54:22.050 AM 4 SHELL32.dll StrCmpICW ( "Desktop", "Favorites" ) -2 0.0000045 777 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa30 ) S_OK 0.0000042 778 4:54:22.050 AM 4 SHELL32.dll StrCmpICW ( "Start Menu", "Favorites" ) 13 0.0000042 779 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa30 ) S_OK 0.0000045 780 4:54:22.050 AM 4 SHELL32.dll StrCmpICW ( "Local Settings", "Favorites" ) 6 0.0000042 781 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa30 ) S_OK 0.0000045 782 4:54:22.050 AM 4 SHELL32.dll StrCmpICW ( "Application Data", "Favorites" ) -5 0.0000042 783 4:54:22.050 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa30 ) S_OK 0.0000061 784 4:54:22.050 AM 4 SHELL32.dll StrCmpICW ( "PrintHood", "Favorites" ) 10 0.0012585 785 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa30 ) S_OK 0.0000078 786 4:54:22.060 AM 4 SHELL32.dll StrCmpICW ( "NetHood", "Favorites" ) 8 0.0000064 787 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb04 ) S_OK 0.0000064 788 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fad8 ) S_OK 0.0000053 789 4:54:22.060 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000045 790 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x000ccd70, 0x7c8d7268, IShellFolder2, 0x0149fa60 ) S_OK 0.0000045 791 4:54:22.060 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 792 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x000ccc98, 0x7c8d7268, IShellFolder2, 0x0149fa54 ) S_OK 0.0000045 793 4:54:22.060 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000042 794 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa38 ) S_OK 0.0000042 795 4:54:22.060 AM 4 SHELL32.dll StrCmpICW ( "Desktop", "Favorites" ) -2 0.0000042 796 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa38 ) S_OK 0.0000042 797 4:54:22.060 AM 4 SHELL32.dll StrCmpICW ( "Start Menu", "Favorites" ) 13 0.0000042 798 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa38 ) S_OK 0.0000042 799 4:54:22.060 AM 4 SHELL32.dll StrCmpICW ( "Local Settings", "Favorites" ) 6 0.0000050 800 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa38 ) S_OK 0.0000042 801 4:54:22.060 AM 4 SHELL32.dll StrCmpICW ( "Application Data", "Favorites" ) -5 0.0000042 802 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa38 ) S_OK 0.0000045 803 4:54:22.060 AM 4 SHELL32.dll StrCmpICW ( "PrintHood", "Favorites" ) 10 0.0000042 804 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa38 ) S_OK 0.0000042 805 4:54:22.060 AM 4 SHELL32.dll StrCmpICW ( "NetHood", "Favorites" ) 8 0.0000042 806 4:54:22.060 AM 4 SHELL32.dll PathFindExtensionW ( "Favorites" ) 0x00170dfe 0.0000042 807 4:54:22.060 AM 4 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000045 808 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0217cb54 ) S_OK 0.0000042 809 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IPersistFolder3, 0x0149f3b0 ) S_OK 0.0000045 810 4:54:22.060 AM 4 SHELL32.dll StrCpyNW ( 0x0149f414, "Favorites", 220 ) 0x0149f414 0.0000045 811 4:54:22.060 AM 4 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator\Favorites" ) 0x0016f3f0 0.0000053 812 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb3c ) S_OK 0.0000045 813 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb10 ) S_OK 0.0000045 814 4:54:22.060 AM 4 SHELL32.dll StrCmpICA ( "Z:\", "C:\" ) 23 0.0000042 815 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb10 ) S_OK 0.0000045 816 4:54:22.060 AM 4 SHELL32.dll SHUnlockShared ( 0x00920010 ) TRUE 0.0000140 817 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f928 ) S_OK 0.0000042 818 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0149f8f0 ) S_OK 0.0000042 819 4:54:22.060 AM 4 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0149f3fc, 260 ) 4 0.0000050 820 4:54:22.060 AM 4 SHELL32.dll StrDupW ( "C:\" ) 0x0215f8b0 0.0000047 821 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x0149f8a0 ) S_OK 0.0000047 822 4:54:22.060 AM 4 SHELL32.dll StrCpyNW ( 0x0149f3d8, "Favorites", 260 ) 0x0149f3d8 0.0000042 823 4:54:22.060 AM 4 SHELL32.dll PathFindExtensionW ( "Favorites" ) 0x0149f3ea 0.0000042 824 4:54:22.060 AM 4 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 825 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x0149f990 ) S_OK 0.0000042 826 4:54:22.060 AM 4 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IPersistFolder3, 0x0149f1b4 ) S_OK 0.0000045 827 4:54:22.060 AM 4 SHELL32.dll StrCpyNW ( 0x0149ef6c, "Documents and Settings", 260 ) 0x0149ef6c 0.0000042 828 4:54:22.060 AM 4 SHELL32.dll StrCpyNW ( 0x0149f1ce, "Documents and Settings", 257 ) 0x0149f1ce 0.0000045 829 4:54:22.060 AM 4 SHELL32.dll StrCpyNW ( 0x0149ef6c, "Administrator", 260 ) 0x0149ef6c 0.0000042 830 4:54:22.060 AM 4 SHELL32.dll StrCpyNW ( 0x0149f1fc, "Administrator", 234 ) 0x0149f1fc 0.0000042 831 4:54:22.060 AM 4 SHELL32.dll StrCpyNW ( 0x0149ef6c, "Favorites", 260 ) 0x0149ef6c 0.0000042 832 4:54:22.060 AM 4 SHELL32.dll StrCpyNW ( 0x0149f218, "Favorites", 220 ) 0x0149f218 0.0000042 833 4:54:22.060 AM 4 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator\Favorites" ) 0x0016f230 0.0000053 834 4:54:22.060 AM 4 SHELL32.dll StrCpyNW ( 0x0149f188, "Links", 260 ) 0x0149f188 0.0000045 835 4:54:22.060 AM 4 SHELL32.dll StrCpyNW ( 0x0149f690, "Links", 210 ) 0x0149f690 0.0000042 836 4:54:22.060 AM 4 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Favorites\Links", 0x0149f858 ) S_OK 0.0000053 837 4:54:22.060 AM 4 SHELL32.dll StrRetToBufW ( 0x0149f854, 0x0219e637, 0x0149fc10, 260 ) S_OK 0.0000050 838 4:54:22.060 AM 4 SHELL32.dll StrCpyNW ( 0x0149f53c, "Links", 260 ) 0x0149f53c 0.0000042 839 4:54:22.060 AM 4 SHELL32.dll PathFindExtensionW ( "Links" ) 0x0149f546 0.0000042 840 4:54:22.060 AM 4 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 841 4:54:22.060 AM 4 SHELL32.dll PathGetDriveNumberW ( "C:\Documents and Settings\Administrator\Favorites\Links" ) 2 0.0000045 842 4:54:22.060 AM 4 SHELL32.dll PathBuildRootW ( 0x0149fbac, 2 ) 0x0149fbac 0.0000042 843 4:54:22.060 AM 2 SHELL32.dll SHGetValueW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage", "FavoritesChanges", NULL, 0x00f2fdbc, 0x00f2fd94 ) ERROR_SUCCESS 0.0004258 844 4:54:22.060 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage", 0, KEY_QUERY_VALUE, 0x00f2fc5c ) ERROR_SUCCESS 0.0002098 845 4:54:22.060 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000056c, "FavoritesChanges", NULL, 0x00f2fc44, 0x00f2fdbc, 0x00f2fd94 ) ERROR_SUCCESS 0.0000092 846 4:54:22.060 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000056c ) ERROR_SUCCESS 0.0000081 847 4:54:22.060 AM 2 Explorer.EXE SHGetValueW ( HKEY_CURRENT_USER, "SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "Start_MinMFU", NULL, 0x00f2fdcc, 0x00f2fdd0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0018053 848 4:54:22.060 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x00f2fc90 ) ERROR_SUCCESS 0.0000151 849 4:54:22.060 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000056c, "Start_MinMFU", NULL, 0x00f2fc78, 0x00f2fdcc, 0x00f2fdd0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0015591 850 4:54:22.070 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000056c ) ERROR_SUCCESS 0.0000101 851 4:54:22.070 AM 1 SHELL32.dll SHGetValueW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage", "FavoritesChanges", NULL, 0x01dbfe2c, 0x01dbfe04 ) ERROR_SUCCESS 0.0000467 852 4:54:22.070 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage", 0, KEY_QUERY_VALUE, 0x01dbfccc ) ERROR_SUCCESS 0.0000159 853 4:54:22.070 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000056c, "FavoritesChanges", NULL, 0x01dbfcb4, 0x01dbfe2c, 0x01dbfe04 ) ERROR_SUCCESS 0.0000070 854 4:54:22.070 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000056c ) ERROR_SUCCESS 0.0000059 855 4:54:22.070 AM 1 Explorer.EXE SHGetValueW ( HKEY_CURRENT_USER, "SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "Start_MinMFU", NULL, 0x01dbfe34, 0x01dbfe38 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000413 856 4:54:22.070 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x01dbfcf8 ) ERROR_SUCCESS 0.0000123 857 4:54:22.070 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000056c, "Start_MinMFU", NULL, 0x01dbfce0, 0x01dbfe34, 0x01dbfe38 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 858 4:54:22.070 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000056c ) ERROR_SUCCESS 0.0000056 859 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbfe04 ) S_OK 0.0000047 860 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x01dbfdb8 ) S_OK 0.0000045 861 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x01dbfdb4 ) S_OK 0.0000045 862 4:54:22.070 AM 1 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000047 863 4:54:22.070 AM 1 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x01dbf710, 260 ) 4 0.0000047 864 4:54:22.070 AM 1 SHELL32.dll StrDupW ( "C:\" ) 0x0215fa30 0.0000047 865 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x01dbfbd0 ) S_OK 0.0000042 866 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder2, 0x01dbfbcc ) S_OK 0.0000042 867 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf968, "Documents and Settings", 260 ) 0x01dbf968 0.0000045 868 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf740, "Documents and Settings", 260 ) 0x01dbf740 0.0000042 869 4:54:22.070 AM 1 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 870 4:54:22.070 AM 1 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x02160a88 0.0000045 871 4:54:22.070 AM 1 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 872 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x01dbfb80 ) S_OK 0.0000042 873 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IPersistFolder3, 0x01dbf4a0 ) S_OK 0.0000045 874 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf4ba, "Documents and Settings", 257 ) 0x01dbf4ba 0.0000050 875 4:54:22.070 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215ed20 0.0000053 876 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder2, 0x01dbfb7c ) S_OK 0.0000045 877 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf918, "Administrator", 260 ) 0x01dbf918 0.0000042 878 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf6f0, "Administrator", 260 ) 0x01dbf6f0 0.0000042 879 4:54:22.070 AM 1 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000045 880 4:54:22.070 AM 1 SHELL32.dll PathFindExtensionW ( "Administrator" ) 0x0215df2e 0.0000042 881 4:54:22.070 AM 1 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 882 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IShellFolder, 0x01dbfb30 ) S_OK 0.0000045 883 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IPersistFolder3, 0x01dbf450 ) S_OK 0.0000045 884 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf498, "Administrator", 234 ) 0x01dbf498 0.0000042 885 4:54:22.070 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator" ) 0x0215de90 0.0000050 886 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IShellFolder2, 0x01dbfb2c ) S_OK 0.0000047 887 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf8c8, "Start Menu", 260 ) 0x01dbf8c8 0.0000045 888 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf6a0, "Start Menu", 260 ) 0x01dbf6a0 0.0000042 889 4:54:22.070 AM 1 SHELL32.dll StrCmpICW ( "Start Menu", "Start Menu" ) 0 0.0000045 890 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbfe04 ) S_OK 0.0000042 891 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x01dbfdb8 ) S_OK 0.0000042 892 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x01dbfdb4 ) S_OK 0.0000042 893 4:54:22.070 AM 1 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 894 4:54:22.070 AM 1 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x01dbf710, 260 ) 4 0.0000045 895 4:54:22.070 AM 1 SHELL32.dll StrDupW ( "C:\" ) 0x0215fa30 0.0000045 896 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x01dbfbd0 ) S_OK 0.0000045 897 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder2, 0x01dbfbcc ) S_OK 0.0000089 898 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf968, "Documents and Settings", 260 ) 0x01dbf968 0.0000045 899 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf740, "Documents and Settings", 260 ) 0x01dbf740 0.0000045 900 4:54:22.070 AM 1 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 901 4:54:22.070 AM 1 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x02160a88 0.0000061 902 4:54:22.070 AM 1 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000064 903 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x01dbfb80 ) S_OK 0.0000084 904 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IPersistFolder3, 0x01dbf4a0 ) S_OK 0.0000047 905 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf4ba, "Documents and Settings", 257 ) 0x01dbf4ba 0.0000045 906 4:54:22.070 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215ed20 0.0000056 907 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder2, 0x01dbfb7c ) S_OK 0.0000042 908 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf918, "All Users", 260 ) 0x01dbf918 0.0000045 909 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf6f0, "All Users", 260 ) 0x01dbf6f0 0.0000045 910 4:54:22.070 AM 1 SHELL32.dll StrCmpICW ( "All Users", "All Users" ) 0 0.0000047 911 4:54:22.070 AM 1 SHELL32.dll PathFindExtensionW ( "All Users" ) 0x00170e4e 0.0000042 912 4:54:22.070 AM 1 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000045 913 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IShellFolder, 0x01dbfb30 ) S_OK 0.0000042 914 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IPersistFolder3, 0x01dbf450 ) S_OK 0.0000045 915 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf498, "All Users", 234 ) 0x01dbf498 0.0000042 916 4:54:22.070 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings\All Users" ) 0x00171090 0.0000053 917 4:54:22.070 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IShellFolder2, 0x01dbfb2c ) S_OK 0.0000042 918 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf8c8, "Start Menu", 260 ) 0x01dbf8c8 0.0000042 919 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf6a0, "Start Menu", 260 ) 0x01dbf6a0 0.0000073 920 4:54:22.070 AM 1 SHELL32.dll StrCmpICW ( "Start Menu", "Start Menu" ) 0 0.0000042 921 4:54:22.070 AM 1 SHELL32.dll PathFindExtensionW ( "Internet Explorer.lnk" ) 0x0018645a 0.0000045 922 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd550, "Internet Explorer.lnk", 200 ) 0x01dbd550 0.0000042 923 4:54:22.070 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Internet Explorer.lnk", 0x01dbd700 ) S_OK 0.0000050 924 4:54:22.070 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x00186408, 0x01dbda74, 2084 ) S_OK 0.0000050 925 4:54:22.070 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Internet Explorer.lnk", NULL ) 59 0.0000067 926 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLSESSION" ) 1 0.0000047 927 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 928 4:54:22.070 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Vagrearg Rkcybere.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000425 929 4:54:22.070 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Vagrearg Rkcybere.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000338 930 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLSESSION" ) 1 0.0000045 931 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 932 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 933 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 934 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 935 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLSESSION" ) 1 0.0000042 936 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 937 4:54:22.070 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Vagrearg Rkcybere.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 938 4:54:22.070 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Vagrearg Rkcybere.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 939 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLSESSION" ) 1 0.0000042 940 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 941 4:54:22.070 AM 1 SHELL32.dll PathFindExtensionW ( "Outlook Express.lnk" ) 0x0215b546 0.0000045 942 4:54:22.070 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000050 943 4:54:22.070 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd550, "Outlook Express.lnk", 200 ) 0x01dbd550 0.0000045 944 4:54:22.070 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Outlook Express.lnk", 0x01dbd700 ) S_OK 0.0000056 945 4:54:22.070 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0215b4f8, 0x01dbda74, 2084 ) S_OK 0.0000050 946 4:54:22.070 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Outlook Express.lnk", NULL ) 59 0.0000064 947 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLSESSION" ) 1 0.0000042 948 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 949 4:54:22.070 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Bhgybbx Rkcerff.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 950 4:54:22.070 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Bhgybbx Rkcerff.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 951 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLSESSION" ) 1 0.0000042 952 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 953 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 954 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 955 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 956 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLSESSION" ) 1 0.0000042 957 4:54:22.070 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 958 4:54:22.070 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Bhgybbx Rkcerff.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0008116 959 4:54:22.070 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Bhgybbx Rkcerff.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0008029 960 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLSESSION" ) 1 0.0000045 961 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 962 4:54:22.080 AM 1 SHELL32.dll PathFindExtensionW ( "Remote Assistance.lnk" ) 0x0215b0c2 0.0000042 963 4:54:22.080 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 964 4:54:22.080 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd550, "Remote Assistance.lnk", 200 ) 0x01dbd550 0.0000045 965 4:54:22.080 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Remote Assistance.lnk", 0x01dbd700 ) S_OK 0.0000053 966 4:54:22.080 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0215b070, 0x01dbda74, 2084 ) S_OK 0.0000050 967 4:54:22.080 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Remote Assistance.lnk", NULL ) 59 0.0000061 968 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLSESSION" ) 1 0.0000042 969 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 970 4:54:22.080 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Erzbgr Nffvfgnapr.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 971 4:54:22.080 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Erzbgr Nffvfgnapr.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 972 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLSESSION" ) 1 0.0000042 973 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 974 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 975 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000047 976 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 977 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLSESSION" ) 1 0.0000042 978 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 979 4:54:22.080 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Erzbgr Nffvfgnapr.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000162 980 4:54:22.080 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Erzbgr Nffvfgnapr.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 981 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLSESSION" ) 1 0.0000042 982 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 983 4:54:22.080 AM 1 SHELL32.dll PathFindExtensionW ( "Address Book.lnk" ) 0x02172d10 0.0000042 984 4:54:22.080 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000039 985 4:54:22.080 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd568, "Address Book.lnk", 188 ) 0x01dbd568 0.0000042 986 4:54:22.080 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Address Book.lnk", 0x01dbd700 ) S_OK 0.0000056 987 4:54:22.080 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02172cc8, 0x01dbda74, 2084 ) S_OK 0.0000047 988 4:54:22.080 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Address Book.lnk", NULL ) 59 0.0000061 989 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLSESSION" ) 1 0.0000042 990 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 991 4:54:22.080 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Nqqerff Obbx.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 992 4:54:22.080 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Nqqerff Obbx.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 993 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLSESSION" ) 1 0.0000042 994 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 995 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 996 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 997 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 998 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLSESSION" ) 1 0.0000042 999 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1000 4:54:22.080 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Nqqerff Obbx.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1001 4:54:22.080 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Nqqerff Obbx.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1002 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1003 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1004 4:54:22.080 AM 1 SHELL32.dll PathFindExtensionW ( "Command Prompt.lnk" ) 0x0018a23c 0.0000045 1005 4:54:22.080 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1006 4:54:22.080 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd568, "Command Prompt.lnk", 188 ) 0x01dbd568 0.0000042 1007 4:54:22.080 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Command Prompt.lnk", 0x01dbd700 ) S_OK 0.0000053 1008 4:54:22.080 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0018a1f0, 0x01dbda74, 2084 ) S_OK 0.0000050 1009 4:54:22.080 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Command Prompt.lnk", NULL ) 59 0.0000061 1010 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1011 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1012 4:54:22.080 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzznaq Cebzcg.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_SUCCESS 0.0000182 1013 4:54:22.080 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzznaq Cebzcg.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_SUCCESS 0.0000092 1014 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1015 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1016 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1017 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1018 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1019 4:54:22.080 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzznaq Cebzcg.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_SUCCESS 0.0000151 1020 4:54:22.080 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzznaq Cebzcg.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_SUCCESS 0.0000067 1021 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1022 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1023 4:54:22.080 AM 1 SHELL32.dll PathFindExtensionW ( "Notepad.lnk" ) 0x02187eb4 0.0000042 1024 4:54:22.080 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1025 4:54:22.080 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd568, "Notepad.lnk", 188 ) 0x01dbd568 0.0000042 1026 4:54:22.080 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Notepad.lnk", 0x01dbd700 ) S_OK 0.0000047 1027 4:54:22.080 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02187e78, 0x01dbda74, 2084 ) S_OK 0.0000050 1028 4:54:22.080 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Notepad.lnk", NULL ) 59 0.0000067 1029 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1030 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1031 4:54:22.080 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Abgrcnq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_SUCCESS 0.0000170 1032 4:54:22.080 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Abgrcnq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_SUCCESS 0.0000084 1033 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1034 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1035 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1036 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1037 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1038 4:54:22.080 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Abgrcnq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_SUCCESS 0.0000151 1039 4:54:22.080 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Abgrcnq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_SUCCESS 0.0000067 1040 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1041 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1042 4:54:22.080 AM 1 SHELL32.dll PathFindExtensionW ( "Magnifier.lnk" ) 0x00189fda 0.0000042 1043 4:54:22.080 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1044 4:54:22.080 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd584, "Magnifier.lnk", 174 ) 0x01dbd584 0.0000042 1045 4:54:22.080 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk", 0x01dbd700 ) S_OK 0.0000056 1046 4:54:22.080 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x00189f98, 0x01dbda74, 2084 ) S_OK 0.0000050 1047 4:54:22.080 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk", NULL ) 59 0.0000061 1048 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1049 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1050 4:54:22.080 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Zntavsvre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 1051 4:54:22.080 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Zntavsvre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1052 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1053 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1054 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1055 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1056 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1057 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLSESSION" ) 1 0.0000047 1058 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1059 4:54:22.080 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Zntavsvre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000162 1060 4:54:22.080 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Zntavsvre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1061 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1062 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1063 4:54:22.080 AM 1 SHELL32.dll PathFindExtensionW ( "Narrator.lnk" ) 0x00189f10 0.0000042 1064 4:54:22.080 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1065 4:54:22.080 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd584, "Narrator.lnk", 174 ) 0x01dbd584 0.0000042 1066 4:54:22.080 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk", 0x01dbd700 ) S_OK 0.0000053 1067 4:54:22.080 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x00189ed0, 0x01dbda74, 2084 ) S_OK 0.0000050 1068 4:54:22.080 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk", NULL ) 59 0.0000059 1069 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1070 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1071 4:54:22.080 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Aneengbe.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1072 4:54:22.080 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Aneengbe.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1073 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1074 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1075 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1076 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1077 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1078 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1079 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1080 4:54:22.080 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Aneengbe.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1081 4:54:22.080 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Aneengbe.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1082 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1083 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1084 4:54:22.080 AM 1 SHELL32.dll PathFindExtensionW ( "On-Screen Keyboard.lnk" ) 0x02161814 0.0000070 1085 4:54:22.080 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1086 4:54:22.080 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd584, "On-Screen Keyboard.lnk", 174 ) 0x01dbd584 0.0000045 1087 4:54:22.080 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk", 0x01dbd700 ) S_OK 0.0000059 1088 4:54:22.080 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x021617c0, 0x01dbda74, 2084 ) S_OK 0.0000050 1089 4:54:22.080 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk", NULL ) 59 0.0000061 1090 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1091 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1092 4:54:22.080 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Ba-Fperra Xrlobneq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000165 1093 4:54:22.080 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Ba-Fperra Xrlobneq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1094 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1095 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1096 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1097 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1098 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1099 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1100 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1101 4:54:22.080 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Ba-Fperra Xrlobneq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1102 4:54:22.080 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Ba-Fperra Xrlobneq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1103 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1104 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1105 4:54:22.080 AM 1 SHELL32.dll PathFindExtensionW ( "Utility Manager.lnk" ) 0x021610be 0.0000042 1106 4:54:22.080 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1107 4:54:22.080 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd584, "Utility Manager.lnk", 174 ) 0x01dbd584 0.0000042 1108 4:54:22.080 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk", 0x01dbd700 ) S_OK 0.0000053 1109 4:54:22.080 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02161070, 0x01dbda74, 2084 ) S_OK 0.0000050 1110 4:54:22.080 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk", NULL ) 59 0.0000067 1111 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1112 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1113 4:54:22.080 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Hgvyvgl Znantre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000162 1114 4:54:22.080 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Hgvyvgl Znantre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1115 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1116 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1117 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1118 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1119 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1120 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1121 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1122 4:54:22.080 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Hgvyvgl Znantre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1123 4:54:22.080 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Hgvyvgl Znantre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1124 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1125 4:54:22.080 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1126 4:54:22.080 AM 1 SHELL32.dll PathFindExtensionW ( "Windows Media Player.lnk" ) 0x0215a988 0.0000045 1127 4:54:22.080 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1128 4:54:22.080 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd584, "Windows Media Player.lnk", 174 ) 0x01dbd584 0.0000045 1129 4:54:22.080 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk", 0x01dbd700 ) S_OK 0.0000056 1130 4:54:22.080 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0215a930, 0x01dbda74, 2084 ) S_OK 0.0000084 1131 4:54:22.090 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk", NULL ) 59 0.0000092 1132 4:54:22.090 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLSESSION" ) 1 0.0000067 1133 4:54:22.090 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000067 1134 4:54:22.090 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Jvaqbjf Zrqvn Cynlre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0006724 1135 4:54:22.090 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Jvaqbjf Zrqvn Cynlre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0004492 1136 4:54:22.090 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLSESSION" ) 1 0.0000061 1137 4:54:22.090 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000053 1138 4:54:22.090 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000064 1139 4:54:22.090 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0004056 1140 4:54:22.090 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000070 1141 4:54:22.090 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLSESSION" ) 1 0.0039606 1142 4:54:22.100 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000064 1143 4:54:22.100 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Jvaqbjf Zrqvn Cynlre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000282 1144 4:54:22.100 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Jvaqbjf Zrqvn Cynlre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 1145 4:54:22.100 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLSESSION" ) 1 0.0000075 1146 4:54:22.100 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0006532 1147 4:54:22.100 AM 1 SHELL32.dll PathFindExtensionW ( "Internet Explorer (No Add-ons).lnk" ) 0x00165354 0.0000075 1148 4:54:22.100 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0002802 1149 4:54:22.100 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd582, "Internet Explorer (No Add-ons).lnk", 175 ) 0x01dbd582 0.0000067 1150 4:54:22.100 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", 0x01dbd700 ) S_OK 0.0002196 1151 4:54:22.100 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x001652e8, 0x01dbda74, 2084 ) S_OK 0.0000078 1152 4:54:22.100 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", NULL ) 59 0.0002182 1153 4:54:22.100 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLSESSION" ) 1 0.0000073 1154 4:54:22.100 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000073 1155 4:54:22.100 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Vagrearg Rkcybere (Ab Nqq-baf).yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000282 1156 4:54:22.100 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Vagrearg Rkcybere (Ab Nqq-baf).yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 1157 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLSESSION" ) 1 0.0000064 1158 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1159 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1160 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1161 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 1162 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLSESSION" ) 1 0.0000056 1163 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000053 1164 4:54:22.110 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Vagrearg Rkcybere (Ab Nqq-baf).yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000221 1165 4:54:22.110 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Vagrearg Rkcybere (Ab Nqq-baf).yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000112 1166 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLSESSION" ) 1 0.0000056 1167 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1168 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbfde0 ) S_OK 0.0002173 1169 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x01dbfd94 ) S_OK 0.0000053 1170 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x01dbfd90 ) S_OK 0.0000045 1171 4:54:22.110 AM 1 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000045 1172 4:54:22.110 AM 1 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x01dbf6ec, 260 ) 4 0.0000053 1173 4:54:22.110 AM 1 SHELL32.dll StrDupW ( "C:\" ) 0x0215fa30 0.0000050 1174 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x01dbfbac ) S_OK 0.0000042 1175 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder2, 0x01dbfba8 ) S_OK 0.0000042 1176 4:54:22.110 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf944, "Documents and Settings", 260 ) 0x01dbf944 0.0000042 1177 4:54:22.110 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf71c, "Documents and Settings", 260 ) 0x01dbf71c 0.0000045 1178 4:54:22.110 AM 1 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000047 1179 4:54:22.110 AM 1 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x02160a88 0.0000045 1180 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x01dbfb5c ) S_OK 0.0000045 1181 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IPersistFolder3, 0x01dbf47c ) S_OK 0.0000045 1182 4:54:22.110 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf496, "Documents and Settings", 257 ) 0x01dbf496 0.0000042 1183 4:54:22.110 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215ed20 0.0000050 1184 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder2, 0x01dbfb58 ) S_OK 0.0000045 1185 4:54:22.110 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf8f4, "Administrator", 260 ) 0x01dbf8f4 0.0000042 1186 4:54:22.110 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf6cc, "All Users", 260 ) 0x01dbf6cc 0.0000045 1187 4:54:22.110 AM 1 SHELL32.dll StrCmpICW ( "All Users", "Administrator" ) 8 0.0000045 1188 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbfde0 ) S_OK 0.0000042 1189 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x01dbfd94 ) S_OK 0.0000042 1190 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x01dbfd90 ) S_OK 0.0000045 1191 4:54:22.110 AM 1 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000039 1192 4:54:22.110 AM 1 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x01dbf6ec, 260 ) 4 0.0000047 1193 4:54:22.110 AM 1 SHELL32.dll StrDupW ( "C:\" ) 0x0215fa30 0.0000045 1194 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x01dbfbac ) S_OK 0.0000042 1195 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder2, 0x01dbfba8 ) S_OK 0.0000042 1196 4:54:22.110 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf944, "Documents and Settings", 260 ) 0x01dbf944 0.0000042 1197 4:54:22.110 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf71c, "Documents and Settings", 260 ) 0x01dbf71c 0.0000042 1198 4:54:22.110 AM 1 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000047 1199 4:54:22.110 AM 1 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x02160a88 0.0000045 1200 4:54:22.110 AM 1 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 1201 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x01dbfb5c ) S_OK 0.0000042 1202 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IPersistFolder3, 0x01dbf47c ) S_OK 0.0000045 1203 4:54:22.110 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf496, "Documents and Settings", 257 ) 0x01dbf496 0.0000042 1204 4:54:22.110 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215ed20 0.0000050 1205 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder2, 0x01dbfb58 ) S_OK 0.0000045 1206 4:54:22.110 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf8f4, "All Users", 260 ) 0x01dbf8f4 0.0000042 1207 4:54:22.110 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf6cc, "All Users", 260 ) 0x01dbf6cc 0.0000042 1208 4:54:22.110 AM 1 SHELL32.dll StrCmpICW ( "All Users", "All Users" ) 0 0.0000042 1209 4:54:22.110 AM 1 SHELL32.dll PathFindExtensionW ( "All Users" ) 0x00170e4e 0.0000045 1210 4:54:22.110 AM 1 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000050 1211 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IShellFolder, 0x01dbfb0c ) S_OK 0.0000042 1212 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IPersistFolder3, 0x01dbf42c ) S_OK 0.0000047 1213 4:54:22.110 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf474, "All Users", 234 ) 0x01dbf474 0.0000042 1214 4:54:22.110 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings\All Users" ) 0x00171090 0.0000053 1215 4:54:22.110 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IShellFolder2, 0x01dbfb08 ) S_OK 0.0000042 1216 4:54:22.110 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf8a4, "Desktop", 260 ) 0x01dbf8a4 0.0000042 1217 4:54:22.110 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf67c, "Start Menu", 260 ) 0x01dbf67c 0.0000042 1218 4:54:22.110 AM 1 SHELL32.dll StrCmpICW ( "Start Menu", "Desktop" ) 15 0.0000042 1219 4:54:22.110 AM 1 SHELL32.dll PathFindExtensionW ( "Windows Update.lnk" ) 0x02188704 0.0000045 1220 4:54:22.110 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd536, "Windows Update.lnk", 213 ) 0x01dbd536 0.0000042 1221 4:54:22.110 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", 0x01dbd700 ) S_OK 0.0000053 1222 4:54:22.110 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x021886b8, 0x01dbda74, 2084 ) S_OK 0.0000047 1223 4:54:22.110 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", NULL ) 25 0.0000059 1224 4:54:22.110 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", NULL ) 46 0.0000103 1225 4:54:22.110 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Favorites", "C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", NULL ) 25 0.0000056 1226 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1227 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1228 4:54:22.110 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Jvaqbjf Hcqngr.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000182 1229 4:54:22.110 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Jvaqbjf Hcqngr.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 1230 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1231 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1232 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1233 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1234 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1235 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1236 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1237 4:54:22.110 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Jvaqbjf Hcqngr.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1238 4:54:22.110 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Jvaqbjf Hcqngr.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1239 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1240 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1241 4:54:22.110 AM 1 SHELL32.dll PathFindExtensionW ( "Calculator.lnk" ) 0x0218863c 0.0000045 1242 4:54:22.110 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1243 4:54:22.110 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd560, "Calculator.lnk", 192 ) 0x01dbd560 0.0000042 1244 4:54:22.110 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Calculator.lnk", 0x01dbd700 ) S_OK 0.0000056 1245 4:54:22.110 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x021885f8, 0x01dbda74, 2084 ) S_OK 0.0000047 1246 4:54:22.110 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Calculator.lnk", NULL ) 25 0.0000053 1247 4:54:22.110 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Calculator.lnk", NULL ) 55 0.0000061 1248 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1249 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1250 4:54:22.110 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pnyphyngbe.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000165 1251 4:54:22.110 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pnyphyngbe.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1252 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1253 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1254 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1255 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1256 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1257 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1258 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1259 4:54:22.110 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pnyphyngbe.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1260 4:54:22.110 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pnyphyngbe.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1261 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1262 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1263 4:54:22.110 AM 1 SHELL32.dll PathFindExtensionW ( "Paint.lnk" ) 0x0018462e 0.0000042 1264 4:54:22.110 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1265 4:54:22.110 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd560, "Paint.lnk", 192 ) 0x01dbd560 0.0000042 1266 4:54:22.110 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Paint.lnk", 0x01dbd700 ) S_OK 0.0000050 1267 4:54:22.110 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x001845f8, 0x01dbda74, 2084 ) S_OK 0.0000047 1268 4:54:22.110 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Paint.lnk", NULL ) 25 0.0000053 1269 4:54:22.110 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Paint.lnk", NULL ) 55 0.0000059 1270 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1271 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1272 4:54:22.110 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Cnvag.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1273 4:54:22.110 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Cnvag.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1274 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1275 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1276 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1277 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1278 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1279 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1280 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1281 4:54:22.110 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Cnvag.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000162 1282 4:54:22.110 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Cnvag.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1283 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1284 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1285 4:54:22.110 AM 1 SHELL32.dll PathFindExtensionW ( "WordPad.lnk" ) 0x0215b27c 0.0000045 1286 4:54:22.110 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1287 4:54:22.110 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd560, "WordPad.lnk", 192 ) 0x01dbd560 0.0000045 1288 4:54:22.110 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\WordPad.lnk", 0x01dbd700 ) S_OK 0.0000050 1289 4:54:22.110 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0215b240, 0x01dbda74, 2084 ) S_OK 0.0000050 1290 4:54:22.110 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\WordPad.lnk", NULL ) 25 0.0000053 1291 4:54:22.110 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\WordPad.lnk", NULL ) 55 0.0000059 1292 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1293 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1294 4:54:22.110 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\JbeqCnq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1295 4:54:22.110 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\JbeqCnq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1296 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1297 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1298 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1299 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1300 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1301 4:54:22.110 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1302 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000053 1303 4:54:22.120 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\JbeqCnq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000162 1304 4:54:22.120 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\JbeqCnq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1305 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1306 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1307 4:54:22.120 AM 1 SHELL32.dll PathFindExtensionW ( "Accessibility Wizard.lnk" ) 0x02173b78 0.0000045 1308 4:54:22.120 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000039 1309 4:54:22.120 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57c, "Accessibility Wizard.lnk", 178 ) 0x01dbd57c 0.0000045 1310 4:54:22.120 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Accessibility\Accessibility Wizard.lnk", 0x01dbd700 ) S_OK 0.0000056 1311 4:54:22.120 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02173b20, 0x01dbda74, 2084 ) S_OK 0.0000075 1312 4:54:22.120 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Accessibility\Accessibility Wizard.lnk", NULL ) 25 0.0000053 1313 4:54:22.120 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Accessibility\Accessibility Wizard.lnk", NULL ) 55 0.0000061 1314 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1315 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1316 4:54:22.120 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Npprffvovyvgl Jvmneq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 1317 4:54:22.120 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Npprffvovyvgl Jvmneq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1318 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1319 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1320 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1321 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1322 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1323 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1324 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1325 4:54:22.120 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Npprffvovyvgl Jvmneq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1326 4:54:22.120 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Npprffvovyvgl Jvmneq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1327 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1328 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1329 4:54:22.120 AM 1 SHELL32.dll PathFindExtensionW ( "Remote Desktop Connection.lnk" ) 0x0016553a 0.0000042 1330 4:54:22.120 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1331 4:54:22.120 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57e, "Remote Desktop Connection.lnk", 177 ) 0x01dbd57e 0.0000045 1332 4:54:22.120 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications\Remote Desktop Connection.lnk", 0x01dbd700 ) S_OK 0.0000059 1333 4:54:22.120 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x001654d8, 0x01dbda74, 2084 ) S_OK 0.0000053 1334 4:54:22.120 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications\Remote Desktop Connection.lnk", NULL ) 25 0.0000053 1335 4:54:22.120 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications\Remote Desktop Connection.lnk", NULL ) 55 0.0000059 1336 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1337 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1338 4:54:22.120 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\Erzbgr Qrfxgbc Pbaarpgvba.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000165 1339 4:54:22.120 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\Erzbgr Qrfxgbc Pbaarpgvba.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1340 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1341 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1342 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1343 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1344 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1345 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1346 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1347 4:54:22.120 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\Erzbgr Qrfxgbc Pbaarpgvba.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1348 4:54:22.120 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\Erzbgr Qrfxgbc Pbaarpgvba.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1349 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1350 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1351 4:54:22.120 AM 1 SHELL32.dll PathFindExtensionW ( "Sound Recorder.lnk" ) 0x0216159c 0.0000045 1352 4:54:22.120 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1353 4:54:22.120 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57c, "Sound Recorder.lnk", 178 ) 0x01dbd57c 0.0000042 1354 4:54:22.120 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Entertainment\Sound Recorder.lnk", 0x01dbd700 ) S_OK 0.0000053 1355 4:54:22.120 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02161550, 0x01dbda74, 2084 ) S_OK 0.0000050 1356 4:54:22.120 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Entertainment\Sound Recorder.lnk", NULL ) 25 0.0000053 1357 4:54:22.120 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Entertainment\Sound Recorder.lnk", NULL ) 55 0.0000059 1358 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1359 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1360 4:54:22.120 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Fbhaq Erpbeqre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1361 4:54:22.120 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Fbhaq Erpbeqre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1362 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1363 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1364 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1365 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1366 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1367 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1368 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1369 4:54:22.120 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Fbhaq Erpbeqre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000207 1370 4:54:22.120 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Fbhaq Erpbeqre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 1371 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1372 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1373 4:54:22.120 AM 1 SHELL32.dll PathFindExtensionW ( "Backup.lnk" ) 0x02188032 0.0000056 1374 4:54:22.120 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000053 1375 4:54:22.120 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57a, "Backup.lnk", 179 ) 0x01dbd57a 0.0000053 1376 4:54:22.120 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Backup.lnk", 0x01dbd700 ) S_OK 0.0000067 1377 4:54:22.120 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02187ff8, 0x01dbda74, 2084 ) S_OK 0.0000061 1378 4:54:22.120 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Backup.lnk", NULL ) 25 0.0000067 1379 4:54:22.120 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Backup.lnk", NULL ) 55 0.0000078 1380 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1381 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000053 1382 4:54:22.120 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Onpxhc.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 1383 4:54:22.120 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Onpxhc.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 1384 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1385 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1386 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1387 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1388 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1389 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1390 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1391 4:54:22.120 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Onpxhc.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000212 1392 4:54:22.120 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Onpxhc.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 1393 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1394 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1395 4:54:22.120 AM 1 SHELL32.dll PathFindExtensionW ( "Character Map.lnk" ) 0x0216125a 0.0000059 1396 4:54:22.120 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000053 1397 4:54:22.120 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57a, "Character Map.lnk", 179 ) 0x01dbd57a 0.0000056 1398 4:54:22.120 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Character Map.lnk", 0x01dbd700 ) S_OK 0.0000070 1399 4:54:22.120 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02161210, 0x01dbda74, 2084 ) S_OK 0.0000064 1400 4:54:22.120 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Character Map.lnk", NULL ) 25 0.0000067 1401 4:54:22.120 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Character Map.lnk", NULL ) 55 0.0000075 1402 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1403 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1404 4:54:22.120 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Punenpgre Znc.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 1405 4:54:22.120 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Punenpgre Znc.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 1406 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1407 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1408 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1409 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000053 1410 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1411 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1412 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000059 1413 4:54:22.120 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Punenpgre Znc.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000207 1414 4:54:22.120 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Punenpgre Znc.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 1415 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1416 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000053 1417 4:54:22.120 AM 1 SHELL32.dll PathFindExtensionW ( "Disk Cleanup.lnk" ) 0x021619a8 0.0000059 1418 4:54:22.120 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000056 1419 4:54:22.120 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57a, "Disk Cleanup.lnk", 179 ) 0x01dbd57a 0.0000056 1420 4:54:22.120 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk", 0x01dbd700 ) S_OK 0.0000070 1421 4:54:22.120 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02161960, 0x01dbda74, 2084 ) S_OK 0.0000061 1422 4:54:22.120 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk", NULL ) 25 0.0000070 1423 4:54:22.120 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk", NULL ) 55 0.0000075 1424 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1425 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1426 4:54:22.120 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Pyrnahc.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 1427 4:54:22.120 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Pyrnahc.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1428 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1429 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1430 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1431 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1432 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1433 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1434 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1435 4:54:22.120 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Pyrnahc.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000210 1436 4:54:22.120 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Pyrnahc.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 1437 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1438 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1439 4:54:22.120 AM 1 SHELL32.dll PathFindExtensionW ( "Disk Defragmenter.lnk" ) 0x02160f22 0.0000059 1440 4:54:22.120 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000053 1441 4:54:22.120 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57a, "Disk Defragmenter.lnk", 179 ) 0x01dbd57a 0.0000056 1442 4:54:22.120 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Defragmenter.lnk", 0x01dbd700 ) S_OK 0.0000070 1443 4:54:22.120 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02160ed0, 0x01dbda74, 2084 ) S_OK 0.0000064 1444 4:54:22.120 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Defragmenter.lnk", NULL ) 25 0.0000067 1445 4:54:22.120 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Defragmenter.lnk", NULL ) 55 0.0000078 1446 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1447 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1448 4:54:22.120 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Qrsentzragre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000204 1449 4:54:22.120 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Qrsentzragre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000095 1450 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1451 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1452 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1453 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1454 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 1455 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1456 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1457 4:54:22.120 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Qrsentzragre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000210 1458 4:54:22.120 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Qrsentzragre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 1459 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1460 4:54:22.120 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1461 4:54:22.120 AM 1 SHELL32.dll PathFindExtensionW ( "System Information.lnk" ) 0x0216ac5c 0.0000056 1462 4:54:22.120 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000053 1463 4:54:22.120 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57a, "System Information.lnk", 179 ) 0x01dbd57a 0.0000056 1464 4:54:22.120 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\System Information.lnk", 0x01dbd700 ) S_OK 0.0000070 1465 4:54:22.120 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0216ac08, 0x01dbda74, 2084 ) S_OK 0.0000064 1466 4:54:22.160 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\System Information.lnk", NULL ) 25 0.0000075 1467 4:54:22.160 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\System Information.lnk", NULL ) 55 0.0000064 1468 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLSESSION" ) 1 0.0000047 1469 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1470 4:54:22.160 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Vasbezngvba.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 1471 4:54:22.160 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Vasbezngvba.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 1472 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1473 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1474 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1475 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1476 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1477 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1478 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1479 4:54:22.160 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Vasbezngvba.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1480 4:54:22.160 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Vasbezngvba.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1481 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1482 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1483 4:54:22.160 AM 1 SHELL32.dll PathFindExtensionW ( "Certification Authority.lnk" ) 0x00186736 0.0000045 1484 4:54:22.160 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1485 4:54:22.160 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Certification Authority.lnk", 183 ) 0x01dbd572 0.0000045 1486 4:54:22.160 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Certification Authority.lnk", 0x01dbd700 ) S_OK 0.0000061 1487 4:54:22.160 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x001866d8, 0x01dbda74, 2084 ) S_OK 0.0000050 1488 4:54:22.160 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Certification Authority.lnk", NULL ) 25 0.0000050 1489 4:54:22.160 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Certification Authority.lnk", NULL ) 55 0.0000059 1490 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1491 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1492 4:54:22.160 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pregvsvpngvba Nhgubevgl.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 1493 4:54:22.160 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pregvsvpngvba Nhgubevgl.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1494 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1495 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1496 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1497 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1498 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1499 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1500 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1501 4:54:22.160 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pregvsvpngvba Nhgubevgl.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000165 1502 4:54:22.160 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pregvsvpngvba Nhgubevgl.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1503 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1504 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1505 4:54:22.160 AM 1 SHELL32.dll PathFindExtensionW ( "Cluster Administrator.lnk" ) 0x0016581a 0.0000045 1506 4:54:22.160 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1507 4:54:22.160 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Cluster Administrator.lnk", 183 ) 0x01dbd572 0.0000042 1508 4:54:22.160 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Cluster Administrator.lnk", 0x01dbd700 ) S_OK 0.0000050 1509 4:54:22.160 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x001657c0, 0x01dbda74, 2084 ) S_OK 0.0000050 1510 4:54:22.160 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Cluster Administrator.lnk", NULL ) 25 0.0000053 1511 4:54:22.160 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Cluster Administrator.lnk", NULL ) 55 0.0000059 1512 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1513 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1514 4:54:22.160 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pyhfgre Nqzvavfgengbe.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 1515 4:54:22.160 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pyhfgre Nqzvavfgengbe.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1516 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1517 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1518 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1519 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1520 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1521 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1522 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1523 4:54:22.160 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pyhfgre Nqzvavfgengbe.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000173 1524 4:54:22.160 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pyhfgre Nqzvavfgengbe.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1525 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1526 4:54:22.160 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1527 4:54:22.160 AM 1 SHELL32.dll PathFindExtensionW ( "Component Services.lnk" ) 0x00186bdc 0.0000045 1528 4:54:22.160 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1529 4:54:22.160 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Component Services.lnk", 183 ) 0x01dbd572 0.0000045 1530 4:54:22.160 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Component Services.lnk", 0x01dbd700 ) S_OK 0.0000056 1531 4:54:22.160 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x00186b88, 0x01dbda74, 2084 ) S_OK 0.0000050 1532 4:54:22.160 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Component Services.lnk", NULL ) 25 0.0000050 1533 4:54:22.160 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Component Services.lnk", NULL ) 55 0.0008512 1534 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1535 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1536 4:54:22.170 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzcbarag Freivprf.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000168 1537 4:54:22.170 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzcbarag Freivprf.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 1538 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1539 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1540 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1541 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1542 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1543 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1544 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1545 4:54:22.170 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzcbarag Freivprf.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1546 4:54:22.170 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzcbarag Freivprf.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1547 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1548 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1549 4:54:22.170 AM 1 SHELL32.dll PathFindExtensionW ( "Computer Management.lnk" ) 0x0216f75e 0.0000045 1550 4:54:22.170 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1551 4:54:22.170 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Computer Management.lnk", 183 ) 0x01dbd572 0.0000042 1552 4:54:22.170 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Computer Management.lnk", 0x01dbd700 ) S_OK 0.0000059 1553 4:54:22.170 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0216f708, 0x01dbda74, 2084 ) S_OK 0.0000053 1554 4:54:22.170 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Computer Management.lnk", NULL ) 25 0.0000053 1555 4:54:22.170 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Computer Management.lnk", NULL ) 55 0.0000059 1556 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1557 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1558 4:54:22.170 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzchgre Znantrzrag.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 1559 4:54:22.170 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzchgre Znantrzrag.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1560 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1561 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1562 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1563 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1564 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1565 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1566 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1567 4:54:22.170 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzchgre Znantrzrag.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1568 4:54:22.170 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzchgre Znantrzrag.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1569 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1570 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1571 4:54:22.170 AM 1 SHELL32.dll PathFindExtensionW ( "Configure Your Server.lnk" ) 0x0216fae2 0.0000045 1572 4:54:22.170 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1573 4:54:22.170 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Configure Your Server.lnk", 183 ) 0x01dbd572 0.0000045 1574 4:54:22.170 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Configure Your Server.lnk", 0x01dbd700 ) S_OK 0.0000050 1575 4:54:22.170 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0216fa88, 0x01dbda74, 2084 ) S_OK 0.0000050 1576 4:54:22.170 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Configure Your Server.lnk", NULL ) 25 0.0000053 1577 4:54:22.170 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Configure Your Server.lnk", NULL ) 55 0.0000059 1578 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1579 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1580 4:54:22.170 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbasvther Lbhe Freire.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000168 1581 4:54:22.170 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbasvther Lbhe Freire.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1582 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1583 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1584 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1585 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1586 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1587 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1588 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1589 4:54:22.170 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbasvther Lbhe Freire.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1590 4:54:22.170 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbasvther Lbhe Freire.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1591 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1592 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1593 4:54:22.170 AM 1 SHELL32.dll PathFindExtensionW ( "Data Sources (ODBC).lnk" ) 0x0216ee9e 0.0000042 1594 4:54:22.170 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1595 4:54:22.170 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Data Sources (ODBC).lnk", 183 ) 0x01dbd572 0.0000045 1596 4:54:22.170 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk", 0x01dbd700 ) S_OK 0.0000047 1597 4:54:22.170 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0216ee48, 0x01dbda74, 2084 ) S_OK 0.0000050 1598 4:54:22.170 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk", NULL ) 25 0.0000053 1599 4:54:22.170 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk", NULL ) 55 0.0000059 1600 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLSESSION" ) 1 0.0000045 1601 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1602 4:54:22.170 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qngn Fbheprf (BQOP).yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1603 4:54:22.170 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qngn Fbheprf (BQOP).yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1604 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLSESSION" ) 1 0.0000042 1605 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1606 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1607 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1608 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1609 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLSESSION" ) 1 0.0000042 1610 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000047 1611 4:54:22.170 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qngn Fbheprf (BQOP).yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000168 1612 4:54:22.170 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qngn Fbheprf (BQOP).yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 1613 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLSESSION" ) 1 0.0000045 1614 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1615 4:54:22.170 AM 1 SHELL32.dll PathFindExtensionW ( "Distributed File System.lnk" ) 0x0216f3e6 0.0000045 1616 4:54:22.170 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1617 4:54:22.170 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Distributed File System.lnk", 183 ) 0x01dbd572 0.0000042 1618 4:54:22.170 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Distributed File System.lnk", 0x01dbd700 ) S_OK 0.0000061 1619 4:54:22.170 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0216f388, 0x01dbda74, 2084 ) S_OK 0.0000050 1620 4:54:22.170 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Distributed File System.lnk", NULL ) 25 0.0000053 1621 4:54:22.170 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Distributed File System.lnk", NULL ) 55 0.0000059 1622 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1623 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1624 4:54:22.170 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qvfgevohgrq Svyr Flfgrz.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1625 4:54:22.170 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qvfgevohgrq Svyr Flfgrz.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1626 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1627 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1628 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1629 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1630 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1631 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1632 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1633 4:54:22.170 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qvfgevohgrq Svyr Flfgrz.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1634 4:54:22.170 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qvfgevohgrq Svyr Flfgrz.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1635 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1636 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1637 4:54:22.170 AM 1 SHELL32.dll PathFindExtensionW ( "Event Viewer.lnk" ) 0x02161738 0.0000061 1638 4:54:22.170 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1639 4:54:22.170 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Event Viewer.lnk", 183 ) 0x01dbd572 0.0000042 1640 4:54:22.170 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Event Viewer.lnk", 0x01dbd700 ) S_OK 0.0000056 1641 4:54:22.170 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x021616f0, 0x01dbda74, 2084 ) S_OK 0.0000053 1642 4:54:22.170 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Event Viewer.lnk", NULL ) 25 0.0000053 1643 4:54:22.170 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Event Viewer.lnk", NULL ) 55 0.0000061 1644 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1645 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1646 4:54:22.170 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Rirag Ivrjre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 1647 4:54:22.170 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Rirag Ivrjre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1648 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1649 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1650 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1651 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1652 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1653 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1654 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1655 4:54:22.170 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Rirag Ivrjre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1656 4:54:22.170 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Rirag Ivrjre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1657 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1658 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1659 4:54:22.170 AM 1 SHELL32.dll PathFindExtensionW ( "Licensing.lnk" ) 0x00189e4a 0.0000042 1660 4:54:22.170 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1661 4:54:22.170 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Licensing.lnk", 183 ) 0x01dbd572 0.0000042 1662 4:54:22.170 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Licensing.lnk", 0x01dbd700 ) S_OK 0.0000050 1663 4:54:22.170 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x00189e08, 0x01dbda74, 2084 ) S_OK 0.0000047 1664 4:54:22.170 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Licensing.lnk", NULL ) 25 0.0000053 1665 4:54:22.170 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Licensing.lnk", NULL ) 55 0.0000059 1666 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1667 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1668 4:54:22.170 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Yvprafvat.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1669 4:54:22.170 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Yvprafvat.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1670 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1671 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1672 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1673 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1674 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1675 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1676 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1677 4:54:22.170 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Yvprafvat.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 1678 4:54:22.170 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Yvprafvat.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1679 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1680 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1681 4:54:22.170 AM 1 SHELL32.dll PathFindExtensionW ( "Local Security Policy.lnk" ) 0x0216f922 0.0000042 1682 4:54:22.170 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1683 4:54:22.170 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Local Security Policy.lnk", 183 ) 0x01dbd572 0.0000042 1684 4:54:22.170 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Local Security Policy.lnk", 0x01dbd700 ) S_OK 0.0000050 1685 4:54:22.170 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0216f8c8, 0x01dbda74, 2084 ) S_OK 0.0000050 1686 4:54:22.170 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Local Security Policy.lnk", NULL ) 25 0.0000053 1687 4:54:22.170 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Local Security Policy.lnk", NULL ) 55 0.0000059 1688 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1689 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1690 4:54:22.170 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ybpny Frphevgl Cbyvpl.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 1691 4:54:22.170 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ybpny Frphevgl Cbyvpl.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1692 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLSESSION" ) 1 0.0000081 1693 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1694 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1695 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1696 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1697 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1698 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1699 4:54:22.170 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ybpny Frphevgl Cbyvpl.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 1700 4:54:22.170 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ybpny Frphevgl Cbyvpl.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1701 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1702 4:54:22.170 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1703 4:54:22.170 AM 1 SHELL32.dll PathFindExtensionW ( "Manage Your Server.lnk" ) 0x0215b634 0.0000045 1704 4:54:22.170 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000061 1705 4:54:22.180 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Manage Your Server.lnk", 183 ) 0x01dbd572 0.0000045 1706 4:54:22.180 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Manage Your Server.lnk", 0x01dbd700 ) S_OK 0.0000064 1707 4:54:22.180 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0215b5e0, 0x01dbda74, 2084 ) S_OK 0.0000053 1708 4:54:22.180 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Manage Your Server.lnk", NULL ) 25 0.0000061 1709 4:54:22.180 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Manage Your Server.lnk", NULL ) 55 0.0000059 1710 4:54:22.180 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000047 1711 4:54:22.180 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1712 4:54:22.180 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Znantr Lbhe Freire.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 1713 4:54:22.180 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Znantr Lbhe Freire.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 1714 4:54:22.180 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1715 4:54:22.180 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1716 4:54:22.180 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1717 4:54:22.180 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1718 4:54:22.180 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1719 4:54:22.180 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1720 4:54:22.180 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1721 4:54:22.180 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Znantr Lbhe Freire.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1722 4:54:22.180 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Znantr Lbhe Freire.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1723 4:54:22.180 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1724 4:54:22.180 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1725 4:54:22.180 AM 1 SHELL32.dll PathFindExtensionW ( "Microsoft .NET Framework 1.1 Configuration.lnk" ) 0x0219dff4 0.0000047 1726 4:54:22.180 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0006302 1727 4:54:22.190 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Microsoft .NET Framework 1.1 Configuration.lnk", 183 ) 0x01dbd572 0.0000045 1728 4:54:22.190 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", 0x01dbd700 ) S_OK 0.0000059 1729 4:54:22.190 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0219df70, 0x01dbda74, 2084 ) S_OK 0.0000050 1730 4:54:22.190 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", NULL ) 25 0.0000053 1731 4:54:22.190 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", NULL ) 55 0.0000081 1732 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1733 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1734 4:54:22.190 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Pbasvthengvba.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000165 1735 4:54:22.190 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Pbasvthengvba.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 1736 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1737 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1738 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1739 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1740 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1741 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1742 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1743 4:54:22.190 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Pbasvthengvba.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1744 4:54:22.190 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Pbasvthengvba.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1745 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1746 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1747 4:54:22.190 AM 1 SHELL32.dll PathFindExtensionW ( "Microsoft .NET Framework 1.1 Wizards.lnk" ) 0x0219e6f0 0.0000045 1748 4:54:22.190 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1749 4:54:22.190 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Microsoft .NET Framework 1.1 Wizards.lnk", 183 ) 0x01dbd572 0.0000045 1750 4:54:22.190 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", 0x01dbd700 ) S_OK 0.0000053 1751 4:54:22.190 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0219e678, 0x01dbda74, 2084 ) S_OK 0.0000050 1752 4:54:22.190 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", NULL ) 25 0.0000053 1753 4:54:22.190 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", NULL ) 55 0.0000059 1754 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1755 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1756 4:54:22.190 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Jvmneqf.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 1757 4:54:22.190 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Jvmneqf.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1758 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1759 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1760 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1761 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1762 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1763 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1764 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1765 4:54:22.190 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Jvmneqf.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000162 1766 4:54:22.190 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Jvmneqf.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1767 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1768 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1769 4:54:22.190 AM 1 SHELL32.dll PathFindExtensionW ( "Network Load Balancing Manager.lnk" ) 0x021aed24 0.0000045 1770 4:54:22.190 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1771 4:54:22.190 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Network Load Balancing Manager.lnk", 183 ) 0x01dbd572 0.0000042 1772 4:54:22.190 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Network Load Balancing Manager.lnk", 0x01dbd700 ) S_OK 0.0000059 1773 4:54:22.190 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x021aecb8, 0x01dbda74, 2084 ) S_OK 0.0000050 1774 4:54:22.190 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Network Load Balancing Manager.lnk", NULL ) 25 0.0000053 1775 4:54:22.190 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Network Load Balancing Manager.lnk", NULL ) 55 0.0000059 1776 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1777 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1778 4:54:22.190 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Argjbex Ybnq Onynapvat Znantre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1779 4:54:22.190 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Argjbex Ybnq Onynapvat Znantre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1780 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1781 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1782 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1783 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1784 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1785 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1786 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1787 4:54:22.190 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Argjbex Ybnq Onynapvat Znantre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000358 1788 4:54:22.190 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Argjbex Ybnq Onynapvat Znantre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000251 1789 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1790 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000053 1791 4:54:22.190 AM 1 SHELL32.dll PathFindExtensionW ( "Performance.lnk" ) 0x00189d86 0.0000064 1792 4:54:22.190 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000045 1793 4:54:22.190 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Performance.lnk", 183 ) 0x01dbd572 0.0000045 1794 4:54:22.190 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Performance.lnk", 0x01dbd700 ) S_OK 0.0000056 1795 4:54:22.190 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x00189d40, 0x01dbda74, 2084 ) S_OK 0.0000047 1796 4:54:22.190 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Performance.lnk", NULL ) 25 0.0000053 1797 4:54:22.190 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Performance.lnk", NULL ) 55 0.0000059 1798 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1799 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1800 4:54:22.190 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Cresbeznapr.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1801 4:54:22.190 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Cresbeznapr.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1802 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLSESSION" ) 1 0.0000067 1803 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1804 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000061 1805 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000059 1806 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000059 1807 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1808 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1809 4:54:22.190 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Cresbeznapr.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000223 1810 4:54:22.190 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Cresbeznapr.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000106 1811 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1812 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000059 1813 4:54:22.190 AM 1 SHELL32.dll PathFindExtensionW ( "Remote Desktops.lnk" ) 0x0216f056 0.0000067 1814 4:54:22.190 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000061 1815 4:54:22.190 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Remote Desktops.lnk", 183 ) 0x01dbd572 0.0000059 1816 4:54:22.190 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Remote Desktops.lnk", 0x01dbd700 ) S_OK 0.0000089 1817 4:54:22.190 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0216f008, 0x01dbda74, 2084 ) S_OK 0.0000064 1818 4:54:22.190 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Remote Desktops.lnk", NULL ) 25 0.0000081 1819 4:54:22.190 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Remote Desktops.lnk", NULL ) 55 0.0000059 1820 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1821 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1822 4:54:22.190 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Erzbgr Qrfxgbcf.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 1823 4:54:22.190 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Erzbgr Qrfxgbcf.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 1824 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1825 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1826 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1827 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000050 1828 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1829 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1830 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000050 1831 4:54:22.190 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Erzbgr Qrfxgbcf.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000165 1832 4:54:22.190 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Erzbgr Qrfxgbcf.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1833 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLSESSION" ) 1 0.0000064 1834 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1835 4:54:22.190 AM 1 SHELL32.dll PathFindExtensionW ( "Routing and Remote Access.lnk" ) 0x0016572a 0.0000045 1836 4:54:22.190 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1837 4:54:22.190 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Routing and Remote Access.lnk", 183 ) 0x01dbd572 0.0000045 1838 4:54:22.190 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Routing and Remote Access.lnk", 0x01dbd700 ) S_OK 0.0000061 1839 4:54:22.190 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x001656c8, 0x01dbda74, 2084 ) S_OK 0.0000050 1840 4:54:22.190 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Routing and Remote Access.lnk", NULL ) 25 0.0000056 1841 4:54:22.190 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Routing and Remote Access.lnk", NULL ) 55 0.0000059 1842 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1843 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1844 4:54:22.190 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ebhgvat naq Erzbgr Npprff.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000170 1845 4:54:22.190 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ebhgvat naq Erzbgr Npprff.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 1846 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1847 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1848 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1849 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1850 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1851 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1852 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1853 4:54:22.190 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ebhgvat naq Erzbgr Npprff.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1854 4:54:22.190 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ebhgvat naq Erzbgr Npprff.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1855 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1856 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1857 4:54:22.190 AM 1 SHELL32.dll PathFindExtensionW ( "Services.lnk" ) 0x00189cb8 0.0000045 1858 4:54:22.190 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1859 4:54:22.190 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Services.lnk", 183 ) 0x01dbd572 0.0000042 1860 4:54:22.190 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Services.lnk", 0x01dbd700 ) S_OK 0.0000053 1861 4:54:22.190 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x00189c78, 0x01dbda74, 2084 ) S_OK 0.0000050 1862 4:54:22.190 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Services.lnk", NULL ) 25 0.0000053 1863 4:54:22.190 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Services.lnk", NULL ) 55 0.0000059 1864 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1865 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1866 4:54:22.190 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Freivprf.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 1867 4:54:22.190 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Freivprf.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1868 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1869 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1870 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1871 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1872 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1873 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1874 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1875 4:54:22.190 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Freivprf.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 1876 4:54:22.190 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Freivprf.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1877 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1878 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1879 4:54:22.190 AM 1 SHELL32.dll PathFindExtensionW ( "Terminal Server Licensing.lnk" ) 0x0016515a 0.0000042 1880 4:54:22.190 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1881 4:54:22.190 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Terminal Server Licensing.lnk", 183 ) 0x01dbd572 0.0000042 1882 4:54:22.190 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Server Licensing.lnk", 0x01dbd700 ) S_OK 0.0000050 1883 4:54:22.190 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x001650f8, 0x01dbda74, 2084 ) S_OK 0.0000081 1884 4:54:22.190 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Server Licensing.lnk", NULL ) 25 0.0000053 1885 4:54:22.190 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Server Licensing.lnk", NULL ) 55 0.0000059 1886 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1887 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1888 4:54:22.190 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freire Yvprafvat.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 1889 4:54:22.190 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freire Yvprafvat.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1890 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1891 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1892 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1893 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1894 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1895 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1896 4:54:22.190 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1897 4:54:22.190 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freire Yvprafvat.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000355 1898 4:54:22.210 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freire Yvprafvat.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000187 1899 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000073 1900 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000059 1901 4:54:22.210 AM 1 SHELL32.dll PathFindExtensionW ( "Terminal Services Configuration.lnk" ) 0x021aae26 0.0000070 1902 4:54:22.210 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000061 1903 4:54:22.210 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Terminal Services Configuration.lnk", 183 ) 0x01dbd572 0.0000067 1904 4:54:22.210 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Configuration.lnk", 0x01dbd700 ) S_OK 0.0000103 1905 4:54:22.210 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x021aadb8, 0x01dbda74, 2084 ) S_OK 0.0000081 1906 4:54:22.210 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Configuration.lnk", NULL ) 25 0.0000084 1907 4:54:22.210 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Configuration.lnk", NULL ) 55 0.0000081 1908 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000061 1909 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000059 1910 4:54:22.210 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Pbasvthengvba.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000277 1911 4:54:22.210 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Pbasvthengvba.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000162 1912 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1913 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1914 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000059 1915 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000061 1916 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000081 1917 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1918 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1919 4:54:22.210 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Pbasvthengvba.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000279 1920 4:54:22.210 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Pbasvthengvba.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000134 1921 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000061 1922 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000059 1923 4:54:22.210 AM 1 SHELL32.dll PathFindExtensionW ( "Terminal Services Manager.lnk" ) 0x00165442 0.0000070 1924 4:54:22.210 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000073 1925 4:54:22.210 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Terminal Services Manager.lnk", 183 ) 0x01dbd572 0.0000067 1926 4:54:22.210 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Manager.lnk", 0x01dbd700 ) S_OK 0.0000098 1927 4:54:22.210 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x001653e0, 0x01dbda74, 2084 ) S_OK 0.0000064 1928 4:54:22.210 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Manager.lnk", NULL ) 25 0.0000087 1929 4:54:22.210 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Manager.lnk", NULL ) 55 0.0000059 1930 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1931 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1932 4:54:22.210 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Znantre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000179 1933 4:54:22.210 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Znantre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 1934 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1935 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1936 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1937 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1938 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1939 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1940 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000098 1941 4:54:22.210 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Znantre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000165 1942 4:54:22.210 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Znantre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1943 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1944 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1945 4:54:22.210 AM 1 SHELL32.dll PathFindExtensionW ( "API Monitor v2 (Alpha) 32-bit.lnk" ) 0x0219d4b2 0.0000045 1946 4:54:22.210 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1947 4:54:22.210 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57e, "API Monitor v2 (Alpha) 32-bit.lnk", 177 ) 0x01dbd57e 0.0000042 1948 4:54:22.210 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", 0x01dbd700 ) S_OK 0.0000061 1949 4:54:22.210 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0219d448, 0x01dbda74, 2084 ) S_OK 0.0000053 1950 4:54:22.210 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", NULL ) 25 0.0000053 1951 4:54:22.210 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", NULL ) 55 0.0000059 1952 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1953 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1954 4:54:22.210 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\ebuvgno.pbz\NCV Zbavgbe i2\NCV Zbavgbe i2 (Nycun) 32-ovg.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_SUCCESS 0.0000210 1955 4:54:22.210 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\ebuvgno.pbz\NCV Zbavgbe i2\NCV Zbavgbe i2 (Nycun) 32-ovg.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_SUCCESS 0.0000126 1956 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1957 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1958 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1959 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1960 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1961 4:54:22.210 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\ebuvgno.pbz\NCV Zbavgbe i2\NCV Zbavgbe i2 (Nycun) 32-ovg.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_SUCCESS 0.0000159 1962 4:54:22.210 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\ebuvgno.pbz\NCV Zbavgbe i2\NCV Zbavgbe i2 (Nycun) 32-ovg.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_SUCCESS 0.0000073 1963 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1964 4:54:22.210 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1965 4:54:22.210 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbfde0 ) S_OK 0.0000064 1966 4:54:22.210 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x01dbfd94 ) S_OK 0.0000045 1967 4:54:22.210 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x01dbfd90 ) S_OK 0.0000045 1968 4:54:22.210 AM 1 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000045 1969 4:54:22.210 AM 1 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x01dbf6ec, 260 ) 4 0.0000047 1970 4:54:22.210 AM 1 SHELL32.dll StrDupW ( "C:\" ) 0x0215fa30 0.0000047 1971 4:54:22.210 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x01dbfbac ) S_OK 0.0000061 1972 4:54:22.210 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder2, 0x01dbfba8 ) S_OK 0.0000067 1973 4:54:22.210 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf944, "Documents and Settings", 260 ) 0x01dbf944 0.0000061 1974 4:54:22.210 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf71c, "Documents and Settings", 260 ) 0x01dbf71c 0.0000061 1975 4:54:22.210 AM 1 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000067 1976 4:54:22.210 AM 1 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x02160a88 0.0000059 1977 4:54:22.210 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x01dbfb5c ) S_OK 0.0000056 1978 4:54:22.210 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IPersistFolder3, 0x01dbf47c ) S_OK 0.0000059 1979 4:54:22.210 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf496, "Documents and Settings", 257 ) 0x01dbf496 0.0000059 1980 4:54:22.210 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215ed20 0.0000075 1981 4:54:22.210 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder2, 0x01dbfb58 ) S_OK 0.0000059 1982 4:54:22.210 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf8f4, "Administrator", 260 ) 0x01dbf8f4 0.0000056 1983 4:54:22.210 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf6cc, "All Users", 260 ) 0x01dbf6cc 0.0000056 1984 4:54:22.210 AM 1 SHELL32.dll StrCmpICW ( "All Users", "Administrator" ) 8 0.0000056 1985 4:54:22.210 AM 1 SHELL32.dll PathFindExtensionW ( "R2Help.lnk" ) 0x0216afb2 0.0000059 1986 4:54:22.210 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd530, "R2Help.lnk", 216 ) 0x01dbd530 0.0000056 1987 4:54:22.210 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Desktop\R2Help.lnk", 0x01dbd700 ) S_OK 0.0058214 1988 4:54:22.220 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0216af78, 0x01dbda74, 2084 ) S_OK 0.0000067 1989 4:54:22.220 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Desktop\R2Help.lnk", NULL ) 25 0.0000078 1990 4:54:22.220 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Desktop\R2Help.lnk", NULL ) 35 0.0000070 1991 4:54:22.220 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Favorites", "C:\Documents and Settings\All Users\Desktop\R2Help.lnk", NULL ) 25 0.0000067 1992 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLSESSION" ) 1 0.0000061 1993 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1994 4:54:22.220 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\E2Uryc.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000260 1995 4:54:22.220 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\E2Uryc.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 1996 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLSESSION" ) 1 0.0000053 1997 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1998 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1999 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2000 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2001 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLSESSION" ) 1 0.0000056 2002 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2003 4:54:22.220 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\E2Uryc.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000210 2004 4:54:22.220 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\E2Uryc.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000095 2005 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLSESSION" ) 1 0.0000056 2006 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2007 4:54:22.220 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbfde0 ) S_OK 0.0000064 2008 4:54:22.220 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x01dbfd94 ) S_OK 0.0000061 2009 4:54:22.220 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x01dbfd90 ) S_OK 0.0000098 2010 4:54:22.220 AM 1 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000059 2011 4:54:22.220 AM 1 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x01dbf6ec, 260 ) 4 0.0000073 2012 4:54:22.220 AM 1 SHELL32.dll StrDupW ( "C:\" ) 0x0215fa30 0.0000073 2013 4:54:22.220 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x01dbfbac ) S_OK 0.0000059 2014 4:54:22.220 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder2, 0x01dbfba8 ) S_OK 0.0000059 2015 4:54:22.220 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf944, "Documents and Settings", 260 ) 0x01dbf944 0.0000059 2016 4:54:22.220 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf71c, "Documents and Settings", 260 ) 0x01dbf71c 0.0000059 2017 4:54:22.220 AM 1 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000070 2018 4:54:22.220 AM 1 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x02160a88 0.0000070 2019 4:54:22.220 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x01dbfb5c ) S_OK 0.0000056 2020 4:54:22.220 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IPersistFolder3, 0x01dbf47c ) S_OK 0.0000059 2021 4:54:22.220 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf496, "Documents and Settings", 257 ) 0x01dbf496 0.0000059 2022 4:54:22.220 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215ed20 0.0000067 2023 4:54:22.220 AM 1 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder2, 0x01dbfb58 ) S_OK 0.0000061 2024 4:54:22.220 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf8f4, "Administrator", 260 ) 0x01dbf8f4 0.0000056 2025 4:54:22.220 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf6cc, "All Users", 260 ) 0x01dbf6cc 0.0000056 2026 4:54:22.220 AM 1 SHELL32.dll StrCmpICW ( "All Users", "Administrator" ) 8 0.0000053 2027 4:54:22.220 AM 1 SHELL32.dll PathFindExtensionW ( "Security Configuration Wizard.lnk" ) 0x0215bd8a 0.0000059 2028 4:54:22.220 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd530, "Security Configuration Wizard.lnk", 216 ) 0x01dbd530 0.0000056 2029 4:54:22.220 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", 0x01dbd700 ) S_OK 0.0000067 2030 4:54:22.220 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0215bd20, 0x01dbda74, 2084 ) S_OK 0.0000064 2031 4:54:22.220 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", NULL ) 25 0.0000075 2032 4:54:22.220 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", NULL ) 35 0.0000070 2033 4:54:22.220 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Favorites", "C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", NULL ) 25 0.0000067 2034 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000059 2035 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2036 4:54:22.220 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\Frphevgl Pbasvthengvba Jvmneq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000271 2037 4:54:22.220 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\Frphevgl Pbasvthengvba Jvmneq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 2038 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000056 2039 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2040 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2041 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2042 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2043 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000056 2044 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2045 4:54:22.220 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\Frphevgl Pbasvthengvba Jvmneq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000215 2046 4:54:22.220 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\Frphevgl Pbasvthengvba Jvmneq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 2047 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000056 2048 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2049 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLSESSION" ) 1 0.0000056 2050 4:54:22.220 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2051 4:54:22.220 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfugn.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0011278 2052 4:54:22.220 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfugn.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0011149 2053 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLSESSION" ) 1 0.0000081 2054 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2055 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2056 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2057 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 2058 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLSESSION" ) 1 0.0000059 2059 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2060 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfugn.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000218 2061 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfugn.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 2062 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLSESSION" ) 1 0.0000056 2063 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2064 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLSESSION" ) 1 0.0000056 2065 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2066 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Vagrearg Rkcybere\vrkcyber.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_SUCCESS 0.0000257 2067 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Vagrearg Rkcybere\vrkcyber.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_SUCCESS 0.0000145 2068 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLSESSION" ) 1 0.0000056 2069 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2070 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2071 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLSESSION" ) 1 0.0000053 2072 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2073 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Vagrearg Rkcybere\vrkcyber.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_SUCCESS 0.0000207 2074 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Vagrearg Rkcybere\vrkcyber.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_SUCCESS 0.0000095 2075 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLSESSION" ) 1 0.0000056 2076 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2077 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLSESSION" ) 1 0.0000056 2078 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2079 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\zfvza.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 2080 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\zfvza.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2081 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLSESSION" ) 1 0.0000056 2082 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2083 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2084 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2085 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2086 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLSESSION" ) 1 0.0000056 2087 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2088 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\zfvza.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 2089 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\zfvza.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2090 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLSESSION" ) 1 0.0000056 2091 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2092 4:54:22.230 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000064 2093 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLSESSION" ) 1 0.0000059 2094 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2095 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\epvzyol.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 2096 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\epvzyol.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2097 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLSESSION" ) 1 0.0000056 2098 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2099 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2100 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2101 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2102 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLSESSION" ) 1 0.0000056 2103 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2104 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\epvzyol.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 2105 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\epvzyol.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2106 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLSESSION" ) 1 0.0000053 2107 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2108 4:54:22.230 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000056 2109 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLSESSION" ) 1 0.0000056 2110 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2111 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\jno.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000207 2112 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\jno.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 2113 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLSESSION" ) 1 0.0000056 2114 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2115 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2116 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000059 2117 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2118 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLSESSION" ) 1 0.0000056 2119 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2120 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\jno.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 2121 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\jno.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 2122 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLSESSION" ) 1 0.0000056 2123 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2124 4:54:22.230 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000056 2125 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLSESSION" ) 1 0.0000056 2126 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2127 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pzq.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_SUCCESS 0.0000218 2128 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pzq.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_SUCCESS 0.0000109 2129 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLSESSION" ) 1 0.0000056 2130 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2131 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 2132 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLSESSION" ) 1 0.0000056 2133 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2134 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pzq.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_SUCCESS 0.0000196 2135 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pzq.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_SUCCESS 0.0000084 2136 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLSESSION" ) 1 0.0000056 2137 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2138 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLSESSION" ) 1 0.0000056 2139 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2140 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\abgrcnq.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_SUCCESS 0.0000212 2141 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\abgrcnq.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_SUCCESS 0.0000103 2142 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLSESSION" ) 1 0.0000056 2143 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2144 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2145 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLSESSION" ) 1 0.0000056 2146 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2147 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\abgrcnq.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_SUCCESS 0.0000201 2148 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\abgrcnq.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_SUCCESS 0.0000089 2149 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLSESSION" ) 1 0.0000056 2150 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2151 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLSESSION" ) 1 0.0000056 2152 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2153 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zntavsl.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 2154 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zntavsl.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 2155 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLSESSION" ) 1 0.0000056 2156 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2157 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2158 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000053 2159 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 2160 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLSESSION" ) 1 0.0000056 2161 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2162 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zntavsl.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 2163 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zntavsl.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2164 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLSESSION" ) 1 0.0000056 2165 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2166 4:54:22.230 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000061 2167 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLSESSION" ) 1 0.0000059 2168 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2169 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\aneengbe.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000204 2170 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\aneengbe.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000095 2171 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLSESSION" ) 1 0.0000056 2172 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2173 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2174 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2175 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2176 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLSESSION" ) 1 0.0000056 2177 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2178 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\aneengbe.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 2179 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\aneengbe.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 2180 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLSESSION" ) 1 0.0000056 2181 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2182 4:54:22.230 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000056 2183 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLSESSION" ) 1 0.0000056 2184 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2185 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bfx.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 2186 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bfx.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2187 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLSESSION" ) 1 0.0000056 2188 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2189 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000053 2190 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000053 2191 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2192 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLSESSION" ) 1 0.0000053 2193 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2194 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bfx.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 2195 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bfx.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2196 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLSESSION" ) 1 0.0000056 2197 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2198 4:54:22.230 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000059 2199 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLSESSION" ) 1 0.0000056 2200 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2201 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hgvyzna.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 2202 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hgvyzna.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2203 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLSESSION" ) 1 0.0000056 2204 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2205 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000053 2206 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2207 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2208 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLSESSION" ) 1 0.0000056 2209 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2210 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hgvyzna.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 2211 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hgvyzna.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 2212 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLSESSION" ) 1 0.0000056 2213 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2214 4:54:22.230 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000056 2215 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLSESSION" ) 1 0.0000059 2216 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2217 4:54:22.230 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf Zrqvn Cynlre\jzcynlre.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 2218 4:54:22.230 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf Zrqvn Cynlre\jzcynlre.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 2219 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLSESSION" ) 1 0.0000053 2220 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2221 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2222 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2223 4:54:22.230 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000070 2224 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLSESSION" ) 1 0.0000056 2225 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2226 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf Zrqvn Cynlre\jzcynlre.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000215 2227 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf Zrqvn Cynlre\jzcynlre.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 2228 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLSESSION" ) 1 0.0000056 2229 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2230 4:54:22.240 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000061 2231 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLSESSION" ) 1 0.0000056 2232 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2233 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jhcqzte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000190 2234 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jhcqzte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 2235 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLSESSION" ) 1 0.0000056 2236 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2237 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2238 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2239 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2240 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLSESSION" ) 1 0.0000056 2241 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2242 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jhcqzte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 2243 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jhcqzte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2244 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLSESSION" ) 1 0.0000056 2245 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2246 4:54:22.240 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000056 2247 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLSESSION" ) 1 0.0000056 2248 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2249 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pnyp.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 2250 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pnyp.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 2251 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLSESSION" ) 1 0.0000056 2252 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2253 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2254 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2255 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2256 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLSESSION" ) 1 0.0000056 2257 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2258 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pnyp.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 2259 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pnyp.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2260 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLSESSION" ) 1 0.0000056 2261 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2262 4:54:22.240 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000056 2263 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLSESSION" ) 1 0.0000059 2264 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2265 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfcnvag.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 2266 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfcnvag.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2267 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLSESSION" ) 1 0.0000059 2268 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2269 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2270 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000059 2271 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2272 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLSESSION" ) 1 0.0000045 2273 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2274 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfcnvag.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 2275 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfcnvag.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 2276 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLSESSION" ) 1 0.0000045 2277 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2278 4:54:22.240 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000047 2279 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLSESSION" ) 1 0.0000042 2280 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2281 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Npprffbevrf\jbeqcnq.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000207 2282 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Npprffbevrf\jbeqcnq.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000112 2283 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLSESSION" ) 1 0.0000056 2284 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000061 2285 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000061 2286 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2287 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000047 2288 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLSESSION" ) 1 0.0000061 2289 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000078 2290 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Npprffbevrf\jbeqcnq.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000338 2291 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Npprffbevrf\jbeqcnq.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 2292 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLSESSION" ) 1 0.0000061 2293 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000047 2294 4:54:22.240 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000064 2295 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLSESSION" ) 1 0.0000059 2296 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2297 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\nppjvm.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000215 2298 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\nppjvm.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 2299 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLSESSION" ) 1 0.0000059 2300 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2301 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2302 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2303 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2304 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLSESSION" ) 1 0.0000053 2305 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2306 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\nppjvm.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 2307 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\nppjvm.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2308 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLSESSION" ) 1 0.0000056 2309 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2310 4:54:22.240 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000059 2311 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLSESSION" ) 1 0.0000059 2312 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2313 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfgfp.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000218 2314 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfgfp.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 2315 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLSESSION" ) 1 0.0000059 2316 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2317 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000059 2318 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2319 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2320 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLSESSION" ) 1 0.0000056 2321 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2322 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfgfp.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000221 2323 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfgfp.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 2324 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLSESSION" ) 1 0.0000061 2325 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2326 4:54:22.240 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000059 2327 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLSESSION" ) 1 0.0000056 2328 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2329 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\faqerp32.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 2330 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\faqerp32.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2331 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLSESSION" ) 1 0.0000056 2332 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2333 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2334 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000053 2335 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 2336 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLSESSION" ) 1 0.0000056 2337 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2338 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\faqerp32.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 2339 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\faqerp32.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2340 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLSESSION" ) 1 0.0000056 2341 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2342 4:54:22.240 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000056 2343 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLSESSION" ) 1 0.0000056 2344 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2345 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\agonpxhc.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 2346 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\agonpxhc.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 2347 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLSESSION" ) 1 0.0000056 2348 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000070 2349 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000059 2350 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2351 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2352 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLSESSION" ) 1 0.0000056 2353 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2354 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\agonpxhc.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000204 2355 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\agonpxhc.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000095 2356 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLSESSION" ) 1 0.0000056 2357 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2358 4:54:22.240 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000056 2359 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLSESSION" ) 1 0.0000056 2360 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2361 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\puneznc.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 2362 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\puneznc.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 2363 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLSESSION" ) 1 0.0000056 2364 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2365 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2366 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000053 2367 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2368 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLSESSION" ) 1 0.0000056 2369 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2370 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\puneznc.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 2371 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\puneznc.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2372 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLSESSION" ) 1 0.0000053 2373 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2374 4:54:22.240 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000056 2375 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLSESSION" ) 1 0.0000059 2376 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2377 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pyrnazte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 2378 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pyrnazte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2379 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLSESSION" ) 1 0.0000056 2380 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2381 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2382 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000053 2383 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2384 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLSESSION" ) 1 0.0000056 2385 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2386 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pyrnazte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 2387 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pyrnazte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2388 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLSESSION" ) 1 0.0000056 2389 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2390 4:54:22.240 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000056 2391 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLSESSION" ) 1 0.0000053 2392 4:54:22.240 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2393 4:54:22.240 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qset.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000235 2394 4:54:22.240 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qset.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000120 2395 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLSESSION" ) 1 0.0000059 2396 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2397 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2398 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2399 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2400 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLSESSION" ) 1 0.0000056 2401 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2402 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qset.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 2403 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qset.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 2404 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLSESSION" ) 1 0.0000056 2405 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2406 4:54:22.250 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000059 2407 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLSESSION" ) 1 0.0000056 2408 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2409 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZFVasb\zfvasb32.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000204 2410 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZFVasb\zfvasb32.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 2411 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLSESSION" ) 1 0.0000056 2412 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2413 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2414 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2415 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 2416 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLSESSION" ) 1 0.0000056 2417 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2418 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZFVasb\zfvasb32.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 2419 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZFVasb\zfvasb32.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 2420 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLSESSION" ) 1 0.0000059 2421 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2422 4:54:22.250 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000059 2423 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLSESSION" ) 1 0.0000056 2424 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2425 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pregfei.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000210 2426 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pregfei.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 2427 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLSESSION" ) 1 0.0000056 2428 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2429 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2430 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000053 2431 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 2432 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLSESSION" ) 1 0.0000053 2433 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2434 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pregfei.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 2435 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pregfei.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2436 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLSESSION" ) 1 0.0000053 2437 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2438 4:54:22.250 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000053 2439 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLSESSION" ) 1 0.0000053 2440 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2441 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Pyhfgre\PyhNqzva.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 2442 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Pyhfgre\PyhNqzva.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2443 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLSESSION" ) 1 0.0000050 2444 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2445 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000050 2446 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000050 2447 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 2448 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLSESSION" ) 1 0.0000050 2449 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2450 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Pyhfgre\PyhNqzva.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000187 2451 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Pyhfgre\PyhNqzva.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2452 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLSESSION" ) 1 0.0000053 2453 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2454 4:54:22.250 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000053 2455 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLSESSION" ) 1 0.0000053 2456 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2457 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\Pbz\pbzrkc.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 2458 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\Pbz\pbzrkc.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2459 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLSESSION" ) 1 0.0000050 2460 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2461 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000053 2462 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000050 2463 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000050 2464 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLSESSION" ) 1 0.0000053 2465 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2466 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\Pbz\pbzrkc.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000179 2467 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\Pbz\pbzrkc.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2468 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLSESSION" ) 1 0.0000050 2469 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2470 4:54:22.250 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000056 2471 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000053 2472 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2473 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbzcztzg.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000182 2474 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbzcztzg.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2475 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000050 2476 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000061 2477 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2478 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2479 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000050 2480 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000050 2481 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2482 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbzcztzg.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 2483 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbzcztzg.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2484 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000053 2485 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2486 4:54:22.250 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000056 2487 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLSESSION" ) 1 0.0000050 2488 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2489 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\plf.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000182 2490 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\plf.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2491 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLSESSION" ) 1 0.0000050 2492 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2493 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000050 2494 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000053 2495 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000050 2496 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLSESSION" ) 1 0.0000050 2497 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2498 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\plf.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000179 2499 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\plf.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2500 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLSESSION" ) 1 0.0000050 2501 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2502 4:54:22.250 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000053 2503 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLSESSION" ) 1 0.0000053 2504 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2505 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bqopnq32.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000285 2506 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bqopnq32.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 2507 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLSESSION" ) 1 0.0000056 2508 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2509 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000050 2510 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000053 2511 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 2512 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLSESSION" ) 1 0.0000053 2513 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2514 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bqopnq32.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 2515 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bqopnq32.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2516 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLSESSION" ) 1 0.0000050 2517 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2518 4:54:22.250 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000053 2519 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLSESSION" ) 1 0.0000050 2520 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2521 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qsfthv.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 2522 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qsfthv.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2523 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLSESSION" ) 1 0.0000053 2524 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2525 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000053 2526 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000050 2527 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 2528 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLSESSION" ) 1 0.0000053 2529 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2530 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qsfthv.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000182 2531 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qsfthv.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2532 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLSESSION" ) 1 0.0000050 2533 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2534 4:54:22.250 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000059 2535 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLSESSION" ) 1 0.0000059 2536 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2537 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\riragije.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000190 2538 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\riragije.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 2539 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLSESSION" ) 1 0.0000050 2540 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2541 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000050 2542 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000050 2543 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 2544 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLSESSION" ) 1 0.0000053 2545 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2546 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\riragije.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000179 2547 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\riragije.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2548 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLSESSION" ) 1 0.0000050 2549 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2550 4:54:22.250 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000050 2551 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLSESSION" ) 1 0.0000053 2552 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2553 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yyfzte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000187 2554 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yyfzte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2555 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLSESSION" ) 1 0.0000050 2556 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2557 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000050 2558 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000053 2559 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000050 2560 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLSESSION" ) 1 0.0000050 2561 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2562 4:54:22.250 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yyfzte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 2563 4:54:22.250 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yyfzte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 2564 4:54:22.250 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLSESSION" ) 1 0.0000115 2565 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000036 2566 4:54:22.260 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000081 2567 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLSESSION" ) 1 0.0000036 2568 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000036 2569 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\frpcby.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000212 2570 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\frpcby.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000101 2571 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLSESSION" ) 1 0.0000036 2572 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000036 2573 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000036 2574 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000036 2575 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000039 2576 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLSESSION" ) 1 0.0000036 2577 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000036 2578 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\frpcby.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000131 2579 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\frpcby.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 2580 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLSESSION" ) 1 0.0000036 2581 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000036 2582 4:54:22.260 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000039 2583 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLSESSION" ) 1 0.0000039 2584 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000036 2585 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\zfpbepst.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000140 2586 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\zfpbepst.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2587 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLSESSION" ) 1 0.0000036 2588 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000036 2589 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000039 2590 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000036 2591 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000036 2592 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLSESSION" ) 1 0.0000036 2593 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000039 2594 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\zfpbepst.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000134 2595 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\zfpbepst.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2596 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLSESSION" ) 1 0.0000036 2597 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000039 2598 4:54:22.260 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000039 2599 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLSESSION" ) 1 0.0000036 2600 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000036 2601 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\PbasvtJvmneqf.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000137 2602 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\PbasvtJvmneqf.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2603 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLSESSION" ) 1 0.0000036 2604 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000036 2605 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000036 2606 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000036 2607 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000036 2608 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLSESSION" ) 1 0.0000036 2609 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000036 2610 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\PbasvtJvmneqf.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000137 2611 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\PbasvtJvmneqf.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2612 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLSESSION" ) 1 0.0000036 2613 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000036 2614 4:54:22.260 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000039 2615 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLSESSION" ) 1 0.0000036 2616 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000036 2617 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\ayozte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 2618 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\ayozte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 2619 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLSESSION" ) 1 0.0000053 2620 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2621 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000050 2622 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000047 2623 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000047 2624 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLSESSION" ) 1 0.0000047 2625 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2626 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\ayozte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000182 2627 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\ayozte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 2628 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLSESSION" ) 1 0.0000047 2629 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2630 4:54:22.260 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000053 2631 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLSESSION" ) 1 0.0000047 2632 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2633 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\creszba.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000173 2634 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\creszba.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2635 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLSESSION" ) 1 0.0000047 2636 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2637 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000047 2638 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000050 2639 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000047 2640 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLSESSION" ) 1 0.0000047 2641 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2642 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\creszba.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000173 2643 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\creszba.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2644 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLSESSION" ) 1 0.0000050 2645 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000047 2646 4:54:22.260 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000047 2647 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLSESSION" ) 1 0.0000047 2648 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2649 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfzzp.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000204 2650 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfzzp.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 2651 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLSESSION" ) 1 0.0000059 2652 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2653 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2654 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2655 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2656 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLSESSION" ) 1 0.0000056 2657 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2658 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfzzp.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 2659 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfzzp.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2660 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLSESSION" ) 1 0.0000056 2661 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2662 4:54:22.260 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000056 2663 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000056 2664 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2665 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\eenfztzg.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 2666 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\eenfztzg.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 2667 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000056 2668 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2669 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2670 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2671 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2672 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000056 2673 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2674 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\eenfztzg.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000210 2675 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\eenfztzg.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 2676 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000056 2677 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2678 4:54:22.260 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000053 2679 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLSESSION" ) 1 0.0000053 2680 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2681 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\freivprf.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000182 2682 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\freivprf.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2683 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLSESSION" ) 1 0.0000050 2684 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2685 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000050 2686 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000050 2687 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 2688 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLSESSION" ) 1 0.0000053 2689 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2690 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\freivprf.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000182 2691 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\freivprf.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2692 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLSESSION" ) 1 0.0000053 2693 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2694 4:54:22.260 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000053 2695 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLSESSION" ) 1 0.0000053 2696 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2697 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yvpzte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000182 2698 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yvpzte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2699 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLSESSION" ) 1 0.0000050 2700 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2701 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000053 2702 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000050 2703 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000064 2704 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLSESSION" ) 1 0.0000053 2705 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2706 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yvpzte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000182 2707 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yvpzte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2708 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLSESSION" ) 1 0.0000053 2709 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2710 4:54:22.260 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000053 2711 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLSESSION" ) 1 0.0000053 2712 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2713 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfpp.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000187 2714 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfpp.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2715 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLSESSION" ) 1 0.0000050 2716 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2717 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000050 2718 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000050 2719 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000050 2720 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLSESSION" ) 1 0.0000050 2721 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2722 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfpp.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000179 2723 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfpp.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2724 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLSESSION" ) 1 0.0000053 2725 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2726 4:54:22.260 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000056 2727 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLSESSION" ) 1 0.0000053 2728 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2729 4:54:22.260 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfnqzva.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 2730 4:54:22.260 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfnqzva.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2731 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLSESSION" ) 1 0.0000053 2732 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000064 2733 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2734 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2735 4:54:22.260 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000073 2736 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLSESSION" ) 1 0.0000053 2737 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2738 4:54:22.270 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfnqzva.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000218 2739 4:54:22.270 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfnqzva.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000112 2740 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLSESSION" ) 1 0.0000053 2741 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2742 4:54:22.270 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000056 2743 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLSESSION" ) 1 0.0000053 2744 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2745 4:54:22.270 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\ebuvgno.pbz\NCV Zbavgbe\ncvzbavgbe-k86.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_SUCCESS 0.0000218 2746 4:54:22.270 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\ebuvgno.pbz\NCV Zbavgbe\ncvzbavgbe-k86.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_SUCCESS 0.0000112 2747 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLSESSION" ) 1 0.0000053 2748 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2749 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 2750 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLSESSION" ) 1 0.0000053 2751 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2752 4:54:22.270 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\ebuvgno.pbz\NCV Zbavgbe\ncvzbavgbe-k86.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_SUCCESS 0.0000193 2753 4:54:22.270 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\ebuvgno.pbz\NCV Zbavgbe\ncvzbavgbe-k86.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_SUCCESS 0.0000089 2754 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLSESSION" ) 1 0.0000053 2755 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2756 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLSESSION" ) 1 0.0000053 2757 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2758 4:54:22.270 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\uu.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000182 2759 4:54:22.270 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\uu.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2760 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLSESSION" ) 1 0.0000050 2761 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2762 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000053 2763 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000050 2764 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 2765 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLSESSION" ) 1 0.0000050 2766 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 2767 4:54:22.270 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\uu.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 2768 4:54:22.270 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\uu.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2769 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLSESSION" ) 1 0.0000053 2770 4:54:22.270 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2771 4:54:22.270 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000053 2772 4:54:22.270 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x00f2fc98 ) S_OK 0.0000070 2773 4:54:22.270 AM 2 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x00f2f7a4, 260 ) 4 0.0000061 2774 4:54:22.270 AM 2 SHELL32.dll StrDupW ( "C:\" ) 0x0215fa30 0.0000059 2775 4:54:22.270 AM 2 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x00f2fc48 ) S_OK 0.0000056 2776 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f780, "Administrative Tools", 260 ) 0x00f2f780 0.0000053 2777 4:54:22.270 AM 2 SHELL32.dll PathFindExtensionW ( "Administrative Tools" ) 0x00f2f7a8 0.0000053 2778 4:54:22.270 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x00f2fd68 ) S_OK 0.0000053 2779 4:54:22.270 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IPersistFolder3, 0x00f2f55c ) S_OK 0.0000053 2780 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f314, "Documents and Settings", 260 ) 0x00f2f314 0.0000056 2781 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f576, "Documents and Settings", 257 ) 0x00f2f576 0.0000050 2782 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f314, "All Users", 260 ) 0x00f2f314 0.0000053 2783 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f5a4, "All Users", 234 ) 0x00f2f5a4 0.0000050 2784 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f314, "Start Menu", 260 ) 0x00f2f314 0.0000050 2785 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f5b8, "Start Menu", 224 ) 0x00f2f5b8 0.0000050 2786 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f314, "Programs", 260 ) 0x00f2f314 0.0000050 2787 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f5ce, "Programs", 213 ) 0x00f2f5ce 0.0000050 2788 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f314, "Administrative Tools", 260 ) 0x00f2f314 0.0000053 2789 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f5e0, "Administrative Tools", 204 ) 0x00f2f5e0 0.0000053 2790 4:54:22.270 AM 2 SHELL32.dll StrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools" ) 0x0218ba48 0.0000070 2791 4:54:22.270 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellIcon, 0x00f2fcd8 ) S_OK 0.0000053 2792 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f674, "Manage Your Server.lnk", 260 ) 0x00f2f674 0.0000053 2793 4:54:22.270 AM 2 SHELL32.dll PathFindExtensionW ( "Manage Your Server.lnk" ) 0x00f2f698 0.0000056 2794 4:54:22.270 AM 2 SHELL32.dll AssocCreate ( Query file associations, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x00f2f5e0 ) S_OK 0.0000187 2795 4:54:22.270 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x00f2f5e0 ) S_OK 0.0000050 2796 4:54:22.270 AM 2 SHELL32.dll SHStrDupW ( ".lnk", 0x00170e24 ) S_OK 0.0000061 2797 4:54:22.270 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000001c8, ".lnk", 0, MAXIMUM_ALLOWED, 0x00f2f430 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 2798 4:54:22.270 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000001c8, ".lnk", 0, MAXIMUM_ALLOWED, 0x00f2f430 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 2799 4:54:22.270 AM 2 SHELL32.dll AssocCreate ( {9016d0dd-7c41-46cc-a664-bf22f7cb186a}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f53c ) S_OK 0.0000067 2800 4:54:22.270 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".lnk", 0, MAXIMUM_ALLOWED, 0x000c5c0c ) ERROR_SUCCESS 0.0000291 2801 4:54:22.270 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000576, NULL, NULL, 0x00f2f3dc, 0x00f2f3e4, 0x00f2f3d8 ) ERROR_SUCCESS 0.0000254 2802 4:54:22.270 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "lnkfile", 0, MAXIMUM_ALLOWED, 0x00f2f46c ) ERROR_SUCCESS 0.0000246 2803 4:54:22.270 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x0000056e, "CurVer", 0, KEY_QUERY_VALUE, 0x00f2f41c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000254 2804 4:54:22.270 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x0000056e, NULL, 0, MAXIMUM_ALLOWED, 0x000c5b94 ) ERROR_SUCCESS 0.0000254 2805 4:54:22.270 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000056e ) ERROR_SUCCESS 0.0000078 2806 4:54:22.270 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, {3b877e3c-67de-4f9a-b29b-17d0a1521c6a}, 0x00f2f61c ) S_OK 0.0000053 2807 4:54:22.270 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000576 ) ERROR_SUCCESS 0.0000078 2808 4:54:22.270 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000792 ) ERROR_SUCCESS 0.0000073 2809 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3fc, "Manage Your Server.lnk", 260 ) 0x00f2f3fc 0.0000053 2810 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2fb1e, "Manage Your Server.lnk", 183 ) 0x00f2fb1e 0.0000053 2811 4:54:22.270 AM 2 SHELL32.dll PathFindFileNameW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Manage Your Server.lnk" ) 0x00f2fb1e 0.0000059 2812 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3f4, "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Manage Your Server.lnk", 260 ) 0x00f2f3f4 0.0000059 2813 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f990, "Manage Your Server.lnk", 260 ) 0x00f2f990 0.0000050 2814 4:54:22.270 AM 2 SHELL32.dll SHStrDupW ( "Manage Your Server.lnk", 0x00f2fbbc ) S_OK 0.0000073 2815 4:54:22.270 AM 2 Explorer.EXE StrRetToStrW ( 0x00f2fbb8, 0x021ba3ab, 0x00f2fce8 ) S_OK 0.0000056 2816 4:54:22.270 AM 2 Explorer.EXE PathFindExtensionW ( "Manage Your Server.lnk" ) 0x00167834 0.0000056 2817 4:54:22.270 AM 2 Explorer.EXE StrCmpICW ( ".lnk", ".exe" ) 7 0.0000056 2818 4:54:22.270 AM 2 SHELL32.dll PathRemoveBackslashW ( "C:\Documents and Settings\Administrator\Recent" ) 0x00f2f35a 0.0000073 2819 4:54:22.270 AM 2 SHELL32.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Recent", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools", "òòò배怀òò嶟ͱò༆粓!" ) 25 0.0000073 2820 4:54:22.270 AM 2 SHELL32.dll SHAnsiToUnicode ( "@C:\WINDOWS\system32\mys.dll,-1010", 0x00f2f2c8, 260 ) 35 0.0000070 2821 4:54:22.270 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x0000027c, "LocalizedResourceName", 0, MAXIMUM_ALLOWED, 0x00f2f244 ) ERROR_SUCCESS 0.0000193 2822 4:54:22.270 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000790, "@C:\WINDOWS\system32\mys.dll,-1010", NULL, 0x00f2f234, 0x00f2f520, 0x00f2f2c0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 2823 4:54:22.270 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000790 ) ERROR_SUCCESS 0.0000084 2824 4:54:22.270 AM 2 SHELL32.dll SHLoadIndirectString ( "@C:\WINDOWS\system32\mys.dll,-1010", 0x00f2f520, 260, NULL ) S_OK 0.0001062 2825 4:54:22.270 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000002c0, NULL, 0, MAXIMUM_ALLOWED, 0x00f2ef08 ) ERROR_SUCCESS 0.0000355 2826 4:54:22.270 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000790, "@C:\WINDOWS\system32\mys.dll,-1010", NULL, 0x00f2eef8, 0x00f2f520, 0x00f2ef80 ) ERROR_SUCCESS 0.0000369 2827 4:54:22.270 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000790 ) ERROR_SUCCESS 0.0000070 2828 4:54:22.270 AM 2 SHELL32.dll SHStrDupW ( "Manage Your Server", 0x00f2fbd8 ) S_OK 0.0000073 2829 4:54:22.270 AM 2 Explorer.EXE StrRetToStrW ( 0x00f2fbd4, 0x021ba3ab, 0x00f2fd04 ) S_OK 0.0000053 2830 4:54:22.270 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x00f2fc98 ) S_OK 0.0000056 2831 4:54:22.270 AM 2 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x00f2f7a4, 260 ) 4 0.0000056 2832 4:54:22.270 AM 2 SHELL32.dll StrDupW ( "C:\" ) 0x0215fa30 0.0000059 2833 4:54:22.270 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x00f2fc48 ) S_OK 0.0000053 2834 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f780, "Accessories", 260 ) 0x00f2f780 0.0000064 2835 4:54:22.270 AM 2 SHELL32.dll PathFindExtensionW ( "Accessories" ) 0x00f2f796 0.0000061 2836 4:54:22.270 AM 2 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x00f2fd68 ) S_OK 0.0000047 2837 4:54:22.270 AM 2 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IPersistFolder3, 0x00f2f55c ) S_OK 0.0000045 2838 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f314, "Documents and Settings", 260 ) 0x00f2f314 0.0000042 2839 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f576, "Documents and Settings", 257 ) 0x00f2f576 0.0000042 2840 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f314, "Administrator", 260 ) 0x00f2f314 0.0000042 2841 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f5a4, "Administrator", 234 ) 0x00f2f5a4 0.0000042 2842 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f314, "Start Menu", 260 ) 0x00f2f314 0.0000042 2843 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f5c0, "Start Menu", 220 ) 0x00f2f5c0 0.0000042 2844 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f314, "Programs", 260 ) 0x00f2f314 0.0000042 2845 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f5d6, "Programs", 209 ) 0x00f2f5d6 0.0000042 2846 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f314, "Accessories", 260 ) 0x00f2f314 0.0000042 2847 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f5e8, "Accessories", 200 ) 0x00f2f5e8 0.0000078 2848 4:54:22.270 AM 2 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories" ) 0x00188448 0.0000235 2849 4:54:22.270 AM 2 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellIcon, 0x00f2fcd8 ) S_OK 0.0000047 2850 4:54:22.270 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f674, "Windows Explorer.lnk", 260 ) 0x00f2f674 0.0000045 2851 4:54:22.270 AM 2 SHELL32.dll PathFindExtensionW ( "Windows Explorer.lnk" ) 0x00f2f694 0.0000042 2852 4:54:22.270 AM 2 SHELL32.dll AssocCreate ( Query file associations, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x00f2f5e0 ) S_OK 0.0007498 2853 4:54:22.270 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x00f2f5e0 ) S_OK 0.0007400 2854 4:54:22.280 AM 2 SHELL32.dll SHStrDupW ( ".lnk", 0x00170e24 ) S_OK 0.0000050 2855 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000001c8, ".lnk", 0, MAXIMUM_ALLOWED, 0x00f2f430 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000134 2856 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000001c8, ".lnk", 0, MAXIMUM_ALLOWED, 0x00f2f430 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 2857 4:54:22.280 AM 2 SHELL32.dll AssocCreate ( {9016d0dd-7c41-46cc-a664-bf22f7cb186a}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f53c ) S_OK 0.0000047 2858 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".lnk", 0, MAXIMUM_ALLOWED, 0x000c5b94 ) ERROR_SUCCESS 0.0000249 2859 4:54:22.280 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000792, NULL, NULL, 0x00f2f3dc, 0x00f2f3e4, 0x00f2f3d8 ) ERROR_SUCCESS 0.0000215 2860 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "lnkfile", 0, MAXIMUM_ALLOWED, 0x00f2f46c ) ERROR_SUCCESS 0.0000346 2861 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000576, "CurVer", 0, KEY_QUERY_VALUE, 0x00f2f41c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000226 2862 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000576, NULL, 0, MAXIMUM_ALLOWED, 0x000c5a44 ) ERROR_SUCCESS 0.0000201 2863 4:54:22.280 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000576 ) ERROR_SUCCESS 0.0000064 2864 4:54:22.280 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, {3b877e3c-67de-4f9a-b29b-17d0a1521c6a}, 0x00f2f61c ) S_OK 0.0000045 2865 4:54:22.280 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000792 ) ERROR_SUCCESS 0.0000064 2866 4:54:22.280 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000056e ) ERROR_SUCCESS 0.0000056 2867 4:54:22.280 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3fc, "Windows Explorer.lnk", 260 ) 0x00f2f3fc 0.0000042 2868 4:54:22.280 AM 2 SHELL32.dll StrCpyNW ( 0x00f2fb14, "Windows Explorer.lnk", 188 ) 0x00f2fb14 0.0000045 2869 4:54:22.280 AM 2 SHELL32.dll PathFindFileNameW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Windows Explorer.lnk" ) 0x00f2fb14 0.0000047 2870 4:54:22.280 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3f4, "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Windows Explorer.lnk", 260 ) 0x00f2f3f4 0.0000047 2871 4:54:22.280 AM 2 SHELL32.dll StrCmpCW ( "c:\documents and settings\administrator\start menu\programs\accessories\windows explorer.lnk", "c:\documents and settings\all users\start menu\programs\administrative tools\manage your server.lnk" ) -8 0.0000047 2872 4:54:22.280 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f990, "Windows Explorer.lnk", 260 ) 0x00f2f990 0.0000042 2873 4:54:22.280 AM 2 SHELL32.dll SHStrDupW ( "Windows Explorer.lnk", 0x00f2fbbc ) S_OK 0.0000056 2874 4:54:22.280 AM 2 Explorer.EXE StrRetToStrW ( 0x00f2fbb8, 0x0017cc29, 0x00f2fce8 ) S_OK 0.0000042 2875 4:54:22.280 AM 2 Explorer.EXE PathFindExtensionW ( "Windows Explorer.lnk" ) 0x00167830 0.0000042 2876 4:54:22.280 AM 2 Explorer.EXE StrCmpICW ( ".lnk", ".exe" ) 7 0.0000042 2877 4:54:22.280 AM 2 SHELL32.dll PathRemoveBackslashW ( "C:\Documents and Settings\Administrator\Recent" ) 0x00f2f35a 0.0000056 2878 4:54:22.280 AM 2 SHELL32.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Recent", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories", ) 39 0.0000061 2879 4:54:22.280 AM 2 SHELL32.dll SHAnsiToUnicode ( "@shell32.dll,-22067", 0x00f2f2c8, 260 ) 20 0.0000045 2880 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x0000027c, "LocalizedResourceName", 0, MAXIMUM_ALLOWED, 0x00f2f244 ) ERROR_SUCCESS 0.0000126 2881 4:54:22.280 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000056c, "@shell32.dll,-22067", NULL, 0x00f2f234, 0x00f2f520, 0x00f2f2c0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2882 4:54:22.280 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000056c ) ERROR_SUCCESS 0.0000056 2883 4:54:22.280 AM 2 SHELL32.dll SHLoadIndirectString ( "@shell32.dll,-22067", 0x00f2f520, 260, NULL ) S_OK 0.0000492 2884 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000002c0, NULL, 0, MAXIMUM_ALLOWED, 0x00f2ef08 ) ERROR_SUCCESS 0.0000095 2885 4:54:22.280 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000056c, "@shell32.dll,-22067", NULL, 0x00f2eef8, 0x00f2f520, 0x00f2ef80 ) ERROR_SUCCESS 0.0000131 2886 4:54:22.280 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000056c ) ERROR_SUCCESS 0.0000064 2887 4:54:22.280 AM 2 SHELL32.dll SHStrDupW ( "Windows Explorer", 0x00f2fbd8 ) S_OK 0.0000047 2888 4:54:22.280 AM 2 Explorer.EXE StrRetToStrW ( 0x00f2fbd4, 0x0017cc29, 0x00f2fd04 ) S_OK 0.0000042 2889 4:54:22.280 AM 2 SHELL32.dll QISearch ( 0x021731d8, 0x7c8d7268, IShellIcon, 0x00f2fcd8 ) S_OK 0.0000045 2890 4:54:22.280 AM 2 SHELL32.dll PathFindExtensionW ( "Command Prompt.lnk" ) 0x0018aad4 0.0000045 2891 4:54:22.280 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 2892 4:54:22.280 AM 2 SHELL32.dll AssocCreate ( Query file associations, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x00f2f5e0 ) S_OK 0.0000142 2893 4:54:22.280 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x00f2f5e0 ) S_OK 0.0000045 2894 4:54:22.280 AM 2 SHELL32.dll SHStrDupW ( ".lnk", 0x00170e24 ) S_OK 0.0000047 2895 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000001c8, ".lnk", 0, MAXIMUM_ALLOWED, 0x00f2f430 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 2896 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000001c8, ".lnk", 0, MAXIMUM_ALLOWED, 0x00f2f430 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 2897 4:54:22.280 AM 2 SHELL32.dll AssocCreate ( {9016d0dd-7c41-46cc-a664-bf22f7cb186a}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f53c ) S_OK 0.0000050 2898 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".lnk", 0, MAXIMUM_ALLOWED, 0x000c5a44 ) ERROR_SUCCESS 0.0000201 2899 4:54:22.280 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000056e, NULL, NULL, 0x00f2f3dc, 0x00f2f3e4, 0x00f2f3d8 ) ERROR_SUCCESS 0.0000176 2900 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "lnkfile", 0, MAXIMUM_ALLOWED, 0x00f2f46c ) ERROR_SUCCESS 0.0000170 2901 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000792, "CurVer", 0, KEY_QUERY_VALUE, 0x00f2f41c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 2902 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000792, NULL, 0, MAXIMUM_ALLOWED, 0x000c5c0c ) ERROR_SUCCESS 0.0000193 2903 4:54:22.280 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000792 ) ERROR_SUCCESS 0.0000059 2904 4:54:22.280 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, {3b877e3c-67de-4f9a-b29b-17d0a1521c6a}, 0x00f2f61c ) S_OK 0.0000045 2905 4:54:22.280 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000056e ) ERROR_SUCCESS 0.0000061 2906 4:54:22.280 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000576 ) ERROR_SUCCESS 0.0000053 2907 4:54:22.280 AM 2 SHELL32.dll StrCpyNW ( 0x00f2fb14, "Command Prompt.lnk", 188 ) 0x00f2fb14 0.0000045 2908 4:54:22.280 AM 2 SHELL32.dll PathFindFileNameW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Command Prompt.lnk" ) 0x00f2fb14 0.0000047 2909 4:54:22.280 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3f4, "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Command Prompt.lnk", 260 ) 0x00f2f3f4 0.0000050 2910 4:54:22.280 AM 2 SHELL32.dll StrCmpCW ( "c:\documents and settings\administrator\start menu\programs\accessories\command prompt.lnk", "c:\documents and settings\administrator\start menu\programs\accessories\windows explorer.lnk" ) -20 0.0000047 2911 4:54:22.280 AM 2 SHELL32.dll PathRemoveBackslashW ( "C:\Documents and Settings\Administrator\Recent" ) 0x00f2f35a 0.0000050 2912 4:54:22.280 AM 2 SHELL32.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Recent", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories", "༆粓麲͔ò˳" ) 39 0.0000056 2913 4:54:22.280 AM 2 SHELL32.dll SHAnsiToUnicode ( "@shell32.dll,-22022", 0x00f2f2c8, 260 ) 20 0.0000045 2914 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x0000027c, "LocalizedResourceName", 0, MAXIMUM_ALLOWED, 0x00f2f244 ) ERROR_SUCCESS 0.0000117 2915 4:54:22.280 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000574, "@shell32.dll,-22022", NULL, 0x00f2f234, 0x00f2f520, 0x00f2f2c0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 2916 4:54:22.280 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000056 2917 4:54:22.280 AM 2 SHELL32.dll SHLoadIndirectString ( "@shell32.dll,-22022", 0x00f2f520, 260, NULL ) S_OK 0.0000413 2918 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000002c0, NULL, 0, MAXIMUM_ALLOWED, 0x00f2ef08 ) ERROR_SUCCESS 0.0000089 2919 4:54:22.280 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000574, "@shell32.dll,-22022", NULL, 0x00f2eef8, 0x00f2f520, 0x00f2ef80 ) ERROR_SUCCESS 0.0000075 2920 4:54:22.280 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000053 2921 4:54:22.280 AM 2 SHELL32.dll SHStrDupW ( "Command Prompt", 0x00f2fbd8 ) S_OK 0.0000047 2922 4:54:22.280 AM 2 Explorer.EXE StrRetToStrW ( 0x00f2fbd4, 0x0018aa88, 0x00f2fd04 ) S_OK 0.0000042 2923 4:54:22.280 AM 2 SHELL32.dll QISearch ( 0x021731d8, 0x7c8d7268, IShellIcon, 0x00f2fcd8 ) S_OK 0.0000045 2924 4:54:22.280 AM 2 SHELL32.dll PathFindExtensionW ( "Notepad.lnk" ) 0x02188c34 0.0000045 2925 4:54:22.280 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 2926 4:54:22.280 AM 2 SHELL32.dll AssocCreate ( Query file associations, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x00f2f5e0 ) S_OK 0.0000142 2927 4:54:22.280 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x00f2f5e0 ) S_OK 0.0000042 2928 4:54:22.280 AM 2 SHELL32.dll SHStrDupW ( ".lnk", 0x00170e24 ) S_OK 0.0000050 2929 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000001c8, ".lnk", 0, MAXIMUM_ALLOWED, 0x00f2f430 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2930 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000001c8, ".lnk", 0, MAXIMUM_ALLOWED, 0x00f2f430 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 2931 4:54:22.280 AM 2 SHELL32.dll AssocCreate ( {9016d0dd-7c41-46cc-a664-bf22f7cb186a}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f53c ) S_OK 0.0000050 2932 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".lnk", 0, MAXIMUM_ALLOWED, 0x000c5c0c ) ERROR_SUCCESS 0.0000184 2933 4:54:22.280 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000576, NULL, NULL, 0x00f2f3dc, 0x00f2f3e4, 0x00f2f3d8 ) ERROR_SUCCESS 0.0000198 2934 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "lnkfile", 0, MAXIMUM_ALLOWED, 0x00f2f46c ) ERROR_SUCCESS 0.0000176 2935 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x0000056e, "CurVer", 0, KEY_QUERY_VALUE, 0x00f2f41c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000182 2936 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x0000056e, NULL, 0, MAXIMUM_ALLOWED, 0x000c5b94 ) ERROR_SUCCESS 0.0000196 2937 4:54:22.280 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000056e ) ERROR_SUCCESS 0.0000059 2938 4:54:22.280 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, {3b877e3c-67de-4f9a-b29b-17d0a1521c6a}, 0x00f2f61c ) S_OK 0.0000042 2939 4:54:22.280 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000576 ) ERROR_SUCCESS 0.0000061 2940 4:54:22.280 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000792 ) ERROR_SUCCESS 0.0000053 2941 4:54:22.280 AM 2 SHELL32.dll StrCpyNW ( 0x00f2fb14, "Notepad.lnk", 188 ) 0x00f2fb14 0.0000042 2942 4:54:22.280 AM 2 SHELL32.dll PathFindFileNameW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Notepad.lnk" ) 0x00f2fb14 0.0000047 2943 4:54:22.280 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3f4, "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Notepad.lnk", 260 ) 0x00f2f3f4 0.0000047 2944 4:54:22.280 AM 2 SHELL32.dll StrCmpCW ( "c:\documents and settings\administrator\start menu\programs\accessories\notepad.lnk", "c:\documents and settings\administrator\start menu\programs\accessories\command prompt.lnk" ) 11 0.0000050 2945 4:54:22.280 AM 2 SHELL32.dll PathRemoveBackslashW ( "C:\Documents and Settings\Administrator\Recent" ) 0x00f2f35a 0.0000050 2946 4:54:22.280 AM 2 SHELL32.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Recent", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories", "༆粓쒲͡ò˳" ) 39 0.0000056 2947 4:54:22.280 AM 2 SHELL32.dll SHAnsiToUnicode ( "@shell32.dll,-22051", 0x00f2f2c8, 260 ) 20 0.0000045 2948 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x0000027c, "LocalizedResourceName", 0, MAXIMUM_ALLOWED, 0x00f2f244 ) ERROR_SUCCESS 0.0000120 2949 4:54:22.280 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000790, "@shell32.dll,-22051", NULL, 0x00f2f234, 0x00f2f520, 0x00f2f2c0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000056 2950 4:54:22.280 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000790 ) ERROR_SUCCESS 0.0000056 2951 4:54:22.280 AM 2 SHELL32.dll SHLoadIndirectString ( "@shell32.dll,-22051", 0x00f2f520, 260, NULL ) S_OK 0.0000419 2952 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000002c0, NULL, 0, MAXIMUM_ALLOWED, 0x00f2ef08 ) ERROR_SUCCESS 0.0000092 2953 4:54:22.280 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000790, "@shell32.dll,-22051", NULL, 0x00f2eef8, 0x00f2f520, 0x00f2ef80 ) ERROR_SUCCESS 0.0000075 2954 4:54:22.280 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000790 ) ERROR_SUCCESS 0.0000056 2955 4:54:22.280 AM 2 SHELL32.dll SHStrDupW ( "Notepad", 0x00f2fbd8 ) S_OK 0.0000045 2956 4:54:22.280 AM 2 Explorer.EXE StrRetToStrW ( 0x00f2fbd4, 0x02188bf8, 0x00f2fd04 ) S_OK 0.0000042 2957 4:54:22.280 AM 2 SHELL32.dll QISearch ( 0x02172e78, 0x7c8d7268, IShellIcon, 0x00f2fcd8 ) S_OK 0.0000045 2958 4:54:22.280 AM 2 SHELL32.dll PathFindExtensionW ( "API Monitor v2 (Alpha) 32-bit.lnk" ) 0x0219cd0a 0.0000045 2959 4:54:22.280 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 2960 4:54:22.280 AM 2 SHELL32.dll AssocCreate ( Query file associations, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x00f2f5e0 ) S_OK 0.0000142 2961 4:54:22.280 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x00f2f5e0 ) S_OK 0.0000042 2962 4:54:22.280 AM 2 SHELL32.dll SHStrDupW ( ".lnk", 0x00170e24 ) S_OK 0.0000047 2963 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000001c8, ".lnk", 0, MAXIMUM_ALLOWED, 0x00f2f430 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 2964 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000001c8, ".lnk", 0, MAXIMUM_ALLOWED, 0x00f2f430 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 2965 4:54:22.280 AM 2 SHELL32.dll AssocCreate ( {9016d0dd-7c41-46cc-a664-bf22f7cb186a}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f53c ) S_OK 0.0000050 2966 4:54:22.280 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".lnk", 0, MAXIMUM_ALLOWED, 0x000c5c0c ) ERROR_SUCCESS 0.0007923 2967 4:54:22.290 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000792, NULL, NULL, 0x00f2f3dc, 0x00f2f3e4, 0x00f2f3d8 ) ERROR_SUCCESS 0.0000173 2968 4:54:22.290 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "lnkfile", 0, MAXIMUM_ALLOWED, 0x00f2f46c ) ERROR_SUCCESS 0.0000162 2969 4:54:22.290 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000576, "CurVer", 0, KEY_QUERY_VALUE, 0x00f2f41c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 2970 4:54:22.290 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000576, NULL, 0, MAXIMUM_ALLOWED, 0x000c5abc ) ERROR_SUCCESS 0.0000302 2971 4:54:22.290 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000576 ) ERROR_SUCCESS 0.0000095 2972 4:54:22.290 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, {3b877e3c-67de-4f9a-b29b-17d0a1521c6a}, 0x00f2f61c ) S_OK 0.0000047 2973 4:54:22.290 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000792 ) ERROR_SUCCESS 0.0000067 2974 4:54:22.290 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000056e ) ERROR_SUCCESS 0.0000056 2975 4:54:22.290 AM 2 SHELL32.dll StrCpyNW ( 0x00f2fb2a, "API Monitor v2 (Alpha) 32-bit.lnk", 177 ) 0x00f2fb2a 0.0000042 2976 4:54:22.290 AM 2 SHELL32.dll PathFindFileNameW ( "C:\Documents and Settings\All Users\Start Menu\Programs\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk" ) 0x00f2fb2a 0.0000050 2977 4:54:22.290 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3f4, "C:\Documents and Settings\All Users\Start Menu\Programs\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", 260 ) 0x00f2f3f4 0.0000047 2978 4:54:22.290 AM 2 SHELL32.dll StrCmpCW ( "c:\documents and settings\all users\start menu\programs\rohitab.com\api monitor v2\api monitor v2 (alpha) 32-bit.lnk", "c:\documents and settings\administrator\start menu\programs\accessories\notepad.lnk" ) 8 0.0000042 2979 4:54:22.290 AM 2 SHELL32.dll PathRemoveBackslashW ( "C:\Documents and Settings\Administrator\Recent" ) 0x00f2f35a 0.0000053 2980 4:54:22.290 AM 2 SHELL32.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Recent", "C:\Documents and Settings\All Users\Start Menu\Programs\rohitab.com\API Monitor v2", "༆粓ͮò˳" ) 25 0.0000053 2981 4:54:22.290 AM 2 SHELL32.dll PathFindExtensionW ( "API Monitor v2 (Alpha) 32-bit.lnk" ) 0x0219cd0a 0.0000042 2982 4:54:22.290 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000045 2983 4:54:22.290 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f520, "API Monitor v2 (Alpha) 32-bit.lnk", 260 ) 0x00f2f520 0.0000045 2984 4:54:22.290 AM 2 SHELL32.dll PathRemoveExtensionW ( "API Monitor v2 (Alpha) 32-bit.lnk" ) 0.0000047 2985 4:54:22.290 AM 2 SHELL32.dll SHStrDupW ( "API Monitor v2 (Alpha) 32-bit", 0x00f2fbd8 ) S_OK 0.0000053 2986 4:54:22.290 AM 2 Explorer.EXE StrRetToStrW ( 0x00f2fbd4, 0x0219cca0, 0x00f2fd04 ) S_OK 0.0000042 2987 4:54:22.290 AM 2 SHELL32.dll QISearch ( 0x02172530, 0x7c8d7268, IShellIcon, 0x00f2fcd8 ) S_OK 0.0000045 2988 4:54:22.290 AM 2 SHELL32.dll PathFindExtensionW ( "Internet Explorer (No Add-ons).lnk" ) 0x00165b14 0.0000045 2989 4:54:22.290 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 2990 4:54:22.290 AM 2 SHELL32.dll AssocCreate ( Query file associations, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x00f2f5e0 ) S_OK 0.0000142 2991 4:54:22.290 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x00f2f5e0 ) S_OK 0.0000045 2992 4:54:22.290 AM 2 SHELL32.dll SHStrDupW ( ".lnk", 0x00170e24 ) S_OK 0.0000047 2993 4:54:22.290 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000001c8, ".lnk", 0, MAXIMUM_ALLOWED, 0x00f2f430 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 2994 4:54:22.290 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000001c8, ".lnk", 0, MAXIMUM_ALLOWED, 0x00f2f430 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 2995 4:54:22.290 AM 2 SHELL32.dll AssocCreate ( {9016d0dd-7c41-46cc-a664-bf22f7cb186a}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f53c ) S_OK 0.0000059 2996 4:54:22.290 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".lnk", 0, MAXIMUM_ALLOWED, 0x000c5abc ) ERROR_SUCCESS 0.0000193 2997 4:54:22.290 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000056e, NULL, NULL, 0x00f2f3dc, 0x00f2f3e4, 0x00f2f3d8 ) ERROR_SUCCESS 0.0000173 2998 4:54:22.290 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "lnkfile", 0, MAXIMUM_ALLOWED, 0x00f2f46c ) ERROR_SUCCESS 0.0000193 2999 4:54:22.290 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000792, "CurVer", 0, KEY_QUERY_VALUE, 0x00f2f41c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000235 3000 4:54:22.290 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000792, NULL, 0, MAXIMUM_ALLOWED, 0x000c5a44 ) ERROR_SUCCESS 0.0000201 3001 4:54:22.290 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000792 ) ERROR_SUCCESS 0.0000059 3002 4:54:22.290 AM 2 SHELL32.dll QISearch ( 0x00170e10, 0x7c92b550, {3b877e3c-67de-4f9a-b29b-17d0a1521c6a}, 0x00f2f61c ) S_OK 0.0000042 3003 4:54:22.290 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000056e ) ERROR_SUCCESS 0.0000061 3004 4:54:22.290 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000576 ) ERROR_SUCCESS 0.0000056 3005 4:54:22.290 AM 2 SHELL32.dll StrCpyNW ( 0x00f2fb2e, "Internet Explorer (No Add-ons).lnk", 175 ) 0x00f2fb2e 0.0000067 3006 4:54:22.290 AM 2 SHELL32.dll PathFindFileNameW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk" ) 0x00f2fb2e 0.0000095 3007 4:54:22.290 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3f4, "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", 260 ) 0x00f2f3f4 0.0000050 3008 4:54:22.290 AM 2 SHELL32.dll StrCmpCW ( "c:\documents and settings\administrator\start menu\programs\accessories\system tools\internet explorer (no add-ons).lnk", "c:\documents and settings\all users\start menu\programs\rohitab.com\api monitor v2\api monitor v2 (alpha) 32-bit.lnk" ) -8 0.0000045 3009 4:54:22.290 AM 2 SHELL32.dll PathRemoveBackslashW ( "C:\Documents and Settings\Administrator\Recent" ) 0x00f2f35a 0.0000050 3010 4:54:22.290 AM 2 SHELL32.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Recent", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\System Tools", "༆粓蒲̸ò˳" ) 39 0.0000056 3011 4:54:22.290 AM 2 SHELL32.dll PathFindExtensionW ( "Internet Explorer (No Add-ons).lnk" ) 0x00165b14 0.0000045 3012 4:54:22.290 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 3013 4:54:22.290 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f520, "Internet Explorer (No Add-ons).lnk", 260 ) 0x00f2f520 0.0000045 3014 4:54:22.290 AM 2 SHELL32.dll PathRemoveExtensionW ( "Internet Explorer (No Add-ons).lnk" ) 0.0000045 3015 4:54:22.290 AM 2 SHELL32.dll SHStrDupW ( "Internet Explorer (No Add-ons)", 0x00f2fbd8 ) S_OK 0.0000050 3016 4:54:22.290 AM 2 Explorer.EXE StrRetToStrW ( 0x00f2fbd4, 0x00165aa8, 0x00f2fd04 ) S_OK 0.0000042 3017 4:54:22.530 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fafc ) S_OK 0.0000050 3018 4:54:22.540 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fad0 ) S_OK 0.0000059 3019 4:54:22.540 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 3020 4:54:22.540 AM 4 SHELL32.dll QISearch ( 0x000ccd70, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000045 3021 4:54:22.540 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000047 3022 4:54:22.540 AM 4 SHELL32.dll QISearch ( 0x000ccc98, 0x7c8d7268, IShellFolder2, 0x0149fa50 ) S_OK 0.0000045 3023 4:54:22.540 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000042 3024 4:54:22.540 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa34 ) S_OK 0.0000045 3025 4:54:22.540 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Desktop" ) 2 0.0000067 3026 4:54:22.540 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa34 ) S_OK 0.0000042 3027 4:54:22.540 AM 4 SHELL32.dll StrCmpICW ( "Desktop", "Desktop" ) 0 0.0000045 3028 4:54:22.540 AM 4 SHELL32.dll SHUnlockShared ( 0x00920010 ) TRUE 0.0000120 3029 4:54:22.771 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007f030 ) ERROR_SUCCESS 0.0000131 3030 4:54:22.771 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000574, "REGDBVersion", NULL, NULL, 0x0007f0ac, 0x0007f02c ) ERROR_SUCCESS 0.0000061 3031 4:54:22.771 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000059 3032 4:54:22.771 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007f0d8 ) ERROR_SUCCESS 0.0000103 3033 4:54:22.771 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000574, "REGDBVersion", NULL, NULL, 0x0007f154, 0x0007f0d4 ) ERROR_SUCCESS 0.0000056 3034 4:54:22.771 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000056 3035 4:54:22.771 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{9BA05972-F6A8-11CF-A442-00A0C90A8F39}", 0, KEY_READ, 0x0007f2d4 ) ERROR_SUCCESS 0.0000184 3036 4:54:22.771 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x0218aa58 ) ERROR_SUCCESS 0.0000190 3037 4:54:22.771 AM 3 ole32.dll RegCloseKey ( 0x00000576 ) ERROR_SUCCESS 0.0000095 3038 4:54:22.771 AM 3 ole32.dll RegOpenKeyExW ( 0x0000056e, "CLSID\{9BA05972-F6A8-11CF-A442-00A0C90A8F39}", 0, KEY_READ, 0x0007f3a0 ) ERROR_SUCCESS 0.0000327 3039 4:54:22.771 AM 3 ole32.dll RegOpenKeyExW ( 0x00000576, "InprocServer32", 0, KEY_READ, 0x0007f33c ) ERROR_SUCCESS 0.0000251 3040 4:54:22.771 AM 3 ole32.dll RegQueryValueExW ( 0x00000792, "InprocServer32", NULL, 0x0007f348, 0x02194ca0, 0x0007f330 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000430 3041 4:54:22.771 AM 3 ole32.dll RegCloseKey ( 0x00000792 ) ERROR_SUCCESS 0.0000064 3042 4:54:22.771 AM 3 ole32.dll RegOpenKeyExW ( 0x00000576, "LocalServer32", 0, KEY_READ, 0x0007f35c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000229 3043 4:54:22.771 AM 3 ole32.dll RegOpenKeyExW ( 0x00000576, "InprocServer32", 0, KEY_READ, 0x0007f35c ) ERROR_SUCCESS 0.0000327 3044 4:54:22.771 AM 3 ole32.dll RegQueryValueExW ( 0x00000792, NULL, NULL, 0x0007f368, 0x02194ca0, 0x0007f350 ) ERROR_SUCCESS 0.0000271 3045 4:54:22.771 AM 3 ole32.dll RegCloseKey ( 0x00000792 ) ERROR_SUCCESS 0.0000089 3046 4:54:22.771 AM 3 ole32.dll RegOpenKeyExW ( 0x00000576, "InprocHandler32", 0, KEY_READ, 0x0007f35c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000257 3047 4:54:22.771 AM 3 ole32.dll RegOpenKeyExW ( 0x00000576, "LocalServer32", 0, KEY_READ, 0x0007f35c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 3048 4:54:22.771 AM 3 ole32.dll RegOpenKeyExW ( 0x00000576, "LocalServer", 0, KEY_READ, 0x0007f35c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000235 3049 4:54:22.771 AM 3 ole32.dll RegOpenKeyExW ( 0x0000056e, "CLSID\{9BA05972-F6A8-11CF-A442-00A0C90A8F39}", 0, KEY_READ, 0x0007f300 ) ERROR_SUCCESS 0.0000268 3050 4:54:22.771 AM 3 ole32.dll RegQueryValueExW ( 0x00000792, "AppID", NULL, 0x0007f2d4, 0x0007f304, 0x0007f2c4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000210 3051 4:54:22.771 AM 3 ole32.dll RegCloseKey ( 0x00000792 ) ERROR_SUCCESS 0.0000151 3052 4:54:22.771 AM 3 ole32.dll RegCloseKey ( 0x00000576 ) ERROR_SUCCESS 0.0000081 3053 4:54:22.771 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IClassFactory, 0x0007f5a8 ) S_OK 0.0000059 3054 4:54:22.771 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IMarshal, 0x0007f39c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 3055 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, {0000001b-0000-0000-c000-000000000046}, 0x0007f37c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000059 3056 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IUnknown, 0x0007f330 ) S_OK 0.0000056 3057 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IStdMarshalInfo, 0x0007f290 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000059 3058 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IExternalConnection, 0x0218abe0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000056 3059 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, {4c1e39e1-e3e3-4296-aa86-ec938d896e92}, 0x0007f298 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000059 3060 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IClassFactory, 0x0007f1d4 ) S_OK 0.0000059 3061 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IClassFactory, 0x0217c6a0 ) S_OK 0.0000056 3062 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IClassFactory, 0x0007f1dc ) S_OK 0.0000059 3063 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, ICallFactory, 0x0007fa70 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000059 3064 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IShellWindows, 0x0218d598 ) S_OK 0.0000061 3065 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IMarshal, 0x0007f53c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000059 3066 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IMarshal, 0x0007f508 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000059 3067 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, {0000001b-0000-0000-c000-000000000046}, 0x0007f4e8 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000056 3068 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IUnknown, 0x0007f49c ) S_OK 0.0000059 3069 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IStdMarshalInfo, 0x0007f3fc ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000059 3070 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IExternalConnection, 0x0218acc8 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000059 3071 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, {4c1e39e1-e3e3-4296-aa86-ec938d896e92}, 0x0007f404 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000056 3072 4:54:22.781 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IShellWindows, 0x0007f340 ) S_OK 0.0000056 3073 4:54:22.781 AM 3 ole32.dll RegOpenUserClassesRoot ( 0x00000754, 0, MAXIMUM_ALLOWED, 0x0007ef8c ) ERROR_SUCCESS 0.0000240 3074 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000786, "Interface\{85CB6900-4D95-11CF-960C-0080C7F4EE85}", 0, KEY_READ, 0x0007f1d4 ) ERROR_SUCCESS 0.0000489 3075 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000786 ) ERROR_SUCCESS 0.0000084 3076 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "ProxyStubClsid32", 0, KEY_READ, 0x0007f1e0 ) ERROR_SUCCESS 0.0000411 3077 4:54:22.781 AM 3 ole32.dll RegQueryValueExW ( 0x00000786, NULL, NULL, 0x0007f1c8, 0x0007f1f4, 0x0007f1d0 ) ERROR_SUCCESS 0.0000305 3078 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000786 ) ERROR_SUCCESS 0.0000084 3079 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000075 3080 4:54:22.781 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007ed00 ) ERROR_SUCCESS 0.0000156 3081 4:54:22.781 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000754, "REGDBVersion", NULL, NULL, 0x0007ed7c, 0x0007ecfc ) ERROR_SUCCESS 0.0000095 3082 4:54:22.781 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000078 3083 4:54:22.781 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007eda8 ) ERROR_SUCCESS 0.0000137 3084 4:54:22.781 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000754, "REGDBVersion", NULL, NULL, 0x0007ee24, 0x0007eda4 ) ERROR_SUCCESS 0.0000078 3085 4:54:22.781 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000078 3086 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{00020424-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007efa4 ) ERROR_SUCCESS 0.0000249 3087 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x0218ad10 ) ERROR_SUCCESS 0.0000162 3088 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000075 3089 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000786, "CLSID\{00020424-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f070 ) ERROR_SUCCESS 0.0000226 3090 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "InprocServer32", 0, KEY_READ, 0x0007f00c ) ERROR_SUCCESS 0.0000302 3091 4:54:22.781 AM 3 ole32.dll RegQueryValueExW ( 0x00000196, "InprocServer32", NULL, 0x0007f018, 0x02194ca0, 0x0007f000 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000260 3092 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000078 3093 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "LocalServer32", 0, KEY_READ, 0x0007f02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000285 3094 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "InprocServer32", 0, KEY_READ, 0x0007f02c ) ERROR_SUCCESS 0.0000285 3095 4:54:22.781 AM 3 ole32.dll RegQueryValueExW ( 0x00000196, NULL, NULL, 0x0007f038, 0x02194ca0, 0x0007f020 ) ERROR_SUCCESS 0.0000251 3096 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000078 3097 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "InprocHandler32", 0, KEY_READ, 0x0007f02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000274 3098 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "LocalServer32", 0, KEY_READ, 0x0007f02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000265 3099 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "LocalServer", 0, KEY_READ, 0x0007f02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000265 3100 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000786, "CLSID\{00020424-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007efd0 ) ERROR_SUCCESS 0.0000232 3101 4:54:22.781 AM 3 ole32.dll RegQueryValueExW ( 0x00000196, "AppID", NULL, 0x0007efa4, 0x0007efd4, 0x0007ef94 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000240 3102 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000078 3103 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000075 3104 4:54:22.781 AM 3 ole32.dll RegNotifyChangeKeyValue ( 0x000000e8, TRUE, REG_NOTIFY_CHANGE_LAST_SET | REG_NOTIFY_CHANGE_NAME, 0x000000ec, TRUE ) ERROR_SUCCESS 0.0000134 3105 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x0000064a ) ERROR_SUCCESS 0.0000084 3106 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000286 ) ERROR_SUCCESS 0.0000089 3107 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x0000075e ) ERROR_SUCCESS 0.0000081 3108 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x0000056e ) ERROR_SUCCESS 0.0000075 3109 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000078 3110 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x000005c6 ) ERROR_SUCCESS 0.0000078 3111 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000786 ) ERROR_SUCCESS 0.0000075 3112 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x000006ae ) ERROR_SUCCESS 0.0000078 3113 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000776 ) ERROR_SUCCESS 0.0000078 3114 4:54:22.781 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007ecac ) ERROR_SUCCESS 0.0000142 3115 4:54:22.781 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000774, "REGDBVersion", NULL, NULL, 0x0007ed28, 0x0007eca8 ) ERROR_SUCCESS 0.0000084 3116 4:54:22.781 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000774 ) ERROR_SUCCESS 0.0000075 3117 4:54:22.781 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007ed54 ) ERROR_SUCCESS 0.0000134 3118 4:54:22.781 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000774, "REGDBVersion", NULL, NULL, 0x0007edd0, 0x0007ed50 ) ERROR_SUCCESS 0.0000078 3119 4:54:22.781 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000774 ) ERROR_SUCCESS 0.0000073 3120 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{00020424-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007ef50 ) ERROR_SUCCESS 0.0000237 3121 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x0218a7a0 ) ERROR_SUCCESS 0.0000162 3122 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000776 ) ERROR_SUCCESS 0.0000075 3123 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x000006ae, "CLSID\{00020424-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f01c ) ERROR_SUCCESS 0.0000237 3124 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000776, "InprocServer32", 0, KEY_READ, 0x0007efb8 ) ERROR_SUCCESS 0.0000285 3125 4:54:22.781 AM 3 ole32.dll RegQueryValueExW ( 0x00000786, "InprocServer32", NULL, 0x0007efc4, 0x02194ca0, 0x0007efac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000249 3126 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000786 ) ERROR_SUCCESS 0.0000075 3127 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000776, "LocalServer32", 0, KEY_READ, 0x0007efd8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000265 3128 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000776, "InprocServer32", 0, KEY_READ, 0x0007efd8 ) ERROR_SUCCESS 0.0000293 3129 4:54:22.781 AM 3 ole32.dll RegQueryValueExW ( 0x00000786, NULL, NULL, 0x0007efe4, 0x02194ca0, 0x0007efcc ) ERROR_SUCCESS 0.0000257 3130 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000786 ) ERROR_SUCCESS 0.0000075 3131 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000776, "InprocHandler32", 0, KEY_READ, 0x0007efd8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000265 3132 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000776, "LocalServer32", 0, KEY_READ, 0x0007efd8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000265 3133 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000776, "LocalServer", 0, KEY_READ, 0x0007efd8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000260 3134 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x000006ae, "CLSID\{00020424-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007ef7c ) ERROR_SUCCESS 0.0000229 3135 4:54:22.781 AM 3 ole32.dll RegQueryValueExW ( 0x00000786, "AppID", NULL, 0x0007ef50, 0x0007ef80, 0x0007ef40 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000235 3136 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000786 ) ERROR_SUCCESS 0.0000084 3137 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000776 ) ERROR_SUCCESS 0.0000075 3138 4:54:22.781 AM 3 ole32.dll RegOpenUserClassesRoot ( 0x00000774, 0, MAXIMUM_ALLOWED, 0x0007ec9c ) ERROR_SUCCESS 0.0000190 3139 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000786, "CLSID\{00020424-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007eee8 ) ERROR_SUCCESS 0.0000235 3140 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000786 ) ERROR_SUCCESS 0.0000078 3141 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000776 ) ERROR_SUCCESS 0.0000075 3142 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x000006ae, "CLSID\{00020424-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007ec64 ) ERROR_SUCCESS 0.0000226 3143 4:54:22.781 AM 3 ole32.dll RegOpenKeyExW ( 0x00000776, "InprocServer32", 0, KEY_READ, 0x0007ec24 ) ERROR_SUCCESS 0.0000282 3144 4:54:22.781 AM 3 ole32.dll RegQueryValueExW ( 0x00000786, "ThreadingModel", NULL, 0x0007ec30, 0x0007ec68, 0x0007ec20 ) ERROR_SUCCESS 0.0000277 3145 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000786 ) ERROR_SUCCESS 0.0000081 3146 4:54:22.781 AM 3 ole32.dll RegCloseKey ( 0x00000776 ) ERROR_SUCCESS 0.0000075 3147 4:54:22.791 AM 3 SXS.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "System\Setup", 0, KEY_READ | KEY_WOW64_64KEY, 0x75e47138 ) ERROR_SUCCESS 0.0000249 3148 4:54:22.811 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IClassFactory, 0x0007f558 ) S_OK 0.0000084 3149 4:54:22.821 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, ICallFactory, 0x0007fa70 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000056 3150 4:54:22.821 AM 3 OLEAUT32.dll RegQueryValueExA ( 0x00000776, "Version", NULL, NULL, 0x0007f674, 0x0007f630 ) ERROR_SUCCESS 0.0000338 3151 4:54:22.821 AM 3 OLEAUT32.dll RegCloseKey ( 0x00000776 ) ERROR_SUCCESS 0.0000070 3152 4:54:22.821 AM 3 OLEAUT32.dll RegCloseKey ( 0x0000056e ) ERROR_SUCCESS 0.0000098 3153 4:54:22.821 AM 3 OLEAUT32.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000081 3154 4:54:22.821 AM 3 OLEAUT32.dll RegCloseKey ( 0x000005c6 ) ERROR_SUCCESS 0.0000084 3155 4:54:22.821 AM 3 OLEAUT32.dll RegCloseKey ( 0x00000776 ) ERROR_SUCCESS 0.0000073 3156 4:54:22.821 AM 3 OLEAUT32.dll RegCloseKey ( 0x0000064a ) ERROR_SUCCESS 0.0000115 3157 4:54:22.821 AM 3 OLEAUT32.dll RegCloseKey ( 0x0000056e ) ERROR_SUCCESS 0.0000134 3158 4:54:22.821 AM 3 OLEAUT32.dll RegCloseKey ( 0x0000056e ) ERROR_SUCCESS 0.0000112 3159 4:54:22.821 AM 3 OLEAUT32.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000078 3160 4:54:22.821 AM 3 OLEAUT32.dll RegCloseKey ( 0x000005c6 ) ERROR_SUCCESS 0.0000075 3161 4:54:22.821 AM 3 OLEAUT32.dll RegCloseKey ( 0x00000776 ) ERROR_SUCCESS 0.0000075 3162 4:54:22.821 AM 3 RPCRT4.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Rpc", 0, KEY_READ, 0x0007f988 ) ERROR_SUCCESS 0.0000179 3163 4:54:22.821 AM 3 RPCRT4.dll RegQueryValueExW ( 0x00000774, "UDTAlignmentPolicy", NULL, 0x0007f980, 0x77ce830c, 0x0007f984 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 3164 4:54:22.821 AM 3 RPCRT4.dll RegCloseKey ( 0x00000774 ) ERROR_SUCCESS 0.0000073 3165 4:54:22.821 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IShellWindows, 0x001237f8 ) S_OK 0.0000070 3166 4:54:22.821 AM 3 ole32.dll RegOpenUserClassesRoot ( 0x00000774, 0, MAXIMUM_ALLOWED, 0x0007f6b8 ) ERROR_SUCCESS 0.0000232 3167 4:54:22.821 AM 3 ole32.dll RegOpenKeyExW ( 0x000005c6, "Interface\{00020400-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f900 ) ERROR_SUCCESS 0.0007805 3168 4:54:22.831 AM 3 ole32.dll RegCloseKey ( 0x000005c6 ) ERROR_SUCCESS 0.0000081 3169 4:54:22.831 AM 3 ole32.dll RegOpenKeyExW ( 0x00000776, "ProxyStubClsid32", 0, KEY_READ, 0x0007f90c ) ERROR_SUCCESS 0.0000341 3170 4:54:22.831 AM 3 ole32.dll RegQueryValueExW ( 0x000005c6, NULL, NULL, 0x0007f8f4, 0x0007f920, 0x0007f8fc ) ERROR_SUCCESS 0.0000260 3171 4:54:22.831 AM 3 ole32.dll RegCloseKey ( 0x000005c6 ) ERROR_SUCCESS 0.0000075 3172 4:54:22.831 AM 3 ole32.dll RegCloseKey ( 0x00000776 ) ERROR_SUCCESS 0.0000073 3173 4:54:22.831 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007f3f8 ) ERROR_SUCCESS 0.0000154 3174 4:54:22.831 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000774, "REGDBVersion", NULL, NULL, 0x0007f474, 0x0007f3f4 ) ERROR_SUCCESS 0.0000095 3175 4:54:22.831 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000774 ) ERROR_SUCCESS 0.0000075 3176 4:54:22.831 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007f4a0 ) ERROR_SUCCESS 0.0000235 3177 4:54:22.831 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000774, "REGDBVersion", NULL, NULL, 0x0007f51c, 0x0007f49c ) ERROR_SUCCESS 0.0000078 3178 4:54:22.831 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000774 ) ERROR_SUCCESS 0.0000073 3179 4:54:22.831 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{00020420-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f69c ) ERROR_SUCCESS 0.0000260 3180 4:54:22.831 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x0218ab40 ) ERROR_SUCCESS 0.0000154 3181 4:54:22.831 AM 3 ole32.dll RegCloseKey ( 0x00000776 ) ERROR_SUCCESS 0.0000078 3182 4:54:22.831 AM 3 ole32.dll RegOpenKeyExW ( 0x000005c6, "CLSID\{00020420-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f768 ) ERROR_SUCCESS 0.0000249 3183 4:54:22.831 AM 3 ole32.dll RegOpenKeyExW ( 0x00000776, "InprocServer32", 0, KEY_READ, 0x0007f704 ) ERROR_SUCCESS 0.0000296 3184 4:54:22.831 AM 3 ole32.dll RegQueryValueExW ( 0x00000322, "InprocServer32", NULL, 0x0007f710, 0x02194ca0, 0x0007f6f8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000249 3185 4:54:22.831 AM 3 ole32.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000078 3186 4:54:22.831 AM 3 ole32.dll RegOpenKeyExW ( 0x00000776, "LocalServer32", 0, KEY_READ, 0x0007f724 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000263 3187 4:54:22.831 AM 3 ole32.dll RegOpenKeyExW ( 0x00000776, "InprocServer32", 0, KEY_READ, 0x0007f724 ) ERROR_SUCCESS 0.0000324 3188 4:54:22.831 AM 3 ole32.dll RegQueryValueExW ( 0x00000322, NULL, NULL, 0x0007f730, 0x02194ca0, 0x0007f718 ) ERROR_SUCCESS 0.0000249 3189 4:54:22.831 AM 3 ole32.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000073 3190 4:54:22.831 AM 3 ole32.dll RegOpenKeyExW ( 0x00000776, "InprocHandler32", 0, KEY_READ, 0x0007f724 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000257 3191 4:54:22.831 AM 3 ole32.dll RegOpenKeyExW ( 0x00000776, "LocalServer32", 0, KEY_READ, 0x0007f724 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000257 3192 4:54:22.831 AM 3 ole32.dll RegOpenKeyExW ( 0x00000776, "LocalServer", 0, KEY_READ, 0x0007f724 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000260 3193 4:54:22.831 AM 3 ole32.dll RegOpenKeyExW ( 0x000005c6, "CLSID\{00020420-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f6c8 ) ERROR_SUCCESS 0.0000226 3194 4:54:22.831 AM 3 ole32.dll RegQueryValueExW ( 0x00000322, "AppID", NULL, 0x0007f69c, 0x0007f6cc, 0x0007f68c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000235 3195 4:54:22.831 AM 3 ole32.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000084 3196 4:54:22.831 AM 3 ole32.dll RegCloseKey ( 0x00000776 ) ERROR_SUCCESS 0.0000075 3197 4:54:22.831 AM 3 ole32.dll RegOpenUserClassesRoot ( 0x00000774, 0, MAXIMUM_ALLOWED, 0x0007f394 ) ERROR_SUCCESS 0.0000184 3198 4:54:22.831 AM 3 ole32.dll RegOpenKeyExW ( 0x00000322, "CLSID\{00020420-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f5e0 ) ERROR_SUCCESS 0.0000229 3199 4:54:22.831 AM 3 ole32.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000078 3200 4:54:22.831 AM 3 ole32.dll RegCloseKey ( 0x00000776 ) ERROR_SUCCESS 0.0000075 3201 4:54:22.831 AM 3 ole32.dll RegOpenKeyExW ( 0x000005c6, "CLSID\{00020420-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f35c ) ERROR_SUCCESS 0.0000221 3202 4:54:22.831 AM 3 ole32.dll RegOpenKeyExW ( 0x00000776, "InprocServer32", 0, KEY_READ, 0x0007f31c ) ERROR_SUCCESS 0.0000279 3203 4:54:22.831 AM 3 ole32.dll RegQueryValueExW ( 0x00000322, "ThreadingModel", NULL, 0x0007f328, 0x0007f360, 0x0007f318 ) ERROR_SUCCESS 0.0000243 3204 4:54:22.831 AM 3 ole32.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000075 3205 4:54:22.831 AM 3 ole32.dll RegCloseKey ( 0x00000776 ) ERROR_SUCCESS 0.0000075 3206 4:54:22.861 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000087 3207 4:54:22.861 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000064 3208 4:54:22.861 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000059 3209 4:54:22.861 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x00f2f704 ) S_OK 0.0002436 3210 4:54:22.861 AM 2 SHELL32.dll QISearch ( 0x001702d0, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000045 3211 4:54:22.861 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000095 3212 4:54:22.861 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\IEXPLORE.EXE", 0, MAXIMUM_ALLOWED, 0x000c5abc ) ERROR_SUCCESS 0.0000724 3213 4:54:22.861 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000286, NULL, 0, MAXIMUM_ALLOWED, 0x00f2f544 ) ERROR_SUCCESS 0.0000919 3214 4:54:22.861 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000286 ) ERROR_SUCCESS 0.0000073 3215 4:54:22.861 AM 2 Explorer.EXE RegOpenKeyExW ( 0x0000075e, "TaskbarExceptionsIcons", 0, KEY_READ, 0x00f2f71c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000218 3216 4:54:22.861 AM 2 Explorer.EXE RegCloseKey ( 0x0000075e ) ERROR_SUCCESS 0.0000064 3217 4:54:23.091 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb44 ) S_OK 0.0000056 3218 4:54:23.091 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb18 ) S_OK 0.0000042 3219 4:54:23.091 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000045 3220 4:54:23.091 AM 4 SHELL32.dll QISearch ( 0x000c1cb0, 0x7c8d7268, IShellFolder2, 0x0149faac ) S_OK 0.0000045 3221 4:54:23.091 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000047 3222 4:54:23.091 AM 4 SHELL32.dll QISearch ( 0x000c6fd0, 0x7c8d7268, IShellFolder2, 0x0149fa98 ) S_OK 0.0000045 3223 4:54:23.091 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000087 3224 4:54:23.091 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000042 3225 4:54:23.091 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Favorites" ) 0 0.0000045 3226 4:54:23.091 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb3c ) S_OK 0.0000045 3227 4:54:23.091 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb10 ) S_OK 0.0000045 3228 4:54:23.091 AM 4 SHELL32.dll StrCmpICA ( "Z:\", "C:\" ) 23 0.0000042 3229 4:54:23.091 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb10 ) S_OK 0.0000042 3230 4:54:23.091 AM 4 SHELL32.dll SHUnlockShared ( 0x01580010 ) TRUE 0.0000078