# Time of Day Thread Module API Return Value Error Duration 1 12:49:09.892 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000075 2 12:49:09.892 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000056 3 12:49:10.944 AM 2 SHELL32.dll IsOS ( 33 ) FALSE 0.0000067 4 12:49:10.954 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000050 5 12:49:10.954 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000042 6 12:49:10.954 AM 2 MSCTF.dll OpenProcess ( STANDARD_RIGHTS_ALL | PROCESS_CREATE_PROCESS | PROCESS_CREATE_THREAD | PROCESS_DUP_HANDLE | PROCESS_QUERY_INFORMATION | PROCESS_SET_INFORMATION | PROCESS_SET_QUOTA | PROCESS_SET_SESSIONID | PROCESS_SUSPEND_RESUME | PROCESS_TERMINATE | PROCESS_VM_OPERATION | P, FALSE, 1872 ) 0x00000538 0.0000095 7 12:49:10.954 AM 2 MSCTF.dll GetCurrentProcess ( ) GetCurrentProcess() 0.0000045 8 12:49:10.954 AM 2 MSCTF.dll GetCurrentProcess ( ) GetCurrentProcess() 0.0000045 9 12:49:10.954 AM 2 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000042 10 12:49:10.954 AM 2 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000061 11 12:49:10.954 AM 2 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000059 12 12:49:10.954 AM 2 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000067 13 12:49:10.954 AM 2 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000064 14 12:49:10.954 AM 2 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000064 15 12:49:12.916 AM 2 SHELL32.dll PathRemoveBlanksW ( "hello" ) 0.0000103 16 12:49:12.916 AM 2 SHELL32.dll StrCpyNW ( 0x0214db50, "hello", 2084 ) 0x0214db50 0.0000045 17 12:49:12.916 AM 2 SHELL32.dll PathRemoveArgsW ( "hello" ) 0.0000059 18 12:49:12.916 AM 2 SHELL32.dll PathUnquoteSpacesW ( "hello" ) 0.0000047 19 12:49:12.916 AM 2 SHELL32.dll PathGetDriveNumberW ( "hello" ) -1 0.0000042 20 12:49:12.926 AM 3 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000047 21 12:49:12.926 AM 3 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000042 22 12:49:12.926 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000050 23 12:49:12.926 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000042 24 12:49:12.926 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000047 25 12:49:12.926 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000045 26 12:49:12.926 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000045 27 12:49:12.926 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000042 28 12:49:12.926 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000042 29 12:49:12.926 AM 3 MSCTF.dll OpenProcess ( STANDARD_RIGHTS_ALL | PROCESS_CREATE_PROCESS | PROCESS_CREATE_THREAD | PROCESS_DUP_HANDLE | PROCESS_QUERY_INFORMATION | PROCESS_SET_INFORMATION | PROCESS_SET_QUOTA | PROCESS_SET_SESSIONID | PROCESS_SUSPEND_RESUME | PROCESS_TERMINATE | PROCESS_VM_OPERATION | P, FALSE, 1872 ) 0x0000074c 0.0000098 30 12:49:12.926 AM 3 MSCTF.dll GetCurrentProcess ( ) GetCurrentProcess() 0.0000042 31 12:49:12.926 AM 2 SHELL32.dll IsOS ( 33 ) FALSE 0.0000056 32 12:49:12.926 AM 1 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2fc64 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000050 33 12:49:12.926 AM 1 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 34 12:49:12.926 AM 1 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) S_OK 0.0000045 35 12:49:12.926 AM 1 Explorer.EXE SHIsChildOrSelf ( 0x0001005e, 0x000700f4 ) S_FALSE 0.0000047 36 12:49:12.926 AM 2 SHELL32.dll UrlIsW ( "hello", URLIS_URL ) FALSE 0.0000059 37 12:49:12.926 AM 2 SHELL32.dll StrChrW ( "hello", ' ' ) NULL 0.0000042 38 12:49:12.926 AM 2 SHELL32.dll PathUnquoteSpacesW ( "hello" ) 0.0000045 39 12:49:12.926 AM 2 SHELL32.dll UrlIsW ( "hello", URLIS_URL ) FALSE 0.0000045 40 12:49:12.926 AM 2 SHELL32.dll StrChrW ( "hello", '\' ) NULL 0.0000042 41 12:49:12.926 AM 2 SHELL32.dll StrChrW ( "hello", ':' ) NULL 0.0000042 42 12:49:12.926 AM 2 SHELL32.dll SHRegGetBoolUSValueW ( "Software\Microsoft\Windows\CurrentVersion\Explorer", "MaximizeApps", FALSE, FALSE ) FALSE 0.0000411 43 12:49:12.926 AM 2 SHELL32.dll GetCurrentProcessId ( ) 1780 0.0000042 44 12:49:12.926 AM 2 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000042 45 12:49:12.926 AM 1 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2fc64 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000050 46 12:49:12.926 AM 1 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 47 12:49:12.926 AM 1 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) S_OK 0.0000045 48 12:49:12.926 AM 2 SHELL32.dll IsOS ( 28 ) FALSE 0.0000053 49 12:49:12.926 AM 2 SHELL32.dll StrCpyNW ( 0x027729dc, "C:\Documents and Settings\Administrator", 260 ) 0x027729dc 0.0000221 50 12:49:12.926 AM 2 SHELL32.dll PathIsDirectoryW ( "C:\Documents and Settings\Administrator" ) TRUE 0.0000282 51 12:49:12.926 AM 2 SHLWAPI.dll GetFileAttributesW ( "C:\Documents and Settings\Administrator" ) FILE_ATTRIBUTE_DIRECTORY 0.0000193 52 12:49:12.926 AM 2 SHELL32.dll StrCmpICW ( "C:\Documents and Settings\Administrator", ".\" ) 53 0.0000042 53 12:49:12.926 AM 2 SHELL32.dll UrlIsW ( "hello", URLIS_URL ) FALSE 0.0000045 54 12:49:12.926 AM 2 SHELL32.dll StrCpyNW ( 0x02771994, "hello", 2084 ) 0x02771994 0.0000042 55 12:49:12.926 AM 2 SHELL32.dll PathUnquoteSpacesW ( "hello" ) 0.0000042 56 12:49:12.926 AM 2 SHELL32.dll PathIsRootW ( "hello" ) FALSE 0.0000047 57 12:49:12.926 AM 2 SHLWAPI.dll FindFirstFileW ( "hello.*", 0x0214e1e4 ) INVALID_HANDLE_VALUE 2 = The system cannot find the file specified. 0.0000386 58 12:49:12.926 AM 2 SHELL32.dll StrDupW ( "hello" ) 0x0015e5c8 0.0000045 59 12:49:12.926 AM 2 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0214e6b4 ) S_OK 0.0000045 60 12:49:12.926 AM 2 SHELL32.dll PathIsUNCW ( "hello" ) FALSE 0.0000042 61 12:49:12.926 AM 2 SHELL32.dll UrlIsW ( "hello", URLIS_URL ) FALSE 0.0000047 62 12:49:12.926 AM 2 SHELL32.dll SHGetValueW ( 0x000005d8, NULL, "SuppressionPolicy", NULL, 0x0214e554, 0x0214e548 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 63 12:49:12.926 AM 2 SHELL32.dll GUIDFromStringW ( "{11016101-E366-4D22-BC06-4ADA335C892B}", {00140008-23ff-77e6-0000-000040f21502} ) TRUE 0.0000059 64 12:49:12.926 AM 2 SHELL32.dll SHGetValueW ( 0x000005d8, NULL, "SuppressionPolicy", NULL, 0x0214e554, 0x0214e548 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 65 12:49:12.926 AM 2 SHELL32.dll GUIDFromStringW ( "{1f4de370-d627-11d1-ba4f-00a0c91eedba}", IE History and Feeds Shell Data Source for Windows Search ) TRUE 0.0000056 66 12:49:12.926 AM 2 SHELL32.dll SHGetValueW ( 0x000005d8, NULL, "SuppressionPolicy", NULL, 0x0214e554, 0x0214e548 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 67 12:49:12.926 AM 2 SHELL32.dll GUIDFromStringW ( "{450D8FBA-AD25-11D0-98A8-0800361B1103}", Computer Search Results Folder ) TRUE 0.0000053 68 12:49:12.926 AM 2 SHELL32.dll SHGetValueW ( 0x000005d8, NULL, "SuppressionPolicy", NULL, 0x0214e554, 0x0214e548 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 69 12:49:12.926 AM 2 SHELL32.dll GUIDFromStringW ( "{645FF040-5081-101B-9F08-00AA002F954E}", {450d8fba-ad25-11d0-98a8-0800361b1103} ) TRUE 0.0000053 70 12:49:12.926 AM 2 SHELL32.dll SHGetValueW ( 0x000005d8, NULL, "SuppressionPolicy", NULL, 0x0214e554, 0x0214e548 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 71 12:49:12.926 AM 2 SHELL32.dll GUIDFromStringW ( "{e17d4fc0-5564-11d1-83f2-00a0c90dc849}", Recycle Bin ) TRUE 0.0000053 72 12:49:12.926 AM 2 SHELL32.dll SHSkipJunction ( 0x001676c0, My Computer ) FALSE 0.0000059 73 12:49:12.926 AM 2 SHELL32.dll SHQueryValueExW ( 0x000005da, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000237 74 12:49:12.926 AM 2 SHELL32.dll SHSkipJunction ( 0x001676c0, My Network Places ) FALSE 0.0000047 75 12:49:12.926 AM 2 SHELL32.dll SHQueryValueExW ( 0x000005da, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000210 76 12:49:12.926 AM 2 SHELL32.dll SHSkipJunction ( 0x001676c0, {871c5380-42a0-1069-a2ea-08002b30309d} ) FALSE 0.0000047 77 12:49:12.926 AM 2 SHELL32.dll SHQueryValueExW ( 0x000005da, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000201 78 12:49:12.926 AM 2 SHELL32.dll StrCpyNW ( 0x0214e434, "{871C5380-42A0-1069-A2EA-08002B30309D}", 103 ) 0x0214e434 0.0000045 79 12:49:12.926 AM 2 SHELL32.dll StrCpyNW ( 0x0214df80, "CLSID\", 167 ) 0x0214df80 0.0000042 80 12:49:12.926 AM 2 SHELL32.dll StrCatBuffW ( "CLSID\", "{871C5380-42A0-1069-A2EA-08002B30309D}", 167 ) 0x0214df80 0.0000045 81 12:49:12.926 AM 2 SHELL32.dll StrCatBuffW ( "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", "\InProcServer32", 167 ) 0x0214df80 0.0000045 82 12:49:12.926 AM 2 SHELL32.dll SHQueryValueExW ( 0x000005da, NULL, NULL, NULL, 0x0214e22c, 0x0214df74 ) ERROR_SUCCESS 0.0000229 83 12:49:12.926 AM 2 SHELL32.dll SHQueryValueExW ( 0x000005da, "LoadWithoutCOM", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000221 84 12:49:12.926 AM 2 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\system32\ieframe.dll" ) 0x0214e254 0.0000047 85 12:49:12.926 AM 2 SHELL32.dll SHQueryValueExW ( 0x00000340, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 86 12:49:12.926 AM 2 SHELL32.dll SHQueryValueExW ( 0x00000328, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 87 12:49:12.926 AM 2 ieframe.dll ILGetSize ( 0x0215f560 ) 22 0.0000045 88 12:49:12.926 AM 2 urlmon.dll PathIsUNCW ( "hello" ) FALSE 0.0000045 89 12:49:12.926 AM 2 SHELL32.dll SHSkipJunction ( 0x001676c0, IE History and Feeds Shell Data Source for Windows Search ) FALSE 0.0000053 90 12:49:12.926 AM 2 SHELL32.dll SHQueryValueExW ( 0x000005da, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000204 91 12:49:12.926 AM 2 SHELL32.dll SHSkipJunction ( 0x001676c0, Computer Search Results Folder ) FALSE 0.0000047 92 12:49:12.926 AM 2 SHELL32.dll SHQueryValueExW ( 0x000005da, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 93 12:49:12.926 AM 2 SHELL32.dll SHSkipJunction ( 0x001676c0, {450d8fba-ad25-11d0-98a8-0800361b1103} ) FALSE 0.0000047 94 12:49:12.926 AM 2 SHELL32.dll SHQueryValueExW ( 0x000005da, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 95 12:49:12.926 AM 2 SHELL32.dll SHSkipJunction ( 0x001676c0, Recycle Bin ) FALSE 0.0000047 96 12:49:12.926 AM 2 SHELL32.dll SHQueryValueExW ( 0x000005da, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000190 97 12:49:12.926 AM 2 SHELL32.dll SHSkipJunction ( 0x001676c0, Search Results Folder ) FALSE 0.0000050 98 12:49:12.926 AM 2 SHELL32.dll SHQueryValueExW ( 0x000005da, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0013951 99 12:49:12.936 AM 2 SHELL32.dll UrlIsW ( "hello", URLIS_URL ) FALSE 0.0000050 100 12:49:12.936 AM 2 SHELL32.dll PathIsUNCW ( "hello" ) FALSE 0.0000045 101 12:49:12.936 AM 2 SHELL32.dll GUIDFromStringW ( "{AEB6717E-7E19-11d0-97EE-00C04FD91972}", IID_NULL ) TRUE 0.0000061 102 12:49:12.936 AM 2 SHELL32.dll StrCpyNW ( 0x0214e47c, "{AEB6717E-7E19-11D0-97EE-00C04FD91972}", 103 ) 0x0214e47c 0.0000042 103 12:49:12.936 AM 2 SHELL32.dll StrCpyNW ( 0x0214dfc8, "CLSID\", 167 ) 0x0214dfc8 0.0000042 104 12:49:12.936 AM 2 SHELL32.dll StrCatBuffW ( "CLSID\", "{AEB6717E-7E19-11D0-97EE-00C04FD91972}", 167 ) 0x0214dfc8 0.0000045 105 12:49:12.936 AM 2 SHELL32.dll StrCatBuffW ( "CLSID\{AEB6717E-7E19-11D0-97EE-00C04FD91972}", "\InProcServer32", 167 ) 0x0214dfc8 0.0000045 106 12:49:12.936 AM 2 SHELL32.dll SHQueryValueExW ( 0x000002d6, NULL, NULL, NULL, 0x0214e274, 0x0214dfbc ) ERROR_SUCCESS 0.0000254 107 12:49:12.936 AM 2 SHELL32.dll SHQueryValueExW ( 0x000002d6, "LoadWithoutCOM", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000190 108 12:49:12.936 AM 2 SHELL32.dll PathFindFileNameW ( "shell32.dll" ) 0x0214e274 0.0000045 109 12:49:12.936 AM 2 SHELL32.dll PathFindFileNameW ( "hello" ) 0x02771994 0.0000042 110 12:49:12.936 AM 2 SHELL32.dll PathFindFileNameW ( "hello" ) 0x02771994 0.0000042 111 12:49:12.936 AM 2 SHELL32.dll PathFindExtensionW ( "Software\Microsoft\Windows\CurrentVersion\App Paths\hello" ) 0x0214e2f2 0.0000047 112 12:49:12.936 AM 2 SHELL32.dll SHRegGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\hello.exe", NULL, SRRF_RT_REG_SZ, NULL, 0x0214e4a0, 0x0214e27c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000126 113 12:49:12.936 AM 2 SHELL32.dll PathUnquoteSpacesW ( "hello" ) 0.0000045 114 12:49:12.936 AM 2 SHELL32.dll PathIsRootW ( "hello" ) FALSE 0.0000045 115 12:49:12.936 AM 2 SHELL32.dll PathIsFileSpecW ( "hello" ) TRUE 0.0000042 116 12:49:12.936 AM 2 SHELL32.dll PathFindExtensionW ( "hello" ) 0x0277199e 0.0000042 117 12:49:12.936 AM 2 SHLWAPI.dll FindFirstFileW ( "C:\Documents and Settings\Administrator\hello.*", 0x0214dfb0 ) INVALID_HANDLE_VALUE 2 = The system cannot find the file specified. 0.0000472 118 12:49:12.936 AM 2 SHLWAPI.dll FindFirstFileW ( "C:\WINDOWS\system32\hello.*", 0x0214dfb0 ) INVALID_HANDLE_VALUE 2 = The system cannot find the file specified. 0.0000386 119 12:49:12.936 AM 2 SHLWAPI.dll FindFirstFileW ( "C:\WINDOWS\System\hello.*", 0x0214dfac ) INVALID_HANDLE_VALUE 2 = The system cannot find the file specified. 0.0000288 120 12:49:12.936 AM 2 SHLWAPI.dll FindFirstFileW ( "C:\WINDOWS\hello.*", 0x0214dfac ) 0x001676c0 0.0000277 121 12:49:12.936 AM 2 SHLWAPI.dll FindNextFileW ( 0x001676c0, 0x0214dfac ) FALSE 18 = There are no more files. 0.0000098 122 12:49:12.936 AM 2 SHLWAPI.dll FindClose ( 0x001676c0 ) TRUE 0.0000112 123 12:49:12.936 AM 2 SHELL32.dll PathFindExtensionW ( "C:\WINDOWS\hello.bat" ) 0x027719b4 0.0000045 124 12:49:12.936 AM 2 SHELL32.dll PathFindExtensionW ( "C:\WINDOWS\hello.bat" ) 0x027719b4 0.0000042 125 12:49:12.936 AM 2 SHELL32.dll GetFileAttributesW ( "C:\WINDOWS\hello.bat" ) FILE_ATTRIBUTE_ARCHIVE 0.0000159 126 12:49:12.936 AM 2 SHELL32.dll GetEnvironmentVariableW ( "SEE_MASK_NOZONECHECKS", 0x02777584, 260 ) 0 203 = The system could not find the environment option that was entered. 0.0000112 127 12:49:12.936 AM 2 SHELL32.dll PathFindExtensionW ( "C:\WINDOWS\hello.bat" ) 0x027719b4 0.0000045 128 12:49:12.936 AM 2 SHELL32.dll AssocIsDangerous ( ".bat" ) TRUE 0.0002067 129 12:49:12.936 AM 2 SHELL32.dll StrDupW ( "C:\WINDOWS\hello.bat" ) 0x001677a0 0.0000050 130 12:49:12.936 AM 2 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0214e65c ) S_OK 0.0000045 131 12:49:12.936 AM 2 SHELL32.dll StrDupW ( "::{20D04FE0-3AEA-1069-A2D8-08002B30309D}" ) 0x02180778 0.0000053 132 12:49:12.936 AM 2 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0214e504 ) S_OK 0.0000045 133 12:49:12.936 AM 2 SHELL32.dll GUIDFromStringW ( "{20D04FE0-3AEA-1069-A2D8-08002B30309D}", IID_NULL ) TRUE 0.0000056 134 12:49:12.936 AM 2 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0214e544 ) S_OK 0.0000042 135 12:49:12.936 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0214e5b4 ) S_OK 0.0000047 136 12:49:12.936 AM 2 SHELL32.dll QISearch ( 0x000c12f0, 0x7c8d6f10, IPersistFolder, 0x0214e49c ) S_OK 0.0000045 137 12:49:12.936 AM 2 SHELL32.dll QISearch ( 0x000c12f0, 0x7c8d6f10, {c7264bf0-edb6-11d1-8546-006008059368}, 0x0214e498 ) S_OK 0.0000045 138 12:49:12.936 AM 2 SHELL32.dll PathBuildRootA ( 0x0214e4b3, 2 ) 0x0214e4b3 0.0000045 139 12:49:12.936 AM 2 SHELL32.dll SHGetValueW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}", "DriveMask", NULL, 0x0214e1b0, 0x0214e1ac ) ERROR_SUCCESS 0.0000402 140 12:49:12.936 AM 2 SHELL32.dll PathBuildRootW ( 0x0214e3bc, 2 ) 0x0214e3bc 0.0000042 141 12:49:12.936 AM 2 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0214dfec, 260 ) 4 0.0000047 142 12:49:12.936 AM 2 SHELL32.dll StrDupW ( "C:\" ) 0x0215f820 0.0000047 143 12:49:12.936 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0214e4ac ) S_OK 0.0000045 144 12:49:12.936 AM 2 SHELL32.dll StrChrW ( "WINDOWS\hello.bat", '\' ) 0x001677b4 0.0000042 145 12:49:12.936 AM 2 SHELL32.dll PathAppendW ( "C:\", "WINDOWS" ) TRUE 0.0000067 146 12:49:12.936 AM 2 SHELL32.dll FindFirstFileExW ( "C:\WINDOWS", FindExInfoStandard, 0x0017ccb8, FindExSearchNameMatch, NULL, 0 ) 0x00167880 0.0000416 147 12:49:12.936 AM 2 SHELL32.dll FindClose ( 0x00167880 ) TRUE 0.0000184 148 12:49:12.936 AM 2 SHELL32.dll StrCpyW ( "", "WINDOWS" ) 0x021bf822 0.0000045 149 12:49:12.936 AM 2 SHELL32.dll PathFindExtensionW ( "WINDOWS" ) 0x0017ccf2 0.0000042 150 12:49:12.936 AM 2 SHELL32.dll PathFindExtensionW ( "WINDOWS" ) 0x021bf830 0.0000042 151 12:49:12.936 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x0214e478 ) S_OK 0.0000042 152 12:49:12.936 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IPersistFolder3, 0x0214dd74 ) S_OK 0.0000045 153 12:49:12.936 AM 2 SHELL32.dll StrCpyNW ( 0x0214dd8e, "WINDOWS", 257 ) 0x0214dd8e 0.0000045 154 12:49:12.936 AM 2 SHELL32.dll StrDupW ( "C:\WINDOWS" ) 0x0215f240 0.0000047 155 12:49:12.936 AM 2 SHELL32.dll StrChrW ( "hello.bat", '\' ) NULL 0.0000042 156 12:49:12.936 AM 2 SHELL32.dll SHUnicodeToUnicode ( "hello.bat", 0x0214e3f4, 10 ) 10 0.0000047 157 12:49:12.936 AM 2 SHELL32.dll PathAppendW ( "C:\WINDOWS", "hello.bat" ) TRUE 0.0000059 158 12:49:12.936 AM 2 SHELL32.dll FindFirstFileExW ( "C:\WINDOWS\hello.bat", FindExInfoStandard, 0x0017ccb8, FindExSearchNameMatch, NULL, 0 ) 0x00167880 0.0000299 159 12:49:12.936 AM 2 SHELL32.dll FindClose ( 0x00167880 ) TRUE 0.0000106 160 12:49:12.936 AM 2 SHELL32.dll StrCpyW ( "", "hello.bat" ) 0x00170a7c 0.0000042 161 12:49:12.936 AM 2 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0214e634 ) S_OK 0.0000045 162 12:49:12.936 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0214e5fc ) S_OK 0.0000045 163 12:49:12.936 AM 2 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0214e108, 260 ) 4 0.0000045 164 12:49:12.936 AM 2 SHELL32.dll StrDupW ( "C:\" ) 0x0215f820 0.0000045 165 12:49:12.936 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0214e5ac ) S_OK 0.0000042 166 12:49:12.936 AM 2 SHELL32.dll StrCpyNW ( 0x0214e0e4, "WINDOWS", 260 ) 0x0214e0e4 0.0000042 167 12:49:12.936 AM 2 SHELL32.dll PathFindExtensionW ( "WINDOWS" ) 0x0214e0f2 0.0000078 168 12:49:12.936 AM 2 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000045 169 12:49:12.936 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x0214e6a0 ) S_OK 0.0000045 170 12:49:12.936 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IPersistFolder3, 0x0214dec0 ) S_OK 0.0000045 171 12:49:12.936 AM 2 SHELL32.dll StrCpyNW ( 0x0214dc78, "WINDOWS", 260 ) 0x0214dc78 0.0000042 172 12:49:12.936 AM 2 SHELL32.dll StrCpyNW ( 0x0214deda, "WINDOWS", 257 ) 0x0214deda 0.0000042 173 12:49:12.936 AM 2 SHELL32.dll StrDupW ( "C:\WINDOWS" ) 0x0215f240 0.0000047 174 12:49:12.936 AM 2 SHELL32.dll AssocCreate ( Query file associations, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x0214e38c ) S_OK 0.0000229 175 12:49:12.936 AM 2 SHLWAPI.dll SHCoCreateInstance ( NULL, Query file associations, NULL, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x0214e38c ) S_OK 0.0000140 176 12:49:12.936 AM 2 SHELL32.dll QISearch ( 0x00170b40, 0x7c92b550, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x0214e38c ) S_OK 0.0000045 177 12:49:12.936 AM 2 SHELL32.dll StrCpyNW ( 0x0214e3e8, "hello.bat", 260 ) 0x0214e3e8 0.0000045 178 12:49:12.936 AM 2 SHELL32.dll PathFindExtensionW ( "hello.bat" ) 0x0214e3f2 0.0000045 179 12:49:12.936 AM 2 SHELL32.dll SHStrDupW ( ".bat", 0x00170b54 ) S_OK 0.0000056 180 12:49:12.936 AM 2 SHELL32.dll AssocCreate ( {9016d0dd-7c41-46cc-a664-bf22f7cb186a}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x0214e2e8 ) S_OK 0.0000053 181 12:49:12.936 AM 2 SHELL32.dll StrCpyNW ( 0x0214e120, "hello.bat", 260 ) 0x0214e120 0.0000045 182 12:49:12.936 AM 2 SHELL32.dll StrCpyNW ( 0x021901a2, "hello.bat", 249 ) 0x021901a2 0.0000042 183 12:49:12.936 AM 2 SHELL32.dll QISearch ( 0x00170b40, 0x7c92b550, IQueryAssociations, 0x027779c0 ) S_OK 0.0000042 184 12:49:12.936 AM 2 SHELL32.dll PathFindExtensionW ( "C:\WINDOWS\hello.bat" ) 0x027719b4 0.0000045 185 12:49:12.936 AM 2 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\hello.bat" ) 0x027719aa 0.0000045 186 12:49:12.936 AM 2 SHELL32.dll PathFindExtensionW ( "Software\Microsoft\Windows\CurrentVersion\App Paths\hello.bat" ) 0x027775f6 0.0000045 187 12:49:12.936 AM 2 SHELL32.dll SHGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\hello.bat", "RunAsCommand", NULL, 0x02773c2c, 0x0214e6c8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000117 188 12:49:12.936 AM 2 SHELL32.dll StrCpyNW ( 0x0277653c, ""%1" %*", 2084 ) 0x0277653c 0.0000045 189 12:49:12.936 AM 2 SHELL32.dll SHUnicodeToUnicode ( ""%1" %*", 0x02773c2c, 2084 ) 8 0.0007342 190 12:49:12.946 AM 2 SHELL32.dll StrCmpNW ( ""%1" %*", "%1", 2 ) -1 0.0000053 191 12:49:12.946 AM 2 SHELL32.dll StrCmpNW ( ""%1" %*", ""%1"", 4 ) 0 0.0000045 192 12:49:12.946 AM 2 SHELL32.dll AssocQueryStringW ( 66, ASSOCSTR_FRIENDLYAPPNAME, "C:\WINDOWS\hello.bat", NULL, 0x0277528c, 0x0214e4a4 ) S_OK 0.0001179 193 12:49:12.946 AM 2 SHLWAPI.dll SHCoCreateInstance ( NULL, Query file associations, NULL, IQueryAssociations, 0x0214e37c ) S_OK 0.0000142 194 12:49:12.946 AM 2 SHELL32.dll QISearch ( 0x00170a50, 0x7c92b550, IQueryAssociations, 0x0214e37c ) S_OK 0.0000045 195 12:49:12.946 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x0214e340 ) S_OK 0.0000053 196 12:49:12.946 AM 2 SHLWAPI.dll GetFileAttributesW ( "C:\WINDOWS\hello.bat" ) FILE_ATTRIBUTE_ARCHIVE 0.0000168 197 12:49:12.946 AM 2 SHELL32.dll StrCpyNW ( 0x0277528c, "hello", 260 ) 0x0277528c 0.0000045 198 12:49:12.946 AM 2 SHELL32.dll StrCpyNW ( 0x02772be6, "C:\WINDOWS\hello.bat", 21 ) 0x02772be6 0.0000045 199 12:49:12.946 AM 2 SHELL32.dll PathIsUNCW ( "C:\WINDOWS\hello.bat" ) FALSE 0.0000045 200 12:49:12.946 AM 2 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\hello.bat" ) 0x02774e92 0.0000372 201 12:49:12.946 AM 2 SHELL32.dll PathFindExtensionW ( "Software\Microsoft\Windows\CurrentVersion\App Paths\hello.bat" ) 0x027765ae 0.0000047 202 12:49:12.946 AM 2 SHELL32.dll SHGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\hello.bat", "AppendPath", NULL, 0x0214e6b0, 0x0214e6b8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000120 203 12:49:12.946 AM 2 SHELL32.dll SHGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\hello.bat", "PATH", NULL, 0x0277653c, 0x0214e6b8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 204 12:49:12.946 AM 2 SHELL32.dll IsOS ( 24 ) FALSE 0.0000042 205 12:49:12.946 AM 2 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\hello.bat" ) 0x02774e92 0.0000045 206 12:49:12.946 AM 2 SHELL32.dll PathFindExtensionW ( "Software\Microsoft\Windows\CurrentVersion\App Paths\hello.bat" ) 0x0214d9fe 0.0000047 207 12:49:12.946 AM 2 SHELL32.dll SHGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\hello.bat", "RunAsOnNonAdminInstall", NULL, 0x0214d988, 0x0214d984 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 208 12:49:12.946 AM 2 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\hello.bat" ) 0x02774e92 0.0000045 209 12:49:12.946 AM 2 SHELL32.dll PathMatchSpecW ( "h", "*" ) TRUE 0.0000061 210 12:49:12.946 AM 2 SHELL32.dll CreateProcessW ( NULL, ""C:\WINDOWS\hello.bat" ", NULL, NULL, FALSE, CREATE_DEFAULT_ERROR_MODE | CREATE_NEW_CONSOLE | CREATE_UNICODE_ENVIRONMENT, NULL, "C:\Documents and Settings\Administrator", 0x027764e0, 0x0277652c ) TRUE 1.7744638 211 12:49:12.946 AM 3 MSCTF.dll GetCurrentProcess ( ) GetCurrentProcess() 0.0000050 212 12:49:12.946 AM 3 MSCTF.dll GetCurrentProcess ( ) GetCurrentProcess() 0.0000045 213 12:49:12.946 AM 3 MSCTF.dll GetCurrentProcess ( ) GetCurrentProcess() 0.0000053 214 12:49:12.966 AM 1 Explorer.EXE OpenProcess ( PROCESS_QUERY_INFORMATION | PROCESS_VM_READ, FALSE, 2424 ) NULL 5 = Access is denied. 0.0000140 215 12:49:12.966 AM 1 Explorer.EXE PathFindFileNameW ( "" ) 0x00f2f8fc 0.0000042 216 12:49:12.966 AM 1 comctl32.dll QISearch ( 0x000c0880, 0x77422f6c, {01e13875-2e58-4671-be46-59945432be6e}, 0x02160a60 ) S_OK 0.0000045 217 12:49:12.966 AM 1 comctl32.dll QISearch ( 0x02160a30, 0x77423034, {50cf8c58-029d-41bf-b8dd-4ce4f95d9257}, 0x000ec7f4 ) S_OK 0.0000050 218 12:49:12.966 AM 1 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f624 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000707 219 12:49:12.966 AM 1 SHLWAPI.dll SHCoCreateInstance ( NULL, Query file associations, NULL, IQueryAssociations, 0x00f2f500 ) S_OK 0.0000165 220 12:49:12.966 AM 1 SHELL32.dll QISearch ( 0x00170b90, 0x7c92b550, IQueryAssociations, 0x00f2f500 ) S_OK 0.0000042 221 12:49:12.966 AM 1 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f4c4 ) S_OK 0.0000061 222 12:49:12.966 AM 1 Explorer.EXE Shell_GetCachedImageIndex ( "", 0, 0 ) -1 0.0001176 223 12:49:12.966 AM 1 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f920 0.0000042 224 12:49:12.966 AM 1 SHELL32.dll StrCpyNW ( 0x00f2f2d8, "", 260 ) 0x00f2f2d8 0.0000042 225 12:49:12.966 AM 1 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f920 0.0000039 226 12:49:12.966 AM 1 SHELL32.dll StrCpyNW ( 0x00f2f2a0, "", 260 ) 0x00f2f2a0 0.0000042 227 12:49:12.966 AM 1 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000045 228 12:49:12.966 AM 1 SHELL32.dll PathIsUNCW ( "" ) FALSE 0.0000047 229 12:49:12.966 AM 1 SHELL32.dll PathGetDriveNumberW ( "" ) -1 0.0000042 230 12:49:12.966 AM 1 SHELL32.dll GetFileAttributesW ( "" ) INVALID_FILE_ATTRIBUTES 3 = The system cannot find the path specified. 0.0000067 231 12:49:12.966 AM 1 USER32.dll SearchPathW ( NULL, "", NULL, 260, 0x00f2f258, NULL ) 0 87 = The parameter is incorrect. 0.0000050 232 12:49:12.966 AM 1 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f920 0.0000042 233 12:49:12.966 AM 1 SHELL32.dll StrCpyNW ( 0x00f2f298, "", 260 ) 0x00f2f298 0.0000042 234 12:49:12.966 AM 1 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000042 235 12:49:12.966 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f810 ) S_OK 0.0000045 236 12:49:12.966 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f048 ) S_OK 0.0000045 237 12:49:12.966 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000042 238 12:49:12.966 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000042 239 12:49:12.966 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e3a8 ) S_OK 0.0000042 240 12:49:12.966 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000045 241 12:49:12.966 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e3a8 ) S_OK 0.0000042 242 12:49:12.966 AM 1 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f0b0 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000570 243 12:49:12.966 AM 1 SHLWAPI.dll SHCoCreateInstance ( NULL, Query file associations, NULL, IQueryAssociations, 0x00f2ef58 ) S_OK 0.0000148 244 12:49:12.966 AM 1 SHELL32.dll QISearch ( 0x00170c80, 0x7c92b550, IQueryAssociations, 0x00f2ef58 ) S_OK 0.0000045 245 12:49:12.966 AM 1 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2ef1c ) S_OK 0.0000053 246 12:49:12.986 AM 3 BROWSEUI.dll SHIsChildOrSelf ( 0x0001008c, 0x0001008e ) S_OK 0.0000073 247 12:49:12.986 AM 3 BROWSEUI.dll SHIsChildOrSelf ( 0x0001006c, 0x0001008e ) S_OK 0.0000053 248 12:49:13.067 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000109 249 12:49:13.067 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000045 250 12:49:13.067 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000042 251 12:49:13.067 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000045 252 12:49:13.067 AM 1 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000682 253 12:49:13.067 AM 1 SHLWAPI.dll SHCoCreateInstance ( NULL, Query file associations, NULL, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000165 254 12:49:13.067 AM 1 SHELL32.dll QISearch ( 0x00170b90, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000047 255 12:49:13.067 AM 1 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000064 256 12:49:13.497 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000101 257 12:49:13.497 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000045 258 12:49:13.497 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000039 259 12:49:13.497 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000045 260 12:49:13.497 AM 1 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000662 261 12:49:13.497 AM 1 SHLWAPI.dll SHCoCreateInstance ( NULL, Query file associations, NULL, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000165 262 12:49:13.497 AM 1 SHELL32.dll QISearch ( 0x00170b90, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000047 263 12:49:13.497 AM 1 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000064 264 12:49:14.128 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000059 265 12:49:14.128 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000045 266 12:49:14.128 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000081 267 12:49:14.128 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000204 268 12:49:14.128 AM 1 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000659 269 12:49:14.128 AM 1 SHLWAPI.dll SHCoCreateInstance ( NULL, Query file associations, NULL, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000159 270 12:49:14.128 AM 1 SHELL32.dll QISearch ( 0x00170b90, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000042 271 12:49:14.128 AM 1 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000061 272 12:49:14.559 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000056 273 12:49:14.559 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000045 274 12:49:14.559 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000039 275 12:49:14.559 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000045 276 12:49:14.559 AM 1 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000900 277 12:49:14.559 AM 1 SHLWAPI.dll SHCoCreateInstance ( NULL, Query file associations, NULL, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000372 278 12:49:14.559 AM 1 SHELL32.dll QISearch ( 0x00170b90, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000042 279 12:49:14.559 AM 1 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000064 280 12:49:14.609 AM 3 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000053 281 12:49:14.609 AM 3 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000042 282 12:49:14.609 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000053 283 12:49:14.609 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000045 284 12:49:14.609 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000042 285 12:49:14.609 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000045 286 12:49:14.609 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000073 287 12:49:14.609 AM 1 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000721 288 12:49:14.609 AM 1 SHLWAPI.dll SHCoCreateInstance ( NULL, Query file associations, NULL, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000182 289 12:49:14.609 AM 1 SHELL32.dll QISearch ( 0x00170b90, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000047 290 12:49:14.609 AM 1 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000061 291 12:49:14.609 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000042 292 12:49:14.609 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000042 293 12:49:14.659 AM 1 MSCTF.dll GetCurrentProcess ( ) GetCurrentProcess() 0.0000056 294 12:49:14.659 AM 1 MSCTF.dll GetCurrentProcess ( ) GetCurrentProcess() 0.0000050 295 12:49:14.659 AM 1 MSCTF.dll GetCurrentProcess ( ) GetCurrentProcess() 0.0000059 296 12:49:14.699 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000081 297 12:49:14.699 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2fa78 ) S_OK 0.0000053 298 12:49:14.699 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000045 299 12:49:14.699 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000042 300 12:49:14.699 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000047 301 12:49:14.699 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000039 302 12:49:14.699 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000045 303 12:49:14.699 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000045 304 12:49:14.719 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLSESSION" ) 1 0.0000103 305 12:49:14.719 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLCUACount:ctor" ) 1 0.0000047 306 12:49:14.719 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU", NULL, 0x0214ba50, 0x0214cb08, 0x0214cabc ) ERROR_SUCCESS 0.0001229 307 12:49:14.719 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLSESSION" ) 1 0.0000089 308 12:49:14.719 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLCUACount:ctor" ) 1 0.0000064 309 12:49:14.719 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000067 310 12:49:14.719 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLSESSION" ) 1 0.0000053 311 12:49:14.719 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLCUACount:ctor" ) 1 0.0000045 312 12:49:14.719 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:(null)", "UEME_CTLSESSION" ) 1 0.0000050 313 12:49:14.719 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:(null)", "UEME_CTLCUACount:ctor" ) 1 0.0000045 314 12:49:14.719 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:(ahyy)", NULL, 0x0214ba50, 0x0214cb08, 0x0214cabc ) ERROR_SUCCESS 0.0000112 315 12:49:14.719 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:(null)", "UEME_CTLSESSION" ) 1 0.0000042 316 12:49:14.719 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:(null)", "UEME_CTLCUACount:ctor" ) 1 0.0000042 317 12:49:14.719 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 318 12:49:14.719 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:(null)", "UEME_CTLSESSION" ) 1 0.0000045 319 12:49:14.719 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:(null)", "UEME_CTLCUACount:ctor" ) 1 0.0000045 320 12:49:14.719 AM 2 SHELL32.dll PathFindExtensionW ( "C:\WINDOWS\hello.bat" ) 0x027719b4 0.0000047 321 12:49:14.719 AM 2 SHELL32.dll StrCmpICW ( ".bat", ".exe" ) -3 0.0000045 322 12:49:14.719 AM 2 SHELL32.dll PathFindExtensionW ( "C:\WINDOWS\hello.bat" ) 0x02774e9c 0.0000045 323 12:49:14.719 AM 2 SHELL32.dll StrCmpCW ( ".bat", ".bat" ) 0 0.0000042 324 12:49:14.719 AM 2 SHELL32.dll GetCurrentProcessId ( ) 1780 0.0000042 325 12:49:14.719 AM 2 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000042 326 12:49:14.719 AM 1 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2fc64 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000053 327 12:49:14.719 AM 1 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 328 12:49:14.719 AM 1 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) S_OK 0.0000047 329 12:49:14.719 AM 2 SHELL32.dll StrCatBuffW ( "hello", "\1", 262 ) 0x0214edc8 0.0000053 330 12:49:14.719 AM 2 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000042 331 12:49:14.719 AM 2 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000042 332 12:49:14.719 AM 2 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000042 333 12:49:14.719 AM 2 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000039 334 12:49:14.719 AM 2 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000045 335 12:49:14.719 AM 2 Explorer.EXE ILFree ( 0x001868b8 ) 0.0000047 336 12:49:14.739 AM 1 Explorer.EXE OpenProcess ( PROCESS_QUERY_INFORMATION | PROCESS_VM_READ, FALSE, 3140 ) 0x00000284 0.0000201 337 12:49:14.739 AM 1 Explorer.EXE PathFindFileNameW ( "C:\WINDOWS\system32\cmd.exe" ) 0x00f2f924 0.0000064 338 12:49:14.739 AM 1 comctl32.dll QISearch ( 0x000c0880, 0x77422f6c, {01e13875-2e58-4671-be46-59945432be6e}, 0x021608c0 ) S_OK 0.0000070 339 12:49:14.739 AM 1 comctl32.dll QISearch ( 0x02160890, 0x77423034, {50cf8c58-029d-41bf-b8dd-4ce4f95d9257}, 0x000ec7f4 ) S_OK 0.0000067 340 12:49:14.739 AM 1 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "C:\WINDOWS\system32\cmd.exe", NULL, 0x00f2f624 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0001291 341 12:49:14.739 AM 1 SHLWAPI.dll SHCoCreateInstance ( NULL, Query file associations, NULL, IQueryAssociations, 0x00f2f500 ) S_OK 0.0000226 342 12:49:14.739 AM 1 SHELL32.dll QISearch ( 0x00170690, 0x7c92b550, IQueryAssociations, 0x00f2f500 ) S_OK 0.0000070 343 12:49:14.739 AM 1 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f4c4 ) S_OK 0.0000067 344 12:49:14.739 AM 1 SHLWAPI.dll GetFileAttributesW ( "C:\WINDOWS\system32\cmd.exe" ) FILE_ATTRIBUTE_ARCHIVE 0.0000318 345 12:49:14.739 AM 1 Explorer.EXE Shell_GetCachedImageIndex ( "C:\WINDOWS\system32\cmd.exe", 0, 0 ) 116 0.0000291 346 12:49:14.739 AM 1 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\system32\cmd.exe" ) 0x0215e888 0.0000042 347 12:49:14.739 AM 1 SHELL32.dll StrCpyNW ( 0x00f2f2d8, "C:\WINDOWS\system32\cmd.exe", 260 ) 0x00f2f2d8 0.0000045 348 12:49:14.739 AM 1 Explorer.EXE AssocQueryStringW ( 66, ASSOCSTR_FRIENDLYAPPNAME, "C:\WINDOWS\system32\cmd.exe", NULL, 0x00f2f7e4, 0x00f2f598 ) S_OK 0.0001366 349 12:49:14.739 AM 1 SHLWAPI.dll SHCoCreateInstance ( NULL, Query file associations, NULL, IQueryAssociations, 0x00f2f470 ) S_OK 0.0000140 350 12:49:14.739 AM 1 SHELL32.dll QISearch ( 0x00170690, 0x7c92b550, IQueryAssociations, 0x00f2f470 ) S_OK 0.0000042 351 12:49:14.739 AM 1 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f434 ) S_OK 0.0000056 352 12:49:14.739 AM 1 SHLWAPI.dll GetFileAttributesW ( "C:\WINDOWS\system32\cmd.exe" ) FILE_ATTRIBUTE_ARCHIVE 0.0000204 353 12:49:14.739 AM 1 SHELL32.dll StrCpyNW ( 0x00f2f7e4, "Windows Command Processor", 80 ) 0x00f2f7e4 0.0000045 354 12:49:14.739 AM 1 comctl32.dll QISearch ( 0x000c0880, 0x77422f6c, {01e13875-2e58-4671-be46-59945432be6e}, 0x02160580 ) S_OK 0.0000047 355 12:49:14.739 AM 1 comctl32.dll QISearch ( 0x02160550, 0x77423034, {50cf8c58-029d-41bf-b8dd-4ce4f95d9257}, 0x000ec824 ) S_OK 0.0000042 356 12:49:14.739 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f80c ) S_OK 0.0000045 357 12:49:14.739 AM 1 Explorer.EXE AssocQueryStringW ( 66, ASSOCSTR_FRIENDLYAPPNAME, "C:\WINDOWS\system32\cmd.exe", NULL, 0x00f2f606, 0x00f2f3c8 ) S_OK 0.0001788 358 12:49:14.739 AM 1 SHLWAPI.dll SHCoCreateInstance ( NULL, Query file associations, NULL, IQueryAssociations, 0x00f2f2a0 ) S_OK 0.0000142 359 12:49:14.739 AM 1 SHELL32.dll QISearch ( 0x00170690, 0x7c92b550, IQueryAssociations, 0x00f2f2a0 ) S_OK 0.0000042 360 12:49:14.739 AM 1 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f264 ) S_OK 0.0000056 361 12:49:14.739 AM 1 SHLWAPI.dll GetFileAttributesW ( "C:\WINDOWS\system32\cmd.exe" ) FILE_ATTRIBUTE_ARCHIVE 0.0000305 362 12:49:14.739 AM 1 SHELL32.dll StrCpyNW ( 0x00f2f606, "Windows Command Processor", 257 ) 0x00f2f606 0.0000053 363 12:49:14.739 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f048 ) S_OK 0.0000056 364 12:49:14.739 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000056 365 12:49:14.739 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000050 366 12:49:14.739 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e3a8 ) S_OK 0.0000056 367 12:49:14.739 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000053 368 12:49:14.739 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000053 369 12:49:14.739 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e3a8 ) S_OK 0.0000053 370 12:49:14.739 AM 1 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "C:\WINDOWS\system32\cmd.exe", NULL, 0x00f2f0b0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000953 371 12:49:14.739 AM 1 SHLWAPI.dll SHCoCreateInstance ( NULL, Query file associations, NULL, IQueryAssociations, 0x00f2ef58 ) S_OK 0.0000173 372 12:49:14.739 AM 1 SHELL32.dll QISearch ( 0x00170690, 0x7c92b550, IQueryAssociations, 0x00f2ef58 ) S_OK 0.0000053 373 12:49:14.739 AM 1 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2ef1c ) S_OK 0.0000064 374 12:49:14.739 AM 1 SHLWAPI.dll GetFileAttributesW ( "C:\WINDOWS\system32\cmd.exe" ) FILE_ATTRIBUTE_ARCHIVE 0.0000204 375 12:49:14.739 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000056 376 12:49:14.739 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000050 377 12:49:14.739 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000053 378 12:49:14.739 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000050 379 12:49:15.811 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000056 380 12:49:15.811 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000061 381 12:49:15.811 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000053 382 12:49:15.811 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000045 383 12:49:15.811 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000042 384 12:49:15.811 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000045 385 12:49:17.132 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000073 386 12:49:17.132 AM 1 Explorer.EXE SHFree ( NULL ) 0.0000064 387 12:49:17.132 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2fa78 ) S_OK 0.0000059 388 12:49:17.132 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000059 389 12:49:17.132 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000056 390 12:49:17.132 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000053 391 12:49:17.132 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000056 392 12:49:17.132 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000056 393 12:49:17.132 AM 1 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000056 394 12:49:17.132 AM 1 comctl32.dll GetCurrentProcessId ( ) 1780 0.0000059 395 12:49:17.182 AM 1 MSCTF.dll GetCurrentProcess ( ) GetCurrentProcess() 0.0000092 396 12:49:17.182 AM 1 MSCTF.dll GetCurrentProcess ( ) GetCurrentProcess() 0.0000045 397 12:49:17.182 AM 1 MSCTF.dll GetCurrentProcess ( ) GetCurrentProcess() 0.0000045 398 12:49:18.084 AM 1 SHELL32.dll PathBuildRootW ( 0x0015dd88, 2 ) 0x0015dd88 0.0000056 399 12:49:19.656 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000056 400 12:49:19.656 AM 1 MSCTF.dll GetCurrentProcessId ( ) 1780 0.0000042 401 12:49:19.726 AM 1 Explorer.EXE SHRestricted ( 1073741925 ) 0 0.0000413 402 12:49:19.726 AM 1 SHELL32.dll SHGetValueW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage", "FavoritesChanges", NULL, 0x00f2fdbc, 0x00f2fd94 ) ERROR_SUCCESS 0.0007065 403 12:49:19.726 AM 1 Explorer.EXE SHRestricted ( 1073741929 ) 0 0.0002288 404 12:49:19.726 AM 1 Explorer.EXE SHGetValueW ( HKEY_CURRENT_USER, "SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "Start_MinMFU", NULL, 0x00f2fdcc, 0x00f2fdd0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0004668 405 12:49:19.726 AM 2 Explorer.EXE SHRestricted ( 1073741925 ) 0 0.0000207 406 12:49:19.726 AM 2 SHELL32.dll SHGetValueW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage", "FavoritesChanges", NULL, 0x0214fe2c, 0x0214fe04 ) ERROR_SUCCESS 0.0003864 407 12:49:19.726 AM 2 Explorer.EXE SHRestricted ( 1073741929 ) 0 0.0000131 408 12:49:19.726 AM 2 Explorer.EXE SHGetValueW ( HKEY_CURRENT_USER, "SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "Start_MinMFU", NULL, 0x0214fe34, 0x0214fe38 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000207 409 12:49:19.726 AM 2 Explorer.EXE SHRestricted ( 131072 ) 0 0.0000126 410 12:49:19.726 AM 2 Explorer.EXE SHGetSpecialFolderLocation ( NULL, CSIDL_STARTMENU, 0x0214fe34 ) S_OK 0.0000165 411 12:49:19.726 AM 2 Explorer.EXE ILIsEqual ( 0x02165998, 0x02165e78 ) TRUE 0.0000053 412 12:49:19.726 AM 2 Explorer.EXE ILFree ( 0x02165e78 ) 0.0000045 413 12:49:19.726 AM 2 Explorer.EXE SHRestricted ( 131072 ) 0 0.0000117 414 12:49:19.726 AM 2 Explorer.EXE ILIsParent ( 0x02165998, 0x02184b38, FALSE ) TRUE 0.0010040 415 12:49:19.726 AM 2 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0214fd18 ) S_OK 0.0000047 416 12:49:19.726 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0214fccc ) S_OK 0.0000045 417 12:49:19.726 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0214fcc8 ) S_OK 0.0000045 418 12:49:19.726 AM 2 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 419 12:49:19.726 AM 2 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0214f624, 260 ) 4 0.0000053 420 12:49:19.726 AM 2 SHELL32.dll StrDupW ( "C:\" ) 0x0215fac0 0.0000047 421 12:49:19.726 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x0214fae4 ) S_OK 0.0000042 422 12:49:19.726 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder2, 0x0214fae0 ) S_OK 0.0000045 423 12:49:19.726 AM 2 SHELL32.dll StrCpyNW ( 0x0214f87c, "Documents and Settings", 260 ) 0x0214f87c 0.0000045 424 12:49:19.726 AM 2 SHELL32.dll StrCpyNW ( 0x0214f654, "Documents and Settings", 260 ) 0x0214f654 0.0000042 425 12:49:19.726 AM 2 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 426 12:49:19.726 AM 2 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x021608e8 0.0000045 427 12:49:19.726 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0214fa94 ) S_OK 0.0000045 428 12:49:19.726 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IPersistFolder3, 0x0214f3b4 ) S_OK 0.0000045 429 12:49:19.726 AM 2 SHELL32.dll StrCpyNW ( 0x0214f3ce, "Documents and Settings", 257 ) 0x0214f3ce 0.0000042 430 12:49:19.726 AM 2 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215e860 0.0000050 431 12:49:19.726 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder2, 0x0214fa90 ) S_OK 0.0000042 432 12:49:19.726 AM 2 SHELL32.dll StrCpyNW ( 0x0214f82c, "Administrator", 260 ) 0x0214f82c 0.0000045 433 12:49:19.726 AM 2 SHELL32.dll StrCpyNW ( 0x0214f604, "Administrator", 260 ) 0x0214f604 0.0000047 434 12:49:19.726 AM 2 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000042 435 12:49:19.726 AM 2 SHELL32.dll PathFindExtensionW ( "Administrator" ) 0x0215dd76 0.0000042 436 12:49:19.726 AM 2 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 437 12:49:19.726 AM 2 SHELL32.dll QISearch ( 0x02173100, 0x7c8d7268, IShellFolder, 0x0214fa44 ) S_OK 0.0000042 438 12:49:19.726 AM 2 SHELL32.dll QISearch ( 0x02173100, 0x7c8d7268, IPersistFolder3, 0x0214f364 ) S_OK 0.0000045 439 12:49:19.726 AM 2 SHELL32.dll StrCpyNW ( 0x0214f3ac, "Administrator", 234 ) 0x0214f3ac 0.0000042 440 12:49:19.726 AM 2 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator" ) 0x0215dcd8 0.0000050 441 12:49:19.736 AM 2 SHELL32.dll QISearch ( 0x02173100, 0x7c8d7268, IShellFolder2, 0x0214fa40 ) S_OK 0.0000050 442 12:49:19.736 AM 2 SHELL32.dll StrCpyNW ( 0x0214f7dc, "Start Menu", 260 ) 0x0214f7dc 0.0000042 443 12:49:19.736 AM 2 SHELL32.dll StrCpyNW ( 0x0214f5b4, "Start Menu", 260 ) 0x0214f5b4 0.0000042 444 12:49:19.736 AM 2 SHELL32.dll StrCmpICW ( "Start Menu", "Start Menu" ) 0 0.0000045 445 12:49:19.736 AM 2 Explorer.EXE SHRestricted ( 131072 ) 0 0.0000120 446 12:49:19.736 AM 2 Explorer.EXE SHRestricted ( 4194304 ) 0 0.0000117 447 12:49:19.736 AM 2 Explorer.EXE SHGetSpecialFolderLocation ( NULL, CSIDL_COMMON_STARTMENU, 0x0214fe34 ) S_OK 0.0000129 448 12:49:19.736 AM 2 Explorer.EXE ILIsEqual ( 0x02166358, 0x02165e78 ) TRUE 0.0000047 449 12:49:19.736 AM 2 Explorer.EXE ILFree ( 0x02165e78 ) 0.0000045 450 12:49:19.736 AM 2 Explorer.EXE SHRestricted ( 131072 ) 0 0.0000117 451 12:49:19.736 AM 2 Explorer.EXE ILIsParent ( 0x02166358, 0x0219d2c0, FALSE ) TRUE 0.0003537 452 12:49:19.736 AM 2 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0214fd18 ) S_OK 0.0000042 453 12:49:19.736 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0214fccc ) S_OK 0.0000047 454 12:49:19.736 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0214fcc8 ) S_OK 0.0000045 455 12:49:19.736 AM 2 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 456 12:49:19.736 AM 2 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0214f624, 260 ) 4 0.0000047 457 12:49:19.736 AM 2 SHELL32.dll StrDupW ( "C:\" ) 0x0215fac0 0.0000045 458 12:49:19.736 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x0214fae4 ) S_OK 0.0000045 459 12:49:19.736 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder2, 0x0214fae0 ) S_OK 0.0000045 460 12:49:19.736 AM 2 SHELL32.dll StrCpyNW ( 0x0214f87c, "Documents and Settings", 260 ) 0x0214f87c 0.0000042 461 12:49:19.736 AM 2 SHELL32.dll StrCpyNW ( 0x0214f654, "Documents and Settings", 260 ) 0x0214f654 0.0000059 462 12:49:19.736 AM 2 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000064 463 12:49:19.736 AM 2 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x021608e8 0.0000045 464 12:49:19.736 AM 2 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000047 465 12:49:19.736 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0214fa94 ) S_OK 0.0000042 466 12:49:19.736 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IPersistFolder3, 0x0214f3b4 ) S_OK 0.0000047 467 12:49:19.736 AM 2 SHELL32.dll StrCpyNW ( 0x0214f3ce, "Documents and Settings", 257 ) 0x0214f3ce 0.0000045 468 12:49:19.736 AM 2 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215e860 0.0000047 469 12:49:19.736 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder2, 0x0214fa90 ) S_OK 0.0000042 470 12:49:19.736 AM 2 SHELL32.dll StrCpyNW ( 0x0214f82c, "All Users", 260 ) 0x0214f82c 0.0000045 471 12:49:19.736 AM 2 SHELL32.dll StrCpyNW ( 0x0214f604, "All Users", 260 ) 0x0214f604 0.0000042 472 12:49:19.736 AM 2 SHELL32.dll StrCmpICW ( "All Users", "All Users" ) 0 0.0000045 473 12:49:19.736 AM 2 SHELL32.dll PathFindExtensionW ( "All Users" ) 0x001706ce 0.0000042 474 12:49:19.736 AM 2 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 475 12:49:19.736 AM 2 SHELL32.dll QISearch ( 0x02173100, 0x7c8d7268, IShellFolder, 0x0214fa44 ) S_OK 0.0000042 476 12:49:19.736 AM 2 SHELL32.dll QISearch ( 0x02173100, 0x7c8d7268, IPersistFolder3, 0x0214f364 ) S_OK 0.0000067 477 12:49:19.736 AM 2 SHELL32.dll StrCpyNW ( 0x0214f3ac, "All Users", 234 ) 0x0214f3ac 0.0000047 478 12:49:19.736 AM 2 SHELL32.dll StrDupW ( "C:\Documents and Settings\All Users" ) 0x001706e0 0.0000087 479 12:49:19.736 AM 2 SHELL32.dll QISearch ( 0x02173100, 0x7c8d7268, IShellFolder2, 0x0214fa40 ) S_OK 0.0000073 480 12:49:19.736 AM 2 SHELL32.dll StrCpyNW ( 0x0214f7dc, "Start Menu", 260 ) 0x0214f7dc 0.0000045 481 12:49:19.736 AM 2 SHELL32.dll StrCpyNW ( 0x0214f5b4, "Start Menu", 260 ) 0x0214f5b4 0.0000045 482 12:49:19.736 AM 2 SHELL32.dll StrCmpICW ( "Start Menu", "Start Menu" ) 0 0.0000045 483 12:49:19.736 AM 2 Explorer.EXE SHGetSpecialFolderLocation ( NULL, CSIDL_DESKTOPDIRECTORY, 0x0214fe34 ) S_OK 0.0000148 484 12:49:19.736 AM 2 Explorer.EXE ILIsEqual ( 0x021817b8, 0x021826c0 ) TRUE 0.0000050 485 12:49:19.736 AM 2 Explorer.EXE ILFree ( 0x021826c0 ) 0.0000045 486 12:49:19.736 AM 2 Explorer.EXE SHRestricted ( 4194304 ) 0 0.0000120 487 12:49:19.736 AM 2 Explorer.EXE SHGetSpecialFolderLocation ( NULL, CSIDL_COMMON_DESKTOPDIRECTORY, 0x0214fe34 ) S_OK 0.0000129 488 12:49:19.736 AM 2 Explorer.EXE ILIsEqual ( 0x0216a8c0, 0x0216a118 ) TRUE 0.0000045 489 12:49:19.736 AM 2 Explorer.EXE ILFree ( 0x0216a118 ) 0.0000045 490 12:49:19.736 AM 2 Explorer.EXE SHRestricted ( 1073741929 ) 0 0.0000126 491 12:49:19.736 AM 2 Explorer.EXE SHGetSpecialFolderLocation ( NULL, CSIDL_DESKTOPDIRECTORY, 0x0214fe2c ) S_OK 0.0000131 492 12:49:19.736 AM 2 Explorer.EXE SHGetSpecialFolderLocation ( NULL, CSIDL_COMMON_DESKTOPDIRECTORY, 0x0214fe30 ) S_OK 0.0000142 493 12:49:19.736 AM 2 Explorer.EXE ILIsEqual ( 0x021849a0, 0x021826c0 ) FALSE 0.0000047 494 12:49:19.736 AM 2 Explorer.EXE ILIsEqual ( 0x021849a0, 0x0216a118 ) FALSE 0.0000042 495 12:49:19.736 AM 2 SHELL32.dll PathFindExtensionW ( "Internet Explorer.lnk" ) 0x0018672a 0.0000045 496 12:49:19.736 AM 2 SHELL32.dll StrCpyNW ( 0x0214d550, "Internet Explorer.lnk", 200 ) 0x0214d550 0.0000045 497 12:49:19.736 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Internet Explorer.lnk", 0x0214d700 ) S_OK 0.0000053 498 12:49:19.736 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x001866d8, 0x0214da74, 2084 ) S_OK 0.0000053 499 12:49:19.736 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000140 500 12:49:19.736 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Internet Explorer.lnk", NULL ) 59 0.0000067 501 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLSESSION" ) 1 0.0000047 502 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 503 12:49:19.736 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Vagrearg Rkcybere.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000123 504 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLSESSION" ) 1 0.0000042 505 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 506 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 507 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 508 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 509 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLSESSION" ) 1 0.0000042 510 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 511 12:49:19.736 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Vagrearg Rkcybere.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 512 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLSESSION" ) 1 0.0000045 513 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 514 12:49:19.736 AM 2 Explorer.EXE ILIsEqual ( 0x021849a0, 0x021826c0 ) FALSE 0.0000042 515 12:49:19.736 AM 2 Explorer.EXE ILIsEqual ( 0x021849a0, 0x0216a118 ) FALSE 0.0000042 516 12:49:19.736 AM 2 SHELL32.dll PathFindExtensionW ( "Outlook Express.lnk" ) 0x021c8a16 0.0000042 517 12:49:19.736 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 518 12:49:19.736 AM 2 SHELL32.dll StrCpyNW ( 0x0214d550, "Outlook Express.lnk", 200 ) 0x0214d550 0.0000045 519 12:49:19.736 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Outlook Express.lnk", 0x0214d700 ) S_OK 0.0000073 520 12:49:19.736 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x021c89c8, 0x0214da74, 2084 ) S_OK 0.0000050 521 12:49:19.736 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000145 522 12:49:19.736 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Outlook Express.lnk", NULL ) 59 0.0000061 523 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLSESSION" ) 1 0.0000042 524 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 525 12:49:19.736 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Bhgybbx Rkcerff.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 526 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLSESSION" ) 1 0.0000045 527 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 528 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 529 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 530 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 531 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLSESSION" ) 1 0.0000042 532 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 533 12:49:19.736 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Bhgybbx Rkcerff.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 534 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLSESSION" ) 1 0.0000042 535 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 536 12:49:19.736 AM 2 Explorer.EXE ILIsEqual ( 0x021849a0, 0x021826c0 ) FALSE 0.0000045 537 12:49:19.736 AM 2 Explorer.EXE ILIsEqual ( 0x021849a0, 0x0216a118 ) FALSE 0.0000045 538 12:49:19.736 AM 2 SHELL32.dll PathFindExtensionW ( "Remote Assistance.lnk" ) 0x021c82da 0.0000042 539 12:49:19.736 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 540 12:49:19.736 AM 2 SHELL32.dll StrCpyNW ( 0x0214d550, "Remote Assistance.lnk", 200 ) 0x0214d550 0.0000042 541 12:49:19.736 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Remote Assistance.lnk", 0x0214d700 ) S_OK 0.0000053 542 12:49:19.736 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x021c8288, 0x0214da74, 2084 ) S_OK 0.0000050 543 12:49:19.736 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000131 544 12:49:19.736 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Remote Assistance.lnk", NULL ) 59 0.0000061 545 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLSESSION" ) 1 0.0000042 546 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 547 12:49:19.736 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Erzbgr Nffvfgnapr.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 548 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLSESSION" ) 1 0.0000042 549 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 550 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000047 551 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 552 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 553 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLSESSION" ) 1 0.0000042 554 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 555 12:49:19.736 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Erzbgr Nffvfgnapr.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 556 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLSESSION" ) 1 0.0000042 557 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 558 12:49:19.736 AM 2 Explorer.EXE ILIsEqual ( 0x02757d48, 0x021826c0 ) FALSE 0.0000047 559 12:49:19.736 AM 2 Explorer.EXE ILIsEqual ( 0x02757d48, 0x0216a118 ) FALSE 0.0000045 560 12:49:19.736 AM 2 SHELL32.dll PathFindExtensionW ( "Address Book.lnk" ) 0x02173580 0.0000045 561 12:49:19.736 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 562 12:49:19.736 AM 2 SHELL32.dll StrCpyNW ( 0x0214d568, "Address Book.lnk", 188 ) 0x0214d568 0.0000045 563 12:49:19.736 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Address Book.lnk", 0x0214d700 ) S_OK 0.0000056 564 12:49:19.736 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x02173538, 0x0214da74, 2084 ) S_OK 0.0000050 565 12:49:19.736 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000137 566 12:49:19.736 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Address Book.lnk", NULL ) 59 0.0000059 567 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLSESSION" ) 1 0.0000042 568 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 569 12:49:19.736 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Nqqerff Obbx.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 570 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLSESSION" ) 1 0.0000042 571 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 572 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 573 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 574 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 575 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLSESSION" ) 1 0.0000042 576 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 577 12:49:19.736 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Nqqerff Obbx.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 578 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLSESSION" ) 1 0.0000045 579 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 580 12:49:19.736 AM 2 Explorer.EXE ILIsEqual ( 0x02757d48, 0x021826c0 ) FALSE 0.0000045 581 12:49:19.736 AM 2 Explorer.EXE ILIsEqual ( 0x02757d48, 0x0216a118 ) FALSE 0.0000053 582 12:49:19.736 AM 2 SHELL32.dll PathFindExtensionW ( "Command Prompt.lnk" ) 0x0018a87c 0.0000059 583 12:49:19.736 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000056 584 12:49:19.736 AM 2 SHELL32.dll StrCpyNW ( 0x0214d568, "Command Prompt.lnk", 188 ) 0x0214d568 0.0000056 585 12:49:19.736 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Command Prompt.lnk", 0x0214d700 ) S_OK 0.0000064 586 12:49:19.736 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x0018a830, 0x0214da74, 2084 ) S_OK 0.0000064 587 12:49:19.736 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000176 588 12:49:19.736 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Command Prompt.lnk", NULL ) 59 0.0000078 589 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLSESSION" ) 1 0.0000056 590 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 591 12:49:19.736 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzznaq Cebzcg.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_SUCCESS 0.0000103 592 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLSESSION" ) 1 0.0000059 593 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 594 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 595 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLSESSION" ) 1 0.0000056 596 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 597 12:49:19.736 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzznaq Cebzcg.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_SUCCESS 0.0000089 598 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLSESSION" ) 1 0.0000056 599 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 600 12:49:19.736 AM 2 Explorer.EXE ILIsEqual ( 0x02757d48, 0x021826c0 ) FALSE 0.0000056 601 12:49:19.736 AM 2 Explorer.EXE ILIsEqual ( 0x02757d48, 0x0216a118 ) FALSE 0.0000056 602 12:49:19.736 AM 2 SHELL32.dll PathFindExtensionW ( "Notepad.lnk" ) 0x021884b4 0.0000056 603 12:49:19.736 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000059 604 12:49:19.736 AM 2 SHELL32.dll StrCpyNW ( 0x0214d568, "Notepad.lnk", 188 ) 0x0214d568 0.0000059 605 12:49:19.736 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Notepad.lnk", 0x0214d700 ) S_OK 0.0000070 606 12:49:19.736 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x02188478, 0x0214da74, 2084 ) S_OK 0.0000064 607 12:49:19.736 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000179 608 12:49:19.736 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Notepad.lnk", NULL ) 59 0.0000078 609 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLSESSION" ) 1 0.0000059 610 12:49:19.736 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 611 12:49:19.736 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Abgrcnq.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_SUCCESS 0.0000103 612 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLSESSION" ) 1 0.0000047 613 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 614 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000059 615 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLSESSION" ) 1 0.0000045 616 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 617 12:49:19.746 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Abgrcnq.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_SUCCESS 0.0000081 618 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLSESSION" ) 1 0.0000045 619 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 620 12:49:19.746 AM 2 Explorer.EXE ILIsEqual ( 0x021a6cb8, 0x021826c0 ) FALSE 0.0000047 621 12:49:19.746 AM 2 Explorer.EXE ILIsEqual ( 0x021a6cb8, 0x0216a118 ) FALSE 0.0000045 622 12:49:19.746 AM 2 SHELL32.dll PathFindExtensionW ( "Magnifier.lnk" ) 0x00189e4a 0.0000061 623 12:49:19.746 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000059 624 12:49:19.746 AM 2 SHELL32.dll StrCpyNW ( 0x0214d584, "Magnifier.lnk", 174 ) 0x0214d584 0.0000059 625 12:49:19.746 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk", 0x0214d700 ) S_OK 0.0000075 626 12:49:19.746 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x00189e08, 0x0214da74, 2084 ) S_OK 0.0000536 627 12:49:19.746 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000204 628 12:49:19.746 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk", NULL ) 59 0.0000081 629 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLSESSION" ) 1 0.0000061 630 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 631 12:49:19.746 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Zntavsvre.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000117 632 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLSESSION" ) 1 0.0000059 633 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 634 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000053 635 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 636 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 637 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLSESSION" ) 1 0.0000042 638 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 639 12:49:19.746 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Zntavsvre.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000112 640 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLSESSION" ) 1 0.0000042 641 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 642 12:49:19.746 AM 2 Explorer.EXE ILIsEqual ( 0x021a6cb8, 0x021826c0 ) FALSE 0.0000053 643 12:49:19.746 AM 2 Explorer.EXE ILIsEqual ( 0x021a6cb8, 0x0216a118 ) FALSE 0.0000045 644 12:49:19.746 AM 2 SHELL32.dll PathFindExtensionW ( "Narrator.lnk" ) 0x00189f10 0.0000047 645 12:49:19.746 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 646 12:49:19.746 AM 2 SHELL32.dll StrCpyNW ( 0x0214d584, "Narrator.lnk", 174 ) 0x0214d584 0.0000078 647 12:49:19.746 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk", 0x0214d700 ) S_OK 0.0000095 648 12:49:19.746 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x00189ed0, 0x0214da74, 2084 ) S_OK 0.0000059 649 12:49:19.746 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000170 650 12:49:19.746 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk", NULL ) 59 0.0000067 651 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLSESSION" ) 1 0.0000045 652 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 653 12:49:19.746 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Aneengbe.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 654 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLSESSION" ) 1 0.0000045 655 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 656 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 657 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 658 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 659 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 660 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 661 12:49:19.746 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Aneengbe.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 662 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 663 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 664 12:49:19.746 AM 2 Explorer.EXE ILIsEqual ( 0x021a6cb8, 0x021826c0 ) FALSE 0.0000045 665 12:49:19.746 AM 2 Explorer.EXE ILIsEqual ( 0x021a6cb8, 0x0216a118 ) FALSE 0.0000042 666 12:49:19.746 AM 2 SHELL32.dll PathFindExtensionW ( "On-Screen Keyboard.lnk" ) 0x021619b4 0.0000045 667 12:49:19.746 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 668 12:49:19.746 AM 2 SHELL32.dll StrCpyNW ( 0x0214d584, "On-Screen Keyboard.lnk", 174 ) 0x0214d584 0.0000042 669 12:49:19.746 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk", 0x0214d700 ) S_OK 0.0000056 670 12:49:19.746 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x02161960, 0x0214da74, 2084 ) S_OK 0.0000050 671 12:49:19.746 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000134 672 12:49:19.746 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk", NULL ) 59 0.0000061 673 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 674 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000081 675 12:49:19.746 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Ba-Fperra Xrlobneq.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 676 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLSESSION" ) 1 0.0000045 677 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 678 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 679 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 680 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 681 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 682 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 683 12:49:19.746 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Ba-Fperra Xrlobneq.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 684 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLSESSION" ) 1 0.0000045 685 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 686 12:49:19.746 AM 2 Explorer.EXE ILIsEqual ( 0x021a6cb8, 0x021826c0 ) FALSE 0.0000045 687 12:49:19.746 AM 2 Explorer.EXE ILIsEqual ( 0x021a6cb8, 0x0216a118 ) FALSE 0.0000042 688 12:49:19.746 AM 2 SHELL32.dll PathFindExtensionW ( "Utility Manager.lnk" ) 0x02161b4e 0.0000045 689 12:49:19.746 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 690 12:49:19.746 AM 2 SHELL32.dll StrCpyNW ( 0x0214d584, "Utility Manager.lnk", 174 ) 0x0214d584 0.0000042 691 12:49:19.746 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk", 0x0214d700 ) S_OK 0.0000056 692 12:49:19.746 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x02161b00, 0x0214da74, 2084 ) S_OK 0.0000053 693 12:49:19.746 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000140 694 12:49:19.746 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk", NULL ) 59 0.0000061 695 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 696 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 697 12:49:19.746 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Hgvyvgl Znantre.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 698 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000045 699 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 700 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 701 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 702 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 703 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 704 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 705 12:49:19.746 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Hgvyvgl Znantre.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 706 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000045 707 12:49:19.746 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 708 12:49:19.746 AM 2 Explorer.EXE ILIsEqual ( 0x021a6f00, 0x021826c0 ) FALSE 0.0000047 709 12:49:19.746 AM 2 Explorer.EXE ILIsEqual ( 0x021a6f00, 0x0216a118 ) FALSE 0.0000042 710 12:49:19.746 AM 2 SHELL32.dll PathFindExtensionW ( "Windows Media Player.lnk" ) 0x021c7e58 0.0000042 711 12:49:19.746 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0008032 712 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214d584, "Windows Media Player.lnk", 174 ) 0x0214d584 0.0000045 713 12:49:19.756 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk", 0x0214d700 ) S_OK 0.0000059 714 12:49:19.756 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x021c7e00, 0x0214da74, 2084 ) S_OK 0.0000050 715 12:49:19.756 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000142 716 12:49:19.756 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk", NULL ) 59 0.0000061 717 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLSESSION" ) 1 0.0000045 718 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 719 12:49:19.756 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Jvaqbjf Zrqvn Cynlre.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 720 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLSESSION" ) 1 0.0000045 721 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 722 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 723 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 724 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 725 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLSESSION" ) 1 0.0000042 726 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 727 12:49:19.756 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Jvaqbjf Zrqvn Cynlre.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 728 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLSESSION" ) 1 0.0000042 729 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 730 12:49:19.756 AM 2 Explorer.EXE ILIsEqual ( 0x021a7148, 0x021826c0 ) FALSE 0.0000047 731 12:49:19.756 AM 2 Explorer.EXE ILIsEqual ( 0x021a7148, 0x0216a118 ) FALSE 0.0000042 732 12:49:19.756 AM 2 SHELL32.dll PathFindExtensionW ( "Internet Explorer (No Add-ons).lnk" ) 0x0016506c 0.0000047 733 12:49:19.756 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 734 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214d582, "Internet Explorer (No Add-ons).lnk", 175 ) 0x0214d582 0.0000042 735 12:49:19.756 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", 0x0214d700 ) S_OK 0.0000056 736 12:49:19.756 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x00165000, 0x0214da74, 2084 ) S_OK 0.0000053 737 12:49:19.756 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000201 738 12:49:19.756 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", NULL ) 59 0.0000061 739 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLSESSION" ) 1 0.0000045 740 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 741 12:49:19.756 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Vagrearg Rkcybere (Ab Nqq-baf).yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 742 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLSESSION" ) 1 0.0000045 743 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 744 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 745 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 746 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 747 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLSESSION" ) 1 0.0000042 748 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 749 12:49:19.756 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Vagrearg Rkcybere (Ab Nqq-baf).yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 750 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLSESSION" ) 1 0.0000042 751 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 752 12:49:19.756 AM 2 Explorer.EXE ILIsEqual ( 0x02165728, 0x021826c0 ) FALSE 0.0002324 753 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0214fcf8 ) S_OK 0.0000047 754 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0214fcac ) S_OK 0.0000047 755 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0214fca8 ) S_OK 0.0000045 756 12:49:19.756 AM 2 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000045 757 12:49:19.756 AM 2 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0214f604, 260 ) 4 0.0000047 758 12:49:19.756 AM 2 SHELL32.dll StrDupW ( "C:\" ) 0x0215fac0 0.0000047 759 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x0214fac4 ) S_OK 0.0000045 760 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder2, 0x0214fac0 ) S_OK 0.0000042 761 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214f85c, "Documents and Settings", 260 ) 0x0214f85c 0.0000045 762 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214f634, "Documents and Settings", 260 ) 0x0214f634 0.0000045 763 12:49:19.756 AM 2 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000047 764 12:49:19.756 AM 2 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x021608e8 0.0000045 765 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0214fa74 ) S_OK 0.0000045 766 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IPersistFolder3, 0x0214f394 ) S_OK 0.0000045 767 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214f3ae, "Documents and Settings", 257 ) 0x0214f3ae 0.0000042 768 12:49:19.756 AM 2 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215e860 0.0000047 769 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder2, 0x0214fa70 ) S_OK 0.0000042 770 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214f80c, "Administrator", 260 ) 0x0214f80c 0.0000047 771 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214f5e4, "All Users", 260 ) 0x0214f5e4 0.0000042 772 12:49:19.756 AM 2 SHELL32.dll StrCmpICW ( "All Users", "Administrator" ) 8 0.0000045 773 12:49:19.756 AM 2 Explorer.EXE ILIsEqual ( 0x02165728, 0x0216a118 ) FALSE 0.0003352 774 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0214fcf8 ) S_OK 0.0000045 775 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0214fcac ) S_OK 0.0000045 776 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0214fca8 ) S_OK 0.0000042 777 12:49:19.756 AM 2 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 778 12:49:19.756 AM 2 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0214f604, 260 ) 4 0.0000045 779 12:49:19.756 AM 2 SHELL32.dll StrDupW ( "C:\" ) 0x0215fac0 0.0000047 780 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x0214fac4 ) S_OK 0.0000042 781 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder2, 0x0214fac0 ) S_OK 0.0000045 782 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214f85c, "Documents and Settings", 260 ) 0x0214f85c 0.0000064 783 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214f634, "Documents and Settings", 260 ) 0x0214f634 0.0000042 784 12:49:19.756 AM 2 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000047 785 12:49:19.756 AM 2 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x021608e8 0.0000042 786 12:49:19.756 AM 2 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 787 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0214fa74 ) S_OK 0.0000045 788 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IPersistFolder3, 0x0214f394 ) S_OK 0.0000045 789 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214f3ae, "Documents and Settings", 257 ) 0x0214f3ae 0.0000045 790 12:49:19.756 AM 2 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215e860 0.0000050 791 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder2, 0x0214fa70 ) S_OK 0.0000045 792 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214f80c, "All Users", 260 ) 0x0214f80c 0.0000045 793 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214f5e4, "All Users", 260 ) 0x0214f5e4 0.0000042 794 12:49:19.756 AM 2 SHELL32.dll StrCmpICW ( "All Users", "All Users" ) 0 0.0000042 795 12:49:19.756 AM 2 SHELL32.dll PathFindExtensionW ( "All Users" ) 0x001706ce 0.0000045 796 12:49:19.756 AM 2 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 797 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x02173100, 0x7c8d7268, IShellFolder, 0x0214fa24 ) S_OK 0.0000042 798 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x02173100, 0x7c8d7268, IPersistFolder3, 0x0214f344 ) S_OK 0.0000047 799 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214f38c, "All Users", 234 ) 0x0214f38c 0.0000045 800 12:49:19.756 AM 2 SHELL32.dll StrDupW ( "C:\Documents and Settings\All Users" ) 0x001706e0 0.0000050 801 12:49:19.756 AM 2 SHELL32.dll QISearch ( 0x02173100, 0x7c8d7268, IShellFolder2, 0x0214fa20 ) S_OK 0.0000045 802 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214f7bc, "Desktop", 260 ) 0x0214f7bc 0.0000042 803 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214f594, "Start Menu", 260 ) 0x0214f594 0.0000042 804 12:49:19.756 AM 2 SHELL32.dll StrCmpICW ( "Start Menu", "Desktop" ) 15 0.0000045 805 12:49:19.756 AM 2 SHELL32.dll PathFindExtensionW ( "Windows Update.lnk" ) 0x02188704 0.0000042 806 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214d536, "Windows Update.lnk", 213 ) 0x0214d536 0.0000045 807 12:49:19.756 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", 0x0214d700 ) S_OK 0.0000050 808 12:49:19.756 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x021886b8, 0x0214da74, 2084 ) S_OK 0.0000053 809 12:49:19.756 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000145 810 12:49:19.756 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", NULL ) 25 0.0000053 811 12:49:19.756 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000126 812 12:49:19.756 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", NULL ) 46 0.0000059 813 12:49:19.756 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_FAVORITES, FALSE ) TRUE 0.0000129 814 12:49:19.756 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Favorites", "C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", NULL ) 25 0.0000053 815 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLSESSION" ) 1 0.0000042 816 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 817 12:49:19.756 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Jvaqbjf Hcqngr.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 818 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLSESSION" ) 1 0.0000042 819 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 820 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 821 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 822 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 823 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLSESSION" ) 1 0.0000045 824 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 825 12:49:19.756 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Jvaqbjf Hcqngr.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 826 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLSESSION" ) 1 0.0000042 827 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 828 12:49:19.756 AM 2 Explorer.EXE ILIsEqual ( 0x027629a8, 0x021826c0 ) FALSE 0.0000047 829 12:49:19.756 AM 2 Explorer.EXE ILIsEqual ( 0x027629a8, 0x0216a118 ) FALSE 0.0000045 830 12:49:19.756 AM 2 SHELL32.dll PathFindExtensionW ( "Calculator.lnk" ) 0x021887bc 0.0000042 831 12:49:19.756 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 832 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214d560, "Calculator.lnk", 192 ) 0x0214d560 0.0000045 833 12:49:19.756 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Calculator.lnk", 0x0214d700 ) S_OK 0.0000050 834 12:49:19.756 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x02188778, 0x0214da74, 2084 ) S_OK 0.0000050 835 12:49:19.756 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000131 836 12:49:19.756 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Calculator.lnk", NULL ) 25 0.0000050 837 12:49:19.756 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000120 838 12:49:19.756 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Calculator.lnk", NULL ) 55 0.0000059 839 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLSESSION" ) 1 0.0000047 840 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 841 12:49:19.756 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pnyphyngbe.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 842 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 843 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 844 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 845 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 846 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 847 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLSESSION" ) 1 0.0000045 848 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 849 12:49:19.756 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pnyphyngbe.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 850 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 851 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 852 12:49:19.756 AM 2 Explorer.EXE ILIsEqual ( 0x027629a8, 0x021826c0 ) FALSE 0.0000045 853 12:49:19.756 AM 2 Explorer.EXE ILIsEqual ( 0x027629a8, 0x0216a118 ) FALSE 0.0000042 854 12:49:19.756 AM 2 SHELL32.dll PathFindExtensionW ( "Paint.lnk" ) 0x00184e16 0.0000042 855 12:49:19.756 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 856 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214d560, "Paint.lnk", 192 ) 0x0214d560 0.0000045 857 12:49:19.756 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Paint.lnk", 0x0214d700 ) S_OK 0.0000056 858 12:49:19.756 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x00184de0, 0x0214da74, 2084 ) S_OK 0.0000047 859 12:49:19.756 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000137 860 12:49:19.756 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Paint.lnk", NULL ) 25 0.0000053 861 12:49:19.756 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000120 862 12:49:19.756 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Paint.lnk", NULL ) 55 0.0000059 863 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLSESSION" ) 1 0.0000042 864 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 865 12:49:19.756 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Cnvag.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 866 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLSESSION" ) 1 0.0000042 867 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 868 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 869 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 870 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 871 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLSESSION" ) 1 0.0000042 872 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000081 873 12:49:19.756 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Cnvag.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 874 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLSESSION" ) 1 0.0000061 875 12:49:19.756 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000059 876 12:49:19.756 AM 2 Explorer.EXE ILIsEqual ( 0x027629a8, 0x021826c0 ) FALSE 0.0000047 877 12:49:19.756 AM 2 Explorer.EXE ILIsEqual ( 0x027629a8, 0x0216a118 ) FALSE 0.0000042 878 12:49:19.756 AM 2 SHELL32.dll PathFindExtensionW ( "WordPad.lnk" ) 0x021c8834 0.0000042 879 12:49:19.756 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 880 12:49:19.756 AM 2 SHELL32.dll StrCpyNW ( 0x0214d560, "WordPad.lnk", 192 ) 0x0214d560 0.0000042 881 12:49:19.756 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\WordPad.lnk", 0x0214d700 ) S_OK 0.0000053 882 12:49:19.756 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x021c87f8, 0x0214da74, 2084 ) S_OK 0.0000089 883 12:49:19.766 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000184 884 12:49:19.766 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\WordPad.lnk", NULL ) 25 0.0000064 885 12:49:19.766 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000129 886 12:49:19.766 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\WordPad.lnk", NULL ) 55 0.0000061 887 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLSESSION" ) 1 0.0000047 888 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 889 12:49:19.766 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\JbeqCnq.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000117 890 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLSESSION" ) 1 0.0000042 891 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 892 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 893 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 894 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 895 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLSESSION" ) 1 0.0000042 896 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000053 897 12:49:19.766 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\JbeqCnq.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 898 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLSESSION" ) 1 0.0000042 899 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 900 12:49:19.766 AM 2 SHELL32.dll PathFindExtensionW ( "Accessibility Wizard.lnk" ) 0x02173c50 0.0000047 901 12:49:19.766 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000045 902 12:49:19.766 AM 2 SHELL32.dll StrCpyNW ( 0x0214d57c, "Accessibility Wizard.lnk", 178 ) 0x0214d57c 0.0000045 903 12:49:19.766 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Accessibility\Accessibility Wizard.lnk", 0x0214d700 ) S_OK 0.0000061 904 12:49:19.766 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x02173bf8, 0x0214da74, 2084 ) S_OK 0.0000050 905 12:49:19.766 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000140 906 12:49:19.766 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Accessibility\Accessibility Wizard.lnk", NULL ) 25 0.0000053 907 12:49:19.766 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000126 908 12:49:19.766 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Accessibility\Accessibility Wizard.lnk", NULL ) 55 0.0000061 909 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 910 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 911 12:49:19.766 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Npprffvovyvgl Jvmneq.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 912 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 913 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 914 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 915 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 916 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 917 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 918 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 919 12:49:19.766 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Npprffvovyvgl Jvmneq.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 920 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 921 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 922 12:49:19.766 AM 2 SHELL32.dll PathFindExtensionW ( "Remote Desktop Connection.lnk" ) 0x0016553a 0.0000042 923 12:49:19.766 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 924 12:49:19.766 AM 2 SHELL32.dll StrCpyNW ( 0x0214d57e, "Remote Desktop Connection.lnk", 177 ) 0x0214d57e 0.0000050 925 12:49:19.766 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications\Remote Desktop Connection.lnk", 0x0214d700 ) S_OK 0.0000061 926 12:49:19.766 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x001654d8, 0x0214da74, 2084 ) S_OK 0.0000050 927 12:49:19.766 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000142 928 12:49:19.766 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications\Remote Desktop Connection.lnk", NULL ) 25 0.0000053 929 12:49:19.766 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000123 930 12:49:19.766 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications\Remote Desktop Connection.lnk", NULL ) 55 0.0000059 931 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLSESSION" ) 1 0.0000042 932 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 933 12:49:19.766 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\Erzbgr Qrfxgbc Pbaarpgvba.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 934 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLSESSION" ) 1 0.0000042 935 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 936 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 937 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 938 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 939 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLSESSION" ) 1 0.0000042 940 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 941 12:49:19.766 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\Erzbgr Qrfxgbc Pbaarpgvba.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 942 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLSESSION" ) 1 0.0000042 943 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 944 12:49:19.766 AM 2 SHELL32.dll PathFindExtensionW ( "Sound Recorder.lnk" ) 0x0216180c 0.0000045 945 12:49:19.766 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 946 12:49:19.766 AM 2 SHELL32.dll StrCpyNW ( 0x0214d57c, "Sound Recorder.lnk", 178 ) 0x0214d57c 0.0000042 947 12:49:19.766 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Entertainment\Sound Recorder.lnk", 0x0214d700 ) S_OK 0.0000050 948 12:49:19.766 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x021617c0, 0x0214da74, 2084 ) S_OK 0.0000050 949 12:49:19.766 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000131 950 12:49:19.766 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Entertainment\Sound Recorder.lnk", NULL ) 25 0.0000050 951 12:49:19.766 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000123 952 12:49:19.766 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Entertainment\Sound Recorder.lnk", NULL ) 55 0.0000059 953 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLSESSION" ) 1 0.0000045 954 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 955 12:49:19.766 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Fbhaq Erpbeqre.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 956 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLSESSION" ) 1 0.0000045 957 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 958 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 959 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 960 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 961 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLSESSION" ) 1 0.0000042 962 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 963 12:49:19.766 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Fbhaq Erpbeqre.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 964 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLSESSION" ) 1 0.0000042 965 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 966 12:49:19.766 AM 2 SHELL32.dll PathFindExtensionW ( "Backup.lnk" ) 0x02188572 0.0000042 967 12:49:19.766 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 968 12:49:19.766 AM 2 SHELL32.dll StrCpyNW ( 0x0214d57a, "Backup.lnk", 179 ) 0x0214d57a 0.0000045 969 12:49:19.766 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Backup.lnk", 0x0214d700 ) S_OK 0.0000050 970 12:49:19.766 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x02188538, 0x0214da74, 2084 ) S_OK 0.0000050 971 12:49:19.766 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000131 972 12:49:19.766 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Backup.lnk", NULL ) 25 0.0000050 973 12:49:19.766 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000123 974 12:49:19.766 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Backup.lnk", NULL ) 55 0.0000061 975 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLSESSION" ) 1 0.0000042 976 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 977 12:49:19.766 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Onpxhc.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 978 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLSESSION" ) 1 0.0000045 979 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 980 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 981 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 982 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 983 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLSESSION" ) 1 0.0000042 984 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 985 12:49:19.766 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Onpxhc.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 986 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLSESSION" ) 1 0.0000042 987 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000047 988 12:49:19.766 AM 2 SHELL32.dll PathFindExtensionW ( "Character Map.lnk" ) 0x021613fa 0.0000045 989 12:49:19.766 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000039 990 12:49:19.766 AM 2 SHELL32.dll StrCpyNW ( 0x0214d57a, "Character Map.lnk", 179 ) 0x0214d57a 0.0000045 991 12:49:19.766 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Character Map.lnk", 0x0214d700 ) S_OK 0.0000056 992 12:49:19.766 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x021613b0, 0x0214da74, 2084 ) S_OK 0.0000050 993 12:49:19.766 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000140 994 12:49:19.766 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Character Map.lnk", NULL ) 25 0.0000053 995 12:49:19.766 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000120 996 12:49:19.766 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Character Map.lnk", NULL ) 55 0.0000061 997 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLSESSION" ) 1 0.0000042 998 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 999 12:49:19.766 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Punenpgre Znc.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1000 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1001 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1002 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1003 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1004 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1005 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1006 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1007 12:49:19.766 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Punenpgre Znc.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1008 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1009 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1010 12:49:19.766 AM 2 SHELL32.dll PathFindExtensionW ( "Disk Cleanup.lnk" ) 0x02161328 0.0000042 1011 12:49:19.766 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000039 1012 12:49:19.766 AM 2 SHELL32.dll StrCpyNW ( 0x0214d57a, "Disk Cleanup.lnk", 179 ) 0x0214d57a 0.0000042 1013 12:49:19.766 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk", 0x0214d700 ) S_OK 0.0000050 1014 12:49:19.766 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x021612e0, 0x0214da74, 2084 ) S_OK 0.0000056 1015 12:49:19.766 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000140 1016 12:49:19.766 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk", NULL ) 25 0.0000053 1017 12:49:19.766 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000123 1018 12:49:19.766 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk", NULL ) 55 0.0000061 1019 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1020 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1021 12:49:19.766 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Pyrnahc.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1022 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1023 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1024 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1025 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1026 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1027 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1028 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1029 12:49:19.766 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Pyrnahc.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1030 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1031 12:49:19.766 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1032 12:49:19.766 AM 2 SHELL32.dll PathFindExtensionW ( "Disk Defragmenter.lnk" ) 0x02161262 0.0000042 1033 12:49:19.766 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1034 12:49:19.766 AM 2 SHELL32.dll StrCpyNW ( 0x0214d57a, "Disk Defragmenter.lnk", 179 ) 0x0214d57a 0.0000042 1035 12:49:19.766 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Defragmenter.lnk", 0x0214d700 ) S_OK 0.0000050 1036 12:49:19.766 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x02161210, 0x0214da74, 2084 ) S_OK 0.0000050 1037 12:49:19.776 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000151 1038 12:49:19.776 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Defragmenter.lnk", NULL ) 25 0.0000053 1039 12:49:19.776 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000123 1040 12:49:19.776 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Defragmenter.lnk", NULL ) 55 0.0000059 1041 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1042 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1043 12:49:19.776 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Qrsentzragre.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1044 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1045 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1046 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1047 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1048 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1049 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1050 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000047 1051 12:49:19.776 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Qrsentzragre.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1052 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1053 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1054 12:49:19.776 AM 2 SHELL32.dll PathFindExtensionW ( "System Information.lnk" ) 0x0216aa2c 0.0000042 1055 12:49:19.776 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1056 12:49:19.776 AM 2 SHELL32.dll StrCpyNW ( 0x0214d57a, "System Information.lnk", 179 ) 0x0214d57a 0.0000045 1057 12:49:19.776 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\System Information.lnk", 0x0214d700 ) S_OK 0.0000053 1058 12:49:19.776 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x0216a9d8, 0x0214da74, 2084 ) S_OK 0.0000053 1059 12:49:19.776 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000137 1060 12:49:19.776 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\System Information.lnk", NULL ) 25 0.0000053 1061 12:49:19.776 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000120 1062 12:49:19.776 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\System Information.lnk", NULL ) 55 0.0000059 1063 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1064 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1065 12:49:19.776 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Vasbezngvba.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1066 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1067 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1068 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1069 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1070 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1071 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1072 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1073 12:49:19.776 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Vasbezngvba.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1074 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1075 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1076 12:49:19.776 AM 2 SHELL32.dll PathFindExtensionW ( "Certification Authority.lnk" ) 0x00186466 0.0000045 1077 12:49:19.776 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1078 12:49:19.776 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Certification Authority.lnk", 183 ) 0x0214d572 0.0000084 1079 12:49:19.776 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Certification Authority.lnk", 0x0214d700 ) S_OK 0.0000059 1080 12:49:19.776 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x00186408, 0x0214da74, 2084 ) S_OK 0.0000050 1081 12:49:19.776 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000142 1082 12:49:19.776 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Certification Authority.lnk", NULL ) 25 0.0000053 1083 12:49:19.776 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000120 1084 12:49:19.776 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Certification Authority.lnk", NULL ) 55 0.0000059 1085 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1086 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1087 12:49:19.776 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pregvsvpngvba Nhgubevgl.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1088 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1089 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1090 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1091 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1092 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1093 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1094 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1095 12:49:19.776 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pregvsvpngvba Nhgubevgl.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1096 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1097 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1098 12:49:19.776 AM 2 SHELL32.dll PathFindExtensionW ( "Cluster Administrator.lnk" ) 0x0016524a 0.0000042 1099 12:49:19.776 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1100 12:49:19.776 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Cluster Administrator.lnk", 183 ) 0x0214d572 0.0000042 1101 12:49:19.776 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Cluster Administrator.lnk", 0x0214d700 ) S_OK 0.0000053 1102 12:49:19.776 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x001651f0, 0x0214da74, 2084 ) S_OK 0.0000050 1103 12:49:19.776 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000134 1104 12:49:19.776 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Cluster Administrator.lnk", NULL ) 25 0.0000050 1105 12:49:19.776 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000123 1106 12:49:19.776 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Cluster Administrator.lnk", NULL ) 55 0.0000059 1107 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1108 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000075 1109 12:49:19.776 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pyhfgre Nqzvavfgengbe.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 1110 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1111 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1112 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1113 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1114 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1115 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1116 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1117 12:49:19.776 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pyhfgre Nqzvavfgengbe.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1118 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1119 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1120 12:49:19.776 AM 2 SHELL32.dll PathFindExtensionW ( "Component Services.lnk" ) 0x00186aec 0.0000045 1121 12:49:19.776 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1122 12:49:19.776 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Component Services.lnk", 183 ) 0x0214d572 0.0000042 1123 12:49:19.776 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Component Services.lnk", 0x0214d700 ) S_OK 0.0000056 1124 12:49:19.776 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x00186a98, 0x0214da74, 2084 ) S_OK 0.0000050 1125 12:49:19.776 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000134 1126 12:49:19.776 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Component Services.lnk", NULL ) 25 0.0000053 1127 12:49:19.776 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000120 1128 12:49:19.776 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Component Services.lnk", NULL ) 55 0.0000059 1129 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1130 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1131 12:49:19.776 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzcbarag Freivprf.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1132 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1133 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1134 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1135 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1136 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1137 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1138 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1139 12:49:19.776 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzcbarag Freivprf.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1140 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1141 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1142 12:49:19.776 AM 2 SHELL32.dll PathFindExtensionW ( "Computer Management.lnk" ) 0x0216f3de 0.0000045 1143 12:49:19.776 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1144 12:49:19.776 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Computer Management.lnk", 183 ) 0x0214d572 0.0000045 1145 12:49:19.776 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Computer Management.lnk", 0x0214d700 ) S_OK 0.0000053 1146 12:49:19.776 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x0216f388, 0x0214da74, 2084 ) S_OK 0.0000047 1147 12:49:19.776 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000140 1148 12:49:19.776 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Computer Management.lnk", NULL ) 25 0.0000053 1149 12:49:19.776 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000120 1150 12:49:19.776 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Computer Management.lnk", NULL ) 55 0.0000059 1151 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1152 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1153 12:49:19.776 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzchgre Znantrzrag.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1154 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1155 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1156 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1157 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1158 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1159 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1160 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1161 12:49:19.776 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzchgre Znantrzrag.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1162 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1163 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1164 12:49:19.776 AM 2 SHELL32.dll PathFindExtensionW ( "Configure Your Server.lnk" ) 0x0216f922 0.0000042 1165 12:49:19.776 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1166 12:49:19.776 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Configure Your Server.lnk", 183 ) 0x0214d572 0.0000042 1167 12:49:19.776 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Configure Your Server.lnk", 0x0214d700 ) S_OK 0.0000050 1168 12:49:19.776 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x0216f8c8, 0x0214da74, 2084 ) S_OK 0.0000050 1169 12:49:19.776 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000291 1170 12:49:19.776 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Configure Your Server.lnk", NULL ) 25 0.0000056 1171 12:49:19.776 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000123 1172 12:49:19.776 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Configure Your Server.lnk", NULL ) 55 0.0000059 1173 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1174 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1175 12:49:19.776 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbasvther Lbhe Freire.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1176 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1177 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1178 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1179 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1180 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1181 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1182 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1183 12:49:19.776 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbasvther Lbhe Freire.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1184 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1185 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1186 12:49:19.776 AM 2 SHELL32.dll PathFindExtensionW ( "Data Sources (ODBC).lnk" ) 0x0216f75e 0.0000042 1187 12:49:19.776 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1188 12:49:19.776 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Data Sources (ODBC).lnk", 183 ) 0x0214d572 0.0000045 1189 12:49:19.776 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk", 0x0214d700 ) S_OK 0.0000053 1190 12:49:19.776 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x0216f708, 0x0214da74, 2084 ) S_OK 0.0000050 1191 12:49:19.776 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000131 1192 12:49:19.776 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk", NULL ) 25 0.0000050 1193 12:49:19.776 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000120 1194 12:49:19.776 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk", NULL ) 55 0.0000061 1195 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLSESSION" ) 1 0.0000042 1196 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1197 12:49:19.776 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qngn Fbheprf (BQOP).yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1198 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLSESSION" ) 1 0.0000042 1199 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1200 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1201 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1202 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000047 1203 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLSESSION" ) 1 0.0000045 1204 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1205 12:49:19.776 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qngn Fbheprf (BQOP).yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1206 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLSESSION" ) 1 0.0000042 1207 12:49:19.776 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1208 12:49:19.786 AM 2 SHELL32.dll PathFindExtensionW ( "Distributed File System.lnk" ) 0x0216f5a6 0.0000061 1209 12:49:19.786 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000056 1210 12:49:19.786 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Distributed File System.lnk", 183 ) 0x0214d572 0.0000059 1211 12:49:19.786 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Distributed File System.lnk", 0x0214d700 ) S_OK 0.0000092 1212 12:49:19.786 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x0216f548, 0x0214da74, 2084 ) S_OK 0.0000073 1213 12:49:19.786 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000223 1214 12:49:19.786 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Distributed File System.lnk", NULL ) 25 0.0000075 1215 12:49:19.786 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000162 1216 12:49:19.786 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Distributed File System.lnk", NULL ) 55 0.0000078 1217 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1218 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1219 12:49:19.786 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qvfgevohgrq Svyr Flfgrz.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1220 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1221 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1222 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1223 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1224 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1225 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1226 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1227 12:49:19.786 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qvfgevohgrq Svyr Flfgrz.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000095 1228 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1229 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1230 12:49:19.786 AM 2 SHELL32.dll PathFindExtensionW ( "Event Viewer.lnk" ) 0x021610b8 0.0000056 1231 12:49:19.786 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000056 1232 12:49:19.786 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Event Viewer.lnk", 183 ) 0x0214d572 0.0000056 1233 12:49:19.786 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Event Viewer.lnk", 0x0214d700 ) S_OK 0.0000067 1234 12:49:19.786 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x02161070, 0x0214da74, 2084 ) S_OK 0.0000064 1235 12:49:19.786 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000190 1236 12:49:19.786 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Event Viewer.lnk", NULL ) 25 0.0000070 1237 12:49:19.786 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000162 1238 12:49:19.786 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Event Viewer.lnk", NULL ) 55 0.0000075 1239 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1240 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000053 1241 12:49:19.786 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Rirag Ivrjre.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000123 1242 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1243 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1244 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000053 1245 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000053 1246 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1247 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1248 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1249 12:49:19.786 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Rirag Ivrjre.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1250 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1251 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1252 12:49:19.786 AM 2 SHELL32.dll PathFindExtensionW ( "Licensing.lnk" ) 0x00189fda 0.0000056 1253 12:49:19.786 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000053 1254 12:49:19.786 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Licensing.lnk", 183 ) 0x0214d572 0.0000056 1255 12:49:19.786 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Licensing.lnk", 0x0214d700 ) S_OK 0.0000075 1256 12:49:19.786 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x00189f98, 0x0214da74, 2084 ) S_OK 0.0000064 1257 12:49:19.786 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000173 1258 12:49:19.786 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Licensing.lnk", NULL ) 25 0.0000067 1259 12:49:19.786 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000170 1260 12:49:19.786 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Licensing.lnk", NULL ) 55 0.0000075 1261 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1262 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1263 12:49:19.786 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Yvprafvat.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 1264 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1265 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1266 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1267 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1268 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 1269 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000053 1270 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1271 12:49:19.786 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Yvprafvat.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 1272 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1273 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1274 12:49:19.786 AM 2 SHELL32.dll PathFindExtensionW ( "Local Security Policy.lnk" ) 0x0216f4c2 0.0000059 1275 12:49:19.786 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000053 1276 12:49:19.786 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Local Security Policy.lnk", 183 ) 0x0214d572 0.0000056 1277 12:49:19.786 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Local Security Policy.lnk", 0x0214d700 ) S_OK 0.0000070 1278 12:49:19.786 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x0216f468, 0x0214da74, 2084 ) S_OK 0.0000067 1279 12:49:19.786 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000173 1280 12:49:19.786 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Local Security Policy.lnk", NULL ) 25 0.0000064 1281 12:49:19.786 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000159 1282 12:49:19.786 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Local Security Policy.lnk", NULL ) 55 0.0000075 1283 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1284 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1285 12:49:19.786 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ybpny Frphevgl Cbyvpl.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 1286 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1287 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000053 1288 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1289 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1290 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1291 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1292 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1293 12:49:19.786 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ybpny Frphevgl Cbyvpl.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000095 1294 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLSESSION" ) 1 0.0000053 1295 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1296 12:49:19.786 AM 2 SHELL32.dll PathFindExtensionW ( "Manage Your Server.lnk" ) 0x021c8594 0.0000059 1297 12:49:19.786 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000053 1298 12:49:19.786 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Manage Your Server.lnk", 183 ) 0x0214d572 0.0000056 1299 12:49:19.786 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Manage Your Server.lnk", 0x0214d700 ) S_OK 0.0000073 1300 12:49:19.786 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x021c8540, 0x0214da74, 2084 ) S_OK 0.0000064 1301 12:49:19.786 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000176 1302 12:49:19.786 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Manage Your Server.lnk", NULL ) 25 0.0000067 1303 12:49:19.786 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000162 1304 12:49:19.786 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Manage Your Server.lnk", NULL ) 55 0.0000075 1305 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1306 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1307 12:49:19.786 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Znantr Lbhe Freire.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000288 1308 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1309 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1310 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1311 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1312 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1313 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1314 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000059 1315 12:49:19.786 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Znantr Lbhe Freire.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 1316 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1317 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1318 12:49:19.786 AM 2 SHELL32.dll PathFindExtensionW ( "Microsoft .NET Framework 1.1 Configuration.lnk" ) 0x02760b94 0.0000059 1319 12:49:19.786 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000056 1320 12:49:19.786 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Microsoft .NET Framework 1.1 Configuration.lnk", 183 ) 0x0214d572 0.0000059 1321 12:49:19.786 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", 0x0214d700 ) S_OK 0.0000070 1322 12:49:19.786 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x02760b10, 0x0214da74, 2084 ) S_OK 0.0000067 1323 12:49:19.786 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000176 1324 12:49:19.786 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", NULL ) 25 0.0000070 1325 12:49:19.786 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000159 1326 12:49:19.786 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", NULL ) 55 0.0000075 1327 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1328 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1329 12:49:19.786 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Pbasvthengvba.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 1330 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1331 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1332 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000059 1333 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1334 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1335 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1336 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1337 12:49:19.786 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Pbasvthengvba.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 1338 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1339 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1340 12:49:19.786 AM 2 SHELL32.dll PathFindExtensionW ( "Microsoft .NET Framework 1.1 Wizards.lnk" ) 0x02760e58 0.0000059 1341 12:49:19.786 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000053 1342 12:49:19.786 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Microsoft .NET Framework 1.1 Wizards.lnk", 183 ) 0x0214d572 0.0000056 1343 12:49:19.786 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", 0x0214d700 ) S_OK 0.0000073 1344 12:49:19.786 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x02760de0, 0x0214da74, 2084 ) S_OK 0.0000064 1345 12:49:19.786 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000176 1346 12:49:19.786 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", NULL ) 25 0.0000067 1347 12:49:19.786 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000159 1348 12:49:19.786 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", NULL ) 55 0.0000075 1349 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1350 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1351 12:49:19.786 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Jvmneqf.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 1352 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1353 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1354 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1355 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000053 1356 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000059 1357 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1358 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1359 12:49:19.786 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Jvmneqf.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000101 1360 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1361 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1362 12:49:19.786 AM 2 SHELL32.dll PathFindExtensionW ( "Network Load Balancing Manager.lnk" ) 0x021af144 0.0000059 1363 12:49:19.786 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000056 1364 12:49:19.786 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Network Load Balancing Manager.lnk", 183 ) 0x0214d572 0.0000056 1365 12:49:19.786 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Network Load Balancing Manager.lnk", 0x0214d700 ) S_OK 0.0000070 1366 12:49:19.786 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x021af0d8, 0x0214da74, 2084 ) S_OK 0.0000067 1367 12:49:19.786 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000173 1368 12:49:19.786 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Network Load Balancing Manager.lnk", NULL ) 25 0.0000067 1369 12:49:19.786 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000162 1370 12:49:19.786 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Network Load Balancing Manager.lnk", NULL ) 55 0.0000078 1371 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1372 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1373 12:49:19.786 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Argjbex Ybnq Onynapvat Znantre.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000095 1374 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1375 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000053 1376 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1377 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1378 12:49:19.786 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1379 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000039 1380 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000039 1381 12:49:19.796 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Argjbex Ybnq Onynapvat Znantre.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 1382 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000036 1383 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000039 1384 12:49:19.796 AM 2 SHELL32.dll PathFindExtensionW ( "Performance.lnk" ) 0x0018a0a6 0.0000039 1385 12:49:19.796 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000036 1386 12:49:19.796 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Performance.lnk", 183 ) 0x0214d572 0.0000039 1387 12:49:19.796 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Performance.lnk", 0x0214d700 ) S_OK 0.0000053 1388 12:49:19.796 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x0018a060, 0x0214da74, 2084 ) S_OK 0.0000047 1389 12:49:19.796 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000129 1390 12:49:19.796 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Performance.lnk", NULL ) 25 0.0000050 1391 12:49:19.796 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000106 1392 12:49:19.796 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Performance.lnk", NULL ) 55 0.0000053 1393 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLSESSION" ) 1 0.0000036 1394 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000036 1395 12:49:19.796 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Cresbeznapr.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1396 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLSESSION" ) 1 0.0000036 1397 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000039 1398 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000047 1399 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1400 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1401 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1402 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1403 12:49:19.796 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Cresbeznapr.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 1404 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1405 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1406 12:49:19.796 AM 2 SHELL32.dll PathFindExtensionW ( "Remote Desktops.lnk" ) 0x0216f676 0.0000045 1407 12:49:19.796 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1408 12:49:19.796 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Remote Desktops.lnk", 183 ) 0x0214d572 0.0000045 1409 12:49:19.796 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Remote Desktops.lnk", 0x0214d700 ) S_OK 0.0000059 1410 12:49:19.796 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x0216f628, 0x0214da74, 2084 ) S_OK 0.0000053 1411 12:49:19.796 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000137 1412 12:49:19.796 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Remote Desktops.lnk", NULL ) 25 0.0000053 1413 12:49:19.796 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000120 1414 12:49:19.796 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Remote Desktops.lnk", NULL ) 55 0.0000059 1415 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1416 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1417 12:49:19.796 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Erzbgr Qrfxgbcf.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1418 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1419 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1420 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1421 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1422 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1423 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1424 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1425 12:49:19.796 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Erzbgr Qrfxgbcf.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1426 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1427 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1428 12:49:19.796 AM 2 SHELL32.dll PathFindExtensionW ( "Routing and Remote Access.lnk" ) 0x0016534a 0.0000045 1429 12:49:19.796 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000045 1430 12:49:19.796 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Routing and Remote Access.lnk", 183 ) 0x0214d572 0.0000045 1431 12:49:19.796 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Routing and Remote Access.lnk", 0x0214d700 ) S_OK 0.0000059 1432 12:49:19.796 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x001652e8, 0x0214da74, 2084 ) S_OK 0.0000050 1433 12:49:19.796 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000137 1434 12:49:19.796 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Routing and Remote Access.lnk", NULL ) 25 0.0000053 1435 12:49:19.796 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000120 1436 12:49:19.796 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Routing and Remote Access.lnk", NULL ) 55 0.0000059 1437 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1438 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1439 12:49:19.796 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ebhgvat naq Erzbgr Npprff.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1440 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1441 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1442 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1443 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1444 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1445 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1446 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1447 12:49:19.796 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ebhgvat naq Erzbgr Npprff.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1448 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1449 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1450 12:49:19.796 AM 2 SHELL32.dll PathFindExtensionW ( "Services.lnk" ) 0x0018a168 0.0000045 1451 12:49:19.796 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1452 12:49:19.796 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Services.lnk", 183 ) 0x0214d572 0.0000042 1453 12:49:19.796 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Services.lnk", 0x0214d700 ) S_OK 0.0000053 1454 12:49:19.796 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x0018a128, 0x0214da74, 2084 ) S_OK 0.0000050 1455 12:49:19.796 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000131 1456 12:49:19.796 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Services.lnk", NULL ) 25 0.0000053 1457 12:49:19.796 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000360 1458 12:49:19.796 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Services.lnk", NULL ) 55 0.0000070 1459 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1460 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1461 12:49:19.796 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Freivprf.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1462 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1463 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1464 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1465 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1466 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1467 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1468 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1469 12:49:19.796 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Freivprf.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1470 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1471 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1472 12:49:19.796 AM 2 SHELL32.dll PathFindExtensionW ( "Terminal Server Licensing.lnk" ) 0x0016591a 0.0000059 1473 12:49:19.796 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000059 1474 12:49:19.796 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Terminal Server Licensing.lnk", 183 ) 0x0214d572 0.0000059 1475 12:49:19.796 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Server Licensing.lnk", 0x0214d700 ) S_OK 0.0000073 1476 12:49:19.796 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x001658b8, 0x0214da74, 2084 ) S_OK 0.0000064 1477 12:49:19.796 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000193 1478 12:49:19.796 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Server Licensing.lnk", NULL ) 25 0.0000067 1479 12:49:19.796 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000162 1480 12:49:19.796 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Server Licensing.lnk", NULL ) 55 0.0000087 1481 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000087 1482 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000087 1483 12:49:19.796 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freire Yvprafvat.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000369 1484 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000092 1485 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000084 1486 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000075 1487 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000059 1488 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1489 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1490 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000050 1491 12:49:19.796 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freire Yvprafvat.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 1492 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1493 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1494 12:49:19.796 AM 2 SHELL32.dll PathFindExtensionW ( "Terminal Services Configuration.lnk" ) 0x021ab026 0.0000047 1495 12:49:19.796 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1496 12:49:19.796 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Terminal Services Configuration.lnk", 183 ) 0x0214d572 0.0000045 1497 12:49:19.796 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Configuration.lnk", 0x0214d700 ) S_OK 0.0000064 1498 12:49:19.796 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x021aafb8, 0x0214da74, 2084 ) S_OK 0.0000053 1499 12:49:19.796 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000162 1500 12:49:19.796 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Configuration.lnk", NULL ) 25 0.0000056 1501 12:49:19.796 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000126 1502 12:49:19.796 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Configuration.lnk", NULL ) 55 0.0000059 1503 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1504 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1505 12:49:19.796 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Pbasvthengvba.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 1506 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1507 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1508 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000047 1509 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1510 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1511 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1512 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1513 12:49:19.796 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Pbasvthengvba.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000115 1514 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1515 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1516 12:49:19.796 AM 2 SHELL32.dll PathFindExtensionW ( "Terminal Services Manager.lnk" ) 0x00165b0a 0.0000047 1517 12:49:19.796 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000053 1518 12:49:19.796 AM 2 SHELL32.dll StrCpyNW ( 0x0214d572, "Terminal Services Manager.lnk", 183 ) 0x0214d572 0.0000045 1519 12:49:19.796 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Manager.lnk", 0x0214d700 ) S_OK 0.0000056 1520 12:49:19.796 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x00165aa8, 0x0214da74, 2084 ) S_OK 0.0000053 1521 12:49:19.796 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000145 1522 12:49:19.796 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Manager.lnk", NULL ) 25 0.0000053 1523 12:49:19.796 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000131 1524 12:49:19.796 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Manager.lnk", NULL ) 55 0.0000059 1525 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1526 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1527 12:49:19.796 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Znantre.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1528 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1529 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1530 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1531 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1532 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1533 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1534 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1535 12:49:19.796 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Znantre.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1536 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000047 1537 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1538 12:49:19.796 AM 2 SHELL32.dll PathFindExtensionW ( "API Monitor v2 (Alpha) 32-bit.lnk" ) 0x0219d7c2 0.0000045 1539 12:49:19.796 AM 2 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1540 12:49:19.796 AM 2 SHELL32.dll StrCpyNW ( 0x0214d57e, "API Monitor v2 (Alpha) 32-bit.lnk", 177 ) 0x0214d57e 0.0000045 1541 12:49:19.796 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", 0x0214d700 ) S_OK 0.0000056 1542 12:49:19.796 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x0219d758, 0x0214da74, 2084 ) S_OK 0.0000050 1543 12:49:19.796 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000142 1544 12:49:19.796 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", NULL ) 25 0.0000050 1545 12:49:19.796 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000123 1546 12:49:19.796 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", NULL ) 55 0.0000056 1547 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1548 12:49:19.796 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1549 12:49:19.796 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\ebuvgno.pbz\NCV Zbavgbe i2\NCV Zbavgbe i2 (Nycun) 32-ovg.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_SUCCESS 0.0000115 1550 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1551 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1552 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1553 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1554 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1555 12:49:19.806 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\ebuvgno.pbz\NCV Zbavgbe i2\NCV Zbavgbe i2 (Nycun) 32-ovg.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_SUCCESS 0.0000075 1556 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1557 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1558 12:49:19.806 AM 2 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0214fde0 ) S_OK 0.0000047 1559 12:49:19.806 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0214fd94 ) S_OK 0.0000042 1560 12:49:19.806 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0214fd90 ) S_OK 0.0000045 1561 12:49:19.806 AM 2 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 1562 12:49:19.806 AM 2 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0214f6ec, 260 ) 4 0.0000047 1563 12:49:19.806 AM 2 SHELL32.dll StrDupW ( "C:\" ) 0x0215fac0 0.0000050 1564 12:49:19.806 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x0214fbac ) S_OK 0.0000042 1565 12:49:19.806 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder2, 0x0214fba8 ) S_OK 0.0000042 1566 12:49:19.806 AM 2 SHELL32.dll StrCpyNW ( 0x0214f944, "Documents and Settings", 260 ) 0x0214f944 0.0000042 1567 12:49:19.806 AM 2 SHELL32.dll StrCpyNW ( 0x0214f71c, "Documents and Settings", 260 ) 0x0214f71c 0.0000045 1568 12:49:19.806 AM 2 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000047 1569 12:49:19.806 AM 2 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x021608e8 0.0000045 1570 12:49:19.806 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0214fb5c ) S_OK 0.0000045 1571 12:49:19.806 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IPersistFolder3, 0x0214f47c ) S_OK 0.0000045 1572 12:49:19.806 AM 2 SHELL32.dll StrCpyNW ( 0x0214f496, "Documents and Settings", 257 ) 0x0214f496 0.0000045 1573 12:49:19.806 AM 2 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215e860 0.0000050 1574 12:49:19.806 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder2, 0x0214fb58 ) S_OK 0.0000073 1575 12:49:19.806 AM 2 SHELL32.dll StrCpyNW ( 0x0214f8f4, "Administrator", 260 ) 0x0214f8f4 0.0000045 1576 12:49:19.806 AM 2 SHELL32.dll StrCpyNW ( 0x0214f6cc, "All Users", 260 ) 0x0214f6cc 0.0000042 1577 12:49:19.806 AM 2 SHELL32.dll StrCmpICW ( "All Users", "Administrator" ) 8 0.0000045 1578 12:49:19.806 AM 2 SHELL32.dll PathFindExtensionW ( "R2Help.lnk" ) 0x0216b272 0.0000045 1579 12:49:19.806 AM 2 SHELL32.dll StrCpyNW ( 0x0214d530, "R2Help.lnk", 216 ) 0x0214d530 0.0000045 1580 12:49:19.806 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Desktop\R2Help.lnk", 0x0214d700 ) S_OK 0.0000053 1581 12:49:19.806 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x0216b238, 0x0214da74, 2084 ) S_OK 0.0000047 1582 12:49:19.806 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000145 1583 12:49:19.806 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Desktop\R2Help.lnk", NULL ) 25 0.0000053 1584 12:49:19.806 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000123 1585 12:49:19.806 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Desktop\R2Help.lnk", NULL ) 35 0.0000056 1586 12:49:19.806 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_FAVORITES, FALSE ) TRUE 0.0000129 1587 12:49:19.806 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Favorites", "C:\Documents and Settings\All Users\Desktop\R2Help.lnk", NULL ) 25 0.0000050 1588 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1589 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1590 12:49:19.806 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\E2Uryc.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 1591 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1592 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1593 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1594 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1595 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1596 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1597 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1598 12:49:19.806 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\E2Uryc.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1599 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1600 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1601 12:49:19.806 AM 2 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0214fde0 ) S_OK 0.0000047 1602 12:49:19.806 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0214fd94 ) S_OK 0.0000045 1603 12:49:19.806 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0214fd90 ) S_OK 0.0000045 1604 12:49:19.806 AM 2 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 1605 12:49:19.806 AM 2 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0214f6ec, 260 ) 4 0.0000047 1606 12:49:19.806 AM 2 SHELL32.dll StrDupW ( "C:\" ) 0x0215fac0 0.0000047 1607 12:49:19.806 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x0214fbac ) S_OK 0.0000042 1608 12:49:19.806 AM 2 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder2, 0x0214fba8 ) S_OK 0.0000045 1609 12:49:19.806 AM 2 SHELL32.dll StrCpyNW ( 0x0214f944, "Documents and Settings", 260 ) 0x0214f944 0.0000045 1610 12:49:19.806 AM 2 SHELL32.dll StrCpyNW ( 0x0214f71c, "Documents and Settings", 260 ) 0x0214f71c 0.0000042 1611 12:49:19.806 AM 2 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 1612 12:49:19.806 AM 2 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x021608e8 0.0000042 1613 12:49:19.806 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0214fb5c ) S_OK 0.0000047 1614 12:49:19.806 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IPersistFolder3, 0x0214f47c ) S_OK 0.0000045 1615 12:49:19.806 AM 2 SHELL32.dll StrCpyNW ( 0x0214f496, "Documents and Settings", 257 ) 0x0214f496 0.0000045 1616 12:49:19.806 AM 2 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215e860 0.0000050 1617 12:49:19.806 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder2, 0x0214fb58 ) S_OK 0.0000045 1618 12:49:19.806 AM 2 SHELL32.dll StrCpyNW ( 0x0214f8f4, "Administrator", 260 ) 0x0214f8f4 0.0000045 1619 12:49:19.806 AM 2 SHELL32.dll StrCpyNW ( 0x0214f6cc, "All Users", 260 ) 0x0214f6cc 0.0000042 1620 12:49:19.806 AM 2 SHELL32.dll StrCmpICW ( "All Users", "Administrator" ) 8 0.0000045 1621 12:49:19.806 AM 2 SHELL32.dll PathFindExtensionW ( "Security Configuration Wizard.lnk" ) 0x021c8c02 0.0000042 1622 12:49:19.806 AM 2 SHELL32.dll StrCpyNW ( 0x0214d530, "Security Configuration Wizard.lnk", 216 ) 0x0214d530 0.0000045 1623 12:49:19.806 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", 0x0214d700 ) S_OK 0.0000053 1624 12:49:19.806 AM 2 BROWSEUI.dll StrRetToBufW ( 0x0214d6fc, 0x021c8b98, 0x0214da74, 2084 ) S_OK 0.0000047 1625 12:49:19.806 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_PROGRAMS, FALSE ) TRUE 0.0000142 1626 12:49:19.806 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", NULL ) 25 0.0000053 1627 12:49:19.806 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_COMMON_PROGRAMS, FALSE ) TRUE 0.0000120 1628 12:49:19.806 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", NULL ) 35 0.0000056 1629 12:49:19.806 AM 2 BROWSEUI.dll SHGetSpecialFolderPath ( NULL, 0x0214d834, CSIDL_FAVORITES, FALSE ) TRUE 0.0000461 1630 12:49:19.806 AM 2 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Favorites", "C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", NULL ) 25 0.0000053 1631 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1632 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1633 12:49:19.806 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\Frphevgl Pbasvthengvba Jvmneq.yax", NULL, 0x0214dbf8, 0x0214ecb4, 0x0214ec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 1634 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1635 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1636 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1637 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1638 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1639 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1640 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1641 12:49:19.806 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\Frphevgl Pbasvthengvba Jvmneq.yax", NULL, 0x0214dc34, 0x0214ecc0, 0x0214eca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1642 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1643 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1644 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLSESSION" ) 1 0.0000042 1645 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1646 12:49:19.806 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Vagrearg Rkcybere\vrkcyber.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1647 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLSESSION" ) 1 0.0000042 1648 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1649 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1650 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1651 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1652 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLSESSION" ) 1 0.0000042 1653 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1654 12:49:19.806 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Vagrearg Rkcybere\vrkcyber.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1655 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLSESSION" ) 1 0.0000045 1656 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1657 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLSESSION" ) 1 0.0000042 1658 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1659 12:49:19.806 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\zfvza.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1660 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLSESSION" ) 1 0.0000045 1661 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1662 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1663 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1664 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1665 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLSESSION" ) 1 0.0000045 1666 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1667 12:49:19.806 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\zfvza.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 1668 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLSESSION" ) 1 0.0000042 1669 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1670 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLSESSION" ) 1 0.0000042 1671 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1672 12:49:19.806 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\epvzyol.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1673 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLSESSION" ) 1 0.0000045 1674 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1675 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1676 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1677 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1678 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLSESSION" ) 1 0.0000045 1679 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1680 12:49:19.806 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\epvzyol.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1681 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLSESSION" ) 1 0.0000042 1682 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1683 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLSESSION" ) 1 0.0000042 1684 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1685 12:49:19.806 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\jno.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1686 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLSESSION" ) 1 0.0000042 1687 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1688 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1689 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1690 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1691 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLSESSION" ) 1 0.0000045 1692 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1693 12:49:19.806 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\jno.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1694 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLSESSION" ) 1 0.0000045 1695 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1696 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLSESSION" ) 1 0.0000045 1697 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1698 12:49:19.806 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pzq.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_SUCCESS 0.0000070 1699 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLSESSION" ) 1 0.0000042 1700 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1701 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1702 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLSESSION" ) 1 0.0000042 1703 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1704 12:49:19.806 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pzq.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_SUCCESS 0.0000064 1705 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLSESSION" ) 1 0.0000045 1706 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1707 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLSESSION" ) 1 0.0000042 1708 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000047 1709 12:49:19.806 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\abgrcnq.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1710 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLSESSION" ) 1 0.0000045 1711 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1712 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1713 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1714 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1715 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLSESSION" ) 1 0.0000042 1716 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1717 12:49:19.806 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\abgrcnq.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1718 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLSESSION" ) 1 0.0000042 1719 12:49:19.806 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1720 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLSESSION" ) 1 0.0000045 1721 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1722 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zntavsl.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1723 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLSESSION" ) 1 0.0000042 1724 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1725 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1726 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1727 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1728 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLSESSION" ) 1 0.0000042 1729 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1730 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zntavsl.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1731 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLSESSION" ) 1 0.0000042 1732 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1733 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLSESSION" ) 1 0.0000042 1734 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1735 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\aneengbe.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 1736 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLSESSION" ) 1 0.0000059 1737 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1738 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1739 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1740 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1741 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLSESSION" ) 1 0.0000042 1742 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1743 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\aneengbe.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1744 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLSESSION" ) 1 0.0000042 1745 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1746 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLSESSION" ) 1 0.0000045 1747 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1748 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bfx.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1749 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLSESSION" ) 1 0.0000042 1750 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1751 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1752 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1753 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1754 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLSESSION" ) 1 0.0000042 1755 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000070 1756 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bfx.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000106 1757 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLSESSION" ) 1 0.0000056 1758 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1759 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLSESSION" ) 1 0.0000059 1760 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 1761 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hgvyzna.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 1762 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLSESSION" ) 1 0.0000053 1763 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1764 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1765 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1766 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1767 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLSESSION" ) 1 0.0000067 1768 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000061 1769 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hgvyzna.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 1770 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLSESSION" ) 1 0.0000059 1771 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000064 1772 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLSESSION" ) 1 0.0000061 1773 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 1774 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf Zrqvn Cynlre\jzcynlre.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000129 1775 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLSESSION" ) 1 0.0000059 1776 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 1777 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000053 1778 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1779 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1780 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLSESSION" ) 1 0.0000056 1781 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1782 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf Zrqvn Cynlre\jzcynlre.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000101 1783 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLSESSION" ) 1 0.0000064 1784 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000061 1785 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLSESSION" ) 1 0.0000056 1786 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1787 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfugn.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000106 1788 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLSESSION" ) 1 0.0000056 1789 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1790 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1791 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1792 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 1793 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLSESSION" ) 1 0.0000056 1794 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1795 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfugn.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 1796 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLSESSION" ) 1 0.0000056 1797 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1798 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLSESSION" ) 1 0.0000056 1799 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 1800 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jhcqzte.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1801 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLSESSION" ) 1 0.0000053 1802 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 1803 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1804 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1805 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1806 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLSESSION" ) 1 0.0000059 1807 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1808 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jhcqzte.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 1809 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLSESSION" ) 1 0.0000059 1810 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 1811 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLSESSION" ) 1 0.0000056 1812 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1813 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pnyp.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1814 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLSESSION" ) 1 0.0000472 1815 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1816 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1817 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000053 1818 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1819 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLSESSION" ) 1 0.0000056 1820 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1821 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pnyp.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 1822 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLSESSION" ) 1 0.0000056 1823 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1824 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLSESSION" ) 1 0.0000056 1825 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 1826 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfcnvag.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1827 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLSESSION" ) 1 0.0000056 1828 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1829 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1830 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1831 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1832 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLSESSION" ) 1 0.0000056 1833 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1834 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfcnvag.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1835 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLSESSION" ) 1 0.0000056 1836 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1837 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLSESSION" ) 1 0.0000059 1838 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1839 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Npprffbevrf\jbeqcnq.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 1840 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLSESSION" ) 1 0.0000056 1841 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1842 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1843 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1844 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1845 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLSESSION" ) 1 0.0000064 1846 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1847 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Npprffbevrf\jbeqcnq.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 1848 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLSESSION" ) 1 0.0000056 1849 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1850 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLSESSION" ) 1 0.0000056 1851 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1852 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\nppjvm.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 1853 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLSESSION" ) 1 0.0000056 1854 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1855 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000059 1856 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1857 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1858 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLSESSION" ) 1 0.0000056 1859 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1860 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\nppjvm.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1861 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLSESSION" ) 1 0.0000056 1862 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 1863 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLSESSION" ) 1 0.0000056 1864 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1865 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfgfp.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1866 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLSESSION" ) 1 0.0000056 1867 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1868 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1869 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1870 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1871 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLSESSION" ) 1 0.0000056 1872 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1873 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfgfp.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1874 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLSESSION" ) 1 0.0000053 1875 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1876 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLSESSION" ) 1 0.0000064 1877 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1878 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\faqerp32.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 1879 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLSESSION" ) 1 0.0000056 1880 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1881 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1882 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1883 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 1884 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLSESSION" ) 1 0.0000056 1885 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1886 12:49:19.816 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\faqerp32.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1887 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLSESSION" ) 1 0.0000056 1888 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 1889 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLSESSION" ) 1 0.0000056 1890 12:49:19.816 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 1891 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\agonpxhc.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 1892 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLSESSION" ) 1 0.0000042 1893 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1894 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1895 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1896 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1897 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLSESSION" ) 1 0.0000042 1898 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1899 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\agonpxhc.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1900 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLSESSION" ) 1 0.0000042 1901 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1902 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLSESSION" ) 1 0.0000042 1903 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1904 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\puneznc.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1905 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLSESSION" ) 1 0.0000042 1906 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1907 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1908 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1909 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1910 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLSESSION" ) 1 0.0000042 1911 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1912 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\puneznc.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1913 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLSESSION" ) 1 0.0000042 1914 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1915 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 1916 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1917 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pyrnazte.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1918 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 1919 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1920 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1921 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1922 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1923 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLSESSION" ) 1 0.0000045 1924 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1925 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pyrnazte.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1926 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 1927 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000061 1928 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLSESSION" ) 1 0.0000045 1929 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1930 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qset.zfp", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1931 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLSESSION" ) 1 0.0000064 1932 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000050 1933 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1934 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1935 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1936 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLSESSION" ) 1 0.0000042 1937 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1938 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qset.zfp", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1939 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLSESSION" ) 1 0.0000042 1940 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1941 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLSESSION" ) 1 0.0000042 1942 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1943 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZFVasb\zfvasb32.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1944 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLSESSION" ) 1 0.0000042 1945 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1946 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1947 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1948 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1949 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLSESSION" ) 1 0.0000042 1950 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1951 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZFVasb\zfvasb32.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1952 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLSESSION" ) 1 0.0000045 1953 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1954 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLSESSION" ) 1 0.0000042 1955 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1956 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pregfei.zfp", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1957 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLSESSION" ) 1 0.0000045 1958 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1959 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1960 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1961 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1962 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLSESSION" ) 1 0.0000047 1963 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1964 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pregfei.zfp", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1965 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLSESSION" ) 1 0.0000042 1966 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000047 1967 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLSESSION" ) 1 0.0000042 1968 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1969 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Pyhfgre\PyhNqzva.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1970 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLSESSION" ) 1 0.0000042 1971 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1972 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1973 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1974 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1975 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLSESSION" ) 1 0.0000042 1976 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1977 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Pyhfgre\PyhNqzva.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1978 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLSESSION" ) 1 0.0000042 1979 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1980 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLSESSION" ) 1 0.0000042 1981 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1982 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\Pbz\pbzrkc.zfp", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1983 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLSESSION" ) 1 0.0000042 1984 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1985 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1986 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1987 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1988 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLSESSION" ) 1 0.0000042 1989 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1990 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\Pbz\pbzrkc.zfp", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1991 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLSESSION" ) 1 0.0000042 1992 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1993 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000042 1994 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1995 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbzcztzg.zfp", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1996 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000045 1997 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1998 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1999 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2000 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 2001 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000045 2002 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2003 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbzcztzg.zfp", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2004 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000045 2005 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2006 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLSESSION" ) 1 0.0000045 2007 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000061 2008 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\plf.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 2009 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLSESSION" ) 1 0.0000042 2010 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2011 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 2012 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2013 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2014 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLSESSION" ) 1 0.0000042 2015 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2016 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\plf.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2017 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLSESSION" ) 1 0.0000042 2018 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2019 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLSESSION" ) 1 0.0000042 2020 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2021 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bqopnq32.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2022 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLSESSION" ) 1 0.0000045 2023 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2024 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2025 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2026 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2027 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLSESSION" ) 1 0.0000042 2028 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2029 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bqopnq32.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2030 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLSESSION" ) 1 0.0000042 2031 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2032 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLSESSION" ) 1 0.0000042 2033 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2034 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qsfthv.zfp", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2035 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLSESSION" ) 1 0.0000042 2036 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2037 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 2038 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2039 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 2040 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLSESSION" ) 1 0.0000045 2041 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2042 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qsfthv.zfp", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2043 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLSESSION" ) 1 0.0000042 2044 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2045 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLSESSION" ) 1 0.0000045 2046 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2047 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\riragije.zfp", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000358 2048 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLSESSION" ) 1 0.0000045 2049 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2050 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 2051 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2052 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2053 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLSESSION" ) 1 0.0000045 2054 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2055 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\riragije.zfp", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2056 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLSESSION" ) 1 0.0000042 2057 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2058 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 2059 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2060 12:49:19.826 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yyfzte.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2061 12:49:19.826 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLSESSION" ) 1 0.0000056 2062 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2063 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 2064 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2065 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2066 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 2067 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2068 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yyfzte.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2069 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 2070 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2071 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLSESSION" ) 1 0.0000042 2072 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2073 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\frpcby.zfp", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 2074 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLSESSION" ) 1 0.0000045 2075 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2076 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2077 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2078 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 2079 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLSESSION" ) 1 0.0000045 2080 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2081 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\frpcby.zfp", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2082 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLSESSION" ) 1 0.0000042 2083 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2084 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLSESSION" ) 1 0.0000045 2085 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2086 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\zfpbepst.zfp", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 2087 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLSESSION" ) 1 0.0000042 2088 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2089 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2090 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2091 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2092 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLSESSION" ) 1 0.0000042 2093 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000064 2094 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\zfpbepst.zfp", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 2095 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLSESSION" ) 1 0.0000042 2096 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2097 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLSESSION" ) 1 0.0000042 2098 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2099 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\PbasvtJvmneqf.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 2100 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLSESSION" ) 1 0.0000045 2101 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2102 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2103 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2104 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2105 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLSESSION" ) 1 0.0000045 2106 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2107 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\PbasvtJvmneqf.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 2108 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLSESSION" ) 1 0.0000045 2109 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2110 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLSESSION" ) 1 0.0000045 2111 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2112 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\ayozte.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2113 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLSESSION" ) 1 0.0000045 2114 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2115 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2116 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2117 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2118 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLSESSION" ) 1 0.0000045 2119 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2120 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\ayozte.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2121 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 2122 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2123 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLSESSION" ) 1 0.0000042 2124 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2125 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\creszba.zfp", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2126 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLSESSION" ) 1 0.0000042 2127 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2128 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 2129 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2130 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 2131 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLSESSION" ) 1 0.0000042 2132 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2133 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\creszba.zfp", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2134 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLSESSION" ) 1 0.0000045 2135 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2136 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLSESSION" ) 1 0.0000045 2137 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2138 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfzzp.zfp", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2139 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLSESSION" ) 1 0.0000045 2140 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2141 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2142 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2143 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2144 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLSESSION" ) 1 0.0000042 2145 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2146 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfzzp.zfp", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2147 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLSESSION" ) 1 0.0000045 2148 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2149 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000042 2150 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2151 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\eenfztzg.zfp", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2152 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000042 2153 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2154 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2155 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2156 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2157 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000042 2158 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2159 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\eenfztzg.zfp", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2160 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000042 2161 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2162 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLSESSION" ) 1 0.0000042 2163 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2164 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\freivprf.zfp", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2165 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLSESSION" ) 1 0.0000042 2166 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2167 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 2168 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2169 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2170 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLSESSION" ) 1 0.0000042 2171 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2172 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\freivprf.zfp", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2173 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLSESSION" ) 1 0.0000042 2174 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000064 2175 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLSESSION" ) 1 0.0000045 2176 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2177 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yvpzte.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 2178 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLSESSION" ) 1 0.0000045 2179 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2180 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2181 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2182 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2183 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 2184 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2185 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yvpzte.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2186 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLSESSION" ) 1 0.0000045 2187 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2188 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLSESSION" ) 1 0.0000045 2189 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2190 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfpp.zfp", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2191 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLSESSION" ) 1 0.0000042 2192 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2193 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 2194 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2195 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2196 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLSESSION" ) 1 0.0000042 2197 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2198 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfpp.zfp", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2199 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLSESSION" ) 1 0.0000042 2200 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2201 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLSESSION" ) 1 0.0000045 2202 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2203 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfnqzva.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2204 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLSESSION" ) 1 0.0000042 2205 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2206 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2207 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2208 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2209 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLSESSION" ) 1 0.0000042 2210 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2211 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfnqzva.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2212 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLSESSION" ) 1 0.0000042 2213 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2214 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLSESSION" ) 1 0.0000042 2215 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 2216 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\ebuvgno.pbz\NCV Zbavgbe\ncvzbavgbe-k86.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_SUCCESS 0.0000098 2217 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLSESSION" ) 1 0.0000045 2218 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2219 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 2220 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLSESSION" ) 1 0.0000042 2221 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2222 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\ebuvgno.pbz\NCV Zbavgbe\ncvzbavgbe-k86.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_SUCCESS 0.0000073 2223 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLSESSION" ) 1 0.0000042 2224 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2225 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLSESSION" ) 1 0.0000042 2226 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2227 12:49:19.836 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\uu.rkr", NULL, 0x0214dbd0, 0x0214ec8c, 0x0214ec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2228 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLSESSION" ) 1 0.0000045 2229 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2230 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 2231 12:49:19.836 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2232 12:49:19.846 AM 2 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 2233 12:49:19.846 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLSESSION" ) 1 0.0000045 2234 12:49:19.846 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2235 12:49:19.846 AM 2 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\uu.rkr", NULL, 0x0214dc0c, 0x0214ec98, 0x0214ec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 2236 12:49:19.846 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLSESSION" ) 1 0.0000087 2237 12:49:19.846 AM 2 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045