Milo
2005-Sep-29 20:39 UTC
[Samba] adding to: winlogon problem error with Default User/ "... does not
whoops, i didn't have much luck attaching the entire file, hopefully this link will work. http://www.lebox.org/u/milan/samba/userenv-clip.txt here's a piece of the log that looks interesting, any hints? USERENV(a0.80) 15:42:18:872 MyGetDomainDNSName: MyGetUserName failed for dns domain name with 1355 USERENV(a0.80) 15:42:18:872 CheckUserInMachineForest: MyGetDomainName failed with 1355. USERENV(a0.80) 15:42:18:872 CheckXForestLogon : CheckUserInMachineForest failed with 1355 USERENV(a0.80) 15:42:18:872 ParseProfilePath: CheckXForestLogon failed, hr 8007054B USERENV(a0.80) 15:42:18:892 ParseProfilePath: Tick Count = 0 USERENV(a0.80) 15:42:18:902 PingComputer: PingBufferSize set as 2048 USERENV(a0.80) 15:42:18:902 PingComputer: First time: 0 USERENV(a0.80) 15:42:18:902 PingComputer: Fast link. Exiting. USERENV(a0.80) 15:42:18:902 ParseProfilePath: FindFirstFile found something with attributes <0x11> USERENV(a0.80) 15:42:18:902 ParseProfilePath: Found a directory USERENV(a0.80) 15:42:18:912 LoadUserProfile: ParseProfilePath returned a directory of <\\SAMBA\profiles\milan> USERENV(a0.80) 15:42:18:912 RestoreUserProfile: Entering USERENV(a0.80) 15:42:18:912 IsCentralProfileReachable: Entering USERENV(a0.80) 15:42:18:912 CheckRoamingShareOwnership: checking ownership for \\SAMBA\profiles\milan USERENV(a0.80) 15:42:18:912 CheckRoamingShareOwnership: owner is S-1-1-0! USERENV(a0.80) 15:42:18:912 IsCentralProfileReachable: Ownership check failed with 8007051B USERENV(a0.80) 15:42:18:912 RestoreUserProfile: IsCentralProfileReachable returned FALSE. error = 1307 ## I'm guessing the logon session is failing due to the above sequence? ## Please help, thanks! Milan
Milo
2005-Sep-29 22:17 UTC
[Samba] adding to: winlogon problem error with Default User/ "... does not
whoops, forgot to attach the file/log and also, here's a peice of the log that looks interesting, any hints? Thanks! USERENV(a0.80) 15:42:18:872 MyGetDomainDNSName: MyGetUserName failed for dns domain name with 1355 USERENV(a0.80) 15:42:18:872 CheckUserInMachineForest: MyGetDomainName failed with 1355. USERENV(a0.80) 15:42:18:872 CheckXForestLogon : CheckUserInMachineForest failed with 1355 USERENV(a0.80) 15:42:18:872 ParseProfilePath: CheckXForestLogon failed, hr 8007054B USERENV(a0.80) 15:42:18:892 ParseProfilePath: Tick Count = 0 USERENV(a0.80) 15:42:18:902 PingComputer: PingBufferSize set as 2048 USERENV(a0.80) 15:42:18:902 PingComputer: First time: 0 USERENV(a0.80) 15:42:18:902 PingComputer: Fast link. Exiting. USERENV(a0.80) 15:42:18:902 ParseProfilePath: FindFirstFile found something with attributes <0x11> USERENV(a0.80) 15:42:18:902 ParseProfilePath: Found a directory USERENV(a0.80) 15:42:18:912 LoadUserProfile: ParseProfilePath returned a directory of <\\SAMBA\profiles\milan> USERENV(a0.80) 15:42:18:912 RestoreUserProfile: Entering USERENV(a0.80) 15:42:18:912 IsCentralProfileReachable: Entering USERENV(a0.80) 15:42:18:912 CheckRoamingShareOwnership: checking ownership for \\SAMBA\profiles\milan USERENV(a0.80) 15:42:18:912 CheckRoamingShareOwnership: owner is S-1-1-0! USERENV(a0.80) 15:42:18:912 IsCentralProfileReachable: Ownership check failed with 8007051B USERENV(a0.80) 15:42:18:912 RestoreUserProfile: IsCentralProfileReachable returned FALSE. error = 1307 ## I'm guessing the logon session is failing due to the above sequence? ## -------------- next part -------------- USERENV(a0.80) 15:42:06:785 UnloadUserProfile: Leaving with a return value of 1 USERENV(a0.80) 15:42:18:832 ========================================================USERENV(a0.80) 15:42:18:832 LoadUserProfile: Entering, hToken = <0x31c>, lpProfileInfo = 0x6f648 USERENV(a0.80) 15:42:18:832 LoadUserProfile: Entering, hToken = <0x31c>, lpProfileInfo = 0x6f648 USERENV(a0.80) 15:42:18:832 LoadUserProfile: lpProfileInfo->dwFlags = <0x0> USERENV(a0.80) 15:42:18:832 LoadUserProfile: lpProfileInfo->lpUserName = <milan> USERENV(a0.80) 15:42:18:832 LoadUserProfile: lpProfileInfo->lpProfilePath = <\\SAMBA\profiles\milan> USERENV(a0.80) 15:42:18:832 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\\SAMBA\netlogon\Default User> USERENV(a0.80) 15:42:18:832 LoadUserProfile: NULL server name USERENV(a0.80) 15:42:18:832 GetUserMutex: entering USERENV(a0.80) 15:42:18:842 GetUserMutex: Waiting... USERENV(a0.80) 15:42:18:842 GetUserMutex: Wait succeeded. Mutex currently held. USERENV(a0.80) 15:42:18:852 GetUserGuid: Failed to get user guid with 1355. USERENV(a0.80) 15:42:18:852 GetProfileSid: No Guid -> Sid Mapping available USERENV(a0.80) 15:42:18:852 GetUserGuid: Failed to get user guid with 1355. USERENV(a0.80) 15:42:18:862 GetProfileSid: No Guid -> Sid Mapping available USERENV(a0.80) 15:42:18:862 ParseProfilePath: Entering, lpProfilePath = <\\SAMBA\profiles\milan> USERENV(a0.80) 15:42:18:862 CheckXForestLogon: checking x-forest logon, user handle = 796 USERENV(a0.80) 15:42:18:872 MyGetDomainDNSName: MyGetUserName failed for dns domain name with 1355 USERENV(a0.80) 15:42:18:872 CheckUserInMachineForest: MyGetDomainName failed with 1355. USERENV(a0.80) 15:42:18:872 CheckXForestLogon : CheckUserInMachineForest failed with 1355 USERENV(a0.80) 15:42:18:872 ParseProfilePath: CheckXForestLogon failed, hr = 8007054B USERENV(a0.80) 15:42:18:892 ParseProfilePath: Tick Count = 0 USERENV(a0.80) 15:42:18:902 PingComputer: PingBufferSize set as 2048 USERENV(a0.80) 15:42:18:902 PingComputer: First time: 0 USERENV(a0.80) 15:42:18:902 PingComputer: Fast link. Exiting. USERENV(a0.80) 15:42:18:902 ParseProfilePath: FindFirstFile found something with attributes <0x11> USERENV(a0.80) 15:42:18:902 ParseProfilePath: Found a directory USERENV(a0.80) 15:42:18:912 LoadUserProfile: ParseProfilePath returned a directory of <\\SAMBA\profiles\milan> USERENV(a0.80) 15:42:18:912 RestoreUserProfile: Entering USERENV(a0.80) 15:42:18:912 IsCentralProfileReachable: Entering USERENV(a0.80) 15:42:18:912 CheckRoamingShareOwnership: checking ownership for \\SAMBA\profiles\milan USERENV(a0.80) 15:42:18:912 CheckRoamingShareOwnership: owner is S-1-1-0! USERENV(a0.80) 15:42:18:912 IsCentralProfileReachable: Ownership check failed with 8007051B USERENV(a0.80) 15:42:18:912 RestoreUserProfile: IsCentralProfileReachable returned FALSE. error = 1307 USERENV(a0.80) 15:42:21:155 RestoreUserProfile: Profile path = <> USERENV(a0.80) 15:42:21:155 ExtractProfileFromBackup: Failed to open key Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-666917423-2343506192-2461445842-3004 with error 2 USERENV(a0.80) 15:42:21:155 ExtractProfileFromBackup: Couldn't open backup profile key. Error = 2 USERENV(a0.80) 15:42:21:165 GetUserGuid: Failed to get user guid with 1355. USERENV(a0.80) 15:42:21:165 PatchNewProfileIfRequred: No OldSidString found USERENV(a0.80) 15:42:21:165 IsTempProfileAllowed: Returning 1 USERENV(a0.80) 15:42:21:165 CreateLocalProfileKey: Not setting additional Security USERENV(a0.80) 15:42:21:165 CreateLocalProfileImage: One way or another we haven't got an existing local profile, try and create one USERENV(a0.80) 15:42:21:165 CreateSecureDirectory: Entering with <C:\Documents and Settings\TEMP> USERENV(a0.80) 15:42:21:165 CreateSecureDirectory: Created the directory <C:\Documents and Settings\TEMP> USERENV(a0.80) 15:42:21:175 ComputeLocalProfileName: generated the profile directory <C:\Documents and Settings\TEMP> USERENV(a0.80) 15:42:22:147 Local profile name is <C:\Documents and Settings\TEMP> USERENV(a0.80) 15:42:22:147 RestoreUserProfile: Working with a new user. Go straight to issuing a default profile. USERENV(a0.80) 15:42:22:147 RestoreUserProfile: Issuing default profile USERENV(a0.80) 15:42:22:147 CheckNetDefaultProfile: Entering, lpNetPath = <\\SAMBA\netlogon\Default User> USERENV(a0.80) 15:42:22:147 CheckXForestLogon: checking x-forest logon, user handle = 796 USERENV(a0.80) 15:42:22:187 MyGetDomainDNSName: MyGetUserName failed for dns domain name with 1355 USERENV(a0.80) 15:42:22:187 CheckUserInMachineForest: MyGetDomainName failed with 1355. USERENV(a0.80) 15:42:22:187 CheckXForestLogon : CheckUserInMachineForest failed with 1355 USERENV(a0.80) 15:42:22:187 CheckNetDefaultProfile: CheckXForestLogon failed, hr = 8007054B USERENV(a0.80) 15:42:22:217 CheckNetDefaultProfile: Found a valid network profile. USERENV(a0.80) 15:42:22:217 CheckNetDefaultProfile: setting default profile to <\\SAMBA\netlogon\Default User> USERENV(a0.80) 15:42:22:217 CheckNetDefaultProfile: Removing local copy of network default user profile. USERENV(a0.80) 15:42:22:217 Delnode_Recurse: Entering, lpDir = <C:\Documents and Settings\Default User (Network)> USERENV(a0.80) 15:42:22:227 CheckNetDefaultProfile: Leaving with a value of 1. USERENV(a0.80) 15:42:22:227 IssueDefaultProfile: Entering. lpDefaultProfile = <\\SAMBA\netlogon\Default User> lpLocalProfile = <C:\Documents and Settings\TEMP> USERENV(a0.80) 15:42:22:227 CopyProfileDirectoryEx: Entering, lpSourceDir = <\\SAMBA\netlogon\Default User>, lpDestinationDir = <C:\Documents and Settings\TEMP>, dwFlags = 0xc8101 USERENV(a0.80) 15:42:22:227 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Recent\ to the list of directories USERENV(a0.80) 15:42:22:237 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\SendTo\ to the list of directories USERENV(a0.80) 15:42:22:237 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Start Menu\Programs\Accessories\Entertainment\ to the list of directories USERENV(a0.80) 15:42:22:247 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Start Menu\Programs\Accessories\Accessibility\ to the list of directories USERENV(a0.80) 15:42:22:247 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Start Menu\Programs\Accessories\System Tools\ to the list of directories USERENV(a0.80) 15:42:22:247 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Start Menu\Programs\Accessories\ to the list of directories USERENV(a0.80) 15:42:22:247 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Start Menu\Programs\Startup\ to the list of directories USERENV(a0.80) 15:42:22:247 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Start Menu\Programs\ to the list of directories USERENV(a0.80) 15:42:22:257 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Start Menu\ to the list of directories USERENV(a0.80) 15:42:22:257 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Local Settings\Temp\ to the list of directories USERENV(a0.80) 15:42:22:257 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Local Settings\History\History.IE5\ to the list of directories USERENV(a0.80) 15:42:22:267 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Local Settings\History\ to the list of directories USERENV(a0.80) 15:42:22:267 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Local Settings\Temporary Internet Files\Content.IE5\OHIZOXIJ\ to the list of directories USERENV(a0.80) 15:42:22:277 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Local Settings\Temporary Internet Files\Content.IE5\C96J4LQ3\ to the list of directories USERENV(a0.80) 15:42:22:277 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Local Settings\Temporary Internet Files\Content.IE5\OXYJGTQ3\ to the list of directories USERENV(a0.80) 15:42:22:277 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Local Settings\Temporary Internet Files\Content.IE5\4TYNW5YB\ to the list of directories USERENV(a0.80) 15:42:22:277 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Local Settings\Temporary Internet Files\Content.IE5\ to the list of directories USERENV(a0.80) 15:42:22:277 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Local Settings\Temporary Internet Files\ to the list of directories USERENV(a0.80) 15:42:22:287 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Local Settings\Application Data\ to the list of directories USERENV(a0.80) 15:42:22:287 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Local Settings\ to the list of directories USERENV(a0.80) 15:42:22:287 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Cookies\ to the list of directories USERENV(a0.80) 15:42:22:287 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Desktop\ to the list of directories USERENV(a0.80) 15:42:22:297 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Favorites\Media\ to the list of directories USERENV(a0.80) 15:42:22:297 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Favorites\ to the list of directories USERENV(a0.80) 15:42:22:297 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Application Data\Microsoft\Internet Explorer\ to the list of directories USERENV(a0.80) 15:42:22:297 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Application Data\Microsoft\ to the list of directories USERENV(a0.80) 15:42:22:307 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Application Data\ to the list of directories USERENV(a0.80) 15:42:22:307 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\PrintHood\ to the list of directories USERENV(a0.80) 15:42:22:307 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\Templates\ to the list of directories USERENV(a0.80) 15:42:22:307 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\NetHood\ to the list of directories USERENV(a0.80) 15:42:22:317 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\My Documents\My Pictures\ to the list of directories USERENV(a0.80) 15:42:22:317 RecurseDirectory: Adding \\SAMBA\netlogon\Default User\My Documents\ to the list of directories USERENV(a0.80) 15:42:22:327 ReconcileFile: \\SAMBA\netlogon\Default User\NTUSER.DAT.LOG.LOG ==> C:\Documents and Settings\TEMP\NTUSER.DAT.LOG.LOG [OK] USERENV(a0.80) 15:42:22:347 ReconcileFile: \\SAMBA\netlogon\Default User\NTUSER.DAT ==> C:\Documents and Settings\TEMP\NTUSER.DAT [OK] USERENV(a0.80) 15:42:22:357 ReconcileFile: \\SAMBA\netlogon\Default User\NTUSER.DAT.LOG ==> C:\Documents and Settings\TEMP\NTUSER.DAT.LOG [OK] USERENV(a0.80) 15:42:22:357 CopyProfileDirectoryEx: Calling ReconcileDirectory for all Directories USERENV(a0.80) 15:42:22:567 CopyProfileDirectoryEx: Reconcile Directory Done for all Directories USERENV(a0.440) 15:42:22:597 ReconcileFile: \\SAMBA\netlogon\Default User\Templates\wordpfct.wpd ==> C:\Documents and Settings\TEMP\Templates\wordpfct.wpd [OK] USERENV(a0.148) 15:42:22:597 ReconcileFile: \\SAMBA\netlogon\Default User\Templates\wordpfct.wpg ==> C:\Documents and Settings\TEMP\Templates\wordpfct.wpg [OK] USERENV(a0.224) 15:42:22:597 ReconcileFile: \\SAMBA\netlogon\Default User\My Documents\My Pictures\Sample.jpg ==> C:\Documents and Settings\TEMP\My Documents\My Pictures\Sample.jpg [OK] USERENV(a0.3a4) 15:42:22:597 ReconcileFile: \\SAMBA\netlogon\Default User\My Documents\My Pictures\Desktop.ini ==> C:\Documents and Settings\TEMP\My Documents\My Pictures\Desktop.ini [OK] USERENV(a0.1c0) 15:42:22:617 ReconcileFile: \\SAMBA\netlogon\Default User\Templates\powerpnt.ppt ==> C:\Documents and Settings\TEMP\Templates\powerpnt.ppt [OK] USERENV(a0.414) 15:42:22:627 ReconcileFile: \\SAMBA\netlogon\Default User\Templates\sndrec.wav ==> C:\Documents and Settings\TEMP\Templates\sndrec.wav [OK] USERENV(a0.3ec) 15:42:22:627 ReconcileFile: \\SAMBA\netlogon\Default User\Templates\lotus.wk4 ==> C:\Documents and Settings\TEMP\Templates\lotus.wk4 [OK] USERENV(a0.440) 15:42:22:637 ReconcileFile: \\SAMBA\netlogon\Default User\Templates\excel4.xls ==> C:\Documents and Settings\TEMP\Templates\excel4.xls [OK] USERENV(a0.224) 15:42:22:647 ReconcileFile: \\SAMBA\netlogon\Default User\Templates\winword2.doc ==> C:\Documents and Settings\TEMP\Templates\winword2.doc [OK] USERENV(a0.148) 15:42:22:647 ReconcileFile: \\SAMBA\netlogon\Default User\Templates\amipro.sam ==> C:\Documents and Settings\TEMP\Templates\amipro.sam [OK] USERENV(a0.3a4) 15:42:22:657 ReconcileFile: \\SAMBA\netlogon\Default User\Templates\quattro.wb2 ==> C:\Documents and Settings\TEMP\Templates\quattro.wb2 [OK] USERENV(a0.1c0) 15:42:22:667 ReconcileFile: \\SAMBA\netlogon\Default User\Templates\excel.xls ==> C:\Documents and Settings\TEMP\Templates\excel.xls [OK] USERENV(a0.414) 15:42:22:677 ReconcileFile: \\SAMBA\netlogon\Default User\Templates\presenta.shw ==> C:\Documents and Settings\TEMP\Templates\presenta.shw [OK] USERENV(a0.3ec) 15:42:22:677 ReconcileFile: \\SAMBA\netlogon\Default User\Templates\winword.doc ==> C:\Documents and Settings\TEMP\Templates\winword.doc [OK] USERENV(a0.440) 15:42:22:687 ReconcileFile: \\SAMBA\netlogon\Default User\Application Data\Microsoft\Internet Explorer\brndlog.txt ==> C:\Documents and Settings\TEMP\Application Data\Microsoft\Internet Explorer\brndlog.txt [OK] USERENV(a0.148) 15:42:22:697 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\Fox News.url ==> C:\Documents and Settings\TEMP\Favorites\Media\Fox News.url [OK] USERENV(a0.3a4) 15:42:22:707 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\CBS.url ==> C:\Documents and Settings\TEMP\Favorites\Media\CBS.url [OK] USERENV(a0.1c0) 15:42:22:717 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\Fox Sports.url ==> C:\Documents and Settings\TEMP\Favorites\Media\Fox Sports.url [OK] USERENV(a0.414) 15:42:22:717 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\Capitol Records.url ==> C:\Documents and Settings\TEMP\Favorites\Media\Capitol Records.url [OK] USERENV(a0.3ec) 15:42:22:727 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\Universal Studios Online.url ==> C:\Documents and Settings\TEMP\Favorites\Media\Universal Studios Online.url [OK] USERENV(a0.148) 15:42:22:737 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\MSNBC.url ==> C:\Documents and Settings\TEMP\Favorites\Media\MSNBC.url [OK] USERENV(a0.440) 15:42:22:737 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\MUSICVIDEOS.COM.url ==> C:\Documents and Settings\TEMP\Favorites\Media\MUSICVIDEOS.COM.url [OK] USERENV(a0.3a4) 15:42:22:748 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\NBC VideoSeeker.url ==> C:\Documents and Settings\TEMP\Favorites\Media\NBC VideoSeeker.url [OK] USERENV(a0.414) 15:42:22:758 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\What's On Now.url ==> C:\Documents and Settings\TEMP\Favorites\Media\What's On Now.url [OK] USERENV(a0.1c0) 15:42:22:758 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\ESPN Sports.url ==> C:\Documents and Settings\TEMP\Favorites\Media\ESPN Sports.url [OK] USERENV(a0.148) 15:42:22:778 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\CNET Today - Technology News.url ==> C:\Documents and Settings\TEMP\Favorites\Media\CNET Today - Technology News.url [OK] USERENV(a0.3a4) 15:42:22:788 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\Windows Media Showcase.url ==> C:\Documents and Settings\TEMP\Favorites\Media\Windows Media Showcase.url [OK] USERENV(a0.1c0) 15:42:22:798 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\CNN Videoselect.url ==> C:\Documents and Settings\TEMP\Favorites\Media\CNN Videoselect.url [OK] USERENV(a0.414) 15:42:22:798 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\TV Guide Entertainment Network.url ==> C:\Documents and Settings\TEMP\Favorites\Media\TV Guide Entertainment Network.url [OK] USERENV(a0.148) 15:42:22:808 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\Warner Bros. Hip Clips.url ==> C:\Documents and Settings\TEMP\Favorites\Media\Warner Bros. Hip Clips.url [OK] USERENV(a0.3a4) 15:42:22:818 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\Bloomberg.url ==> C:\Documents and Settings\TEMP\Favorites\Media\Bloomberg.url [OK] USERENV(a0.1c0) 15:42:22:818 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\Internet Radio Guide.url ==> C:\Documents and Settings\TEMP\Favorites\Media\Internet Radio Guide.url [OK] USERENV(a0.414) 15:42:22:828 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\CNBC Dow Jones Business Video.url ==> C:\Documents and Settings\TEMP\Favorites\Media\CNBC Dow Jones Business Video.url [OK] USERENV(a0.148) 15:42:22:838 ReconcileFile: \\SAMBA\netlogon\Default User\Cookies\index.dat ==> C:\Documents and Settings\TEMP\Cookies\index.dat [OK] USERENV(a0.414) 15:42:22:848 ReconcileFile: \\SAMBA\netlogon\Default User\Local Settings\Temporary Internet Files\Content.IE5\OXYJGTQ3\desktop.ini ==> C:\Documents and Settings\TEMP\Local Settings\Temporary Internet Files\Content.IE5\OXYJGTQ3\desktop.ini [OK] USERENV(a0.1c0) 15:42:22:848 ReconcileFile: \\SAMBA\netlogon\Default User\Local Settings\Temporary Internet Files\Content.IE5\4TYNW5YB\desktop.ini ==> C:\Documents and Settings\TEMP\Local Settings\Temporary Internet Files\Content.IE5\4TYNW5YB\desktop.ini [OK] USERENV(a0.148) 15:42:22:868 ReconcileFile: \\SAMBA\netlogon\Default User\Local Settings\Temporary Internet Files\Content.IE5\index.dat ==> C:\Documents and Settings\TEMP\Local Settings\Temporary Internet Files\Content.IE5\index.dat [OK] USERENV(a0.414) 15:42:22:878 ReconcileFile: \\SAMBA\netlogon\Default User\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini ==> C:\Documents and Settings\TEMP\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini [OK] USERENV(a0.1c0) 15:42:22:878 ReconcileFile: \\SAMBA\netlogon\Default User\Local Settings\Temporary Internet Files\Content.IE5\C96J4LQ3\desktop.ini ==> C:\Documents and Settings\TEMP\Local Settings\Temporary Internet Files\Content.IE5\C96J4LQ3\desktop.ini [OK] USERENV(a0.414) 15:42:22:888 ReconcileFile: \\SAMBA\netlogon\Default User\Local Settings\History\History.IE5\index.dat ==> C:\Documents and Settings\TEMP\Local Settings\History\History.IE5\index.dat [OK] USERENV(a0.148) 15:42:22:898 ReconcileFile: \\SAMBA\netlogon\Default User\Local Settings\Temporary Internet Files\Content.IE5\OHIZOXIJ\desktop.ini ==> C:\Documents and Settings\TEMP\Local Settings\Temporary Internet Files\Content.IE5\OHIZOXIJ\desktop.ini [OK] USERENV(a0.1c0) 15:42:22:898 ReconcileFile: \\SAMBA\netlogon\Default User\Local Settings\History\History.IE5\desktop.ini ==> C:\Documents and Settings\TEMP\Local Settings\History\History.IE5\desktop.ini [OK] USERENV(a0.148) 15:42:22:918 ReconcileFile: \\SAMBA\netlogon\Default User\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk ==> C:\Documents and Settings\TEMP\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk [OK] USERENV(a0.1c0) 15:42:22:918 ReconcileFile: \\SAMBA\netlogon\Default User\Start Menu\Programs\Accessories\System Tools\Scheduled Tasks.lnk ==> C:\Documents and Settings\TEMP\Start Menu\Programs\Accessories\System Tools\Scheduled Tasks.lnk [OK] USERENV(a0.414) 15:42:22:918 ReconcileFile: \\SAMBA\netlogon\Default User\Local Settings\History\desktop.ini ==> C:\Documents and Settings\TEMP\Local Settings\History\desktop.ini [OK] USERENV(a0.1c0) 15:42:22:938 ReconcileFile: \\SAMBA\netlogon\Default User\Start Menu\Programs\Accessories\Command Prompt.lnk ==> C:\Documents and Settings\TEMP\Start Menu\Programs\Accessories\Command Prompt.lnk [OK] USERENV(a0.148) 15:42:22:938 ReconcileFile: \\SAMBA\netlogon\Default User\Start Menu\Programs\Accessories\System Tools\Getting Started.lnk ==> C:\Documents and Settings\TEMP\Start Menu\Programs\Accessories\System Tools\Getting Started.lnk [OK] USERENV(a0.414) 15:42:22:948 ReconcileFile: \\SAMBA\netlogon\Default User\Start Menu\Programs\Accessories\Synchronize.lnk ==> C:\Documents and Settings\TEMP\Start Menu\Programs\Accessories\Synchronize.lnk [OK] USERENV(a0.1c0) 15:42:22:958 ReconcileFile: \\SAMBA\netlogon\Default User\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk ==> C:\Documents and Settings\TEMP\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk [OK] USERENV(a0.148) 15:42:22:968 ReconcileFile: \\SAMBA\netlogon\Default User\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk ==> C:\Documents and Settings\TEMP\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk [OK] USERENV(a0.1c0) 15:42:22:968 ReconcileFile: \\SAMBA\netlogon\Default User\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk ==> C:\Documents and Settings\TEMP\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk [OK] USERENV(a0.148) 15:42:22:988 ReconcileFile: \\SAMBA\netlogon\Default User\Start Menu\Programs\Accessories\Imaging.lnk ==> C:\Documents and Settings\TEMP\Start Menu\Programs\Accessories\Imaging.lnk [OK] USERENV(a0.1c0) 15:42:22:998 ReconcileFile: \\SAMBA\netlogon\Default User\Start Menu\Programs\Accessories\Notepad.lnk ==> C:\Documents and Settings\TEMP\Start Menu\Programs\Accessories\Notepad.lnk [OK] USERENV(a0.414) 15:42:22:998 ReconcileFile: \\SAMBA\netlogon\Default User\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk ==> C:\Documents and Settings\TEMP\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk [OK] USERENV(a0.148) 15:42:23:008 ReconcileFile: \\SAMBA\netlogon\Default User\Start Menu\Programs\Accessories\Windows Explorer.lnk ==> C:\Documents and Settings\TEMP\Start Menu\Programs\Accessories\Windows Explorer.lnk [OK] USERENV(a0.1c0) 15:42:23:018 ReconcileFile: \\SAMBA\netlogon\Default User\SendTo\Desktop (create shortcut).DeskLink ==> C:\Documents and Settings\TEMP\SendTo\Desktop (create shortcut).DeskLink [OK] USERENV(a0.414) 15:42:23:018 ReconcileFile: \\SAMBA\netlogon\Default User\SendTo\Mail Recipient.MAPIMail ==> C:\Documents and Settings\TEMP\SendTo\Mail Recipient.MAPIMail [OK] USERENV(a0.148) 15:42:23:028 ReconcileFile: \\SAMBA\netlogon\Default User\SendTo\My Documents.mydocs ==> C:\Documents and Settings\TEMP\SendTo\My Documents.mydocs [OK] USERENV(a0.1c0) 15:42:23:028 ReconcileFile: \\SAMBA\netlogon\Default User\SendTo\3? Floppy (A).lnk ==> C:\Documents and Settings\TEMP\SendTo\3? Floppy (A).lnk [OK] USERENV(a0.224) 15:42:23:038 ReconcileFile: \\SAMBA\netlogon\Default User\Application Data\Microsoft\Internet Explorer\brndlog.bak ==> C:\Documents and Settings\TEMP\Application Data\Microsoft\Internet Explorer\brndlog.bak [OK] USERENV(a0.440) 15:42:23:048 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\Disney.url ==> C:\Documents and Settings\TEMP\Favorites\Media\Disney.url [OK] USERENV(a0.3ec) 15:42:23:048 ReconcileFile: \\SAMBA\netlogon\Default User\Favorites\Media\Hollywood Online.url ==> C:\Documents and Settings\TEMP\Favorites\Media\Hollywood Online.url [OK] USERENV(a0.3a4) 15:42:23:058 ReconcileFile: \\SAMBA\netlogon\Default User\Local Settings\Temporary Internet Files\desktop.ini ==> C:\Documents and Settings\TEMP\Local Settings\Temporary Internet Files\desktop.ini [OK] USERENV(a0.80) 15:42:23:058 CopyProfileDirectoryEx: Setting Directory TimeStamps all Directories USERENV(a0.80) 15:42:23:078 CopyProfileDirectoryEx: Set times on all directories USERENV(a0.80) 15:42:23:088 CopyProfileDirectoryEx: Leaving with a return value of 1 USERENV(a0.80) 15:42:23:258 MyRegLoadKey: Mutex released. Returning 0. USERENV(a0.80) 15:42:23:258 IssueDefaultProfile: Leaving successfully USERENV(a0.80) 15:42:23:258 RestoreUserProfile: Successfully setup the specified default. USERENV(a0.80) 15:42:23:258 SetupNewHive: Entering USERENV(a0.80) 15:42:23:258 SetDefaultUserHiveSecurity: Entering USERENV(a0.80) 15:42:23:308 SecureUserKey: Entering USERENV(a0.80) 15:42:23:308 SecureUserKey: Leaving with a return value of 1 USERENV(a0.80) 15:42:23:308 SecureUserKey: Entering USERENV(a0.80) 15:42:23:308 SecureUserKey: Leaving with a return value of 1 USERENV(a0.80) 15:42:23:679 SetupNewHive: Leaving with a return value of 1 USERENV(a0.80) 15:42:23:689 MyRegLoadKey: Mutex released. Returning 0. USERENV(a0.80) 15:42:23:699 CreateClassHive: existing user classes hive not found USERENV(a0.80) 15:42:23:699 SetDefaultUserHiveSecurity: Entering USERENV(a0.80) 15:42:23:699 RestoreUserProfile: About to Leave. Final Information follows: USERENV(a0.80) 15:42:23:699 Profile was successfully loaded. USERENV(a0.80) 15:42:23:699 lpProfile->lpRoamingProfile = <> USERENV(a0.80) 15:42:23:699 lpProfile->lpLocalProfile = <C:\Documents and Settings\TEMP> USERENV(a0.80) 15:42:23:699 lpProfile->dwInternalFlags = 0xa04 USERENV(a0.80) 15:42:23:699 RestoreUserProfile: Leaving. USERENV(a0.80) 15:42:23:709 GetUserGuid: Failed to get user guid with 1355. USERENV(a0.80) 15:42:23:719 GetUserGuid: Failed to get user guid with 1355. USERENV(a0.80) 15:42:23:719 UpgradeProfile: Entering USERENV(a0.80) 15:42:23:719 UpgradeProfile: Build numbers match USERENV(a0.80) 15:42:23:719 UpgradeProfile: Leaving Successfully USERENV(a0.80) 15:42:23:729 LoadUserProfile: Releasing mutex. USERENV(a0.80) 15:42:23:729 LoadUserProfile: Leaving with a value of 1. USERENV(a0.80) 15:42:23:729 LoadUserProfile: hProfile = <0x2d0> USERENV(a0.80) 15:42:23:729 ========================================================USERENV(a0.80) 15:42:23:729 ApplySystemPolicy: Entering USERENV(a0.80) 15:42:23:729 ApplySystemPolicy: PolicyPath is: <\\SAMBA\netlogon\ntconfig.pol>. USERENV(a0.80) 15:42:23:729 ApplySystemPolicy: No policy file. USERENV(a0.3a4) 15:42:23:799 ApplyGroupPolicy: Entering. Flags = 2 USERENV(a0.3a4) 15:42:23:799 ProcessGPOs: USERENV(a0.3a4) 15:42:23:799 ProcessGPOs: USERENV(a0.3a4) 15:42:23:799 ProcessGPOs: Starting user Group Policy processing... USERENV(a0.3a4) 15:42:23:809 ProcessGPOs: USERENV(a0.3a4) 15:42:23:809 ProcessGPOs: USERENV(a0.3a4) 15:42:23:809 EnterCriticalPolicySection: User critical section has been claimed. Handle = 0x6a0 USERENV(a0.3a4) 15:42:23:809 ProcessGPOs: Machine role is 1. USERENV(a0.3a4) 15:42:23:809 ProcessGPOs: Calling GetGPOInfo for normal policy mode USERENV(a0.3a4) 15:42:23:809 GetGPOInfo: ******************************** USERENV(a0.3a4) 15:42:23:809 GetGPOInfo: Entering... USERENV(a0.3a4) 15:42:23:809 GetGPOInfo: lpHostName or lpDNName is NULL. Skipping DS stuff. USERENV(a0.3a4) 15:42:23:819 GetGPOInfo: GPO Local Group Policy doesn't contain any data since the version number is 0. It will be skipped. USERENV(a0.3a4) 15:42:23:819 GetGPOInfo: Leaving with 1 USERENV(a0.3a4) 15:42:23:819 GetGPOInfo: ******************************** USERENV(a0.3a4) 15:42:23:819 ProcessGPOs: OpenThreadToken failed with error 1008, assuming thread is not impersonating USERENV(a0.3a4) 15:42:23:819 ProcessGPOs: ----------------------- USERENV(a0.3a4) 15:42:23:819 ProcessGPOs: Processing extension Registry USERENV(a0.3a4) 15:42:23:819 CompareGPOLists: The lists are the same. USERENV(a0.3a4) 15:42:23:819 ProcessGPOs: Extension Registry skipped because both deleted and changed GPO lists are empty. USERENV(a0.3a4) 15:42:23:819 ProcessGPOs: ----------------------- USERENV(a0.3a4) 15:42:23:819 ProcessGPOs: Processing extension Folder Redirection USERENV(a0.3a4) 15:42:23:829 CompareGPOLists: The lists are the same. USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Extension Folder Redirection skipped because both deleted and changed GPO lists are empty. USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: ----------------------- USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Processing extension Microsoft Disk Quota USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Extension Microsoft Disk Quota skipped with flags 0x2. USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: ----------------------- USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Processing extension Scripts USERENV(a0.3a4) 15:42:23:829 CompareGPOLists: The lists are the same. USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Extension Scripts skipped because both deleted and changed GPO lists are empty. USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: ----------------------- USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Processing extension Security USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Extension Security skipped with flags 0x2. USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: ----------------------- USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Processing extension Internet Explorer Branding USERENV(a0.3a4) 15:42:23:829 CompareGPOLists: The lists are the same. USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Extension Internet Explorer Branding skipped because both deleted and changed GPO lists are empty. USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: ----------------------- USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: Processing extension EFS recovery USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: Extension EFS recovery skipped with flags 0x2. USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: ----------------------- USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: Processing extension Application Management USERENV(a0.3a4) 15:42:23:839 CompareGPOLists: The lists are the same. USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: Extension Application Management skipped because both deleted and changed GPO lists are empty. USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: ----------------------- USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: Processing extension IP Security USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: Extension IP Security skipped with flags 0x2. USERENV(a0.3a4) 15:42:23:839 LeaveCriticalPolicySection: Critical section 0x6a0 has been released. USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: User Group Policy has been applied. USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: Leaving with 1. USERENV(a0.3a4) 15:42:23:849 ApplyGroupPolicy: Leaving successfully. USERENV(224.3a4) 15:42:23:979 LibMain: Process Name: C:\WINNT\system32\userinit.exe USERENV(224.3a4) 15:42:23:979 CheckXForestLogon: checking x-forest logon, user handle = 120 USERENV(224.3a4) 15:42:24:009 MyGetDomainDNSName: MyGetUserName failed for dns domain name with 1355 USERENV(224.3a4) 15:42:24:079 CheckUserInMachineForest: MyGetDomainName failed with 1355. USERENV(224.3a4) 15:42:24:079 CheckXForestLogon : CheckUserInMachineForest failed with 1355 USERENV(128.20c) 15:42:24:700 LibMain: Process Name: C:\WINNT\system32\ie4uinit.exe USERENV(128.20c) 15:42:24:770 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Internet Explorer.lnk>. Error = 2 USERENV(128.20c) 15:42:24:770 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Internet Explorer\Internet Explorer.lnk>. Error = 3 USERENV(128.20c) 15:42:24:780 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Accessories\Internet Tools\Internet Explorer.lnk>. Error = 3 USERENV(128.20c) 15:42:24:780 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Accessories\Internet Tools\Internet Explorer.lnk>. Error = 3 USERENV(128.20c) 15:42:24:780 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Internet Explorer\Channel Bar.lnk>. Error = 3 USERENV(128.20c) 15:42:24:790 PrependPath: Entering with <C:\Program Files\Internet Explorer\iexplore.exe> USERENV(128.20c) 15:42:24:790 UnExpandSysRoot: Entering with <C:\Program Files\Internet Explorer\iexplore.exe> USERENV(128.20c) 15:42:24:790 UnExpandSysRoot: Leaving with <C:\Program Files\Internet Explorer\iexplore.exe> USERENV(128.20c) 15:42:24:790 PrependPath: Leaving with <C:\Program Files\Internet Explorer\iexplore.exe> USERENV(128.20c) 15:42:24:831 PrependPath: Entering with <> USERENV(128.20c) 15:42:24:831 PrependPath: lpFile is NULL, setting lpResult to a null string USERENV(128.20c) 15:42:24:871 CreateLinkFile: Leaving with status of 1. USERENV(33c.408) 15:42:25:411 LibMain: Process Name: C:\WINNT\system32\rundll32.exe USERENV(128.20c) 15:42:25:471 PrependPath: Entering with <C:\Program Files\Internet Explorer\IEXPLORE.EXE> USERENV(128.20c) 15:42:25:471 UnExpandSysRoot: Entering with <C:\Program Files\Internet Explorer\IEXPLORE.EXE> USERENV(128.20c) 15:42:25:471 UnExpandSysRoot: Leaving with <C:\Program Files\Internet Explorer\IEXPLORE.EXE> USERENV(128.20c) 15:42:25:471 PrependPath: Leaving with <C:\Program Files\Internet Explorer\IEXPLORE.EXE> USERENV(128.20c) 15:42:25:481 PrependPath: Entering with <> USERENV(128.20c) 15:42:25:481 PrependPath: lpFile is NULL, setting lpResult to a null string USERENV(128.20c) 15:42:25:481 CreateLinkFile: Leaving with status of 1. USERENV(20c.128) 15:42:25:532 LibMain: Process Name: C:\WINNT\system32\rundll32.exe USERENV(a0.3ec) 15:42:25:932 GPOThread: Next refresh will happen in 109 minutes USERENV(128.20c) 15:42:25:952 LibMain: Process Name: C:\Program Files\Outlook Express\setup50.exe USERENV(128.20c) 15:42:25:962 PrependPath: Entering with <C:\Program Files\Outlook Express\msimn.exe> USERENV(128.20c) 15:42:25:962 UnExpandSysRoot: Entering with <C:\Program Files\Outlook Express\msimn.exe> USERENV(128.20c) 15:42:25:962 UnExpandSysRoot: Leaving with <C:\Program Files\Outlook Express\msimn.exe> USERENV(128.20c) 15:42:25:962 PrependPath: Leaving with <C:\Program Files\Outlook Express\msimn.exe> USERENV(128.20c) 15:42:25:982 PrependPath: Entering with <> USERENV(128.20c) 15:42:25:982 PrependPath: lpFile is NULL, setting lpResult to a null string USERENV(128.20c) 15:42:26:012 CreateLinkFile: Leaving with status of 1. USERENV(128.20c) 15:42:26:012 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Internet\Mail.lnk>. Error = 3 USERENV(128.20c) 15:42:26:012 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\Internet\Mail.lnk>. Error = 3 USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Internet\News.lnk>. Error = 3 USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\Internet\News.lnk>. Error = 3 USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Internet\Read Me (Mail and News).lnk>. Error = 3 USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\Internet\Read Me (Mail and News).lnk>. Error = 3 USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Internet Mail.lnk>. Error = 2 USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\Internet Mail.lnk>. Error = 2 USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Internet News.lnk>. Error = 2 USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\Internet News.lnk>. Error = 2 USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Outlook Express Mail.lnk>. Error = 2 USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\Outlook Express Mail.lnk>. Error = 2 USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Outlook Express News.lnk>. Error = 2 USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\Outlook Express News.lnk>. Error = 2 USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Microsoft Outlook Express.lnk>. Error = 2 USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\Microsoft Outlook Express.lnk>. Error = 2 USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\..\..\Desktop\Mail.lnk>. Error = 2 USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\..\..\Desktop\Mail.lnk>. Error = 2 USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\..\..\Desktop\News.lnk>. Error = 2 USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\..\..\Desktop\News.lnk>. Error = 2 USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\..\..\Desktop\Internet Mail.lnk>. Error = 2 USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\..\..\Desktop\Internet Mail.lnk>. Error = 2 USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\..\..\Desktop\Internet News.lnk>. Error = 2 USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\..\..\Desktop\Internet News.lnk>. Error = 2 USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Internet Explorer Suite\Outlook Express Mail.lnk>. Error = 3 USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\Internet Explorer Suite\Outlook Express Mail.lnk>. Error = 3 USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Internet Explorer Suite\Outlook Express News.lnk>. Error = 3 USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\Internet Explorer Suite\Outlook Express News.lnk>. Error = 3 USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Internet Explorer\Outlook Express.lnk>. Error = 3 USERENV(128.20c) 15:42:26:052 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\Internet Explorer\Outlook Express.lnk>. Error = 3 USERENV(128.20c) 15:42:26:052 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Internet Explorer\Microsoft Outlook Express.lnk>. Error = 3 USERENV(128.20c) 15:42:26:052 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\Internet Explorer\Microsoft Outlook Express.lnk>. Error = 3 USERENV(128.20c) 15:42:26:152 LibMain: Process Name: C:\Program Files\Outlook Express\setup50.exe USERENV(128.20c) 15:42:26:172 PrependPath: Entering with <C:\Program Files\Outlook Express\wab.exe> USERENV(128.20c) 15:42:26:172 UnExpandSysRoot: Entering with <C:\Program Files\Outlook Express\wab.exe> USERENV(128.20c) 15:42:26:172 UnExpandSysRoot: Leaving with <C:\Program Files\Outlook Express\wab.exe> USERENV(128.20c) 15:42:26:172 PrependPath: Leaving with <C:\Program Files\Outlook Express\wab.exe> USERENV(128.20c) 15:42:26:223 PrependPath: Entering with <> USERENV(128.20c) 15:42:26:223 PrependPath: lpFile is NULL, setting lpResult to a null string USERENV(128.20c) 15:42:26:263 CreateLinkFile: Leaving with status of 1. USERENV(128.20c) 15:42:26:263 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Address Book.lnk>. Error = 2 USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\Address Book.lnk>. Error = 2 USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Windows Address Book.lnk>. Error = 2 USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\Windows Address Book.lnk>. Error = 2 USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Internet Explorer\Address Book.lnk>. Error = 3 USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\Internet Explorer\Address Book.lnk>. Error = 3 USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Accessories\Windows Address Book.lnk>. Error = 2 USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\Accessories\Windows Address Book.lnk>. Error = 2 USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents and Settings\TEMP\Start Menu\Programs\Accessories\Windows Address Book.lnk>. Error = 2 USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents and Settings\All Users.WINNT\Start Menu\Programs\Accessories\Windows Address Book.lnk>. Error = 2 USERENV(430.3fc) 15:42:26:423 LibMain: Process Name: C:\WINNT\System32\MsiExec.exe USERENV(20c.128) 15:42:28:646 LibMain: Process Name: C:\WINNT\system32\regsvr32.exe USERENV(f8.128) 15:42:28:876 LibMain: Process Name: C:\WINNT\System32\shmgrate.exe USERENV(f8.128) 15:42:29:227 LibMain: Process Name: C:\WINNT\System32\shmgrate.exe USERENV(388.f8) 15:42:29:417 LibMain: Process Name: C:\WINNT\Explorer.EXE USERENV(fc.298) 15:42:30:869 LibMain: Process Name: C:\WINNT\system32\mobsync.exe USERENV(444.3a8) 15:42:31:440 LibMain: Process Name: C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe USERENV(444.3a8) 15:42:31:570 ImpersonateUser: Failed to impersonate user with 5. USERENV(444.3a8) 15:42:31:570 GetUserNameAndDomain Failed to impersonate user USERENV(444.3a8) 15:42:31:590 ImpersonateUser: Failed to impersonate user with 5. USERENV(444.3a8) 15:42:31:590 GetUserNameAndDomain Failed to impersonate user USERENV(130.388) 15:47:51:170 LibMain: Process Name: C:\WINNT\system32\mobsync.exe USERENV(a0.80) 15:47:51:300 UnloadUserProfile: Entering, hProfile = <0x2d0> USERENV(a0.80) 15:47:51:300 GetUserMutex: entering USERENV(a0.80) 15:47:51:310 GetUserMutex: Waiting... USERENV(a0.80) 15:47:51:310 GetUserMutex: Wait succeeded. Mutex currently held. USERENV(a0.80) 15:47:51:791 MyRegUnloadKey: Mutex released. Returning 1. USERENV(a0.80) 15:47:51:791 UnloadUserProfile: Succesfully unloaded profile USERENV(a0.80) 15:47:51:801 MyRegUnloadKey: Mutex released. Returning 1. USERENV(a0.80) 15:47:51:801 UnLoadClassHive: Successfully unmounted S-1-5-21-666917423-2343506192-2461445842-3004_Classes USERENV(a0.80) 15:47:51:801 UnloadUserProfile: Successfully unloaded user classes USERENV(a0.80) 15:47:51:801 UnloadUserProfile: Impersonated user USERENV(a0.80) 15:47:51:801 UnloadUserProfile: Writing local ini file USERENV(a0.80) 15:47:51:801 UnloadUserProfile: Reverting to Self USERENV(a0.80) 15:47:51:801 DeleteProfileEx: Failed to query profile guid with error 2 USERENV(a0.80) 15:47:51:801 Delnode_Recurse: Entering, lpDir = <C:\Documents and Settings\TEMP> USERENV(a0.80) 15:47:51:801 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:801 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found: <Application Data> USERENV(a0.80) 15:47:51:811 Delnode_Recurse: Entering, lpDir = <Application Data> USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found: <Identities> USERENV(a0.80) 15:47:51:811 Delnode_Recurse: Entering, lpDir = <Identities> USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found: <{7B962FFF-94E4-4A63-BD13-031D35EBF469}> USERENV(a0.80) 15:47:51:811 Delnode_Recurse: Entering, lpDir = <{7B962FFF-94E4-4A63-BD13-031D35EBF469}> USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:811 Delnode_Recurse: Leaving <{7B962FFF-94E4-4A63-BD13-031D35EBF469}> USERENV(a0.80) 15:47:51:821 Delnode_Recurse: Leaving <Identities> USERENV(a0.80) 15:47:51:821 Delnode_Recurse: FindFile found: <Microsoft> USERENV(a0.80) 15:47:51:821 Delnode_Recurse: Entering, lpDir = <Microsoft> USERENV(a0.80) 15:47:51:821 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:821 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:821 Delnode_Recurse: FindFile found: <Internet Explorer> USERENV(a0.80) 15:47:51:821 Delnode_Recurse: Entering, lpDir = <Internet Explorer> USERENV(a0.80) 15:47:51:821 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:821 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:821 Delnode_Recurse: FindFile found: <brndlog.bak> USERENV(a0.80) 15:47:51:821 Delnode_Recurse: FindFile found: <brndlog.txt> USERENV(a0.80) 15:47:51:831 Delnode_Recurse: FindFile found: <MSIMGSIZ.DAT> USERENV(a0.80) 15:47:51:831 Delnode_Recurse: FindFile found: <Quick Launch> USERENV(a0.80) 15:47:51:831 Delnode_Recurse: Entering, lpDir = <Quick Launch> USERENV(a0.80) 15:47:51:831 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:831 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:831 Delnode_Recurse: FindFile found: <Launch Internet Explorer Browser.lnk> USERENV(a0.80) 15:47:51:831 Delnode_Recurse: FindFile found: <Launch Outlook Express.lnk> USERENV(a0.80) 15:47:51:831 Delnode_Recurse: FindFile found: <Show Desktop.scf> USERENV(a0.80) 15:47:51:841 Delnode_Recurse: Leaving <Quick Launch> USERENV(a0.80) 15:47:51:841 Delnode_Recurse: Leaving <Internet Explorer> USERENV(a0.80) 15:47:51:841 Delnode_Recurse: FindFile found: <Protect> USERENV(a0.80) 15:47:51:841 Delnode_Recurse: Entering, lpDir = <Protect> USERENV(a0.80) 15:47:51:841 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:841 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:841 Delnode_Recurse: FindFile found: <S-1-5-21-666917423-2343506192-2461445842-3004> USERENV(a0.80) 15:47:51:841 Delnode_Recurse: Entering, lpDir = <S-1-5-21-666917423-2343506192-2461445842-3004> USERENV(a0.80) 15:47:51:841 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:841 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:841 Delnode_Recurse: Leaving <S-1-5-21-666917423-2343506192-2461445842-3004> USERENV(a0.80) 15:47:51:841 Delnode_Recurse: Leaving <Protect> USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found: <SystemCertificates> USERENV(a0.80) 15:47:51:851 Delnode_Recurse: Entering, lpDir = <SystemCertificates> USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found: <My> USERENV(a0.80) 15:47:51:851 Delnode_Recurse: Entering, lpDir = <My> USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found: <Certificates> USERENV(a0.80) 15:47:51:851 Delnode_Recurse: Entering, lpDir = <Certificates> USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:861 Delnode_Recurse: Leaving <Certificates> USERENV(a0.80) 15:47:51:861 Delnode_Recurse: FindFile found: <CRLs> USERENV(a0.80) 15:47:51:861 Delnode_Recurse: Entering, lpDir = <CRLs> USERENV(a0.80) 15:47:51:861 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:861 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:861 Delnode_Recurse: Leaving <CRLs> USERENV(a0.80) 15:47:51:861 Delnode_Recurse: FindFile found: <CTLs> USERENV(a0.80) 15:47:51:861 Delnode_Recurse: Entering, lpDir = <CTLs> USERENV(a0.80) 15:47:51:861 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:861 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:861 Delnode_Recurse: Leaving <CTLs> USERENV(a0.80) 15:47:51:871 Delnode_Recurse: Leaving <My> USERENV(a0.80) 15:47:51:871 Delnode_Recurse: Leaving <SystemCertificates> USERENV(a0.80) 15:47:51:871 Delnode_Recurse: Leaving <Microsoft> USERENV(a0.80) 15:47:51:871 Delnode_Recurse: Leaving <Application Data> USERENV(a0.80) 15:47:51:871 Delnode_Recurse: FindFile found: <Cookies> USERENV(a0.80) 15:47:51:871 Delnode_Recurse: Entering, lpDir = <Cookies> USERENV(a0.80) 15:47:51:871 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:871 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:871 Delnode_Recurse: FindFile found: <index.dat> USERENV(a0.80) 15:47:51:881 Delnode_Recurse: Leaving <Cookies> USERENV(a0.80) 15:47:51:881 Delnode_Recurse: FindFile found: <Desktop> USERENV(a0.80) 15:47:51:881 Delnode_Recurse: Entering, lpDir = <Desktop> USERENV(a0.80) 15:47:51:881 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:881 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:881 Delnode_Recurse: FindFile found: <Connect to the Internet.LNK> USERENV(a0.80) 15:47:51:881 Delnode_Recurse: Leaving <Desktop> USERENV(a0.80) 15:47:51:881 Delnode_Recurse: FindFile found: <Favorites> USERENV(a0.80) 15:47:51:881 Delnode_Recurse: Entering, lpDir = <Favorites> USERENV(a0.80) 15:47:51:881 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:891 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:891 Delnode_Recurse: FindFile found: <Desktop.ini> USERENV(a0.80) 15:47:51:891 Delnode_Recurse: FindFile found: <Links> USERENV(a0.80) 15:47:51:891 Delnode_Recurse: Entering, lpDir = <Links> USERENV(a0.80) 15:47:51:891 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:891 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:891 Delnode_Recurse: FindFile found: <Customize Links.url> USERENV(a0.80) 15:47:51:891 Delnode_Recurse: FindFile found: <Free Hotmail.url> USERENV(a0.80) 15:47:51:891 Delnode_Recurse: FindFile found: <Windows.url> USERENV(a0.80) 15:47:51:891 Delnode_Recurse: Leaving <Links> USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found: <Media> USERENV(a0.80) 15:47:51:901 Delnode_Recurse: Entering, lpDir = <Media> USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found: <Bloomberg.url> USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found: <Capitol Records.url> USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found: <CBS.url> USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found: <CNBC Dow Jones Business Video.url> USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found: <CNET Today - Technology News.url> USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found: <CNN Videoselect.url> USERENV(a0.80) 15:47:51:911 Delnode_Recurse: FindFile found: <Disney.url> USERENV(a0.80) 15:47:51:911 Delnode_Recurse: FindFile found: <ESPN Sports.url> USERENV(a0.80) 15:47:51:911 Delnode_Recurse: FindFile found: <Fox News.url> USERENV(a0.80) 15:47:51:911 Delnode_Recurse: FindFile found: <Fox Sports.url> USERENV(a0.80) 15:47:51:911 Delnode_Recurse: FindFile found: <Hollywood Online.url> USERENV(a0.80) 15:47:51:911 Delnode_Recurse: FindFile found: <Internet Radio Guide.url> USERENV(a0.80) 15:47:51:911 Delnode_Recurse: FindFile found: <MSNBC.url> USERENV(a0.80) 15:47:51:911 Delnode_Recurse: FindFile found: <MUSICVIDEOS.COM.url> USERENV(a0.80) 15:47:51:921 Delnode_Recurse: FindFile found: <NBC VideoSeeker.url> USERENV(a0.80) 15:47:51:921 Delnode_Recurse: FindFile found: <TV Guide Entertainment Network.url> USERENV(a0.80) 15:47:51:921 Delnode_Recurse: FindFile found: <Universal Studios Online.url> USERENV(a0.80) 15:47:51:921 Delnode_Recurse: FindFile found: <Warner Bros. Hip Clips.url> USERENV(a0.80) 15:47:51:921 Delnode_Recurse: FindFile found: <What's On Now.url> USERENV(a0.80) 15:47:51:921 Delnode_Recurse: FindFile found: <Windows Media Showcase.url> USERENV(a0.80) 15:47:51:921 Delnode_Recurse: Leaving <Media> USERENV(a0.80) 15:47:51:931 Delnode_Recurse: FindFile found: <MSN.url> USERENV(a0.80) 15:47:51:931 Delnode_Recurse: FindFile found: <Radio Station Guide.url> USERENV(a0.80) 15:47:51:931 Delnode_Recurse: FindFile found: <Web Events.url> USERENV(a0.80) 15:47:51:931 Delnode_Recurse: Leaving <Favorites> USERENV(a0.80) 15:47:51:931 Delnode_Recurse: FindFile found: <Local Settings> USERENV(a0.80) 15:47:51:931 Delnode_Recurse: Entering, lpDir = <Local Settings> USERENV(a0.80) 15:47:51:931 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:931 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:931 Delnode_Recurse: FindFile found: <Application Data> USERENV(a0.80) 15:47:51:931 Delnode_Recurse: Entering, lpDir = <Application Data> USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <Microsoft> USERENV(a0.80) 15:47:51:941 Delnode_Recurse: Entering, lpDir = <Microsoft> USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <Windows> USERENV(a0.80) 15:47:51:941 Delnode_Recurse: Entering, lpDir = <Windows> USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <UsrClass.dat> USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <UsrClass.dat.LOG> USERENV(a0.80) 15:47:51:951 Delnode_Recurse: Leaving <Windows> USERENV(a0.80) 15:47:51:951 Delnode_Recurse: Leaving <Microsoft> USERENV(a0.80) 15:47:51:951 Delnode_Recurse: Leaving <Application Data> USERENV(a0.80) 15:47:51:951 Delnode_Recurse: FindFile found: <History> USERENV(a0.80) 15:47:51:951 Delnode_Recurse: Entering, lpDir = <History> USERENV(a0.80) 15:47:51:951 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:951 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:951 Delnode_Recurse: FindFile found: <desktop.ini> USERENV(a0.80) 15:47:51:951 Delnode_Recurse: FindFile found: <History.IE5> USERENV(a0.80) 15:47:51:951 Delnode_Recurse: Entering, lpDir = <History.IE5> USERENV(a0.80) 15:47:51:961 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:961 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:961 Delnode_Recurse: FindFile found: <desktop.ini> USERENV(a0.80) 15:47:51:961 Delnode_Recurse: FindFile found: <index.dat> USERENV(a0.80) 15:47:51:961 Delnode_Recurse: Leaving <History.IE5> USERENV(a0.80) 15:47:51:961 Delnode_Recurse: Leaving <History> USERENV(a0.80) 15:47:51:961 Delnode_Recurse: FindFile found: <Temp> USERENV(a0.80) 15:47:51:961 Delnode_Recurse: Entering, lpDir = <Temp> USERENV(a0.80) 15:47:51:961 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:961 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:971 Delnode_Recurse: Leaving <Temp> USERENV(a0.80) 15:47:51:971 Delnode_Recurse: FindFile found: <Temporary Internet Files> USERENV(a0.80) 15:47:51:971 Delnode_Recurse: Entering, lpDir = <Temporary Internet Files> USERENV(a0.80) 15:47:51:971 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:971 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:971 Delnode_Recurse: FindFile found: <Content.IE5> USERENV(a0.80) 15:47:51:971 Delnode_Recurse: Entering, lpDir = <Content.IE5> USERENV(a0.80) 15:47:51:971 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:971 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:971 Delnode_Recurse: FindFile found: <4TYNW5YB> USERENV(a0.80) 15:47:51:971 Delnode_Recurse: Entering, lpDir = <4TYNW5YB> USERENV(a0.80) 15:47:51:971 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:981 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:981 Delnode_Recurse: FindFile found: <desktop.ini> USERENV(a0.80) 15:47:51:981 Delnode_Recurse: Leaving <4TYNW5YB> USERENV(a0.80) 15:47:51:981 Delnode_Recurse: FindFile found: <C96J4LQ3> USERENV(a0.80) 15:47:51:981 Delnode_Recurse: Entering, lpDir = <C96J4LQ3> USERENV(a0.80) 15:47:51:981 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:981 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:981 Delnode_Recurse: FindFile found: <desktop.ini> USERENV(a0.80) 15:47:51:981 Delnode_Recurse: Leaving <C96J4LQ3> USERENV(a0.80) 15:47:51:981 Delnode_Recurse: FindFile found: <desktop.ini> USERENV(a0.80) 15:47:51:991 Delnode_Recurse: FindFile found: <index.dat> USERENV(a0.80) 15:47:51:991 Delnode_Recurse: FindFile found: <OHIZOXIJ> USERENV(a0.80) 15:47:51:991 Delnode_Recurse: Entering, lpDir = <OHIZOXIJ> USERENV(a0.80) 15:47:51:991 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:991 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:51:991 Delnode_Recurse: FindFile found: <desktop.ini> USERENV(a0.80) 15:47:51:991 Delnode_Recurse: Leaving <OHIZOXIJ> USERENV(a0.80) 15:47:51:991 Delnode_Recurse: FindFile found: <OXYJGTQ3> USERENV(a0.80) 15:47:51:991 Delnode_Recurse: Entering, lpDir = <OXYJGTQ3> USERENV(a0.80) 15:47:51:991 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:51:991 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:52:001 Delnode_Recurse: FindFile found: <desktop.ini> USERENV(a0.80) 15:47:52:001 Delnode_Recurse: Leaving <OXYJGTQ3> USERENV(a0.80) 15:47:52:001 Delnode_Recurse: Leaving <Content.IE5> USERENV(a0.80) 15:47:52:001 Delnode_Recurse: FindFile found: <desktop.ini> USERENV(a0.80) 15:47:52:001 Delnode_Recurse: Leaving <Temporary Internet Files> USERENV(a0.80) 15:47:52:001 Delnode_Recurse: Leaving <Local Settings> USERENV(a0.80) 15:47:52:001 Delnode_Recurse: FindFile found: <My Documents> USERENV(a0.80) 15:47:52:001 Delnode_Recurse: Entering, lpDir = <My Documents> USERENV(a0.80) 15:47:52:011 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:52:011 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:52:011 Delnode_Recurse: FindFile found: <My Pictures> USERENV(a0.80) 15:47:52:011 Delnode_Recurse: Entering, lpDir = <My Pictures> USERENV(a0.80) 15:47:52:011 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:52:011 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:52:011 Delnode_Recurse: FindFile found: <Desktop.ini> USERENV(a0.80) 15:47:52:011 Delnode_Recurse: FindFile found: <Sample.jpg> USERENV(a0.80) 15:47:52:011 Delnode_Recurse: Leaving <My Pictures> USERENV(a0.80) 15:47:52:011 Delnode_Recurse: Leaving <My Documents> USERENV(a0.80) 15:47:52:011 Delnode_Recurse: FindFile found: <NetHood> USERENV(a0.80) 15:47:52:021 Delnode_Recurse: Entering, lpDir = <NetHood> USERENV(a0.80) 15:47:52:021 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:52:021 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:52:021 Delnode_Recurse: Leaving <NetHood> USERENV(a0.80) 15:47:52:021 Delnode_Recurse: FindFile found: <NTUSER.DAT> USERENV(a0.80) 15:47:52:021 Delnode_Recurse: FindFile found: <NTUSER.DAT.LOG> USERENV(a0.80) 15:47:52:021 Delnode_Recurse: FindFile found: <NTUSER.DAT.LOG.LOG> USERENV(a0.80) 15:47:52:021 Delnode_Recurse: FindFile found: <ntuser.ini> USERENV(a0.80) 15:47:52:031 Delnode_Recurse: FindFile found: <PrintHood> USERENV(a0.80) 15:47:52:031 Delnode_Recurse: Entering, lpDir = <PrintHood> USERENV(a0.80) 15:47:52:031 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:52:031 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:52:031 Delnode_Recurse: Leaving <PrintHood> USERENV(a0.80) 15:47:52:031 Delnode_Recurse: FindFile found: <Recent> USERENV(a0.80) 15:47:52:031 Delnode_Recurse: Entering, lpDir = <Recent> USERENV(a0.80) 15:47:52:031 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:52:031 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:52:031 Delnode_Recurse: Leaving <Recent> USERENV(a0.80) 15:47:52:031 Delnode_Recurse: FindFile found: <SendTo> USERENV(a0.80) 15:47:52:031 Delnode_Recurse: Entering, lpDir = <SendTo> USERENV(a0.80) 15:47:52:041 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:52:041 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:52:041 Delnode_Recurse: FindFile found: <3? Floppy (A).lnk> USERENV(a0.80) 15:47:52:041 Delnode_Recurse: FindFile found: <Desktop (create shortcut).DeskLink> USERENV(a0.80) 15:47:52:041 Delnode_Recurse: FindFile found: <Mail Recipient.MAPIMail> USERENV(a0.80) 15:47:52:041 Delnode_Recurse: FindFile found: <My Documents.mydocs> USERENV(a0.80) 15:47:52:041 Delnode_Recurse: Leaving <SendTo> USERENV(a0.80) 15:47:52:041 Delnode_Recurse: FindFile found: <Start Menu> USERENV(a0.80) 15:47:52:041 Delnode_Recurse: Entering, lpDir = <Start Menu> USERENV(a0.80) 15:47:52:041 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <Programs> USERENV(a0.80) 15:47:52:051 Delnode_Recurse: Entering, lpDir = <Programs> USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <Accessories> USERENV(a0.80) 15:47:52:051 Delnode_Recurse: Entering, lpDir = <Accessories> USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <Accessibility> USERENV(a0.80) 15:47:52:051 Delnode_Recurse: Entering, lpDir = <Accessibility> USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:52:061 Delnode_Recurse: FindFile found: <Magnifier.lnk> USERENV(a0.80) 15:47:52:061 Delnode_Recurse: FindFile found: <Narrator.lnk> USERENV(a0.80) 15:47:52:061 Delnode_Recurse: FindFile found: <On-Screen Keyboard.lnk> USERENV(a0.80) 15:47:52:061 Delnode_Recurse: FindFile found: <Utility Manager.lnk> USERENV(a0.80) 15:47:52:061 Delnode_Recurse: Leaving <Accessibility> USERENV(a0.80) 15:47:52:061 Delnode_Recurse: FindFile found: <Address Book.lnk> USERENV(a0.80) 15:47:52:061 Delnode_Recurse: FindFile found: <Command Prompt.lnk> USERENV(a0.80) 15:47:52:061 Delnode_Recurse: FindFile found: <Entertainment> USERENV(a0.80) 15:47:52:071 Delnode_Recurse: Entering, lpDir = <Entertainment> USERENV(a0.80) 15:47:52:071 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:52:071 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:52:071 Delnode_Recurse: Leaving <Entertainment> USERENV(a0.80) 15:47:52:071 Delnode_Recurse: FindFile found: <Imaging.lnk> USERENV(a0.80) 15:47:52:071 Delnode_Recurse: FindFile found: <Notepad.lnk> USERENV(a0.80) 15:47:52:071 Delnode_Recurse: FindFile found: <Synchronize.lnk> USERENV(a0.80) 15:47:52:071 Delnode_Recurse: FindFile found: <System Tools> USERENV(a0.80) 15:47:52:071 Delnode_Recurse: Entering, lpDir = <System Tools> USERENV(a0.80) 15:47:52:071 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:52:081 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:52:081 Delnode_Recurse: FindFile found: <Disk Cleanup.lnk> USERENV(a0.80) 15:47:52:081 Delnode_Recurse: FindFile found: <Getting Started.lnk> USERENV(a0.80) 15:47:52:081 Delnode_Recurse: FindFile found: <Scheduled Tasks.lnk> USERENV(a0.80) 15:47:52:081 Delnode_Recurse: Leaving <System Tools> USERENV(a0.80) 15:47:52:081 Delnode_Recurse: FindFile found: <Windows Explorer.lnk> USERENV(a0.80) 15:47:52:081 Delnode_Recurse: Leaving <Accessories> USERENV(a0.80) 15:47:52:091 Delnode_Recurse: FindFile found: <Internet Explorer.lnk> USERENV(a0.80) 15:47:52:091 Delnode_Recurse: FindFile found: <Outlook Express.lnk> USERENV(a0.80) 15:47:52:091 Delnode_Recurse: FindFile found: <Startup> USERENV(a0.80) 15:47:52:091 Delnode_Recurse: Entering, lpDir = <Startup> USERENV(a0.80) 15:47:52:091 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:52:091 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:52:091 Delnode_Recurse: Leaving <Startup> USERENV(a0.80) 15:47:52:091 Delnode_Recurse: Leaving <Programs> USERENV(a0.80) 15:47:52:091 Delnode_Recurse: Leaving <Start Menu> USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found: <Templates> USERENV(a0.80) 15:47:52:101 Delnode_Recurse: Entering, lpDir = <Templates> USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found: <.> USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found: <..> USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found: <amipro.sam> USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found: <excel.xls> USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found: <excel4.xls> USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found: <lotus.wk4> USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found: <powerpnt.ppt> USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found: <presenta.shw> USERENV(a0.80) 15:47:52:111 Delnode_Recurse: FindFile found: <quattro.wb2> USERENV(a0.80) 15:47:52:111 Delnode_Recurse: FindFile found: <sndrec.wav> USERENV(a0.80) 15:47:52:111 Delnode_Recurse: FindFile found: <winword.doc> USERENV(a0.80) 15:47:52:111 Delnode_Recurse: FindFile found: <winword2.doc> USERENV(a0.80) 15:47:52:111 Delnode_Recurse: FindFile found: <wordpfct.wpd> USERENV(a0.80) 15:47:52:111 Delnode_Recurse: FindFile found: <wordpfct.wpg> USERENV(a0.80) 15:47:52:121 Delnode_Recurse: Leaving <Templates> USERENV(a0.80) 15:47:52:121 Delnode_Recurse: Leaving <C:\Documents and Settings\TEMP> USERENV(a0.80) 15:47:52:121 Delnode_Recurse: Entering, lpDir = <C:\WINNT\system32\appmgmt\S-1-5-21-666917423-2343506192-2461445842-3004> USERENV(a0.80) 15:47:52:121 DeleteProfile: Failed to delete the appmgmt dir C:\WINNT\system32\appmgmt\S-1-5-21-666917423-2343506192-2461445842-3004, error 3 USERENV(a0.80) 15:47:52:141 UnloadUserProfile: exitting and cleaning up USERENV(a0.80) 15:47:52:141 LoadUserProfile: Releasing mutex. USERENV(a0.80) 15:47:52:141 UnloadUserProfile: Leaving with a return value of 1 USERENV(a0.80) 15:48:12:921 =========================================================