Milo
2005-Sep-29 20:39 UTC
[Samba] adding to: winlogon problem error with Default User/ "... does not
whoops, i didn't have much luck attaching the entire file, hopefully this link will work. http://www.lebox.org/u/milan/samba/userenv-clip.txt here's a piece of the log that looks interesting, any hints? USERENV(a0.80) 15:42:18:872 MyGetDomainDNSName: MyGetUserName failed for dns domain name with 1355 USERENV(a0.80) 15:42:18:872 CheckUserInMachineForest: MyGetDomainName failed with 1355. USERENV(a0.80) 15:42:18:872 CheckXForestLogon : CheckUserInMachineForest failed with 1355 USERENV(a0.80) 15:42:18:872 ParseProfilePath: CheckXForestLogon failed, hr 8007054B USERENV(a0.80) 15:42:18:892 ParseProfilePath: Tick Count = 0 USERENV(a0.80) 15:42:18:902 PingComputer: PingBufferSize set as 2048 USERENV(a0.80) 15:42:18:902 PingComputer: First time: 0 USERENV(a0.80) 15:42:18:902 PingComputer: Fast link. Exiting. USERENV(a0.80) 15:42:18:902 ParseProfilePath: FindFirstFile found something with attributes <0x11> USERENV(a0.80) 15:42:18:902 ParseProfilePath: Found a directory USERENV(a0.80) 15:42:18:912 LoadUserProfile: ParseProfilePath returned a directory of <\\SAMBA\profiles\milan> USERENV(a0.80) 15:42:18:912 RestoreUserProfile: Entering USERENV(a0.80) 15:42:18:912 IsCentralProfileReachable: Entering USERENV(a0.80) 15:42:18:912 CheckRoamingShareOwnership: checking ownership for \\SAMBA\profiles\milan USERENV(a0.80) 15:42:18:912 CheckRoamingShareOwnership: owner is S-1-1-0! USERENV(a0.80) 15:42:18:912 IsCentralProfileReachable: Ownership check failed with 8007051B USERENV(a0.80) 15:42:18:912 RestoreUserProfile: IsCentralProfileReachable returned FALSE. error = 1307 ## I'm guessing the logon session is failing due to the above sequence? ## Please help, thanks! Milan
Milo
2005-Sep-29 22:17 UTC
[Samba] adding to: winlogon problem error with Default User/ "... does not
whoops, forgot to attach the file/log and also, here's a peice of the log
that looks interesting, any hints? Thanks!
USERENV(a0.80) 15:42:18:872 MyGetDomainDNSName: MyGetUserName failed for dns
domain name with 1355
USERENV(a0.80) 15:42:18:872 CheckUserInMachineForest: MyGetDomainName failed
with 1355.
USERENV(a0.80) 15:42:18:872 CheckXForestLogon : CheckUserInMachineForest
failed with 1355
USERENV(a0.80) 15:42:18:872 ParseProfilePath: CheckXForestLogon failed, hr
8007054B
USERENV(a0.80) 15:42:18:892 ParseProfilePath: Tick Count = 0
USERENV(a0.80) 15:42:18:902 PingComputer: PingBufferSize set as 2048
USERENV(a0.80) 15:42:18:902 PingComputer: First time: 0
USERENV(a0.80) 15:42:18:902 PingComputer: Fast link. Exiting.
USERENV(a0.80) 15:42:18:902 ParseProfilePath: FindFirstFile found something
with attributes <0x11>
USERENV(a0.80) 15:42:18:902 ParseProfilePath: Found a directory
USERENV(a0.80) 15:42:18:912 LoadUserProfile: ParseProfilePath returned a
directory of <\\SAMBA\profiles\milan>
USERENV(a0.80) 15:42:18:912 RestoreUserProfile: Entering
USERENV(a0.80) 15:42:18:912 IsCentralProfileReachable: Entering
USERENV(a0.80) 15:42:18:912 CheckRoamingShareOwnership: checking ownership
for \\SAMBA\profiles\milan
USERENV(a0.80) 15:42:18:912 CheckRoamingShareOwnership: owner is S-1-1-0!
USERENV(a0.80) 15:42:18:912 IsCentralProfileReachable: Ownership check
failed with 8007051B
USERENV(a0.80) 15:42:18:912 RestoreUserProfile: IsCentralProfileReachable
returned FALSE. error = 1307
## I'm guessing the logon session is failing due to the above sequence? ##
-------------- next part --------------
USERENV(a0.80) 15:42:06:785 UnloadUserProfile: Leaving with a return value of 1
USERENV(a0.80) 15:42:18:832
========================================================USERENV(a0.80)
15:42:18:832 LoadUserProfile: Entering, hToken = <0x31c>, lpProfileInfo =
0x6f648
USERENV(a0.80) 15:42:18:832 LoadUserProfile: Entering, hToken = <0x31c>,
lpProfileInfo = 0x6f648
USERENV(a0.80) 15:42:18:832 LoadUserProfile: lpProfileInfo->dwFlags =
<0x0>
USERENV(a0.80) 15:42:18:832 LoadUserProfile: lpProfileInfo->lpUserName =
<milan>
USERENV(a0.80) 15:42:18:832 LoadUserProfile: lpProfileInfo->lpProfilePath =
<\\SAMBA\profiles\milan>
USERENV(a0.80) 15:42:18:832 LoadUserProfile: lpProfileInfo->lpDefaultPath =
<\\SAMBA\netlogon\Default User>
USERENV(a0.80) 15:42:18:832 LoadUserProfile: NULL server name
USERENV(a0.80) 15:42:18:832 GetUserMutex: entering
USERENV(a0.80) 15:42:18:842 GetUserMutex: Waiting...
USERENV(a0.80) 15:42:18:842 GetUserMutex: Wait succeeded. Mutex currently held.
USERENV(a0.80) 15:42:18:852 GetUserGuid: Failed to get user guid with 1355.
USERENV(a0.80) 15:42:18:852 GetProfileSid: No Guid -> Sid Mapping available
USERENV(a0.80) 15:42:18:852 GetUserGuid: Failed to get user guid with 1355.
USERENV(a0.80) 15:42:18:862 GetProfileSid: No Guid -> Sid Mapping available
USERENV(a0.80) 15:42:18:862 ParseProfilePath: Entering, lpProfilePath =
<\\SAMBA\profiles\milan>
USERENV(a0.80) 15:42:18:862 CheckXForestLogon: checking x-forest logon, user
handle = 796
USERENV(a0.80) 15:42:18:872 MyGetDomainDNSName: MyGetUserName failed for dns
domain name with 1355
USERENV(a0.80) 15:42:18:872 CheckUserInMachineForest: MyGetDomainName failed
with 1355.
USERENV(a0.80) 15:42:18:872 CheckXForestLogon : CheckUserInMachineForest failed
with 1355
USERENV(a0.80) 15:42:18:872 ParseProfilePath: CheckXForestLogon failed, hr =
8007054B
USERENV(a0.80) 15:42:18:892 ParseProfilePath: Tick Count = 0
USERENV(a0.80) 15:42:18:902 PingComputer: PingBufferSize set as 2048
USERENV(a0.80) 15:42:18:902 PingComputer: First time: 0
USERENV(a0.80) 15:42:18:902 PingComputer: Fast link. Exiting.
USERENV(a0.80) 15:42:18:902 ParseProfilePath: FindFirstFile found something with
attributes <0x11>
USERENV(a0.80) 15:42:18:902 ParseProfilePath: Found a directory
USERENV(a0.80) 15:42:18:912 LoadUserProfile: ParseProfilePath returned a
directory of <\\SAMBA\profiles\milan>
USERENV(a0.80) 15:42:18:912 RestoreUserProfile: Entering
USERENV(a0.80) 15:42:18:912 IsCentralProfileReachable: Entering
USERENV(a0.80) 15:42:18:912 CheckRoamingShareOwnership: checking ownership for
\\SAMBA\profiles\milan
USERENV(a0.80) 15:42:18:912 CheckRoamingShareOwnership: owner is S-1-1-0!
USERENV(a0.80) 15:42:18:912 IsCentralProfileReachable: Ownership check failed
with 8007051B
USERENV(a0.80) 15:42:18:912 RestoreUserProfile: IsCentralProfileReachable
returned FALSE. error = 1307
USERENV(a0.80) 15:42:21:155 RestoreUserProfile: Profile path = <>
USERENV(a0.80) 15:42:21:155 ExtractProfileFromBackup: Failed to open key
Software\Microsoft\Windows
NT\CurrentVersion\ProfileList\S-1-5-21-666917423-2343506192-2461445842-3004 with
error 2
USERENV(a0.80) 15:42:21:155 ExtractProfileFromBackup: Couldn't open backup
profile key. Error = 2
USERENV(a0.80) 15:42:21:165 GetUserGuid: Failed to get user guid with 1355.
USERENV(a0.80) 15:42:21:165 PatchNewProfileIfRequred: No OldSidString found
USERENV(a0.80) 15:42:21:165 IsTempProfileAllowed: Returning 1
USERENV(a0.80) 15:42:21:165 CreateLocalProfileKey: Not setting additional
Security
USERENV(a0.80) 15:42:21:165 CreateLocalProfileImage: One way or another we
haven't got an existing local profile, try and create one
USERENV(a0.80) 15:42:21:165 CreateSecureDirectory: Entering with
<C:\Documents and Settings\TEMP>
USERENV(a0.80) 15:42:21:165 CreateSecureDirectory: Created the directory
<C:\Documents and Settings\TEMP>
USERENV(a0.80) 15:42:21:175 ComputeLocalProfileName: generated the profile
directory <C:\Documents and Settings\TEMP>
USERENV(a0.80) 15:42:22:147 Local profile name is <C:\Documents and
Settings\TEMP>
USERENV(a0.80) 15:42:22:147 RestoreUserProfile: Working with a new user. Go
straight to issuing a default profile.
USERENV(a0.80) 15:42:22:147 RestoreUserProfile: Issuing default profile
USERENV(a0.80) 15:42:22:147 CheckNetDefaultProfile: Entering, lpNetPath =
<\\SAMBA\netlogon\Default User>
USERENV(a0.80) 15:42:22:147 CheckXForestLogon: checking x-forest logon, user
handle = 796
USERENV(a0.80) 15:42:22:187 MyGetDomainDNSName: MyGetUserName failed for dns
domain name with 1355
USERENV(a0.80) 15:42:22:187 CheckUserInMachineForest: MyGetDomainName failed
with 1355.
USERENV(a0.80) 15:42:22:187 CheckXForestLogon : CheckUserInMachineForest failed
with 1355
USERENV(a0.80) 15:42:22:187 CheckNetDefaultProfile: CheckXForestLogon failed, hr
= 8007054B
USERENV(a0.80) 15:42:22:217 CheckNetDefaultProfile: Found a valid network
profile.
USERENV(a0.80) 15:42:22:217 CheckNetDefaultProfile: setting default profile to
<\\SAMBA\netlogon\Default User>
USERENV(a0.80) 15:42:22:217 CheckNetDefaultProfile: Removing local copy of
network default user profile.
USERENV(a0.80) 15:42:22:217 Delnode_Recurse: Entering, lpDir = <C:\Documents
and Settings\Default User (Network)>
USERENV(a0.80) 15:42:22:227 CheckNetDefaultProfile: Leaving with a value of 1.
USERENV(a0.80) 15:42:22:227 IssueDefaultProfile: Entering. lpDefaultProfile =
<\\SAMBA\netlogon\Default User> lpLocalProfile = <C:\Documents and
Settings\TEMP>
USERENV(a0.80) 15:42:22:227 CopyProfileDirectoryEx: Entering, lpSourceDir =
<\\SAMBA\netlogon\Default User>, lpDestinationDir = <C:\Documents and
Settings\TEMP>, dwFlags = 0xc8101
USERENV(a0.80) 15:42:22:227 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Recent\ to the list of directories
USERENV(a0.80) 15:42:22:237 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\SendTo\ to the list of directories
USERENV(a0.80) 15:42:22:237 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Start Menu\Programs\Accessories\Entertainment\ to the list of directories
USERENV(a0.80) 15:42:22:247 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Start Menu\Programs\Accessories\Accessibility\ to the list of directories
USERENV(a0.80) 15:42:22:247 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Start Menu\Programs\Accessories\System Tools\ to the list of directories
USERENV(a0.80) 15:42:22:247 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Start Menu\Programs\Accessories\ to the list of directories
USERENV(a0.80) 15:42:22:247 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Start Menu\Programs\Startup\ to the list of directories
USERENV(a0.80) 15:42:22:247 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Start Menu\Programs\ to the list of directories
USERENV(a0.80) 15:42:22:257 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Start Menu\ to the list of directories
USERENV(a0.80) 15:42:22:257 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Local Settings\Temp\ to the list of directories
USERENV(a0.80) 15:42:22:257 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Local Settings\History\History.IE5\ to the list of directories
USERENV(a0.80) 15:42:22:267 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Local Settings\History\ to the list of directories
USERENV(a0.80) 15:42:22:267 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Local Settings\Temporary Internet Files\Content.IE5\OHIZOXIJ\ to the list
of directories
USERENV(a0.80) 15:42:22:277 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Local Settings\Temporary Internet Files\Content.IE5\C96J4LQ3\ to the list
of directories
USERENV(a0.80) 15:42:22:277 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Local Settings\Temporary Internet Files\Content.IE5\OXYJGTQ3\ to the list
of directories
USERENV(a0.80) 15:42:22:277 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Local Settings\Temporary Internet Files\Content.IE5\4TYNW5YB\ to the list
of directories
USERENV(a0.80) 15:42:22:277 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Local Settings\Temporary Internet Files\Content.IE5\ to the list of
directories
USERENV(a0.80) 15:42:22:277 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Local Settings\Temporary Internet Files\ to the list of directories
USERENV(a0.80) 15:42:22:287 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Local Settings\Application Data\ to the list of directories
USERENV(a0.80) 15:42:22:287 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Local Settings\ to the list of directories
USERENV(a0.80) 15:42:22:287 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Cookies\ to the list of directories
USERENV(a0.80) 15:42:22:287 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Desktop\ to the list of directories
USERENV(a0.80) 15:42:22:297 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Favorites\Media\ to the list of directories
USERENV(a0.80) 15:42:22:297 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Favorites\ to the list of directories
USERENV(a0.80) 15:42:22:297 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Application Data\Microsoft\Internet Explorer\ to the list of directories
USERENV(a0.80) 15:42:22:297 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Application Data\Microsoft\ to the list of directories
USERENV(a0.80) 15:42:22:307 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Application Data\ to the list of directories
USERENV(a0.80) 15:42:22:307 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\PrintHood\ to the list of directories
USERENV(a0.80) 15:42:22:307 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\Templates\ to the list of directories
USERENV(a0.80) 15:42:22:307 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\NetHood\ to the list of directories
USERENV(a0.80) 15:42:22:317 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\My Documents\My Pictures\ to the list of directories
USERENV(a0.80) 15:42:22:317 RecurseDirectory: Adding \\SAMBA\netlogon\Default
User\My Documents\ to the list of directories
USERENV(a0.80) 15:42:22:327 ReconcileFile: \\SAMBA\netlogon\Default
User\NTUSER.DAT.LOG.LOG ==> C:\Documents and Settings\TEMP\NTUSER.DAT.LOG.LOG
[OK]
USERENV(a0.80) 15:42:22:347 ReconcileFile: \\SAMBA\netlogon\Default
User\NTUSER.DAT ==> C:\Documents and Settings\TEMP\NTUSER.DAT [OK]
USERENV(a0.80) 15:42:22:357 ReconcileFile: \\SAMBA\netlogon\Default
User\NTUSER.DAT.LOG ==> C:\Documents and Settings\TEMP\NTUSER.DAT.LOG [OK]
USERENV(a0.80) 15:42:22:357 CopyProfileDirectoryEx: Calling ReconcileDirectory
for all Directories
USERENV(a0.80) 15:42:22:567 CopyProfileDirectoryEx: Reconcile Directory Done for
all Directories
USERENV(a0.440) 15:42:22:597 ReconcileFile: \\SAMBA\netlogon\Default
User\Templates\wordpfct.wpd ==> C:\Documents and
Settings\TEMP\Templates\wordpfct.wpd [OK]
USERENV(a0.148) 15:42:22:597 ReconcileFile: \\SAMBA\netlogon\Default
User\Templates\wordpfct.wpg ==> C:\Documents and
Settings\TEMP\Templates\wordpfct.wpg [OK]
USERENV(a0.224) 15:42:22:597 ReconcileFile: \\SAMBA\netlogon\Default User\My
Documents\My Pictures\Sample.jpg ==> C:\Documents and Settings\TEMP\My
Documents\My Pictures\Sample.jpg [OK]
USERENV(a0.3a4) 15:42:22:597 ReconcileFile: \\SAMBA\netlogon\Default User\My
Documents\My Pictures\Desktop.ini ==> C:\Documents and Settings\TEMP\My
Documents\My Pictures\Desktop.ini [OK]
USERENV(a0.1c0) 15:42:22:617 ReconcileFile: \\SAMBA\netlogon\Default
User\Templates\powerpnt.ppt ==> C:\Documents and
Settings\TEMP\Templates\powerpnt.ppt [OK]
USERENV(a0.414) 15:42:22:627 ReconcileFile: \\SAMBA\netlogon\Default
User\Templates\sndrec.wav ==> C:\Documents and
Settings\TEMP\Templates\sndrec.wav [OK]
USERENV(a0.3ec) 15:42:22:627 ReconcileFile: \\SAMBA\netlogon\Default
User\Templates\lotus.wk4 ==> C:\Documents and
Settings\TEMP\Templates\lotus.wk4 [OK]
USERENV(a0.440) 15:42:22:637 ReconcileFile: \\SAMBA\netlogon\Default
User\Templates\excel4.xls ==> C:\Documents and
Settings\TEMP\Templates\excel4.xls [OK]
USERENV(a0.224) 15:42:22:647 ReconcileFile: \\SAMBA\netlogon\Default
User\Templates\winword2.doc ==> C:\Documents and
Settings\TEMP\Templates\winword2.doc [OK]
USERENV(a0.148) 15:42:22:647 ReconcileFile: \\SAMBA\netlogon\Default
User\Templates\amipro.sam ==> C:\Documents and
Settings\TEMP\Templates\amipro.sam [OK]
USERENV(a0.3a4) 15:42:22:657 ReconcileFile: \\SAMBA\netlogon\Default
User\Templates\quattro.wb2 ==> C:\Documents and
Settings\TEMP\Templates\quattro.wb2 [OK]
USERENV(a0.1c0) 15:42:22:667 ReconcileFile: \\SAMBA\netlogon\Default
User\Templates\excel.xls ==> C:\Documents and
Settings\TEMP\Templates\excel.xls [OK]
USERENV(a0.414) 15:42:22:677 ReconcileFile: \\SAMBA\netlogon\Default
User\Templates\presenta.shw ==> C:\Documents and
Settings\TEMP\Templates\presenta.shw [OK]
USERENV(a0.3ec) 15:42:22:677 ReconcileFile: \\SAMBA\netlogon\Default
User\Templates\winword.doc ==> C:\Documents and
Settings\TEMP\Templates\winword.doc [OK]
USERENV(a0.440) 15:42:22:687 ReconcileFile: \\SAMBA\netlogon\Default
User\Application Data\Microsoft\Internet Explorer\brndlog.txt ==>
C:\Documents and Settings\TEMP\Application Data\Microsoft\Internet
Explorer\brndlog.txt [OK]
USERENV(a0.148) 15:42:22:697 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\Fox News.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\Fox News.url [OK]
USERENV(a0.3a4) 15:42:22:707 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\CBS.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\CBS.url [OK]
USERENV(a0.1c0) 15:42:22:717 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\Fox Sports.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\Fox Sports.url [OK]
USERENV(a0.414) 15:42:22:717 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\Capitol Records.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\Capitol Records.url [OK]
USERENV(a0.3ec) 15:42:22:727 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\Universal Studios Online.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\Universal Studios Online.url [OK]
USERENV(a0.148) 15:42:22:737 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\MSNBC.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\MSNBC.url [OK]
USERENV(a0.440) 15:42:22:737 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\MUSICVIDEOS.COM.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\MUSICVIDEOS.COM.url [OK]
USERENV(a0.3a4) 15:42:22:748 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\NBC VideoSeeker.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\NBC VideoSeeker.url [OK]
USERENV(a0.414) 15:42:22:758 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\What's On Now.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\What's On Now.url [OK]
USERENV(a0.1c0) 15:42:22:758 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\ESPN Sports.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\ESPN Sports.url [OK]
USERENV(a0.148) 15:42:22:778 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\CNET Today - Technology News.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\CNET Today - Technology News.url [OK]
USERENV(a0.3a4) 15:42:22:788 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\Windows Media Showcase.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\Windows Media Showcase.url [OK]
USERENV(a0.1c0) 15:42:22:798 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\CNN Videoselect.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\CNN Videoselect.url [OK]
USERENV(a0.414) 15:42:22:798 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\TV Guide Entertainment Network.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\TV Guide Entertainment Network.url [OK]
USERENV(a0.148) 15:42:22:808 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\Warner Bros. Hip Clips.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\Warner Bros. Hip Clips.url [OK]
USERENV(a0.3a4) 15:42:22:818 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\Bloomberg.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\Bloomberg.url [OK]
USERENV(a0.1c0) 15:42:22:818 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\Internet Radio Guide.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\Internet Radio Guide.url [OK]
USERENV(a0.414) 15:42:22:828 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\CNBC Dow Jones Business Video.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\CNBC Dow Jones Business Video.url [OK]
USERENV(a0.148) 15:42:22:838 ReconcileFile: \\SAMBA\netlogon\Default
User\Cookies\index.dat ==> C:\Documents and Settings\TEMP\Cookies\index.dat
[OK]
USERENV(a0.414) 15:42:22:848 ReconcileFile: \\SAMBA\netlogon\Default User\Local
Settings\Temporary Internet Files\Content.IE5\OXYJGTQ3\desktop.ini ==>
C:\Documents and Settings\TEMP\Local Settings\Temporary Internet
Files\Content.IE5\OXYJGTQ3\desktop.ini [OK]
USERENV(a0.1c0) 15:42:22:848 ReconcileFile: \\SAMBA\netlogon\Default User\Local
Settings\Temporary Internet Files\Content.IE5\4TYNW5YB\desktop.ini ==>
C:\Documents and Settings\TEMP\Local Settings\Temporary Internet
Files\Content.IE5\4TYNW5YB\desktop.ini [OK]
USERENV(a0.148) 15:42:22:868 ReconcileFile: \\SAMBA\netlogon\Default User\Local
Settings\Temporary Internet Files\Content.IE5\index.dat ==> C:\Documents and
Settings\TEMP\Local Settings\Temporary Internet Files\Content.IE5\index.dat
[OK]
USERENV(a0.414) 15:42:22:878 ReconcileFile: \\SAMBA\netlogon\Default User\Local
Settings\Temporary Internet Files\Content.IE5\desktop.ini ==> C:\Documents
and Settings\TEMP\Local Settings\Temporary Internet
Files\Content.IE5\desktop.ini [OK]
USERENV(a0.1c0) 15:42:22:878 ReconcileFile: \\SAMBA\netlogon\Default User\Local
Settings\Temporary Internet Files\Content.IE5\C96J4LQ3\desktop.ini ==>
C:\Documents and Settings\TEMP\Local Settings\Temporary Internet
Files\Content.IE5\C96J4LQ3\desktop.ini [OK]
USERENV(a0.414) 15:42:22:888 ReconcileFile: \\SAMBA\netlogon\Default User\Local
Settings\History\History.IE5\index.dat ==> C:\Documents and
Settings\TEMP\Local Settings\History\History.IE5\index.dat [OK]
USERENV(a0.148) 15:42:22:898 ReconcileFile: \\SAMBA\netlogon\Default User\Local
Settings\Temporary Internet Files\Content.IE5\OHIZOXIJ\desktop.ini ==>
C:\Documents and Settings\TEMP\Local Settings\Temporary Internet
Files\Content.IE5\OHIZOXIJ\desktop.ini [OK]
USERENV(a0.1c0) 15:42:22:898 ReconcileFile: \\SAMBA\netlogon\Default User\Local
Settings\History\History.IE5\desktop.ini ==> C:\Documents and
Settings\TEMP\Local Settings\History\History.IE5\desktop.ini [OK]
USERENV(a0.148) 15:42:22:918 ReconcileFile: \\SAMBA\netlogon\Default User\Start
Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk ==> C:\Documents and
Settings\TEMP\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk
[OK]
USERENV(a0.1c0) 15:42:22:918 ReconcileFile: \\SAMBA\netlogon\Default User\Start
Menu\Programs\Accessories\System Tools\Scheduled Tasks.lnk ==> C:\Documents
and Settings\TEMP\Start Menu\Programs\Accessories\System Tools\Scheduled
Tasks.lnk [OK]
USERENV(a0.414) 15:42:22:918 ReconcileFile: \\SAMBA\netlogon\Default User\Local
Settings\History\desktop.ini ==> C:\Documents and Settings\TEMP\Local
Settings\History\desktop.ini [OK]
USERENV(a0.1c0) 15:42:22:938 ReconcileFile: \\SAMBA\netlogon\Default User\Start
Menu\Programs\Accessories\Command Prompt.lnk ==> C:\Documents and
Settings\TEMP\Start Menu\Programs\Accessories\Command Prompt.lnk [OK]
USERENV(a0.148) 15:42:22:938 ReconcileFile: \\SAMBA\netlogon\Default User\Start
Menu\Programs\Accessories\System Tools\Getting Started.lnk ==> C:\Documents
and Settings\TEMP\Start Menu\Programs\Accessories\System Tools\Getting
Started.lnk [OK]
USERENV(a0.414) 15:42:22:948 ReconcileFile: \\SAMBA\netlogon\Default User\Start
Menu\Programs\Accessories\Synchronize.lnk ==> C:\Documents and
Settings\TEMP\Start Menu\Programs\Accessories\Synchronize.lnk [OK]
USERENV(a0.1c0) 15:42:22:958 ReconcileFile: \\SAMBA\netlogon\Default User\Start
Menu\Programs\Accessories\Accessibility\Magnifier.lnk ==> C:\Documents and
Settings\TEMP\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk [OK]
USERENV(a0.148) 15:42:22:968 ReconcileFile: \\SAMBA\netlogon\Default User\Start
Menu\Programs\Accessories\Accessibility\Narrator.lnk ==> C:\Documents and
Settings\TEMP\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk [OK]
USERENV(a0.1c0) 15:42:22:968 ReconcileFile: \\SAMBA\netlogon\Default User\Start
Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk ==>
C:\Documents and Settings\TEMP\Start
Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk [OK]
USERENV(a0.148) 15:42:22:988 ReconcileFile: \\SAMBA\netlogon\Default User\Start
Menu\Programs\Accessories\Imaging.lnk ==> C:\Documents and
Settings\TEMP\Start Menu\Programs\Accessories\Imaging.lnk [OK]
USERENV(a0.1c0) 15:42:22:998 ReconcileFile: \\SAMBA\netlogon\Default User\Start
Menu\Programs\Accessories\Notepad.lnk ==> C:\Documents and
Settings\TEMP\Start Menu\Programs\Accessories\Notepad.lnk [OK]
USERENV(a0.414) 15:42:22:998 ReconcileFile: \\SAMBA\netlogon\Default User\Start
Menu\Programs\Accessories\Accessibility\Utility Manager.lnk ==> C:\Documents
and Settings\TEMP\Start Menu\Programs\Accessories\Accessibility\Utility
Manager.lnk [OK]
USERENV(a0.148) 15:42:23:008 ReconcileFile: \\SAMBA\netlogon\Default User\Start
Menu\Programs\Accessories\Windows Explorer.lnk ==> C:\Documents and
Settings\TEMP\Start Menu\Programs\Accessories\Windows Explorer.lnk [OK]
USERENV(a0.1c0) 15:42:23:018 ReconcileFile: \\SAMBA\netlogon\Default
User\SendTo\Desktop (create shortcut).DeskLink ==> C:\Documents and
Settings\TEMP\SendTo\Desktop (create shortcut).DeskLink [OK]
USERENV(a0.414) 15:42:23:018 ReconcileFile: \\SAMBA\netlogon\Default
User\SendTo\Mail Recipient.MAPIMail ==> C:\Documents and
Settings\TEMP\SendTo\Mail Recipient.MAPIMail [OK]
USERENV(a0.148) 15:42:23:028 ReconcileFile: \\SAMBA\netlogon\Default
User\SendTo\My Documents.mydocs ==> C:\Documents and Settings\TEMP\SendTo\My
Documents.mydocs [OK]
USERENV(a0.1c0) 15:42:23:028 ReconcileFile: \\SAMBA\netlogon\Default
User\SendTo\3? Floppy (A).lnk ==> C:\Documents and Settings\TEMP\SendTo\3?
Floppy (A).lnk [OK]
USERENV(a0.224) 15:42:23:038 ReconcileFile: \\SAMBA\netlogon\Default
User\Application Data\Microsoft\Internet Explorer\brndlog.bak ==>
C:\Documents and Settings\TEMP\Application Data\Microsoft\Internet
Explorer\brndlog.bak [OK]
USERENV(a0.440) 15:42:23:048 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\Disney.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\Disney.url [OK]
USERENV(a0.3ec) 15:42:23:048 ReconcileFile: \\SAMBA\netlogon\Default
User\Favorites\Media\Hollywood Online.url ==> C:\Documents and
Settings\TEMP\Favorites\Media\Hollywood Online.url [OK]
USERENV(a0.3a4) 15:42:23:058 ReconcileFile: \\SAMBA\netlogon\Default User\Local
Settings\Temporary Internet Files\desktop.ini ==> C:\Documents and
Settings\TEMP\Local Settings\Temporary Internet Files\desktop.ini [OK]
USERENV(a0.80) 15:42:23:058 CopyProfileDirectoryEx: Setting Directory TimeStamps
all Directories
USERENV(a0.80) 15:42:23:078 CopyProfileDirectoryEx: Set times on all directories
USERENV(a0.80) 15:42:23:088 CopyProfileDirectoryEx: Leaving with a return value
of 1
USERENV(a0.80) 15:42:23:258 MyRegLoadKey: Mutex released. Returning 0.
USERENV(a0.80) 15:42:23:258 IssueDefaultProfile: Leaving successfully
USERENV(a0.80) 15:42:23:258 RestoreUserProfile: Successfully setup the
specified default.
USERENV(a0.80) 15:42:23:258 SetupNewHive: Entering
USERENV(a0.80) 15:42:23:258 SetDefaultUserHiveSecurity: Entering
USERENV(a0.80) 15:42:23:308 SecureUserKey: Entering
USERENV(a0.80) 15:42:23:308 SecureUserKey: Leaving with a return value of 1
USERENV(a0.80) 15:42:23:308 SecureUserKey: Entering
USERENV(a0.80) 15:42:23:308 SecureUserKey: Leaving with a return value of 1
USERENV(a0.80) 15:42:23:679 SetupNewHive: Leaving with a return value of 1
USERENV(a0.80) 15:42:23:689 MyRegLoadKey: Mutex released. Returning 0.
USERENV(a0.80) 15:42:23:699 CreateClassHive: existing user classes hive not
found
USERENV(a0.80) 15:42:23:699 SetDefaultUserHiveSecurity: Entering
USERENV(a0.80) 15:42:23:699 RestoreUserProfile: About to Leave. Final
Information follows:
USERENV(a0.80) 15:42:23:699 Profile was successfully loaded.
USERENV(a0.80) 15:42:23:699 lpProfile->lpRoamingProfile = <>
USERENV(a0.80) 15:42:23:699 lpProfile->lpLocalProfile = <C:\Documents and
Settings\TEMP>
USERENV(a0.80) 15:42:23:699 lpProfile->dwInternalFlags = 0xa04
USERENV(a0.80) 15:42:23:699 RestoreUserProfile: Leaving.
USERENV(a0.80) 15:42:23:709 GetUserGuid: Failed to get user guid with 1355.
USERENV(a0.80) 15:42:23:719 GetUserGuid: Failed to get user guid with 1355.
USERENV(a0.80) 15:42:23:719 UpgradeProfile: Entering
USERENV(a0.80) 15:42:23:719 UpgradeProfile: Build numbers match
USERENV(a0.80) 15:42:23:719 UpgradeProfile: Leaving Successfully
USERENV(a0.80) 15:42:23:729 LoadUserProfile: Releasing mutex.
USERENV(a0.80) 15:42:23:729 LoadUserProfile: Leaving with a value of 1.
USERENV(a0.80) 15:42:23:729 LoadUserProfile: hProfile = <0x2d0>
USERENV(a0.80) 15:42:23:729
========================================================USERENV(a0.80)
15:42:23:729 ApplySystemPolicy: Entering
USERENV(a0.80) 15:42:23:729 ApplySystemPolicy: PolicyPath is:
<\\SAMBA\netlogon\ntconfig.pol>.
USERENV(a0.80) 15:42:23:729 ApplySystemPolicy: No policy file.
USERENV(a0.3a4) 15:42:23:799 ApplyGroupPolicy: Entering. Flags = 2
USERENV(a0.3a4) 15:42:23:799 ProcessGPOs:
USERENV(a0.3a4) 15:42:23:799 ProcessGPOs:
USERENV(a0.3a4) 15:42:23:799 ProcessGPOs: Starting user Group Policy
processing...
USERENV(a0.3a4) 15:42:23:809 ProcessGPOs:
USERENV(a0.3a4) 15:42:23:809 ProcessGPOs:
USERENV(a0.3a4) 15:42:23:809 EnterCriticalPolicySection: User critical section
has been claimed. Handle = 0x6a0
USERENV(a0.3a4) 15:42:23:809 ProcessGPOs: Machine role is 1.
USERENV(a0.3a4) 15:42:23:809 ProcessGPOs: Calling GetGPOInfo for normal policy
mode
USERENV(a0.3a4) 15:42:23:809 GetGPOInfo: ********************************
USERENV(a0.3a4) 15:42:23:809 GetGPOInfo: Entering...
USERENV(a0.3a4) 15:42:23:809 GetGPOInfo: lpHostName or lpDNName is NULL.
Skipping DS stuff.
USERENV(a0.3a4) 15:42:23:819 GetGPOInfo: GPO Local Group Policy doesn't
contain any data since the version number is 0. It will be skipped.
USERENV(a0.3a4) 15:42:23:819 GetGPOInfo: Leaving with 1
USERENV(a0.3a4) 15:42:23:819 GetGPOInfo: ********************************
USERENV(a0.3a4) 15:42:23:819 ProcessGPOs: OpenThreadToken failed with error
1008, assuming thread is not impersonating
USERENV(a0.3a4) 15:42:23:819 ProcessGPOs: -----------------------
USERENV(a0.3a4) 15:42:23:819 ProcessGPOs: Processing extension Registry
USERENV(a0.3a4) 15:42:23:819 CompareGPOLists: The lists are the same.
USERENV(a0.3a4) 15:42:23:819 ProcessGPOs: Extension Registry skipped because
both deleted and changed GPO lists are empty.
USERENV(a0.3a4) 15:42:23:819 ProcessGPOs: -----------------------
USERENV(a0.3a4) 15:42:23:819 ProcessGPOs: Processing extension Folder
Redirection
USERENV(a0.3a4) 15:42:23:829 CompareGPOLists: The lists are the same.
USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Extension Folder Redirection skipped
because both deleted and changed GPO lists are empty.
USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: -----------------------
USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Processing extension Microsoft Disk
Quota
USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Extension Microsoft Disk Quota skipped
with flags 0x2.
USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: -----------------------
USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Processing extension Scripts
USERENV(a0.3a4) 15:42:23:829 CompareGPOLists: The lists are the same.
USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Extension Scripts skipped because both
deleted and changed GPO lists are empty.
USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: -----------------------
USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Processing extension Security
USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Extension Security skipped with flags
0x2.
USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: -----------------------
USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Processing extension Internet Explorer
Branding
USERENV(a0.3a4) 15:42:23:829 CompareGPOLists: The lists are the same.
USERENV(a0.3a4) 15:42:23:829 ProcessGPOs: Extension Internet Explorer Branding
skipped because both deleted and changed GPO lists are empty.
USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: -----------------------
USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: Processing extension EFS recovery
USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: Extension EFS recovery skipped with
flags 0x2.
USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: -----------------------
USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: Processing extension Application
Management
USERENV(a0.3a4) 15:42:23:839 CompareGPOLists: The lists are the same.
USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: Extension Application Management
skipped because both deleted and changed GPO lists are empty.
USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: -----------------------
USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: Processing extension IP Security
USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: Extension IP Security skipped with
flags 0x2.
USERENV(a0.3a4) 15:42:23:839 LeaveCriticalPolicySection: Critical section 0x6a0
has been released.
USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: User Group Policy has been applied.
USERENV(a0.3a4) 15:42:23:839 ProcessGPOs: Leaving with 1.
USERENV(a0.3a4) 15:42:23:849 ApplyGroupPolicy: Leaving successfully.
USERENV(224.3a4) 15:42:23:979 LibMain: Process Name:
C:\WINNT\system32\userinit.exe
USERENV(224.3a4) 15:42:23:979 CheckXForestLogon: checking x-forest logon, user
handle = 120
USERENV(224.3a4) 15:42:24:009 MyGetDomainDNSName: MyGetUserName failed for dns
domain name with 1355
USERENV(224.3a4) 15:42:24:079 CheckUserInMachineForest: MyGetDomainName failed
with 1355.
USERENV(224.3a4) 15:42:24:079 CheckXForestLogon : CheckUserInMachineForest
failed with 1355
USERENV(128.20c) 15:42:24:700 LibMain: Process Name:
C:\WINNT\system32\ie4uinit.exe
USERENV(128.20c) 15:42:24:770 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Internet Explorer.lnk>. Error = 2
USERENV(128.20c) 15:42:24:770 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Internet Explorer\Internet
Explorer.lnk>. Error = 3
USERENV(128.20c) 15:42:24:780 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Accessories\Internet Tools\Internet
Explorer.lnk>. Error = 3
USERENV(128.20c) 15:42:24:780 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Accessories\Internet Tools\Internet
Explorer.lnk>. Error = 3
USERENV(128.20c) 15:42:24:780 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Internet Explorer\Channel Bar.lnk>.
Error = 3
USERENV(128.20c) 15:42:24:790 PrependPath: Entering with <C:\Program
Files\Internet Explorer\iexplore.exe>
USERENV(128.20c) 15:42:24:790 UnExpandSysRoot: Entering with <C:\Program
Files\Internet Explorer\iexplore.exe>
USERENV(128.20c) 15:42:24:790 UnExpandSysRoot: Leaving with <C:\Program
Files\Internet Explorer\iexplore.exe>
USERENV(128.20c) 15:42:24:790 PrependPath: Leaving with <C:\Program
Files\Internet Explorer\iexplore.exe>
USERENV(128.20c) 15:42:24:831 PrependPath: Entering with <>
USERENV(128.20c) 15:42:24:831 PrependPath: lpFile is NULL, setting lpResult to a
null string
USERENV(128.20c) 15:42:24:871 CreateLinkFile: Leaving with status of 1.
USERENV(33c.408) 15:42:25:411 LibMain: Process Name:
C:\WINNT\system32\rundll32.exe
USERENV(128.20c) 15:42:25:471 PrependPath: Entering with <C:\Program
Files\Internet Explorer\IEXPLORE.EXE>
USERENV(128.20c) 15:42:25:471 UnExpandSysRoot: Entering with <C:\Program
Files\Internet Explorer\IEXPLORE.EXE>
USERENV(128.20c) 15:42:25:471 UnExpandSysRoot: Leaving with <C:\Program
Files\Internet Explorer\IEXPLORE.EXE>
USERENV(128.20c) 15:42:25:471 PrependPath: Leaving with <C:\Program
Files\Internet Explorer\IEXPLORE.EXE>
USERENV(128.20c) 15:42:25:481 PrependPath: Entering with <>
USERENV(128.20c) 15:42:25:481 PrependPath: lpFile is NULL, setting lpResult to a
null string
USERENV(128.20c) 15:42:25:481 CreateLinkFile: Leaving with status of 1.
USERENV(20c.128) 15:42:25:532 LibMain: Process Name:
C:\WINNT\system32\rundll32.exe
USERENV(a0.3ec) 15:42:25:932 GPOThread: Next refresh will happen in 109 minutes
USERENV(128.20c) 15:42:25:952 LibMain: Process Name: C:\Program Files\Outlook
Express\setup50.exe
USERENV(128.20c) 15:42:25:962 PrependPath: Entering with <C:\Program
Files\Outlook Express\msimn.exe>
USERENV(128.20c) 15:42:25:962 UnExpandSysRoot: Entering with <C:\Program
Files\Outlook Express\msimn.exe>
USERENV(128.20c) 15:42:25:962 UnExpandSysRoot: Leaving with <C:\Program
Files\Outlook Express\msimn.exe>
USERENV(128.20c) 15:42:25:962 PrependPath: Leaving with <C:\Program
Files\Outlook Express\msimn.exe>
USERENV(128.20c) 15:42:25:982 PrependPath: Entering with <>
USERENV(128.20c) 15:42:25:982 PrependPath: lpFile is NULL, setting lpResult to a
null string
USERENV(128.20c) 15:42:26:012 CreateLinkFile: Leaving with status of 1.
USERENV(128.20c) 15:42:26:012 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Internet\Mail.lnk>. Error = 3
USERENV(128.20c) 15:42:26:012 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\Internet\Mail.lnk>. Error =
3
USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Internet\News.lnk>. Error = 3
USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\Internet\News.lnk>. Error =
3
USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Internet\Read Me (Mail and News).lnk>.
Error = 3
USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\Internet\Read Me (Mail and
News).lnk>. Error = 3
USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Internet Mail.lnk>. Error = 2
USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\Internet Mail.lnk>. Error =
2
USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Internet News.lnk>. Error = 2
USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\Internet News.lnk>. Error =
2
USERENV(128.20c) 15:42:26:022 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Outlook Express Mail.lnk>. Error = 2
USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\Outlook Express Mail.lnk>.
Error = 2
USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Outlook Express News.lnk>. Error = 2
USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\Outlook Express News.lnk>.
Error = 2
USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Microsoft Outlook Express.lnk>. Error
= 2
USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\Microsoft Outlook
Express.lnk>. Error = 2
USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\..\..\Desktop\Mail.lnk>. Error = 2
USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\..\..\Desktop\Mail.lnk>.
Error = 2
USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\..\..\Desktop\News.lnk>. Error = 2
USERENV(128.20c) 15:42:26:032 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\..\..\Desktop\News.lnk>.
Error = 2
USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\..\..\Desktop\Internet Mail.lnk>.
Error = 2
USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\..\..\Desktop\Internet
Mail.lnk>. Error = 2
USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\..\..\Desktop\Internet News.lnk>.
Error = 2
USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\..\..\Desktop\Internet
News.lnk>. Error = 2
USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Internet Explorer Suite\Outlook Express
Mail.lnk>. Error = 3
USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\Internet Explorer Suite\Outlook
Express Mail.lnk>. Error = 3
USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Internet Explorer Suite\Outlook Express
News.lnk>. Error = 3
USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\Internet Explorer Suite\Outlook
Express News.lnk>. Error = 3
USERENV(128.20c) 15:42:26:042 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Internet Explorer\Outlook Express.lnk>.
Error = 3
USERENV(128.20c) 15:42:26:052 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\Internet Explorer\Outlook
Express.lnk>. Error = 3
USERENV(128.20c) 15:42:26:052 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Internet Explorer\Microsoft Outlook
Express.lnk>. Error = 3
USERENV(128.20c) 15:42:26:052 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\Internet Explorer\Microsoft
Outlook Express.lnk>. Error = 3
USERENV(128.20c) 15:42:26:152 LibMain: Process Name: C:\Program Files\Outlook
Express\setup50.exe
USERENV(128.20c) 15:42:26:172 PrependPath: Entering with <C:\Program
Files\Outlook Express\wab.exe>
USERENV(128.20c) 15:42:26:172 UnExpandSysRoot: Entering with <C:\Program
Files\Outlook Express\wab.exe>
USERENV(128.20c) 15:42:26:172 UnExpandSysRoot: Leaving with <C:\Program
Files\Outlook Express\wab.exe>
USERENV(128.20c) 15:42:26:172 PrependPath: Leaving with <C:\Program
Files\Outlook Express\wab.exe>
USERENV(128.20c) 15:42:26:223 PrependPath: Entering with <>
USERENV(128.20c) 15:42:26:223 PrependPath: lpFile is NULL, setting lpResult to a
null string
USERENV(128.20c) 15:42:26:263 CreateLinkFile: Leaving with status of 1.
USERENV(128.20c) 15:42:26:263 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Address Book.lnk>. Error = 2
USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\Address Book.lnk>. Error =
2
USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Windows Address Book.lnk>. Error = 2
USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\Windows Address Book.lnk>.
Error = 2
USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Internet Explorer\Address Book.lnk>.
Error = 3
USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\Internet Explorer\Address
Book.lnk>. Error = 3
USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Accessories\Windows Address Book.lnk>.
Error = 2
USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\Accessories\Windows Address
Book.lnk>. Error = 2
USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\TEMP\Start Menu\Programs\Accessories\Windows Address Book.lnk>.
Error = 2
USERENV(128.20c) 15:42:26:273 DeleteLinkFile: Failed to delete <C:\Documents
and Settings\All Users.WINNT\Start Menu\Programs\Accessories\Windows Address
Book.lnk>. Error = 2
USERENV(430.3fc) 15:42:26:423 LibMain: Process Name:
C:\WINNT\System32\MsiExec.exe
USERENV(20c.128) 15:42:28:646 LibMain: Process Name:
C:\WINNT\system32\regsvr32.exe
USERENV(f8.128) 15:42:28:876 LibMain: Process Name:
C:\WINNT\System32\shmgrate.exe
USERENV(f8.128) 15:42:29:227 LibMain: Process Name:
C:\WINNT\System32\shmgrate.exe
USERENV(388.f8) 15:42:29:417 LibMain: Process Name: C:\WINNT\Explorer.EXE
USERENV(fc.298) 15:42:30:869 LibMain: Process Name:
C:\WINNT\system32\mobsync.exe
USERENV(444.3a8) 15:42:31:440 LibMain: Process Name: C:\Program Files\Internet
Explorer\Connection Wizard\icwconn1.exe
USERENV(444.3a8) 15:42:31:570 ImpersonateUser: Failed to impersonate user with
5.
USERENV(444.3a8) 15:42:31:570 GetUserNameAndDomain Failed to impersonate user
USERENV(444.3a8) 15:42:31:590 ImpersonateUser: Failed to impersonate user with
5.
USERENV(444.3a8) 15:42:31:590 GetUserNameAndDomain Failed to impersonate user
USERENV(130.388) 15:47:51:170 LibMain: Process Name:
C:\WINNT\system32\mobsync.exe
USERENV(a0.80) 15:47:51:300 UnloadUserProfile: Entering, hProfile =
<0x2d0>
USERENV(a0.80) 15:47:51:300 GetUserMutex: entering
USERENV(a0.80) 15:47:51:310 GetUserMutex: Waiting...
USERENV(a0.80) 15:47:51:310 GetUserMutex: Wait succeeded. Mutex currently held.
USERENV(a0.80) 15:47:51:791 MyRegUnloadKey: Mutex released. Returning 1.
USERENV(a0.80) 15:47:51:791 UnloadUserProfile: Succesfully unloaded profile
USERENV(a0.80) 15:47:51:801 MyRegUnloadKey: Mutex released. Returning 1.
USERENV(a0.80) 15:47:51:801 UnLoadClassHive: Successfully unmounted
S-1-5-21-666917423-2343506192-2461445842-3004_Classes
USERENV(a0.80) 15:47:51:801 UnloadUserProfile: Successfully unloaded user
classes
USERENV(a0.80) 15:47:51:801 UnloadUserProfile: Impersonated user
USERENV(a0.80) 15:47:51:801 UnloadUserProfile: Writing local ini file
USERENV(a0.80) 15:47:51:801 UnloadUserProfile: Reverting to Self
USERENV(a0.80) 15:47:51:801 DeleteProfileEx: Failed to query profile guid with
error 2
USERENV(a0.80) 15:47:51:801 Delnode_Recurse: Entering, lpDir = <C:\Documents
and Settings\TEMP>
USERENV(a0.80) 15:47:51:801 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:801 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found: <Application
Data>
USERENV(a0.80) 15:47:51:811 Delnode_Recurse: Entering, lpDir = <Application
Data>
USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found: <Identities>
USERENV(a0.80) 15:47:51:811 Delnode_Recurse: Entering, lpDir =
<Identities>
USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found:
<{7B962FFF-94E4-4A63-BD13-031D35EBF469}>
USERENV(a0.80) 15:47:51:811 Delnode_Recurse: Entering, lpDir =
<{7B962FFF-94E4-4A63-BD13-031D35EBF469}>
USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:811 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:811 Delnode_Recurse: Leaving
<{7B962FFF-94E4-4A63-BD13-031D35EBF469}>
USERENV(a0.80) 15:47:51:821 Delnode_Recurse: Leaving <Identities>
USERENV(a0.80) 15:47:51:821 Delnode_Recurse: FindFile found: <Microsoft>
USERENV(a0.80) 15:47:51:821 Delnode_Recurse: Entering, lpDir = <Microsoft>
USERENV(a0.80) 15:47:51:821 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:821 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:821 Delnode_Recurse: FindFile found: <Internet
Explorer>
USERENV(a0.80) 15:47:51:821 Delnode_Recurse: Entering, lpDir = <Internet
Explorer>
USERENV(a0.80) 15:47:51:821 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:821 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:821 Delnode_Recurse: FindFile found:
<brndlog.bak>
USERENV(a0.80) 15:47:51:821 Delnode_Recurse: FindFile found:
<brndlog.txt>
USERENV(a0.80) 15:47:51:831 Delnode_Recurse: FindFile found:
<MSIMGSIZ.DAT>
USERENV(a0.80) 15:47:51:831 Delnode_Recurse: FindFile found: <Quick
Launch>
USERENV(a0.80) 15:47:51:831 Delnode_Recurse: Entering, lpDir = <Quick
Launch>
USERENV(a0.80) 15:47:51:831 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:831 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:831 Delnode_Recurse: FindFile found: <Launch
Internet Explorer Browser.lnk>
USERENV(a0.80) 15:47:51:831 Delnode_Recurse: FindFile found: <Launch Outlook
Express.lnk>
USERENV(a0.80) 15:47:51:831 Delnode_Recurse: FindFile found: <Show
Desktop.scf>
USERENV(a0.80) 15:47:51:841 Delnode_Recurse: Leaving <Quick Launch>
USERENV(a0.80) 15:47:51:841 Delnode_Recurse: Leaving <Internet Explorer>
USERENV(a0.80) 15:47:51:841 Delnode_Recurse: FindFile found: <Protect>
USERENV(a0.80) 15:47:51:841 Delnode_Recurse: Entering, lpDir = <Protect>
USERENV(a0.80) 15:47:51:841 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:841 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:841 Delnode_Recurse: FindFile found:
<S-1-5-21-666917423-2343506192-2461445842-3004>
USERENV(a0.80) 15:47:51:841 Delnode_Recurse: Entering, lpDir =
<S-1-5-21-666917423-2343506192-2461445842-3004>
USERENV(a0.80) 15:47:51:841 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:841 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:841 Delnode_Recurse: Leaving
<S-1-5-21-666917423-2343506192-2461445842-3004>
USERENV(a0.80) 15:47:51:841 Delnode_Recurse: Leaving <Protect>
USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found:
<SystemCertificates>
USERENV(a0.80) 15:47:51:851 Delnode_Recurse: Entering, lpDir =
<SystemCertificates>
USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found: <My>
USERENV(a0.80) 15:47:51:851 Delnode_Recurse: Entering, lpDir = <My>
USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found:
<Certificates>
USERENV(a0.80) 15:47:51:851 Delnode_Recurse: Entering, lpDir =
<Certificates>
USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:851 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:861 Delnode_Recurse: Leaving <Certificates>
USERENV(a0.80) 15:47:51:861 Delnode_Recurse: FindFile found: <CRLs>
USERENV(a0.80) 15:47:51:861 Delnode_Recurse: Entering, lpDir = <CRLs>
USERENV(a0.80) 15:47:51:861 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:861 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:861 Delnode_Recurse: Leaving <CRLs>
USERENV(a0.80) 15:47:51:861 Delnode_Recurse: FindFile found: <CTLs>
USERENV(a0.80) 15:47:51:861 Delnode_Recurse: Entering, lpDir = <CTLs>
USERENV(a0.80) 15:47:51:861 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:861 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:861 Delnode_Recurse: Leaving <CTLs>
USERENV(a0.80) 15:47:51:871 Delnode_Recurse: Leaving <My>
USERENV(a0.80) 15:47:51:871 Delnode_Recurse: Leaving <SystemCertificates>
USERENV(a0.80) 15:47:51:871 Delnode_Recurse: Leaving <Microsoft>
USERENV(a0.80) 15:47:51:871 Delnode_Recurse: Leaving <Application Data>
USERENV(a0.80) 15:47:51:871 Delnode_Recurse: FindFile found: <Cookies>
USERENV(a0.80) 15:47:51:871 Delnode_Recurse: Entering, lpDir = <Cookies>
USERENV(a0.80) 15:47:51:871 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:871 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:871 Delnode_Recurse: FindFile found: <index.dat>
USERENV(a0.80) 15:47:51:881 Delnode_Recurse: Leaving <Cookies>
USERENV(a0.80) 15:47:51:881 Delnode_Recurse: FindFile found: <Desktop>
USERENV(a0.80) 15:47:51:881 Delnode_Recurse: Entering, lpDir = <Desktop>
USERENV(a0.80) 15:47:51:881 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:881 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:881 Delnode_Recurse: FindFile found: <Connect to the
Internet.LNK>
USERENV(a0.80) 15:47:51:881 Delnode_Recurse: Leaving <Desktop>
USERENV(a0.80) 15:47:51:881 Delnode_Recurse: FindFile found: <Favorites>
USERENV(a0.80) 15:47:51:881 Delnode_Recurse: Entering, lpDir = <Favorites>
USERENV(a0.80) 15:47:51:881 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:891 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:891 Delnode_Recurse: FindFile found:
<Desktop.ini>
USERENV(a0.80) 15:47:51:891 Delnode_Recurse: FindFile found: <Links>
USERENV(a0.80) 15:47:51:891 Delnode_Recurse: Entering, lpDir = <Links>
USERENV(a0.80) 15:47:51:891 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:891 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:891 Delnode_Recurse: FindFile found: <Customize
Links.url>
USERENV(a0.80) 15:47:51:891 Delnode_Recurse: FindFile found: <Free
Hotmail.url>
USERENV(a0.80) 15:47:51:891 Delnode_Recurse: FindFile found:
<Windows.url>
USERENV(a0.80) 15:47:51:891 Delnode_Recurse: Leaving <Links>
USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found: <Media>
USERENV(a0.80) 15:47:51:901 Delnode_Recurse: Entering, lpDir = <Media>
USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found:
<Bloomberg.url>
USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found: <Capitol
Records.url>
USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found: <CBS.url>
USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found: <CNBC Dow Jones
Business Video.url>
USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found: <CNET Today -
Technology News.url>
USERENV(a0.80) 15:47:51:901 Delnode_Recurse: FindFile found: <CNN
Videoselect.url>
USERENV(a0.80) 15:47:51:911 Delnode_Recurse: FindFile found: <Disney.url>
USERENV(a0.80) 15:47:51:911 Delnode_Recurse: FindFile found: <ESPN
Sports.url>
USERENV(a0.80) 15:47:51:911 Delnode_Recurse: FindFile found: <Fox
News.url>
USERENV(a0.80) 15:47:51:911 Delnode_Recurse: FindFile found: <Fox
Sports.url>
USERENV(a0.80) 15:47:51:911 Delnode_Recurse: FindFile found: <Hollywood
Online.url>
USERENV(a0.80) 15:47:51:911 Delnode_Recurse: FindFile found: <Internet Radio
Guide.url>
USERENV(a0.80) 15:47:51:911 Delnode_Recurse: FindFile found: <MSNBC.url>
USERENV(a0.80) 15:47:51:911 Delnode_Recurse: FindFile found:
<MUSICVIDEOS.COM.url>
USERENV(a0.80) 15:47:51:921 Delnode_Recurse: FindFile found: <NBC
VideoSeeker.url>
USERENV(a0.80) 15:47:51:921 Delnode_Recurse: FindFile found: <TV Guide
Entertainment Network.url>
USERENV(a0.80) 15:47:51:921 Delnode_Recurse: FindFile found: <Universal
Studios Online.url>
USERENV(a0.80) 15:47:51:921 Delnode_Recurse: FindFile found: <Warner Bros.
Hip Clips.url>
USERENV(a0.80) 15:47:51:921 Delnode_Recurse: FindFile found: <What's On
Now.url>
USERENV(a0.80) 15:47:51:921 Delnode_Recurse: FindFile found: <Windows Media
Showcase.url>
USERENV(a0.80) 15:47:51:921 Delnode_Recurse: Leaving <Media>
USERENV(a0.80) 15:47:51:931 Delnode_Recurse: FindFile found: <MSN.url>
USERENV(a0.80) 15:47:51:931 Delnode_Recurse: FindFile found: <Radio Station
Guide.url>
USERENV(a0.80) 15:47:51:931 Delnode_Recurse: FindFile found: <Web
Events.url>
USERENV(a0.80) 15:47:51:931 Delnode_Recurse: Leaving <Favorites>
USERENV(a0.80) 15:47:51:931 Delnode_Recurse: FindFile found: <Local
Settings>
USERENV(a0.80) 15:47:51:931 Delnode_Recurse: Entering, lpDir = <Local
Settings>
USERENV(a0.80) 15:47:51:931 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:931 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:931 Delnode_Recurse: FindFile found: <Application
Data>
USERENV(a0.80) 15:47:51:931 Delnode_Recurse: Entering, lpDir = <Application
Data>
USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <Microsoft>
USERENV(a0.80) 15:47:51:941 Delnode_Recurse: Entering, lpDir = <Microsoft>
USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <Windows>
USERENV(a0.80) 15:47:51:941 Delnode_Recurse: Entering, lpDir = <Windows>
USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found:
<UsrClass.dat>
USERENV(a0.80) 15:47:51:941 Delnode_Recurse: FindFile found:
<UsrClass.dat.LOG>
USERENV(a0.80) 15:47:51:951 Delnode_Recurse: Leaving <Windows>
USERENV(a0.80) 15:47:51:951 Delnode_Recurse: Leaving <Microsoft>
USERENV(a0.80) 15:47:51:951 Delnode_Recurse: Leaving <Application Data>
USERENV(a0.80) 15:47:51:951 Delnode_Recurse: FindFile found: <History>
USERENV(a0.80) 15:47:51:951 Delnode_Recurse: Entering, lpDir = <History>
USERENV(a0.80) 15:47:51:951 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:951 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:951 Delnode_Recurse: FindFile found:
<desktop.ini>
USERENV(a0.80) 15:47:51:951 Delnode_Recurse: FindFile found:
<History.IE5>
USERENV(a0.80) 15:47:51:951 Delnode_Recurse: Entering, lpDir =
<History.IE5>
USERENV(a0.80) 15:47:51:961 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:961 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:961 Delnode_Recurse: FindFile found:
<desktop.ini>
USERENV(a0.80) 15:47:51:961 Delnode_Recurse: FindFile found: <index.dat>
USERENV(a0.80) 15:47:51:961 Delnode_Recurse: Leaving <History.IE5>
USERENV(a0.80) 15:47:51:961 Delnode_Recurse: Leaving <History>
USERENV(a0.80) 15:47:51:961 Delnode_Recurse: FindFile found: <Temp>
USERENV(a0.80) 15:47:51:961 Delnode_Recurse: Entering, lpDir = <Temp>
USERENV(a0.80) 15:47:51:961 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:961 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:971 Delnode_Recurse: Leaving <Temp>
USERENV(a0.80) 15:47:51:971 Delnode_Recurse: FindFile found: <Temporary
Internet Files>
USERENV(a0.80) 15:47:51:971 Delnode_Recurse: Entering, lpDir = <Temporary
Internet Files>
USERENV(a0.80) 15:47:51:971 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:971 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:971 Delnode_Recurse: FindFile found:
<Content.IE5>
USERENV(a0.80) 15:47:51:971 Delnode_Recurse: Entering, lpDir =
<Content.IE5>
USERENV(a0.80) 15:47:51:971 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:971 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:971 Delnode_Recurse: FindFile found: <4TYNW5YB>
USERENV(a0.80) 15:47:51:971 Delnode_Recurse: Entering, lpDir = <4TYNW5YB>
USERENV(a0.80) 15:47:51:971 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:981 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:981 Delnode_Recurse: FindFile found:
<desktop.ini>
USERENV(a0.80) 15:47:51:981 Delnode_Recurse: Leaving <4TYNW5YB>
USERENV(a0.80) 15:47:51:981 Delnode_Recurse: FindFile found: <C96J4LQ3>
USERENV(a0.80) 15:47:51:981 Delnode_Recurse: Entering, lpDir = <C96J4LQ3>
USERENV(a0.80) 15:47:51:981 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:981 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:981 Delnode_Recurse: FindFile found:
<desktop.ini>
USERENV(a0.80) 15:47:51:981 Delnode_Recurse: Leaving <C96J4LQ3>
USERENV(a0.80) 15:47:51:981 Delnode_Recurse: FindFile found:
<desktop.ini>
USERENV(a0.80) 15:47:51:991 Delnode_Recurse: FindFile found: <index.dat>
USERENV(a0.80) 15:47:51:991 Delnode_Recurse: FindFile found: <OHIZOXIJ>
USERENV(a0.80) 15:47:51:991 Delnode_Recurse: Entering, lpDir = <OHIZOXIJ>
USERENV(a0.80) 15:47:51:991 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:991 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:51:991 Delnode_Recurse: FindFile found:
<desktop.ini>
USERENV(a0.80) 15:47:51:991 Delnode_Recurse: Leaving <OHIZOXIJ>
USERENV(a0.80) 15:47:51:991 Delnode_Recurse: FindFile found: <OXYJGTQ3>
USERENV(a0.80) 15:47:51:991 Delnode_Recurse: Entering, lpDir = <OXYJGTQ3>
USERENV(a0.80) 15:47:51:991 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:51:991 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:52:001 Delnode_Recurse: FindFile found:
<desktop.ini>
USERENV(a0.80) 15:47:52:001 Delnode_Recurse: Leaving <OXYJGTQ3>
USERENV(a0.80) 15:47:52:001 Delnode_Recurse: Leaving <Content.IE5>
USERENV(a0.80) 15:47:52:001 Delnode_Recurse: FindFile found:
<desktop.ini>
USERENV(a0.80) 15:47:52:001 Delnode_Recurse: Leaving <Temporary Internet
Files>
USERENV(a0.80) 15:47:52:001 Delnode_Recurse: Leaving <Local Settings>
USERENV(a0.80) 15:47:52:001 Delnode_Recurse: FindFile found: <My
Documents>
USERENV(a0.80) 15:47:52:001 Delnode_Recurse: Entering, lpDir = <My
Documents>
USERENV(a0.80) 15:47:52:011 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:52:011 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:52:011 Delnode_Recurse: FindFile found: <My
Pictures>
USERENV(a0.80) 15:47:52:011 Delnode_Recurse: Entering, lpDir = <My
Pictures>
USERENV(a0.80) 15:47:52:011 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:52:011 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:52:011 Delnode_Recurse: FindFile found:
<Desktop.ini>
USERENV(a0.80) 15:47:52:011 Delnode_Recurse: FindFile found: <Sample.jpg>
USERENV(a0.80) 15:47:52:011 Delnode_Recurse: Leaving <My Pictures>
USERENV(a0.80) 15:47:52:011 Delnode_Recurse: Leaving <My Documents>
USERENV(a0.80) 15:47:52:011 Delnode_Recurse: FindFile found: <NetHood>
USERENV(a0.80) 15:47:52:021 Delnode_Recurse: Entering, lpDir = <NetHood>
USERENV(a0.80) 15:47:52:021 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:52:021 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:52:021 Delnode_Recurse: Leaving <NetHood>
USERENV(a0.80) 15:47:52:021 Delnode_Recurse: FindFile found: <NTUSER.DAT>
USERENV(a0.80) 15:47:52:021 Delnode_Recurse: FindFile found:
<NTUSER.DAT.LOG>
USERENV(a0.80) 15:47:52:021 Delnode_Recurse: FindFile found:
<NTUSER.DAT.LOG.LOG>
USERENV(a0.80) 15:47:52:021 Delnode_Recurse: FindFile found: <ntuser.ini>
USERENV(a0.80) 15:47:52:031 Delnode_Recurse: FindFile found: <PrintHood>
USERENV(a0.80) 15:47:52:031 Delnode_Recurse: Entering, lpDir = <PrintHood>
USERENV(a0.80) 15:47:52:031 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:52:031 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:52:031 Delnode_Recurse: Leaving <PrintHood>
USERENV(a0.80) 15:47:52:031 Delnode_Recurse: FindFile found: <Recent>
USERENV(a0.80) 15:47:52:031 Delnode_Recurse: Entering, lpDir = <Recent>
USERENV(a0.80) 15:47:52:031 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:52:031 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:52:031 Delnode_Recurse: Leaving <Recent>
USERENV(a0.80) 15:47:52:031 Delnode_Recurse: FindFile found: <SendTo>
USERENV(a0.80) 15:47:52:031 Delnode_Recurse: Entering, lpDir = <SendTo>
USERENV(a0.80) 15:47:52:041 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:52:041 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:52:041 Delnode_Recurse: FindFile found: <3? Floppy
(A).lnk>
USERENV(a0.80) 15:47:52:041 Delnode_Recurse: FindFile found: <Desktop
(create shortcut).DeskLink>
USERENV(a0.80) 15:47:52:041 Delnode_Recurse: FindFile found: <Mail
Recipient.MAPIMail>
USERENV(a0.80) 15:47:52:041 Delnode_Recurse: FindFile found: <My
Documents.mydocs>
USERENV(a0.80) 15:47:52:041 Delnode_Recurse: Leaving <SendTo>
USERENV(a0.80) 15:47:52:041 Delnode_Recurse: FindFile found: <Start Menu>
USERENV(a0.80) 15:47:52:041 Delnode_Recurse: Entering, lpDir = <Start
Menu>
USERENV(a0.80) 15:47:52:041 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <Programs>
USERENV(a0.80) 15:47:52:051 Delnode_Recurse: Entering, lpDir = <Programs>
USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found:
<Accessories>
USERENV(a0.80) 15:47:52:051 Delnode_Recurse: Entering, lpDir =
<Accessories>
USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found:
<Accessibility>
USERENV(a0.80) 15:47:52:051 Delnode_Recurse: Entering, lpDir =
<Accessibility>
USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:52:051 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:52:061 Delnode_Recurse: FindFile found:
<Magnifier.lnk>
USERENV(a0.80) 15:47:52:061 Delnode_Recurse: FindFile found:
<Narrator.lnk>
USERENV(a0.80) 15:47:52:061 Delnode_Recurse: FindFile found: <On-Screen
Keyboard.lnk>
USERENV(a0.80) 15:47:52:061 Delnode_Recurse: FindFile found: <Utility
Manager.lnk>
USERENV(a0.80) 15:47:52:061 Delnode_Recurse: Leaving <Accessibility>
USERENV(a0.80) 15:47:52:061 Delnode_Recurse: FindFile found: <Address
Book.lnk>
USERENV(a0.80) 15:47:52:061 Delnode_Recurse: FindFile found: <Command
Prompt.lnk>
USERENV(a0.80) 15:47:52:061 Delnode_Recurse: FindFile found:
<Entertainment>
USERENV(a0.80) 15:47:52:071 Delnode_Recurse: Entering, lpDir =
<Entertainment>
USERENV(a0.80) 15:47:52:071 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:52:071 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:52:071 Delnode_Recurse: Leaving <Entertainment>
USERENV(a0.80) 15:47:52:071 Delnode_Recurse: FindFile found:
<Imaging.lnk>
USERENV(a0.80) 15:47:52:071 Delnode_Recurse: FindFile found:
<Notepad.lnk>
USERENV(a0.80) 15:47:52:071 Delnode_Recurse: FindFile found:
<Synchronize.lnk>
USERENV(a0.80) 15:47:52:071 Delnode_Recurse: FindFile found: <System
Tools>
USERENV(a0.80) 15:47:52:071 Delnode_Recurse: Entering, lpDir = <System
Tools>
USERENV(a0.80) 15:47:52:071 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:52:081 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:52:081 Delnode_Recurse: FindFile found: <Disk
Cleanup.lnk>
USERENV(a0.80) 15:47:52:081 Delnode_Recurse: FindFile found: <Getting
Started.lnk>
USERENV(a0.80) 15:47:52:081 Delnode_Recurse: FindFile found: <Scheduled
Tasks.lnk>
USERENV(a0.80) 15:47:52:081 Delnode_Recurse: Leaving <System Tools>
USERENV(a0.80) 15:47:52:081 Delnode_Recurse: FindFile found: <Windows
Explorer.lnk>
USERENV(a0.80) 15:47:52:081 Delnode_Recurse: Leaving <Accessories>
USERENV(a0.80) 15:47:52:091 Delnode_Recurse: FindFile found: <Internet
Explorer.lnk>
USERENV(a0.80) 15:47:52:091 Delnode_Recurse: FindFile found: <Outlook
Express.lnk>
USERENV(a0.80) 15:47:52:091 Delnode_Recurse: FindFile found: <Startup>
USERENV(a0.80) 15:47:52:091 Delnode_Recurse: Entering, lpDir = <Startup>
USERENV(a0.80) 15:47:52:091 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:52:091 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:52:091 Delnode_Recurse: Leaving <Startup>
USERENV(a0.80) 15:47:52:091 Delnode_Recurse: Leaving <Programs>
USERENV(a0.80) 15:47:52:091 Delnode_Recurse: Leaving <Start Menu>
USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found: <Templates>
USERENV(a0.80) 15:47:52:101 Delnode_Recurse: Entering, lpDir = <Templates>
USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found: <.>
USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found: <..>
USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found: <amipro.sam>
USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found: <excel.xls>
USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found: <excel4.xls>
USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found: <lotus.wk4>
USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found:
<powerpnt.ppt>
USERENV(a0.80) 15:47:52:101 Delnode_Recurse: FindFile found:
<presenta.shw>
USERENV(a0.80) 15:47:52:111 Delnode_Recurse: FindFile found:
<quattro.wb2>
USERENV(a0.80) 15:47:52:111 Delnode_Recurse: FindFile found: <sndrec.wav>
USERENV(a0.80) 15:47:52:111 Delnode_Recurse: FindFile found:
<winword.doc>
USERENV(a0.80) 15:47:52:111 Delnode_Recurse: FindFile found:
<winword2.doc>
USERENV(a0.80) 15:47:52:111 Delnode_Recurse: FindFile found:
<wordpfct.wpd>
USERENV(a0.80) 15:47:52:111 Delnode_Recurse: FindFile found:
<wordpfct.wpg>
USERENV(a0.80) 15:47:52:121 Delnode_Recurse: Leaving <Templates>
USERENV(a0.80) 15:47:52:121 Delnode_Recurse: Leaving <C:\Documents and
Settings\TEMP>
USERENV(a0.80) 15:47:52:121 Delnode_Recurse: Entering, lpDir =
<C:\WINNT\system32\appmgmt\S-1-5-21-666917423-2343506192-2461445842-3004>
USERENV(a0.80) 15:47:52:121 DeleteProfile: Failed to delete the appmgmt dir
C:\WINNT\system32\appmgmt\S-1-5-21-666917423-2343506192-2461445842-3004, error 3
USERENV(a0.80) 15:47:52:141 UnloadUserProfile: exitting and cleaning up
USERENV(a0.80) 15:47:52:141 LoadUserProfile: Releasing mutex.
USERENV(a0.80) 15:47:52:141 UnloadUserProfile: Leaving with a return value of 1
USERENV(a0.80) 15:48:12:921
=========================================================