[Pidgin] #6279: Windows cannot find... error when opening Hotmail messages
Pidgin
trac at pidgin.im
Wed Jul 9 11:42:39 EDT 2008
#6279: Windows cannot find... error when opening Hotmail messages
------------------------------+---------------------------------------------
Reporter: novasource | Owner:
Type: defect | Status: reopened
Priority: minor | Milestone:
Component: winpidgin (gtk) | Version: 2.4.3
Resolution: | Keywords: hotmail msn
Pending: 0 |
------------------------------+---------------------------------------------
Comment (by novasource):
Since you don't allow me to attach files (again, you have this Trac set up
WAY too restrictively), here's the resulting CSV of my process monitor
watch of my filesystem:
"Sequence","Time of Day","Process
Name","PID","Operation","Path","Result","Detail"
"130628","10:09:43.3770483
AM","pidgin.exe","4332","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleG8AWDU","SUCCESS","Desired
Access: Generic Read/Write, Disposition: Create, Options: Synchronous IO
Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write,
AllocationSize: 0, OpenResult: Created"
"130630","10:09:43.3777076
AM","pidgin.exe","4332","QueryStandardInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleG8AWDU","SUCCESS","AllocationSize:
0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False"
"130631","10:09:43.3778928
AM","pidgin.exe","4332","WriteFile","C:\Users\01251587\AppData\Local\Temp\purpleG8AWDU","SUCCESS","Offset:
0, Length: 1,027, Priority: Normal"
"130632","10:09:43.3780816
AM","pidgin.exe","4332","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleG8AWDU","SUCCESS",""
"130634","10:09:43.3782233
AM","MsMpEng.exe","964","QueryStandardInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleG8AWDU","SUCCESS","AllocationSize:
4,096, EndOfFile: 1,027, NumberOfLinks: 1, DeletePending: False,
Directory: False"
"130637","10:09:43.3805884
AM","pidgin.exe","4332","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleG8AWDU","SUCCESS","Desired
Access: Read Attributes, Delete, Synchronize, Disposition: Open, Options:
Synchronous IO Non-Alert, Open Reparse Point, Attributes: n/a, ShareMode:
Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"130638","10:09:43.3806610
AM","pidgin.exe","4332","QueryAttributeTagFile","C:\Users\01251587\AppData\Local\Temp\purpleG8AWDU","SUCCESS","Attributes:
ANCI, ReparseTag: 0x0"
"130639","10:09:43.3807161
AM","pidgin.exe","4332","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleG8AWDU","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"130641","10:09:43.3809549
AM","pidgin.exe","4332","SetRenameInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleG8AWDU","SUCCESS","ReplaceIfExists:
True, FileName: C:\Users\01251587\AppData\Local\Temp\purpleG8AWDU.html"
"130644","10:09:43.3813695
AM","pidgin.exe","4332","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleG8AWDU.html","SUCCESS",""
"130775","10:09:43.4607586
AM","pidgin.exe","4332","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleG8AWDU.html","SUCCESS","Desired
Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory
File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete,
AllocationSize: n/a, OpenResult: Opened"
"130776","10:09:43.4608947
AM","pidgin.exe","4332","QueryStandardInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleG8AWDU.html","SUCCESS","AllocationSize:
4,096, EndOfFile: 1,027, NumberOfLinks: 1, DeletePending: False,
Directory: False"
"130777","10:09:43.4609439
AM","pidgin.exe","4332","QueryAttributeTagFile","C:\Users\01251587\AppData\Local\Temp\purpleG8AWDU.html","SUCCESS","Attributes:
ANCI, ReparseTag: 0x0"
"130778","10:09:43.4609849
AM","pidgin.exe","4332","SetDispositionInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleG8AWDU.html","SUCCESS","Delete:
True"
"130779","10:09:43.4610316
AM","pidgin.exe","4332","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleG8AWDU.html","SUCCESS",""
"130782","10:09:43.4615107
AM","pidgin.exe","4332","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU","SUCCESS","Desired
Access: Generic Read/Write, Disposition: Create, Options: Synchronous IO
Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write,
AllocationSize: 0, OpenResult: Created"
"130783","10:09:43.4617537
AM","pidgin.exe","4332","QueryStandardInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU","SUCCESS","AllocationSize:
0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False"
"130784","10:09:43.4619267
AM","pidgin.exe","4332","WriteFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU","SUCCESS","Offset:
0, Length: 1,027, Priority: Normal"
"130785","10:09:43.4621021
AM","pidgin.exe","4332","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU","SUCCESS",""
"130787","10:09:43.4622409
AM","MsMpEng.exe","964","QueryStandardInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU","SUCCESS","AllocationSize:
4,096, EndOfFile: 1,027, NumberOfLinks: 1, DeletePending: False,
Directory: False"
"130791","10:09:43.4632701
AM","pidgin.exe","4332","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU","SUCCESS","Desired
Access: Read Attributes, Delete, Synchronize, Disposition: Open, Options:
Synchronous IO Non-Alert, Open Reparse Point, Attributes: n/a, ShareMode:
Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"130792","10:09:43.4633456
AM","pidgin.exe","4332","QueryAttributeTagFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU","SUCCESS","Attributes:
ANCI, ReparseTag: 0x0"
"130793","10:09:43.4633998
AM","pidgin.exe","4332","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"130795","10:09:43.4636392
AM","pidgin.exe","4332","SetRenameInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU","SUCCESS","ReplaceIfExists:
True, FileName: C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html"
"130798","10:09:43.4640504
AM","pidgin.exe","4332","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"547276","10:11:59.7296277
AM","pidgin.exe","4332","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Filter:
purpleUARZDU.html, 1: purpleUARZDU.html"
"559848","10:12:00.8151179
AM","iexplore.exe","3924","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"559851","10:12:00.8152436
AM","iexplore.exe","3924","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"559853","10:12:00.8153624
AM","iexplore.exe","3924","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"559855","10:12:00.8154554
AM","iexplore.exe","3924","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"559878","10:12:00.8171338
AM","iexplore.exe","3924","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"559879","10:12:00.8172489
AM","iexplore.exe","3924","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"559880","10:12:00.8173037
AM","iexplore.exe","3924","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"559881","10:12:00.8173674
AM","iexplore.exe","3924","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"559903","10:12:00.8189162
AM","iexplore.exe","3924","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Read Control, Synchronize, Disposition: Open,
Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a,
ShareMode: None, AllocationSize: n/a, OpenResult: Opened"
"559904","10:12:00.8189843
AM","iexplore.exe","3924","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","BUFFER
OVERFLOW","Information: 0x10"
"559905","10:12:00.8190201
AM","iexplore.exe","3924","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Information:
0x10"
"559906","10:12:00.8190558
AM","iexplore.exe","3924","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"559908","10:12:00.8192265
AM","iexplore.exe","3924","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"559909","10:12:00.8193542
AM","iexplore.exe","3924","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"559910","10:12:00.8194034
AM","iexplore.exe","3924","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"559911","10:12:00.8194336
AM","iexplore.exe","3924","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"559913","10:12:00.8196034
AM","iexplore.exe","3924","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"559914","10:12:00.8197163
AM","iexplore.exe","3924","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"559915","10:12:00.8197640
AM","iexplore.exe","3924","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"559916","10:12:00.8197931
AM","iexplore.exe","3924","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"559918","10:12:00.8199669
AM","iexplore.exe","3924","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html:Zone.Identifier","FAST
IO DISALLOWED",""
"559919","10:12:00.8200800
AM","iexplore.exe","3924","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html:Zone.Identifier","NAME
NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options:
Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete,
AllocationSize: n/a"
"559920","10:12:00.8202809
AM","iexplore.exe","3924","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-
Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize:
n/a, OpenResult: Opened"
"559922","10:12:00.8204451
AM","MsMpEng.exe","964","QueryStandardInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","AllocationSize:
4,096, EndOfFile: 1,027, NumberOfLinks: 1, DeletePending: False,
Directory: False"
"559924","10:12:00.8209687
AM","iexplore.exe","3924","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Offset:
0, Length: 2, Priority: Normal"
"559925","10:12:00.8210477
AM","iexplore.exe","3924","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Offset:
0, Length: 1,027"
"559927","10:12:00.8211550
AM","iexplore.exe","3924","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"560368","10:12:00.8414908
AM","iexplore.exe","3924","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Filter:
purpleUARZDU.html, 1: purpleUARZDU.html"
"577941","10:12:02.1766938
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"577942","10:12:02.1768158
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"577943","10:12:02.1768829
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"577944","10:12:02.1769125
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"577966","10:12:02.1784518
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"577967","10:12:02.1785630
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"577968","10:12:02.1786136
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"577969","10:12:02.1786421
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"577991","10:12:02.1801054
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Read Control, Synchronize, Disposition: Open,
Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a,
ShareMode: None, AllocationSize: n/a, OpenResult: Opened"
"577992","10:12:02.1801710
AM","iexplore.exe","3920","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","BUFFER
OVERFLOW","Information: 0x10"
"577993","10:12:02.1802057
AM","iexplore.exe","3920","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Information:
0x10"
"577994","10:12:02.1802411
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"577996","10:12:02.1804057
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"577997","10:12:02.1805174
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"577998","10:12:02.1805646
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"577999","10:12:02.1805929
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"578001","10:12:02.1808856
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"578002","10:12:02.1810088
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"578003","10:12:02.1810636
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"578004","10:12:02.1810929
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"578006","10:12:02.1812790
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html:Zone.Identifier","FAST
IO DISALLOWED",""
"578007","10:12:02.1813916
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html:Zone.Identifier","NAME
NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options:
Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete,
AllocationSize: n/a"
"578008","10:12:02.1815933
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-
Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize:
n/a, OpenResult: Opened"
"578009","10:12:02.1816757
AM","iexplore.exe","3920","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Offset:
0, Length: 2, Priority: Normal"
"578010","10:12:02.1817436
AM","iexplore.exe","3920","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Offset:
0, Length: 1,027"
"578012","10:12:02.1818503
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"580648","10:12:02.4708842
AM","iexplore.exe","3920","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Filter:
purpleUARZDU.html, 1: purpleUARZDU.html"
"587621","10:12:03.1707187
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"587626","10:12:03.1708564
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"587627","10:12:03.1709698
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"587629","10:12:03.1710187
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"587635","10:12:03.1713649
AM","iexplore.exe","3920","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Filter:
purpleUARZDU.html, 1: purpleUARZDU.html"
"587663","10:12:03.1730165
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-
Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write,
AllocationSize: n/a, OpenResult: Opened"
"587667","10:12:03.1731081
AM","iexplore.exe","3920","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Offset:
0, Length: 1,027, Priority: Normal"
"591185","10:12:03.4210815
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"591186","10:12:03.4212125
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"591187","10:12:03.4212902
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"591188","10:12:03.4213288
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"591191","10:12:03.4216120
AM","iexplore.exe","3920","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Filter:
purpleUARZDU.html, 1: purpleUARZDU.html"
"591195","10:12:03.4225440
AM","iexplore.exe","3920","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Filter:
purpleUARZDU.html, 1: purpleUARZDU.html"
"591198","10:12:03.4230231
AM","iexplore.exe","3920","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","END
OF FILE","Offset: 1,027, Length: 7,165"
"591200","10:12:03.4231038
AM","iexplore.exe","3920","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","END
OF FILE","Offset: 1,027, Length: 7,165"
"592953","10:12:03.5802777
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"602937","10:12:04.1961015
AM","iexplore.exe","3920","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Filter:
purpleUARZDU.html, 1: purpleUARZDU.html"
"602952","10:12:04.1982320
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"602953","10:12:04.1983535
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"602954","10:12:04.1984225
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"602955","10:12:04.1984527
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"602984","10:12:04.2002423
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"602985","10:12:04.2003596
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"602986","10:12:04.2004208
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"602987","10:12:04.2004504
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"603045","10:12:04.2047822
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Read Control, Synchronize, Disposition: Open,
Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a,
ShareMode: None, AllocationSize: n/a, OpenResult: Opened"
"603046","10:12:04.2048543
AM","iexplore.exe","3920","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","BUFFER
OVERFLOW","Information: 0x10"
"603047","10:12:04.2048890
AM","iexplore.exe","3920","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Information:
0x10"
"603048","10:12:04.2049242
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"603053","10:12:04.2053452
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"603054","10:12:04.2054600
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"603055","10:12:04.2055150
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"603056","10:12:04.2055455
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"603078","10:12:04.2070515
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"603079","10:12:04.2071655
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"603080","10:12:04.2072166
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"603081","10:12:04.2072451
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"603103","10:12:04.2087101
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Read Control, Synchronize, Disposition: Open,
Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a,
ShareMode: None, AllocationSize: n/a, OpenResult: Opened"
"603104","10:12:04.2087758
AM","iexplore.exe","3920","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","BUFFER
OVERFLOW","Information: 0x10"
"603105","10:12:04.2088115
AM","iexplore.exe","3920","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Information:
0x10"
"603106","10:12:04.2088473
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"603159","10:12:04.2111096
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"603162","10:12:04.2112347
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"603163","10:12:04.2113040
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"603164","10:12:04.2113348
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"603212","10:12:04.2138231
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"603214","10:12:04.2139549
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"603216","10:12:04.2140206
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"603217","10:12:04.2140519
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"603300","10:12:04.2172662
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Read Control, Synchronize, Disposition: Open,
Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a,
ShareMode: None, AllocationSize: n/a, OpenResult: Opened"
"603303","10:12:04.2173461
AM","iexplore.exe","3920","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","BUFFER
OVERFLOW","Information: 0x10"
"603305","10:12:04.2173838
AM","iexplore.exe","3920","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Information:
0x10"
"603306","10:12:04.2174227
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"603311","10:12:04.2175990
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"603314","10:12:04.2177163
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"603316","10:12:04.2177677
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"603317","10:12:04.2177998
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"603322","10:12:04.2179800
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"603325","10:12:04.2180996
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"603328","10:12:04.2181669
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"603330","10:12:04.2182052
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"603334","10:12:04.2185360
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html:Zone.Identifier","FAST
IO DISALLOWED",""
"603335","10:12:04.2186564
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html:Zone.Identifier","NAME
NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options:
Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete,
AllocationSize: n/a"
"603336","10:12:04.2188611
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-
Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize:
n/a, OpenResult: Opened"
"603337","10:12:04.2189234
AM","iexplore.exe","3920","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Offset:
0, Length: 2, Priority: Normal"
"603338","10:12:04.2189813
AM","iexplore.exe","3920","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Offset:
0, Length: 1,027"
"603341","10:12:04.2190927
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"615292","10:12:04.9501119
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"615293","10:12:04.9502516
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"615297","10:12:04.9506103
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"615299","10:12:04.9506555
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"615337","10:12:04.9527519
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"615338","10:12:04.9528689
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"615339","10:12:04.9529287
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"615340","10:12:04.9529595
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"615389","10:12:04.9551581
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Read Control, Synchronize, Disposition: Open,
Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a,
ShareMode: None, AllocationSize: n/a, OpenResult: Opened"
"615390","10:12:04.9552346
AM","iexplore.exe","3920","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","BUFFER
OVERFLOW","Information: 0x10"
"615391","10:12:04.9552706
AM","iexplore.exe","3920","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Information:
0x10"
"615392","10:12:04.9553070
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"615412","10:12:04.9563789
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"615415","10:12:04.9565018
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"615418","10:12:04.9565733
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"615419","10:12:04.9566331
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"615509","10:12:04.9606998
AM","iexplore.exe","3920","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"615514","10:12:04.9608306
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"615517","10:12:04.9608937
AM","iexplore.exe","3920","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"615519","10:12:04.9609351
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"615591","10:12:04.9626286
AM","iexplore.exe","3920","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Read Control, Synchronize, Disposition: Open,
Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a,
ShareMode: None, AllocationSize: n/a, OpenResult: Opened"
"615595","10:12:04.9627079
AM","iexplore.exe","3920","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","BUFFER
OVERFLOW","Information: 0x10"
"615597","10:12:04.9627470
AM","iexplore.exe","3920","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Information:
0x10"
"615600","10:12:04.9627990
AM","iexplore.exe","3920","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"615690","10:12:04.9661243
AM","iexplore.exe","3920","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Filter:
purpleUARZDU.html, 1: purpleUARZDU.html"
"791613","10:12:52.0767970
AM","pidgin.exe","4332","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Filter:
purpleUARZDU.html, 1: purpleUARZDU.html"
"798175","10:12:52.5539515
AM","iexplore.exe","2940","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"798176","10:12:52.5540719
AM","iexplore.exe","2940","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"798177","10:12:52.5541412
AM","iexplore.exe","2940","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"798178","10:12:52.5541725
AM","iexplore.exe","2940","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"798200","10:12:52.5557338
AM","iexplore.exe","2940","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"798201","10:12:52.5558459
AM","iexplore.exe","2940","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"798202","10:12:52.5558973
AM","iexplore.exe","2940","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"798203","10:12:52.5559263
AM","iexplore.exe","2940","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"798225","10:12:52.5575788
AM","iexplore.exe","2940","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Read Control, Synchronize, Disposition: Open,
Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a,
ShareMode: None, AllocationSize: n/a, OpenResult: Opened"
"798226","10:12:52.5576508
AM","iexplore.exe","2940","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","BUFFER
OVERFLOW","Information: 0x10"
"798227","10:12:52.5576866
AM","iexplore.exe","2940","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Information:
0x10"
"798228","10:12:52.5577232
AM","iexplore.exe","2940","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"798230","10:12:52.5578939
AM","iexplore.exe","2940","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"798231","10:12:52.5580065
AM","iexplore.exe","2940","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"798232","10:12:52.5580559
AM","iexplore.exe","2940","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"798233","10:12:52.5580850
AM","iexplore.exe","2940","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"798235","10:12:52.5582571
AM","iexplore.exe","2940","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"798236","10:12:52.5583680
AM","iexplore.exe","2940","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"798237","10:12:52.5584160
AM","iexplore.exe","2940","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"798238","10:12:52.5584445
AM","iexplore.exe","2940","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"798240","10:12:52.5586186
AM","iexplore.exe","2940","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html:Zone.Identifier","FAST
IO DISALLOWED",""
"798241","10:12:52.5587303
AM","iexplore.exe","2940","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html:Zone.Identifier","NAME
NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options:
Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete,
AllocationSize: n/a"
"798242","10:12:52.5589164
AM","iexplore.exe","2940","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-
Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize:
n/a, OpenResult: Opened"
"798243","10:12:52.5589759
AM","iexplore.exe","2940","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Offset:
0, Length: 2, Priority: Normal"
"798244","10:12:52.5590586
AM","iexplore.exe","2940","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Offset:
0, Length: 1,027"
"798246","10:12:52.5591658
AM","iexplore.exe","2940","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"798863","10:12:52.5849373
AM","iexplore.exe","2940","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Filter:
purpleUARZDU.html, 1: purpleUARZDU.html"
"806891","10:12:53.3393317
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"806892","10:12:53.3394499
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"806893","10:12:53.3395388
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"806894","10:12:53.3395695
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"806916","10:12:53.3412228
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"806917","10:12:53.3413348
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"806918","10:12:53.3413862
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"806919","10:12:53.3414153
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"806941","10:12:53.3429554
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Read Control, Synchronize, Disposition: Open,
Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a,
ShareMode: None, AllocationSize: n/a, OpenResult: Opened"
"806942","10:12:53.3430255
AM","iexplore.exe","3648","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","BUFFER
OVERFLOW","Information: 0x10"
"806943","10:12:53.3430618
AM","iexplore.exe","3648","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Information:
0x10"
"806944","10:12:53.3430981
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"806946","10:12:53.3432621
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"806947","10:12:53.3434948
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"806948","10:12:53.3435524
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"806949","10:12:53.3435823
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"806951","10:12:53.3437616
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"806952","10:12:53.3438734
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"806953","10:12:53.3439214
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"806954","10:12:53.3439494
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"806956","10:12:53.3441251
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html:Zone.Identifier","FAST
IO DISALLOWED",""
"806957","10:12:53.3442363
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html:Zone.Identifier","NAME
NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options:
Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete,
AllocationSize: n/a"
"806959","10:12:53.3447998
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-
Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize:
n/a, OpenResult: Opened"
"806960","10:12:53.3448785
AM","iexplore.exe","3648","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Offset:
0, Length: 2, Priority: Normal"
"806961","10:12:53.3449459
AM","iexplore.exe","3648","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Offset:
0, Length: 1,027"
"806963","10:12:53.3450531
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"810004","10:12:53.5940622
AM","iexplore.exe","3648","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Filter:
purpleUARZDU.html, 1: purpleUARZDU.html"
"814799","10:12:53.9184595
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"814801","10:12:53.9186054
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"814803","10:12:53.9186844
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"814804","10:12:53.9187238
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"814811","10:12:53.9190079
AM","iexplore.exe","3648","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Filter:
purpleUARZDU.html, 1: purpleUARZDU.html"
"814847","10:12:53.9201832
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-
Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write,
AllocationSize: n/a, OpenResult: Opened"
"814867","10:12:53.9229512
AM","iexplore.exe","3648","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Offset:
0, Length: 1,027, Priority: Normal"
"816637","10:12:54.1119143
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"816640","10:12:54.1121520
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"816642","10:12:54.1122448
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"816643","10:12:54.1122845
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"816651","10:12:54.1125873
AM","iexplore.exe","3648","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Filter:
purpleUARZDU.html, 1: purpleUARZDU.html"
"816681","10:12:54.1134983
AM","iexplore.exe","3648","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Filter:
purpleUARZDU.html, 1: purpleUARZDU.html"
"816696","10:12:54.1139771
AM","iexplore.exe","3648","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","END
OF FILE","Offset: 1,027, Length: 7,165"
"816700","10:12:54.1140668
AM","iexplore.exe","3648","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","END
OF FILE","Offset: 1,027, Length: 7,165"
"818000","10:12:54.1659837
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"827564","10:12:54.6939732
AM","iexplore.exe","3648","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Filter:
purpleUARZDU.html, 1: purpleUARZDU.html"
"827613","10:12:54.6970753
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"827624","10:12:54.6975005
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"827625","10:12:54.6975552
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"827626","10:12:54.6975851
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"827673","10:12:54.6993359
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"827674","10:12:54.6994527
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"827675","10:12:54.6995119
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"827676","10:12:54.6995409
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"827722","10:12:54.7012641
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Read Control, Synchronize, Disposition: Open,
Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a,
ShareMode: None, AllocationSize: n/a, OpenResult: Opened"
"827725","10:12:54.7013423
AM","iexplore.exe","3648","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","BUFFER
OVERFLOW","Information: 0x10"
"827727","10:12:54.7013783
AM","iexplore.exe","3648","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Information:
0x10"
"827729","10:12:54.7014163
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"827747","10:12:54.7020429
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"827748","10:12:54.7021572
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"827749","10:12:54.7022136
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"827750","10:12:54.7022424
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"827784","10:12:54.7049746
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"827787","10:12:54.7050922
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"827790","10:12:54.7051598
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"827792","10:12:54.7051925
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"827854","10:12:54.7080560
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Read Control, Synchronize, Disposition: Open,
Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a,
ShareMode: None, AllocationSize: n/a, OpenResult: Opened"
"827855","10:12:54.7081264
AM","iexplore.exe","3648","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","BUFFER
OVERFLOW","Information: 0x10"
"827856","10:12:54.7081610
AM","iexplore.exe","3648","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Information:
0x10"
"827857","10:12:54.7081976
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"827936","10:12:54.7114059
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"827942","10:12:54.7116592
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"827965","10:12:54.7122540
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"827966","10:12:54.7122836
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"828002","10:12:54.7140084
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"828004","10:12:54.7142462
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"828005","10:12:54.7143110
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"828006","10:12:54.7143428
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"828055","10:12:54.7159453
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Read Control, Synchronize, Disposition: Open,
Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a,
ShareMode: None, AllocationSize: n/a, OpenResult: Opened"
"828058","10:12:54.7160243
AM","iexplore.exe","3648","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","BUFFER
OVERFLOW","Information: 0x10"
"828059","10:12:54.7160648
AM","iexplore.exe","3648","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Information:
0x10"
"828061","10:12:54.7161034
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"828067","10:12:54.7162743
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"828070","10:12:54.7163875
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"828072","10:12:54.7164543
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"828074","10:12:54.7164822
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"828078","10:12:54.7166697
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"828079","10:12:54.7167820
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"828080","10:12:54.7168297
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"828081","10:12:54.7168568
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"828083","10:12:54.7170253
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html:Zone.Identifier","FAST
IO DISALLOWED",""
"828085","10:12:54.7171507
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html:Zone.Identifier","NAME
NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options:
Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete,
AllocationSize: n/a"
"828089","10:12:54.7173457
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-
Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize:
n/a, OpenResult: Opened"
"828092","10:12:54.7174161
AM","iexplore.exe","3648","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Offset:
0, Length: 2, Priority: Normal"
"828094","10:12:54.7174840
AM","iexplore.exe","3648","ReadFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Offset:
0, Length: 1,027"
"828098","10:12:54.7175846
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"836472","10:12:55.1475350
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"836473","10:12:55.1476574
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"836474","10:12:55.1477295
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"836475","10:12:55.1477605
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"836519","10:12:55.1495587
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"836521","10:12:55.1496744
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"836523","10:12:55.1497308
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"836525","10:12:55.1497613
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"836586","10:12:55.1518794
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Read Control, Synchronize, Disposition: Open,
Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a,
ShareMode: None, AllocationSize: n/a, OpenResult: Opened"
"836590","10:12:55.1520074
AM","iexplore.exe","3648","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","BUFFER
OVERFLOW","Information: 0x10"
"836591","10:12:55.1520443
AM","iexplore.exe","3648","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Information:
0x10"
"836592","10:12:55.1520814
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"836602","10:12:55.1525600
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"836607","10:12:55.1527083
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"836608","10:12:55.1527712
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"836609","10:12:55.1528011
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"836642","10:12:55.1544409
AM","iexplore.exe","3648","QueryOpen","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","FAST
IO DISALLOWED",""
"836644","10:12:55.1545577
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
OpenResult: Opened"
"836647","10:12:55.1546239
AM","iexplore.exe","3648","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","CreationTime:
7/9/2008 10:09:43 AM, LastAccessTime: 7/9/2008 10:09:43 AM, LastWriteTime:
7/9/2008 10:09:43 AM, ChangeTime: 7/9/2008 10:09:43 AM, FileAttributes:
ANCI"
"836648","10:12:55.1546552
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"836696","10:12:55.1564686
AM","iexplore.exe","3648","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Read Control, Synchronize, Disposition: Open,
Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a,
ShareMode: None, AllocationSize: n/a, OpenResult: Opened"
"836698","10:12:55.1565420
AM","iexplore.exe","3648","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","BUFFER
OVERFLOW","Information: 0x10"
"836700","10:12:55.1565811
AM","iexplore.exe","3648","QuerySecurityFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Information:
0x10"
"836703","10:12:55.1566658
AM","iexplore.exe","3648","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"836805","10:12:55.1603341
AM","iexplore.exe","3648","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Filter:
purpleUARZDU.html, 1: purpleUARZDU.html"
"1946521","10:28:43.5219038
AM","pidgin.exe","4332","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Desired
Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory
File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete,
AllocationSize: n/a, OpenResult: Opened"
"1946522","10:28:43.5219829
AM","pidgin.exe","4332","QueryAttributeTagFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Attributes:
ANCI, ReparseTag: 0x0"
"1946523","10:28:43.5220231
AM","pidgin.exe","4332","SetDispositionInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS","Delete:
True"
"1946524","10:28:43.5220695
AM","pidgin.exe","4332","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","SUCCESS",""
"1946528","10:28:43.5225768
AM","pidgin.exe","4332","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleRGJXDU","SUCCESS","Desired
Access: Generic Read/Write, Disposition: Create, Options: Synchronous IO
Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write,
AllocationSize: 0, OpenResult: Created"
"1946529","10:28:43.5228350
AM","pidgin.exe","4332","QueryStandardInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleRGJXDU","SUCCESS","AllocationSize:
0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False"
"1946530","10:28:43.5230065
AM","pidgin.exe","4332","WriteFile","C:\Users\01251587\AppData\Local\Temp\purpleRGJXDU","SUCCESS","Offset:
0, Length: 1,030, Priority: Normal"
"1946531","10:28:43.5231858
AM","pidgin.exe","4332","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleRGJXDU","SUCCESS",""
"1946533","10:28:43.5233208
AM","MsMpEng.exe","964","QueryStandardInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleRGJXDU","SUCCESS","AllocationSize:
4,096, EndOfFile: 1,030, NumberOfLinks: 1, DeletePending: False,
Directory: False"
"1946536","10:28:43.5255741
AM","pidgin.exe","4332","CreateFile","C:\Users\01251587\AppData\Local\Temp\purpleRGJXDU","SUCCESS","Desired
Access: Read Attributes, Delete, Synchronize, Disposition: Open, Options:
Synchronous IO Non-Alert, Open Reparse Point, Attributes: n/a, ShareMode:
Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"1946537","10:28:43.5256803
AM","pidgin.exe","4332","QueryAttributeTagFile","C:\Users\01251587\AppData\Local\Temp\purpleRGJXDU","SUCCESS","Attributes:
ANCI, ReparseTag: 0x0"
"1946538","10:28:43.5257426
AM","pidgin.exe","4332","QueryBasicInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleRGJXDU","SUCCESS","CreationTime:
7/9/2008 10:28:43 AM, LastAccessTime: 7/9/2008 10:28:43 AM, LastWriteTime:
7/9/2008 10:28:43 AM, ChangeTime: 7/9/2008 10:28:43 AM, FileAttributes:
ANCI"
"1946540","10:28:43.5259739
AM","pidgin.exe","4332","SetRenameInformationFile","C:\Users\01251587\AppData\Local\Temp\purpleRGJXDU","SUCCESS","ReplaceIfExists:
True, FileName: C:\Users\01251587\AppData\Local\Temp\purpleRGJXDU.html"
"1946543","10:28:43.5263491
AM","pidgin.exe","4332","CloseFile","C:\Users\01251587\AppData\Local\Temp\purpleRGJXDU.html","SUCCESS",""
"2629753","10:34:46.4240839
AM","pidgin.exe","4332","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","NO
SUCH FILE","Filter: purpleUARZDU.html"
"2629754","10:34:46.4241322
AM","pidgin.exe","4332","QueryDirectory","C:\Users\01251587\AppData\Local\Temp\purpleUARZDU.html","NO
MORE FILES","Filter: purpleUARZDU.html"
--
Ticket URL: <http://developer.pidgin.im/ticket/6279#comment:9>
Pidgin <http://pidgin.im>
Pidgin
More information about the Tracker
mailing list