457 2:51:07 PM Newsupd Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 54272 / New offset: 54272 458 2:51:07 PM Newsupd Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 54272 Length: 4096 686 2:51:08 PM Newsupd Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 144384 Length: 4096 687 2:51:08 PM Newsupd Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 119808 / New offset: 119808 688 2:51:08 PM Newsupd Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 119808 Length: 4096 689 2:51:08 PM Newsupd Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 58368 / New offset: 58368 690 2:51:08 PM Newsupd Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 58368 Length: 4096 691 2:51:08 PM Newsupd Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 62464 / New offset: 62464 692 2:51:08 PM Newsupd Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 62464 Length: 4096 693 2:51:08 PM Newsupd Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 66560 / New offset: 66560 694 2:51:08 PM Newsupd Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 66560 Length: 4096 695 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 696 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 697 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 698 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 699 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 700 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 701 2:51:08 PM Newsupd Attributes C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\JEOGTC15\DSM[1].DLL NOTFOUND GetAttributes 702 2:51:08 PM Newsupd Open C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\JEOGTC15\DSM[1].DLL SUCCESS CREATENEW WRITEONLY DENYNONE 703 2:51:08 PM Newsupd Seek C:\WINDOWS\SYSTEM\MFC42.DLL SUCCESS Beginning Offset: 692224 / New offset: 692224 704 2:51:08 PM Newsupd Read C:\WINDOWS\SYSTEM\MFC42.DLL SUCCESS Offset: 692224 Length: 4096 705 2:51:08 PM Newsupd Seek C:\WINDOWS\SYSTEM\MFC42.DLL SUCCESS Beginning Offset: 487424 / New offset: 487424 706 2:51:08 PM Newsupd Read C:\WINDOWS\SYSTEM\MFC42.DLL SUCCESS Offset: 487424 Length: 4096 707 2:51:08 PM Newsupd Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 148480 / New offset: 148480 708 2:51:08 PM Newsupd Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 148480 Length: 4096 709 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 710 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 711 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 712 2:51:08 PM Newsupd Attributes C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\JEOGTC15\DSM[1].DLL SUCCESS Get Creation 713 2:51:08 PM Newsupd Close C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\JEOGTC15\DSM[1].DLL SUCCESS CLOSE_FINAL 714 2:51:08 PM Newsupd Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 132096 / New offset: 132096 715 2:51:08 PM Newsupd Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 132096 Length: 4096 716 2:51:08 PM Newsupd FindOpen C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\JEOGTC15\DSM[1].DLL SUCCESS dsm[1].dll 717 2:51:08 PM Newsupd FindClose C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\JEOGTC15\DSM[1].DLL SUCCESS 718 2:51:08 PM Newsupd Delete C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\JEOGTC15\DSM[1].DLL SUCCESS 719 2:51:08 PM Newsupd Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 164864 / New offset: 164864 720 2:51:08 PM Newsupd Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 164864 Length: 4096 721 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 722 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 723 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 724 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 725 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 726 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 727 2:51:08 PM Newsupd Attributes C:\WINDOWS\CTNEWS.INI NOTFOUND GetAttributes 728 2:51:08 PM Newsupd Attributes C:\WINDOWS\CTNEWS.INI NOTFOUND GetAttributes 729 2:51:08 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS GetAttributes 730 2:51:08 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS OPENEXISTING READWRITE DENYWRITE 731 2:51:08 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 732 2:51:08 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Get Modify 733 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS End Offset: 0 / New offset: 887 734 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Beginning Offset: 0 / New offset: 0 735 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Offset: 0 Length: 887 736 2:51:08 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS CLOSE_FINAL 737 2:51:08 PM Newsupd Seek C:\PROGRA~1\CREATIVE\NEWS\CTNEWSDL.DLL SUCCESS Beginning Offset: 78848 / New offset: 78848 738 2:51:08 PM Newsupd Read C:\PROGRA~1\CREATIVE\NEWS\CTNEWSDL.DLL SUCCESS Offset: 78848 Length: 4096 739 2:51:08 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE SUCCESS QUERY 740 2:51:08 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS ACCDENIED CREATE 741 2:51:08 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS SUCCESS GetAttributes 742 2:51:08 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS SUCCESS QUERY 743 2:51:08 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\CACHE SUCCESS CREATE 744 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 745 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 746 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 747 2:51:08 PM Newsupd Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 136192 / New offset: 136192 748 2:51:08 PM Newsupd Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 136192 Length: 4096 749 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 750 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 751 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 752 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 753 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 754 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 755 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 756 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 757 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 794 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 795 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 796 2:51:08 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 797 2:51:08 PM Newsupd Ioctl C: SUCCESS Subfunction: 0Dh 798 2:51:08 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS CREATENEW REPLACEEXISTING READWRITE DENYREADWRITE 799 2:51:08 PM Newsupd Write C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS Offset: 0 Length: 506 800 2:51:08 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS CLOSE_FINAL 801 2:51:08 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS GetAttributes 802 2:51:08 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS QUERY 803 2:51:08 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS OPENEXISTING READONLY DENYWRITE 804 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 0 Length: 64 805 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 128 / New offset: 128 806 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 128 Length: 248 807 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 128 / New offset: 128 808 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 128 Length: 488 809 2:51:08 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS QUERY 810 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 117760 / New offset: 117760 811 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 117760 Length: 4096 812 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 116736 / New offset: 116736 813 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 116736 Length: 1024 814 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 114688 / New offset: 114688 815 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 114688 Length: 2048 816 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 66560 / New offset: 66560 817 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 66560 Length: 4096 818 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 70656 / New offset: 70656 819 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 70656 Length: 4096 820 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 100352 / New offset: 100352 821 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 100352 Length: 4096 822 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 104448 / New offset: 104448 823 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 104448 Length: 4096 824 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 108544 / New offset: 108544 825 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 108544 Length: 4096 826 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 78848 / New offset: 78848 827 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 78848 Length: 4096 828 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 82944 / New offset: 82944 829 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 82944 Length: 4096 830 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 62464 / New offset: 62464 831 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 62464 Length: 4096 832 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 95744 / New offset: 95744 833 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 95744 Length: 4096 834 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 74752 / New offset: 74752 835 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 74752 Length: 4096 836 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 1024 / New offset: 1024 837 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 1024 Length: 4096 838 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 99840 / New offset: 99840 839 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 99840 Length: 512 840 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 112640 / New offset: 112640 841 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 112640 Length: 2048 842 2:51:08 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS SUCCESS QUERY 843 2:51:08 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\CACHE ACCDENIED CREATE 844 2:51:08 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\CACHE SUCCESS GetAttributes 845 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 37888 / New offset: 37888 846 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 37888 Length: 4096 847 2:51:08 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS OPENEXISTING READONLY DENYNONE 848 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS Offset: 0 Length: 36 849 2:51:08 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS CLOSE_FINAL 850 2:51:08 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS OPENEXISTING READONLY DENYNONE 851 2:51:08 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS OPENEXISTING READONLY DENYNONE 852 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS Offset: 0 Length: 36 853 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS Beginning Offset: 36 / New offset: 36 854 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS Beginning Offset: 44 / New offset: 44 855 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 41984 / New offset: 41984 856 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 41984 Length: 4096 857 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS Beginning Offset: 44 / New offset: 44 858 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS Offset: 44 Length: 16 859 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS Beginning Offset: 60 / New offset: 60 860 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS Offset: 60 Length: 256 861 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS Beginning Offset: 72 / New offset: 72 862 2:51:08 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS CREATENEW OPENEXISTING WRITEONLY DENYNONE 863 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS Beginning Offset: 36 / New offset: 36 864 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS Offset: 36 Length: 8 865 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS Beginning Offset: 72 / New offset: 72 866 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 50176 / New offset: 50176 867 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 50176 Length: 4096 868 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS Offset: 72 Length: 8 869 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS Offset: 80 Length: 426 870 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 13312 / New offset: 13312 871 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 13312 Length: 4096 872 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 46080 / New offset: 46080 873 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 46080 Length: 4096 874 2:51:08 PM Newsupd Write C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS Offset: 0 Length: 890 875 2:51:08 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS CLOSE_FINAL 876 2:51:08 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS OPENEXISTING READWRITE DENYWRITE 877 2:51:08 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS Set Creation 878 2:51:08 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS Set Modify 879 2:51:08 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS CLOSE_FINAL 880 2:51:08 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS SetAttributes 881 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS Beginning Offset: 72 / New offset: 72 882 2:51:08 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS CLOSE_FINAL 883 2:51:08 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS CLOSE_FINAL 884 2:51:08 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS CLOSE_FINAL 885 2:51:08 PM Newsupd FindOpen C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS advserv.cab 886 2:51:08 PM Newsupd FindClose C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS 887 2:51:08 PM Newsupd Delete C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.CAB SUCCESS 888 2:51:08 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\CACHE SUCCESS GetAttributes 889 2:51:08 PM Newsupd FindOpen C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\*.* SUCCESS . 890 2:51:08 PM Newsupd FindNext C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\*.* SUCCESS .. 891 2:51:08 PM Newsupd FindNext C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\*.* SUCCESS AdvServ.sys 892 2:51:08 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS GetAttributes 893 2:51:08 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS GetAttributes 894 2:51:08 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS OPENEXISTING READONLY DENYNONE 895 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS End Offset: 0 / New offset: 890 896 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS Beginning Offset: 0 / New offset: 0 897 2:51:08 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS CREATENEW REPLACEEXISTING WRITEONLY DENYREADWRITE 898 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS Offset: 0 Length: 890 899 2:51:08 PM Newsupd Write C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Offset: 0 Length: 890 900 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Beginning Offset: 890 / New offset: 890 901 2:51:08 PM Newsupd Write C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Offset: 890 Length: 0 902 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS End Offset: 0 / New offset: 890 903 2:51:08 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS Get Modify 904 2:51:08 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Set Modify 905 2:51:08 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS CLOSE_FINAL 906 2:51:08 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS SetAttributes 907 2:51:08 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS CLOSE_FINAL 908 2:51:08 PM Newsupd FindOpen C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS AdvServ.sys 909 2:51:08 PM Newsupd FindClose C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS 910 2:51:08 PM Newsupd Delete C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\ADVSERV.SYS SUCCESS 911 2:51:08 PM Newsupd Attributes C:\WINDOWS\DIR.LOG SUCCESS GetAttributes 912 2:51:08 PM Newsupd Open C:\WINDOWS\DIR.LOG SUCCESS OPENEXISTING READWRITE DENYWRITE 913 2:51:08 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 914 2:51:08 PM Newsupd Attributes C:\WINDOWS\DIR.LOG SUCCESS Get Modify 915 2:51:08 PM Newsupd Seek C:\WINDOWS\DIR.LOG SUCCESS End Offset: 0 / New offset: 570 916 2:51:08 PM Newsupd Seek C:\WINDOWS\DIR.LOG SUCCESS Beginning Offset: 0 / New offset: 0 918 2:51:08 PM Newsupd Read C:\WINDOWS\DIR.LOG SUCCESS Offset: 0 Length: 570 919 2:51:08 PM Newsupd Close C:\WINDOWS\DIR.LOG SUCCESS CLOSE_FINAL 920 2:51:08 PM Newsupd FindNext C:\PROGRAM FILES\CREATIVE\NEWS\CACHE\*.* NOMORE 921 2:51:08 PM Newsupd Attributes C:\WINDOWS\DESKTOP SUCCESS GetAttributes 923 2:51:08 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\CACHE SUCCESS DELETE 924 2:51:08 PM Newsupd Open C:\WINDOWS\DIR.LOG SUCCESS OPENEXISTING READWRITE DENYWRITE 925 2:51:08 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 926 2:51:08 PM Newsupd Attributes C:\WINDOWS\DIR.LOG SUCCESS Get Modify 927 2:51:08 PM Newsupd Write C:\WINDOWS\DIR.LOG SUCCESS Offset: 0 Length: 629 928 2:51:08 PM Newsupd Write C:\WINDOWS\DIR.LOG SUCCESS Offset: 629 Length: 0 929 2:51:08 PM Newsupd Close C:\WINDOWS\DIR.LOG SUCCESS CLOSE_FINAL 930 2:51:08 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS GetAttributes 931 2:51:08 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS OPENEXISTING READWRITE DENYWRITE 932 2:51:08 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 933 2:51:08 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Get Modify 934 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS End Offset: 0 / New offset: 890 935 2:51:08 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Beginning Offset: 0 / New offset: 0 936 2:51:08 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Offset: 0 Length: 890 937 2:51:08 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS CLOSE_FINAL 938 2:51:08 PM Newsupd Seek C:\WINDOWS\SYSTEM\MSVCRT.DLL SUCCESS Beginning Offset: 81920 / New offset: 81920 939 2:51:08 PM Newsupd Read C:\WINDOWS\SYSTEM\MSVCRT.DLL SUCCESS Offset: 81920 Length: 4096 940 2:51:09 PM Newsupd Attributes C:\WINDOWS\CTNEWS.INI NOTFOUND GetAttributes 941 2:51:09 PM Newsupd Attributes C:\WINDOWS\CTNEWS.INI NOTFOUND GetAttributes 942 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS GetAttributes 943 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS OPENEXISTING READWRITE DENYWRITE 944 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 945 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Get Modify 946 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS End Offset: 0 / New offset: 890 947 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Beginning Offset: 0 / New offset: 0 948 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Offset: 0 Length: 890 949 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS CLOSE_FINAL 950 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS SUCCESS QUERY 951 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES ACCDENIED CREATE 952 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES SUCCESS GetAttributes 953 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES SUCCESS QUERY 954 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES\CACHE SUCCESS CREATE 955 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 956 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 957 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 958 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 959 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 960 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 961 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 962 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 963 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 964 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 0Dh 965 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES\CACHE\IMAGES.CAB SUCCESS CREATENEW REPLACEEXISTING READWRITE DENYREADWRITE 966 2:51:09 PM Newsupd Write C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES\CACHE\IMAGES.CAB SUCCESS Offset: 0 Length: 461 967 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES\CACHE\IMAGES.CAB SUCCESS CLOSE_FINAL 968 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS GetAttributes 969 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS QUERY 970 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS OPENEXISTING READONLY DENYWRITE 971 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 0 Length: 64 972 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 128 / New offset: 128 973 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 128 Length: 248 974 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 128 / New offset: 128 975 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 128 Length: 488 976 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS QUERY 977 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 117760 / New offset: 117760 978 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 117760 Length: 4096 979 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 116736 / New offset: 116736 980 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 116736 Length: 1024 981 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 114688 / New offset: 114688 982 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 114688 Length: 2048 983 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 66560 / New offset: 66560 984 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 66560 Length: 4096 985 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 70656 / New offset: 70656 986 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 70656 Length: 4096 987 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 100352 / New offset: 100352 988 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 100352 Length: 4096 989 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 104448 / New offset: 104448 990 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 104448 Length: 4096 991 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 108544 / New offset: 108544 992 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 108544 Length: 4096 993 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 78848 / New offset: 78848 994 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 78848 Length: 4096 995 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 82944 / New offset: 82944 996 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 82944 Length: 4096 997 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 62464 / New offset: 62464 998 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 62464 Length: 4096 999 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 95744 / New offset: 95744 1000 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 95744 Length: 4096 1001 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 74752 / New offset: 74752 1002 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 74752 Length: 4096 1003 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 1024 / New offset: 1024 1004 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 1024 Length: 4096 1005 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 99840 / New offset: 99840 1006 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 99840 Length: 512 1007 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 112640 / New offset: 112640 1008 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 112640 Length: 2048 1009 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES SUCCESS QUERY 1010 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES\CACHE ACCDENIED CREATE 1011 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES\CACHE SUCCESS GetAttributes 1012 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 37888 / New offset: 37888 1013 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 37888 Length: 4096 1014 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES\CACHE\IMAGES.CAB SUCCESS OPENEXISTING READONLY DENYNONE 1015 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES\CACHE\IMAGES.CAB SUCCESS Offset: 0 Length: 36 1016 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES\CACHE\IMAGES.CAB SUCCESS CLOSE_FINAL 1017 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Beginning Offset: 41984 / New offset: 41984 1018 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS Offset: 41984 Length: 4096 1019 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\CTCAB.DLL SUCCESS CLOSE_FINAL 1020 2:51:09 PM Newsupd FindOpen C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES\CACHE\IMAGES.CAB SUCCESS images.cab 1021 2:51:09 PM Newsupd FindClose C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES\CACHE\IMAGES.CAB SUCCESS 1022 2:51:09 PM Newsupd Delete C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES\CACHE\IMAGES.CAB SUCCESS 1023 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES\CACHE SUCCESS GetAttributes 1024 2:51:09 PM Newsupd FindOpen C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES\CACHE\*.* SUCCESS . 1025 2:51:09 PM Newsupd FindNext C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES\CACHE\*.* SUCCESS .. 1026 2:51:09 PM Newsupd FindNext C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES\CACHE\*.* NOMORE 1027 2:51:09 PM Newsupd Attributes C:\WINDOWS\DESKTOP SUCCESS GetAttributes 1028 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\IMAGES\CACHE SUCCESS DELETE 1029 2:51:09 PM Newsupd Attributes C:\WINDOWS\CTNEWS.INI NOTFOUND GetAttributes 1030 2:51:09 PM Newsupd Attributes C:\WINDOWS\CTNEWS.INI NOTFOUND GetAttributes 1031 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS GetAttributes 1032 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS OPENEXISTING READWRITE DENYWRITE 1033 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 1034 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Get Modify 1035 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS End Offset: 0 / New offset: 890 1036 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Beginning Offset: 0 / New offset: 0 1037 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Offset: 0 Length: 890 1038 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS CLOSE_FINAL 1039 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\DEFAULT.SYS SUCCESS GetAttributes 1040 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\DEFAULT.SYS SUCCESS OPENEXISTING READWRITE DENYWRITE 1041 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 1042 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\DEFAULT.SYS SUCCESS Get Modify 1043 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\DEFAULT.SYS SUCCESS End Offset: 0 / New offset: 890 1044 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\DEFAULT.SYS SUCCESS Beginning Offset: 0 / New offset: 0 1045 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\DEFAULT.SYS SUCCESS Offset: 0 Length: 890 1046 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\DEFAULT.SYS SUCCESS CLOSE_FINAL 1047 2:51:09 PM Newsupd Seek C:\PROGRA~1\CREATIVE\NEWS\CTNEWSDL.DLL SUCCESS Beginning Offset: 58368 / New offset: 58368 1048 2:51:09 PM Newsupd Read C:\PROGRA~1\CREATIVE\NEWS\CTNEWSDL.DLL SUCCESS Offset: 58368 Length: 4096 1049 2:51:09 PM Newsupd Attributes C:\WINDOWS\CTNEWS.INI NOTFOUND GetAttributes 1050 2:51:09 PM Newsupd Attributes C:\WINDOWS\CTNEWS.INI NOTFOUND GetAttributes 1051 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS GetAttributes 1052 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS OPENEXISTING READWRITE DENYWRITE 1053 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 1054 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Get Modify 1055 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS End Offset: 0 / New offset: 890 1056 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Beginning Offset: 0 / New offset: 0 1057 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS Offset: 0 Length: 890 1058 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\ADVSERV.SYS SUCCESS CLOSE_FINAL 1059 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.INI NOTFOUND GetAttributes 1060 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.INI NOTFOUND GetAttributes 1061 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS SUCCESS QUERY 1062 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\GROUP SUCCESS CREATE 1063 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\GROUP SUCCESS QUERY 1064 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE SUCCESS CREATE 1065 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS SUCCESS QUERY 1066 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\GROUP ACCDENIED CREATE 1067 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP SUCCESS GetAttributes 1068 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 1069 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 1070 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 1071 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 1072 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 1073 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 1074 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 1075 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 1076 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 1077 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 1078 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 1079 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 1083 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 1084 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS End Offset: 0 / New offset: 81920 1085 2:51:09 PM Newsupd Seek C:\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DAT SUCCESS Beginning Offset: 0 / New offset: 0 1086 2:51:09 PM Newsupd Seek C:\PROGRA~1\CREATIVE\NEWS\CTNEWSDL.DLL SUCCESS Beginning Offset: 25600 / New offset: 25600 1087 2:51:09 PM Newsupd Read C:\PROGRA~1\CREATIVE\NEWS\CTNEWSDL.DLL SUCCESS Offset: 25600 Length: 4096 1088 2:51:09 PM Newsupd Seek C:\PROGRA~1\CREATIVE\NEWS\CTNEWSDL.DLL SUCCESS Beginning Offset: 21504 / New offset: 21504 1089 2:51:09 PM Newsupd Read C:\PROGRA~1\CREATIVE\NEWS\CTNEWSDL.DLL SUCCESS Offset: 21504 Length: 4096 1090 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\GROUP SUCCESS QUERY 1091 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE ACCDENIED CREATE 1092 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE SUCCESS GetAttributes 1093 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 0Dh 1094 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS CREATENEW REPLACEEXISTING READWRITE DENYREADWRITE 1095 2:51:09 PM Newsupd Write C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS Offset: 0 Length: 47 1096 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS CLOSE_FINAL 1097 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 0Dh 1098 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS OPENEXISTING READONLY DENYREADWRITE 1099 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS CLOSE_FINAL 1100 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS GetAttributes 1101 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS OPENEXISTING READWRITE DENYWRITE 1102 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 1103 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS Get Modify 1104 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS End Offset: 0 / New offset: 47 1105 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS Beginning Offset: 0 / New offset: 0 1106 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS Offset: 0 Length: 47 1107 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS CLOSE_FINAL 1108 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 0Dh 1109 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP NOTFOUND OPENEXISTING READONLY DENYREADWRITE 1110 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP NOTFOUND GetAttributes 1111 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS CREATENEW REPLACEEXISTING READWRITE COMPATIBILITY 1112 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 1113 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Get Modify 1114 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS End Offset: 0 / New offset: 0 1115 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Beginning Offset: 0 / New offset: 0 1116 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Beginning Offset: 26 / New offset: 26 1117 2:51:09 PM Newsupd Write C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Offset: 26 Length: 1 1118 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS CLOSE_FINAL 1119 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 0Dh 1120 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS OPENEXISTING READONLY DENYREADWRITE 1121 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS CLOSE_FINAL 1122 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS OPENEXISTING READWRITE DENYWRITE 1123 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 1124 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Get Modify 1125 2:51:09 PM Newsupd Write C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Offset: 0 Length: 51 1126 2:51:09 PM Newsupd Write C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Offset: 51 Length: 0 1127 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS CLOSE_FINAL 1128 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS GetAttributes 1129 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS OPENEXISTING READWRITE DENYWRITE 1130 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 1131 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS Get Modify 1132 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS End Offset: 0 / New offset: 47 1133 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS Beginning Offset: 0 / New offset: 0 1134 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS Offset: 0 Length: 47 1135 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS CLOSE_FINAL 1136 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS GetAttributes 1137 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS OPENEXISTING READWRITE DENYWRITE 1138 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 1139 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Get Modify 1140 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS End Offset: 0 / New offset: 51 1141 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Beginning Offset: 0 / New offset: 0 1142 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Offset: 0 Length: 51 1143 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS CLOSE_FINAL 1144 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS GetAttributes 1145 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS OPENEXISTING READWRITE DENYWRITE 1146 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 1147 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Get Modify 1148 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS End Offset: 0 / New offset: 51 1149 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Beginning Offset: 0 / New offset: 0 1150 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Offset: 0 Length: 51 1151 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS CLOSE_FINAL 1152 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS OPENEXISTING READWRITE DENYWRITE 1153 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 1154 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Get Modify 1155 2:51:09 PM Newsupd Write C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Offset: 0 Length: 80 1156 2:51:09 PM Newsupd Write C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Offset: 80 Length: 0 1157 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS CLOSE_FINAL 1158 2:51:09 PM Newsupd Seek C:\PROGRA~1\CREATIVE\NEWS\CTNEWSDL.DLL SUCCESS Beginning Offset: 54272 / New offset: 54272 1159 2:51:09 PM Newsupd Read C:\PROGRA~1\CREATIVE\NEWS\CTNEWSDL.DLL SUCCESS Offset: 54272 Length: 4096 1160 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS GetAttributes 1161 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS OPENEXISTING READWRITE DENYWRITE 1162 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 1163 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS Get Modify 1164 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS End Offset: 0 / New offset: 47 1165 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS Beginning Offset: 0 / New offset: 0 1166 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS Offset: 0 Length: 47 1167 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CACHE\CONFIG.INI SUCCESS CLOSE_FINAL 1168 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS GetAttributes 1169 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.INI NOTFOUND GetAttributes 1170 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS OPENEXISTING READONLY DENYNONE 1171 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS End Offset: 0 / New offset: 80 1172 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Beginning Offset: 0 / New offset: 0 1173 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.INI SUCCESS CREATENEW REPLACEEXISTING WRITEONLY DENYREADWRITE 1174 2:51:09 PM Newsupd Read C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Offset: 0 Length: 80 1175 2:51:09 PM Newsupd Write C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.INI SUCCESS Offset: 0 Length: 80 1176 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.INI SUCCESS Beginning Offset: 80 / New offset: 80 1177 2:51:09 PM Newsupd Write C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.INI SUCCESS Offset: 80 Length: 0 1178 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.INI SUCCESS End Offset: 0 / New offset: 80 1179 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS Get Modify 1180 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.INI SUCCESS Set Modify 1181 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.INI SUCCESS CLOSE_FINAL 1182 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.INI SUCCESS SetAttributes 1183 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS CLOSE_FINAL 1184 2:51:09 PM Newsupd FindOpen C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS discretionary.tmp 1185 2:51:09 PM Newsupd FindClose C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS 1186 2:51:09 PM Newsupd Delete C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.TMP SUCCESS 1187 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS SUCCESS QUERY 1188 2:51:09 PM Newsupd Directory C:\PROGRAM FILES\CREATIVE\NEWS\GROUP ACCDENIED CREATE 1189 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP SUCCESS GetAttributes 1190 2:51:09 PM Newsupd Seek C:\PROGRA~1\CREATIVE\NEWS\CTNEWSDL.DLL SUCCESS Beginning Offset: 13312 / New offset: 13312 1191 2:51:09 PM Newsupd Read C:\PROGRA~1\CREATIVE\NEWS\CTNEWSDL.DLL SUCCESS Offset: 13312 Length: 4096 1192 2:51:09 PM Newsupd FindOpen C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTCLEANUP.INI NOTFOUND 1193 2:51:09 PM Newsupd Delete C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTCLEANUP.INI NOTFOUND 1194 2:51:09 PM Newsupd FindOpen C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTPROTECT.INI NOTFOUND 1195 2:51:09 PM Newsupd Delete C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTPROTECT.INI NOTFOUND 1196 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTPROTECT.INI NOTFOUND GetAttributes 1197 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTPROTECT.INI NOTFOUND GetAttributes 1198 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTPROTECT.INI NOTFOUND GetAttributes 1199 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTPROTECT.INI SUCCESS CREATENEW REPLACEEXISTING READWRITE COMPATIBILITY 1200 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 1201 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTPROTECT.INI SUCCESS Get Modify 1202 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTPROTECT.INI SUCCESS End Offset: 0 / New offset: 0 1203 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTPROTECT.INI SUCCESS Beginning Offset: 0 / New offset: 0 1204 2:51:09 PM Newsupd Seek C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTPROTECT.INI SUCCESS Beginning Offset: 25 / New offset: 25 1205 2:51:09 PM Newsupd Write C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTPROTECT.INI SUCCESS Offset: 25 Length: 1 1206 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTPROTECT.INI SUCCESS CLOSE_FINAL 1207 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTPROTECT.INI SUCCESS OPENEXISTING READWRITE DENYWRITE 1208 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h 1209 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTPROTECT.INI SUCCESS Get Modify 1210 2:51:09 PM Newsupd Write C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTPROTECT.INI SUCCESS Offset: 0 Length: 69 1211 2:51:09 PM Newsupd Write C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTPROTECT.INI SUCCESS Offset: 69 Length: 0 1212 2:51:09 PM Newsupd Close C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\CTPROTECT.INI SUCCESS CLOSE_FINAL 1213 2:51:09 PM Newsupd Attributes C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.INI SUCCESS GetAttributes 1214 2:51:09 PM Newsupd Open C:\PROGRAM FILES\CREATIVE\NEWS\GROUP\DISCRETIONARY.INI SUCCESS OPENEXISTING READWRITE DENYWRITE 1215 2:51:09 PM Newsupd Ioctl C: SUCCESS Subfunction: 08h [Etc...]