How to find out if a program or path is missing something

Reply 40 of 93, by asdf53

Posted on 2025-11-06, 19:28

asdf53 Offline

Rank Member

Rank: Member
Posts: 385
Joined: 2019-12-09, 17:57

Assuming that it could be a DLL file that causes this, you can also try this: Open the standard Windows search dialog, enter *.dll as file type, go to the Date tab, and set it to search "Last accessed" and select "within the last 1 days". This will give you a list of all DLL files recently accessed.

If you spot any DLL in the results that doesn't come with Windows (not located in C:\Windows\system), it would be a candidate for inspection with Dependency Walker to see if it references ShellExecuteEx somewhere. That function is defined in shell32.dll. It might also work to just open the DLL file in WordPad and search for "ShellExecuteEx".

Reply 41 of 93, by DustyShinigami

Posted on 2025-11-06, 20:29

DustyShinigami Offline

Rank Oldbie

Rank: Oldbie
Posts: 1480
Joined: 2024-10-10, 18:52
Location: UK

asdf53 wrote on 2025-11-06, 15:45:
Okay, this at least tells us it's not an external program calling "xit", it's Explorer. It could be an explorer shell extension […]
Show full quote

DustyShinigami wrote on 2025-11-06, 01:02:

Success! Caught it. Though I'm still non plussed.

Okay, this at least tells us it's not an external program calling "xit", it's Explorer. It could be an explorer shell extension that causes this error because these extensions run within the explorer.exe process.

https://www.nirsoft.net/utils/shexview.html

This tool allows you to list the currently installed shell extensions. Do you have any installed that are not from Microsoft? The next step would be to examine their DLL file to see if it implements ShellExecuteEx.

I hope I'm looking at the right things. There are a few not from Microsoft. The only one I can see as a possibility is for Alcohol 120%, though I'm not sure if I was getting that error right after reformatting and before I'd installed anything.

================================================== Extension Name : Disabled : No Type : Drop Handler […]
Show full quote
==================================================
Extension Name :
Disabled : No
Type : Drop Handler
Description : Send Mail
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SENDMAIL.DLL
CLSID : {9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .MAPIMail
File Attributes : A
File Size : 34,256
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name :
Disabled : No
Type : Drop Handler
Description : Send Mail
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SENDMAIL.DLL
CLSID : {9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .DeskLink
File Attributes : A
File Size : 34,256
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name :
Disabled : No
Type : Shell Folder
Description : Windows Shell Common Dll
Version : 4.72.3612.1700
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shell32.dll
CLSID : {208D2C60-3AEA-1069-A2D7-08002B30309D}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 1,400,832
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name :
Disabled : No
Type : Shell Folder
Description : Windows Shell Common Dll
Version : 4.72.3612.1700
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shell32.dll
CLSID : {20D04FE0-3AEA-1069-A2D8-08002B30309D}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 1,400,832
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : %DESK_SearchAssistant%
Disabled : No
Type : System
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {9461b922-3c5a-11d2-bf8b-00c04fb93661}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : &Address
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {01E04581-4EEE-11d0-BFE9-00AA005B4383}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : &Address
Disabled : No
Type : IE Toolbar
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {01E04581-4EEE-11D0-BFE9-00AA005B4383}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : &Links
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {0E5CBF21-D15F-11d0-8301-00AA005B4383}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : &Links
Disabled : No
Type : IE Toolbar
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {0E5CBF21-D15F-11D0-8301-00AA005B4383}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : &Radio
Disabled : No
Type : IE Toolbar
Description : Windows Media Player 2 ActiveX Control
Version : 6.4.07.1112
Product Name : DirectShow
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\MSDXM.OCX
CLSID : {8E718888-423F-11D2-876E-00A0C9082467}
File Created Time : 12/11/99 17:31:46
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 844,048
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : &Tip of the Day
Disabled : No
Type : Explorer Bar
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {4D5C8C25-D075-11d0-B416-00C04FB90376}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : .PIF file property pages
Disabled : No
Type : Property Sheet
Description : Windows Shell Common Dll
Version : 4.72.3612.1700
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shell32.dll
CLSID : {86F19A00-42A0-1069-A2E9-08002B30309D}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : exefile, .exe, .com, comfile, .bat, batfile, .pif, piffile
File Attributes : A
File Size : 1,400,832
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : 7-Zip Shell Extension
Disabled : No
Type : Drag & Drop Handler
Description : 7-Zip Shell Extension
Version : 4.65
Product Name : 7-Zip
Company : Igor Pavlov
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\Program Files\7-Zip\7-zip.dll
CLSID : {23170F69-40C1-278A-1000-000100020000}
File Created Time : 03/02/09 07:09:46
CLSID Modified Time: N / A
Microsoft : No
File Extensions : Drive, Directory
File Attributes : A
File Size : 69,632
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : 7-Zip Shell Extension
Disabled : No
Type : Context Menu
Description : 7-Zip Shell Extension
Version : 4.65
Product Name : 7-Zip
Company : Igor Pavlov
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\Program Files\7-Zip\7-zip.dll
CLSID : {23170F69-40C1-278A-1000-000100020000}
File Created Time : 03/02/09 07:09:46
CLSID Modified Time: N / A
Microsoft : No
File Extensions : Directory, *
File Attributes : A
File Size : 69,632
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : ActiveDesktop
Disabled : No
Type : System
Description : Shell Doc Object and Control Library - IE 4.01 compat
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOC401.DLL
CLSID : {75048700-EF1F-11D0-9888-006097DEACF9}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 504,080
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : ActiveX Cache Folder
Disabled : No
Type : Shell Folder
Description : Object Control Viewer
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\OCCACHE.DLL
CLSID : {88C6C381-2E85-11D0-94DE-444553540000}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 107,472
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Address EditBox
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {A08C11D2-A228-11d0-825B-00AA005B4383}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : AlcoholShellEx
Disabled : No
Type : Context Menu
Description : AXShlEx.dll
Version : 1.4.9.1024
Product Name : Alcohol ShellEx
Company : Alcohol Soft Development Team
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\PROGRA~1\ALCOHO~1\ALCOHO~1\AXSHLEX.DLL
CLSID : {32020A01-506E-484D-A2A8-BE3CF17601C3}
File Created Time : 07/09/22 01:30:26
CLSID Modified Time: N / A
Microsoft : No
File Extensions : Drive, AlcoholImageFile, .mds, .mdf
File Attributes : A
File Size : 749,056
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : AlcoholShellEx
Disabled : No
Type : Icon Handler
Description : AXShlEx.dll
Version : 1.4.9.1024
Product Name : Alcohol ShellEx
Company : Alcohol Soft Development Team
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\PROGRA~1\ALCOHO~1\ALCOHO~1\AXSHLEX.DLL
CLSID : {32020A01-506E-484D-A2A8-BE3CF17601C3}
File Created Time : 07/09/22 01:30:26
CLSID Modified Time: N / A
Microsoft : No
File Extensions : AlcoholImageFile, .mds, .mdf
File Attributes : A
File Size : 749,056
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Augmented Merge Shell Folder
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {6413BA2C-B461-11d1-A18A-080036B11A03}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Augmented Shell Folder
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {91EA3F8B-C99B-11d0-9815-00C04FD91972}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : BandProxy
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {F61FFEC1-754F-11d0-80CA-00AA005B4383}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : CDF Extension Copy Hook
Disabled : No
Type : Copy Hook Handler
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {67EA19A0-CCEF-11d0-8024-00C04FD75D13}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : Directory
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Channel
Disabled : No
Type : System
Description : Channel Definition File Viewer
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\CDFVIEW.DLL
CLSID : {f39a0dc0-9cc8-11d0-a599-00c04fd64433}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 155,920
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Channel Handler Object
Disabled : No
Type : Icon Handler
Description : Channel Definition File Viewer
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\CDFVIEW.DLL
CLSID : {f3ba0dc0-9cc8-11d0-a599-00c04fd64435}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .cdf, ChannelFile, ChannelShortcut
File Attributes : A
File Size : 155,920
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Channel Handler Object
Disabled : No
Type : Thumbnail
Description : Channel Definition File Viewer
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\CDFVIEW.DLL
CLSID : {f3ba0dc0-9cc8-11d0-a599-00c04fd64435}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .cdf, ChannelFile, ChannelShortcut
File Attributes : A
File Size : 155,920
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Channel Handler Object
Disabled : No
Type : Shell Link (ANSI)
Description : Channel Definition File Viewer
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\CDFVIEW.DLL
CLSID : {f3ba0dc0-9cc8-11d0-a599-00c04fd64435}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .cdf, ChannelFile, ChannelShortcut
File Attributes : A
File Size : 155,920
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Channel Handler Object
Disabled : No
Type : InfoTip Handler
Description : Channel Definition File Viewer
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\CDFVIEW.DLL
CLSID : {f3ba0dc0-9cc8-11d0-a599-00c04fd64435}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .cdf, ChannelFile, ChannelShortcut
File Attributes : A
File Size : 155,920
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Channel Menu Handler Object
Disabled : No
Type : Context Menu
Description : Channel Definition File Viewer
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\CDFVIEW.DLL
CLSID : {f3da0dc0-9cc8-11d0-a599-00c04fd64437}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : ChannelShortcut
File Attributes : A
File Size : 155,920
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Channel Shortcut
Disabled : No
Type : System
Description : Channel Definition File Viewer
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\CDFVIEW.DLL
CLSID : {f3aa0dc0-9cc8-11d0-a599-00c04fd64434}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 155,920
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Channel Shortcut Property Pages
Disabled : No
Type : Property Sheet
Description : Channel Definition File Viewer
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\CDFVIEW.DLL
CLSID : {f3ea0dc0-9cc8-11d0-a599-00c04fd64438}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : ChannelShortcut
File Attributes : A
File Size : 155,920
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Cleaner for Downloaded Program Files
Disabled : No
Type : Disk Cleanup Handler
Description : Object Control Viewer
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\OCCACHE.DLL
CLSID : {8369AB20-56C9-11D0-94E8-00AA0059CE02}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 107,472
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : CmdFileIcon
Disabled : No
Type : Icon Handler
Description : Shell Doc Object and Control Library - IE 4.01 compat
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOC401.DLL
CLSID : {57651662-CE3E-11D0-8D77-00C04FC99D61}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : SHCmdFile, .scf
File Attributes : A
File Size : 504,080
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Code Download Agent
Disabled : No
Type : System
Description : Web Site Monitor
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\WEBCHECK.DLL
CLSID : {7D559C10-9FE9-11d0-93F7-00AA0059CE02}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 274,704
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : ConnectionAgent
Disabled : No
Type : System
Description : Web Site Monitor
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\WEBCHECK.DLL
CLSID : {E6CC6978-6B6E-11D0-BECA-00C04FD940BE}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 274,704
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Control Panel
Disabled : No
Type : Shell Folder
Description : Windows Shell Common Dll
Version : 4.72.3612.1700
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shell32.dll
CLSID : {21EC2020-3AEA-1069-A2DD-08002B30309D}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 1,400,832
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : CryptPKO Class
Disabled : No
Type : Context Menu
Description : Crypto Shell Extensions
Version : 5.131.1877.3
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\CRYPTEXT.DLL
CLSID : {7444C717-39BF-11D1-8CD9-00C04FC29D45}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .pko, PKOFile
File Attributes : A
File Size : 57,344
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : CryptSig Class
Disabled : No
Type : System
Description : Crypto Shell Extensions
Version : 5.131.1877.3
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\CRYPTEXT.DLL
CLSID : {7444C719-39BF-11D1-8CD9-00C04FC29D45}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 57,344
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Desktop Explorer
Disabled : No
Type : Shell Folder
Description : NVIDIA Desktop Explorer, Version 31.40
Version : 4.13.01.3140
Product Name : NVIDIA Desktop Explorer, Version 31.40
Company : NVIDIA Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\NVSHELL.DLL
CLSID : {1CDB2949-8F65-4355-8456-263E7C208A5D}
File Created Time : 04/11/25 17:42:39
CLSID Modified Time: N / A
Microsoft : No
File Extensions :
File Attributes :
File Size : 282,694
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Desktop Explorer Menu
Disabled : No
Type : System
Description : NVIDIA Desktop Explorer, Version 31.40
Version : 4.13.01.3140
Product Name : NVIDIA Desktop Explorer, Version 31.40
Company : NVIDIA Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\NVSHELL.DLL
CLSID : {1E9B04FB-F9E5-4718-997B-B8DA88302A47}
File Created Time : 04/11/25 17:42:39
CLSID Modified Time: N / A
Microsoft : No
File Extensions :
File Attributes :
File Size : 282,694
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Dial-Up Networking
Disabled : No
Type : Shell Folder
Description : Dial-Up Networking User Interface
Version : 4.10.2222
Product Name : Microsoft(R) Windows(R) Operating System
Company : Microsoft Corporation
My Computer : Yes
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\rnaui.dll
CLSID : {992CFFA0-F557-101A-88EC-00DD010CCC48}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 139,264
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Disk Copy Extension
Disabled : No
Type : Context Menu
Description : Windows DiskCopy
Version : 4.10.1998
Product Name : Microsoft(R) Windows(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\diskcopy.dll
CLSID : {59099400-57FF-11CE-BD94-0020AF85B590}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : Drive
File Attributes : A
File Size : 32,768
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Disk Tools Extension
Disabled : No
Type : Property Sheet
Description :
Version :
Product Name :
Company :
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\disktool.dll
CLSID : {D3B1DE00-6B94-1069-8754-08002B2BD64F}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : No
File Extensions : Drive
File Attributes :
File Size : 0
.NET Extension : No
Digital Signature :
Missing File : Yes
==================================================

==================================================
Extension Name : Display Control Panel HTML Extensions
Disabled : No
Type : System
Description : Shell Doc Object and Control Library - IE 4.01 compat
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOC401.DLL
CLSID : {3FC0B520-68A9-11D0-8D77-00C04FD70822}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 504,080
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : DocFile InfoTip Handler
Disabled : No
Type : InfoTip Handler
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {83799FE0-1F5A-11d1-95C7-00609797EA4F}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .doc, .ppt, .xls, .DOT, .XLT, .POT
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Download Status
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {22BF0C20-6DA7-11D0-B373-00A0C9034938}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Favorites Band
Disabled : No
Type : System
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {EFA24E61-B078-11d0-89E4-00C04FC9E26E}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : File Types Page
Disabled : No
Type : System
Description : Shell Doc Object and Control Library - IE 4.01 compat
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOC401.DLL
CLSID : {B091E540-83E3-11CF-A713-0020AFD79762}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 504,080
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Find... People
Disabled : No
Type : Search Handler
Description : Find People
Version : 5.00.2615.200
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\PROGRAM FILES\OUTLOOK EXPRESS\WABFIND.DLL
CLSID : {32714800-2E5F-11d0-8B85-00AA0044F941}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 16,384
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Folder Options Property Page Extension
Disabled : No
Type : System
Description : Shell Doc Object and Control Library - IE 4.01 compat
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOC401.DLL
CLSID : {6D5313C0-8C62-11D1-B2CD-006097DF8C11}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 504,080
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Global Folder Settings
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : History
Disabled : No
Type : Shell Folder
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {FF393560-C2A7-11CF-BFF4-444553540000}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : HTML Thumbnail Extractor
Disabled : No
Type : Thumbnail
Description : Thumbnail View Extension
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\THUMBVW.DLL
CLSID : {EAB841A0-9550-11cf-8C16-00805F1408F3}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .txt, .URL, .htm, .html, .mhtml, .mht
File Attributes : A
File Size : 232,432
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : ICC Profile
Disabled : No
Type : Icon Handler
Description : Microsoft Color Matching System User Interface DLL
Version : 5.00.1977.1
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\icmui.dll
CLSID : {DBCE2480-C732-101B-BE72-BA78E9AD5B27}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .icc, .icm, icmfile
File Attributes : A
File Size : 65,536
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : ICC Profile
Disabled : No
Type : Context Menu
Description : Microsoft Color Matching System User Interface DLL
Version : 5.00.1977.1
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\icmui.dll
CLSID : {DBCE2480-C732-101B-BE72-BA78E9AD5B27}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .icc, .icm, icmfile
File Attributes : A
File Size : 65,536
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : ICC Profile
Disabled : No
Type : Property Sheet
Description : Microsoft Color Matching System User Interface DLL
Version : 5.00.1977.1
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\icmui.dll
CLSID : {DBCE2480-C732-101B-BE72-BA78E9AD5B27}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .icc, .icm, icmfile
File Attributes : A
File Size : 65,536
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : ICM Monitor Management
Disabled : No
Type : System
Description : Microsoft Color Matching System User Interface DLL
Version : 5.00.1977.1
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\icmui.dll
CLSID : {5DB2625A-54DF-11D0-B6C4-0800091AA605}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 65,536
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : ICM Printer Management
Disabled : No
Type : System
Description : Microsoft Color Matching System User Interface DLL
Version : 5.00.1977.1
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\icmui.dll
CLSID : {675F097E-4C4D-11D0-B6C1-0800091AA605}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 65,536
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : ICM Scanner Management
Disabled : No
Type : System
Description : Microsoft Color Matching System User Interface DLL
Version : 5.00.1977.1
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\icmui.dll
CLSID : {176d6597-26d3-11d1-b350-080036a75b03}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 65,536
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : IE4 Suite Splash Screen
Disabled : No
Type : System
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : In-pane search
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {169A0691-8DF9-11d1-A1C4-00C04FD75D13}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Internet Explorer
Disabled : No
Type : Shell Folder
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {871C5380-42A0-1069-A2EA-08002B30309D}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Internet Shortcut
Disabled : No
Type : Icon Handler
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shdocvw.dll
CLSID : {FBF23B40-E3F0-101B-8488-00AA003E56F8}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .URL, InternetShortcut
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Internet Shortcut
Disabled : No
Type : Property Sheet
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shdocvw.dll
CLSID : {FBF23B40-E3F0-101B-8488-00AA003E56F8}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .URL, InternetShortcut
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Internet Shortcut
Disabled : No
Type : Context Menu
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shdocvw.dll
CLSID : {FBF23B40-E3F0-101B-8488-00AA003E56F8}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .URL, InternetShortcut
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Internet Shortcut
Disabled : No
Type : MetaData
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shdocvw.dll
CLSID : {FBF23B40-E3F0-101B-8488-00AA003E56F8}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .URL, InternetShortcut
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Internet Shortcut
Disabled : No
Type : Shell Link (ANSI)
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shdocvw.dll
CLSID : {FBF23B40-E3F0-101B-8488-00AA003E56F8}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .URL
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Internet Shortcut
Disabled : No
Type : Shell Link (Unicode)
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shdocvw.dll
CLSID : {FBF23B40-E3F0-101B-8488-00AA003E56F8}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .URL
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Internet Shortcut
Disabled : No
Type : InfoTip Handler
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shdocvw.dll
CLSID : {FBF23B40-E3F0-101B-8488-00AA003E56F8}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .URL
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : ISFBand OC
Disabled : No
Type : System
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {131A6951-7F78-11D0-A979-00C04FD705A2}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : IShellFolderBand
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {D82BE2B0-5764-11D0-A96E-00C04FD705A2}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Kodak Image Shell Extension
Disabled : No
Type : Property Sheet
Description : Image Shell Extension
Version : 4.10.2000
Product Name : Imaging for Windows®
Company : Eastman Software, Inc., A Kodak Business
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\imgshl.dll
CLSID : {1D3ECD40-C835-11CE-9888-00608CC22020}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : No
File Extensions : .tiff, .tif, .pcx, .dcx, .awd, .xif, .wif
File Attributes : A
File Size : 32,768
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : LNK file thumbnail interface delegator
Disabled : No
Type : Thumbnail
Description : Thumbnail View Extension
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\THUMBVW.DLL
CLSID : {500202A0-731E-11d0-B829-00C04FD706EC}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .lnk
File Attributes : A
File Size : 232,432
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Menu Band
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {5b4dae26-b807-11d0-9815-00c04fd91972}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Menu Desk Bar
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {ECD4FC4F-521C-11D0-B792-00A0C90312E1}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Menu Shell Folder
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {568804CA-CBD7-11d0-9816-00C04FD91972}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Menu Site
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {E13EF4E4-D2F2-11d0-9816-00C04FD91972}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Microsoft AutoComplete
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {00BB2763-6A77-11D0-A535-00C04FD7D062}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Microsoft BrowserBand
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {7BA4C742-9E81-11CF-99D3-00AA004AE837}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Microsoft CopyTo Service
Disabled : No
Type : Context Menu
Description : Shell Doc Object and Control Library - IE 4.01 compat
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOC401.DLL
CLSID : {C2FBB630-2971-11d1-A18C-00C04FD75D13}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : AllFilesystemEditObjects
File Attributes : A
File Size : 504,080
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Microsoft History AutoComplete List
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {00BB2764-6A77-11D0-A535-00C04FD7D062}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Microsoft Internet Toolbar
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {5E6AB780-7743-11CF-A12B-00AA004AE837}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Microsoft MoveTo Service
Disabled : No
Type : Context Menu
Description : Shell Doc Object and Control Library - IE 4.01 compat
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOC401.DLL
CLSID : {C2FBB631-2971-11d1-A18C-00C04FD75D13}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : AllFilesystemEditObjects
File Attributes : A
File Size : 504,080
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Microsoft Multiple AutoComplete List Container
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {00BB2765-6A77-11D0-A535-00C04FD7D062}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Microsoft New Object Service
Disabled : No
Type : Context Menu
Description : Shell Doc Object and Control Library - IE 4.01 compat
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOC401.DLL
CLSID : {D969A300-E7FF-11d0-A93B-00A0C90F2719}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : Directory\Background
File Attributes : A
File Size : 504,080
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Microsoft OLE DB Service Component Data Links
Disabled : No
Type : Context Menu
Description : OLE DB Core DLL
Version : 02.10.3711.9
Product Name : Microsoft OLE DB
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\PROGRAM FILES\COMMON FILES\SYSTEM\OLE DB\OLEDB32.DLL
CLSID : {2206CDB2-19C1-11D1-89E0-00C04FD7A829}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .UDL, MSDASC
File Attributes : A
File Size : 370,960
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Microsoft OLE DB Service Component Data Links
Disabled : No
Type : Property Sheet
Description : OLE DB Core DLL
Version : 02.10.3711.9
Product Name : Microsoft OLE DB
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\PROGRAM FILES\COMMON FILES\SYSTEM\OLE DB\OLEDB32.DLL
CLSID : {2206CDB2-19C1-11D1-89E0-00C04FD7A829}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .UDL, MSDASC
File Attributes : A
File Size : 370,960
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Microsoft SearchBand
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {30D02401-6A81-11d0-8274-00C04FD5AE38}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Microsoft SendTo Service
Disabled : No
Type : Context Menu
Description : Shell Doc Object and Control Library - IE 4.01 compat
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOC401.DLL
CLSID : {7BA4C740-9E81-11CF-99D3-00AA004AE837}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : AllFilesystemObjects
File Attributes : A
File Size : 504,080
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Microsoft Shell Folder AutoComplete List
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {03C036F1-A186-11D0-824A-00AA005B4383}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Microsoft Url History Service
Disabled : No
Type : System
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {3C374A40-BAE4-11CF-BF7D-00AA006946EE}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Microsoft Url Search Hook
Disabled : No
Type : System
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {CFBFAE00-17A6-11D0-99CB-00C04FD64497}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Microsoft Url Search Hook
Disabled : No
Type : URL Search Hook
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {CFBFAE00-17A6-11D0-99CB-00C04FD64497}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : MIME File Types Hook
Disabled : No
Type : System
Description : Shell Doc Object and Control Library - IE 4.01 compat
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOC401.DLL
CLSID : {FBF23B41-E3F0-101B-8488-00AA003E56F8}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 504,080
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : MRU AutoComplete List
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {6756A641-DE71-11d0-831B-00AA005B4383}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : My Documents
Disabled : No
Type : Copy Hook Handler
Description : My Documents Folder UI
Version : 4.72.3510.2300
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : Yes
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\mydocs.dll
CLSID : {450D8FBA-AD25-11D0-98A8-0800361B1103}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : Directory
File Attributes : A
File Size : 73,728
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : My Documents
Disabled : No
Type : Context Menu
Description : My Documents Folder UI
Version : 4.72.3510.2300
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\mydocs.dll
CLSID : {450D8FBA-AD25-11D0-98A8-0800361B1103}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .mydocs
File Attributes : A
File Size : 73,728
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : My Documents
Disabled : No
Type : Drop Handler
Description : My Documents Folder UI
Version : 4.72.3510.2300
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\mydocs.dll
CLSID : {450D8FBA-AD25-11D0-98A8-0800361B1103}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .mydocs
File Attributes : A
File Size : 73,728
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : My Documents
Disabled : No
Type : Icon Handler
Description : My Documents Folder UI
Version : 4.72.3510.2300
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\mydocs.dll
CLSID : {450D8FBA-AD25-11D0-98A8-0800361B1103}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .mydocs
File Attributes : A
File Size : 73,728
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : My Documents
Disabled : No
Type : Property Sheet
Description : My Documents Folder UI
Version : 4.72.3510.2300
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\mydocs.dll
CLSID : {450D8FBA-AD25-11D0-98A8-0800361B1103}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .mydocs
File Attributes : A
File Size : 73,728
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Office Graphics Filters Thumbnail Extractor
Disabled : No
Type : Thumbnail
Description : Thumbnail View Extension
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\THUMBVW.DLL
CLSID : {1AEB1360-5AFC-11d0-B806-00C04FD706EC}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .tif, .eps, .pcx, .wpg, .emf, .cdr, .cgm, .drw, .dfx, .pcd, .pct, .tga
File Attributes : A
File Size : 232,432
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Offline Pages Cleaner
Disabled : No
Type : Disk Cleanup Handler
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {8E6E6079-0CB7-11d2-8F10-0000F87ABD16}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : OLE Docfile Property Page
Disabled : No
Type : Property Sheet
Description : OLE DocFile Property Page
Version : 5.00.1897.1
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\docprop.dll
CLSID : {3EA48300-8CF6-101B-84FB-666CCB9BCD32}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : *
File Attributes : A
File Size : 73,728
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : PostAgent
Disabled : No
Type : System
Description : Web Site Monitor
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\WEBCHECK.DLL
CLSID : {D8BD2030-6FC9-11D0-864F-00AA006809D9}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 274,704
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Recycle Bin
Disabled : No
Type : Shell Folder
Description : Windows Shell Common Dll
Version : 4.72.3612.1700
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : Yes
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shell32.dll
CLSID : {645FF040-5081-101B-9F08-00AA002F954E}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 1,400,832
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Recycle Bin Cleaner
Disabled : No
Type : Disk Cleanup Handler
Description : Windows Shell Common Dll
Version : 4.72.3612.1700
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHELL32.DLL
CLSID : {5ef4af3a-f726-11d0-b8a2-00c04fc309a4}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 1,400,832
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Registry Tree Options Utility
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {AF4F6510-F982-11d0-8595-00AA004CD6D8}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Scheduled Tasks
Disabled : No
Type : Shell Folder
Description : Task Scheduler interface DLL
Version : 4.71.1955.1
Product Name : Microsoft® Windows® Task Scheduler
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : Yes
Filename : C:\WINDOWS\SYSTEM\mstask.dll
CLSID : {D6277990-4C6A-11CF-8D87-00AA0060F5BF}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 245,760
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Scheduling UI icon handler
Disabled : No
Type : Icon Handler
Description : Task Scheduler interface DLL
Version : 4.71.1955.1
Product Name : Microsoft® Windows® Task Scheduler
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\mstask.dll
CLSID : {DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .Job, JobObject
File Attributes : A
File Size : 245,760
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Scheduling UI property sheet handler
Disabled : No
Type : Property Sheet
Description : Task Scheduler interface DLL
Version : 4.71.1955.1
Product Name : Microsoft® Windows® Task Scheduler
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\mstask.dll
CLSID : {797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .Job, JobObject
File Attributes : A
File Size : 245,760
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Shell Automation Folder View
Disabled : No
Type : System
Description : Shell Doc Object and Control Library - IE 4.01 compat
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOC401.DLL
CLSID : {62112AA1-EBE4-11cf-A5FB-0020AFE7292D}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 504,080
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Shell Automation Inproc Service
Disabled : No
Type : System
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {0A89A860-D7B1-11CE-8350-444553540000}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Shell Automation Service
Disabled : No
Type : System
Description : Shell Doc Object and Control Library - IE 4.01 compat
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOC401.DLL
CLSID : {13709620-C279-11CE-A49E-444553540000}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 504,080
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Shell Band Site Menu
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {ECD4FC4E-521C-11D0-B792-00A0C90312E1}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Shell Copy Hook
Disabled : No
Type : Copy Hook Handler
Description : Windows Shell Common Dll
Version : 4.72.3612.1700
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shell32.dll
CLSID : {217FC9C0-3AEA-1069-A2DB-08002B30309D}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : Directory
File Attributes : A
File Size : 1,400,832
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Shell DeskBar
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {ECD4FC4C-521C-11D0-B792-00A0C90312E1}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Shell DeskBarApp
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {3CCF8A41-5C85-11d0-9796-00AA00B90ADF}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Shell DocObject Viewer
Disabled : No
Type : Shell Folder
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {E7E4BC40-E76A-11CE-A9BB-00AA004AE837}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Shell extensions for Windows Scripting Host
Disabled : No
Type : System
Description : Shell Extension Windows Scripting Host WIndows
Version : 5.0.531.7
Product Name : Shell Extension for Microsoft Windows Scripting Host
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\WSHEXT.DLL
CLSID : {60254CA5-953B-11CF-8C96-00AA00B8708C}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 73,728
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Shell Rebar BandSite
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {ECD4FC4D-521C-11D0-B792-00A0C90312E1}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Shell Scrap DataHandler
Disabled : No
Type : Data Handler
Description : Shell scrap object handler
Version : 4.00.950
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shscrap.dll
CLSID : {56117100-C0CD-101B-81E2-00AA004AE837}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .shb, DocShortcut, .shs, ShellScrap
File Attributes : A
File Size : 45,056
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Shortcut
Disabled : No
Type : Icon Handler
Description : Windows Shell Common Dll
Version : 4.72.3612.1700
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shell32.dll
CLSID : {00021401-0000-0000-C000-000000000046}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .lnk, lnkfile, .pif, piffile
File Attributes : A
File Size : 1,400,832
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Shortcut
Disabled : No
Type : Drop Handler
Description : Windows Shell Common Dll
Version : 4.72.3612.1700
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shell32.dll
CLSID : {00021401-0000-0000-C000-000000000046}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .lnk, lnkfile
File Attributes : A
File Size : 1,400,832
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Shortcut
Disabled : No
Type : Context Menu
Description : Windows Shell Common Dll
Version : 4.72.3612.1700
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shell32.dll
CLSID : {00021401-0000-0000-C000-000000000046}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .lnk, lnkfile
File Attributes : A
File Size : 1,400,832
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : SlowFile Icon Overlay
Disabled : No
Type : Icon Overlay Handler
Description : Windows Shell Common Dll
Version : 4.72.3612.1700
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHELL32.DLL
CLSID : {7D688A77-C613-11D0-999B-00C04FD655E1}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 1,400,832
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Start Menu
Disabled : No
Type : System
Description : Shell Doc Object and Control Library - IE 4.01 compat
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOC401.DLL
CLSID : {4622AD11-FF23-11d0-8D34-00A0C90F2719}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 504,080
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Subscription Folder
Disabled : No
Type : Shell Folder
Description : Web Site Monitor
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\WEBCHECK.DLL
CLSID : {F5175861-2688-11d0-9C5E-00AA00A45957}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 274,704
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Subscription Mgr
Disabled : No
Type : System
Description : Web Site Monitor
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\WEBCHECK.DLL
CLSID : {ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 274,704
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Summary Info Thumbnail handler (DOCFILES)
Disabled : No
Type : Thumbnail
Description : Thumbnail View Extension
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\THUMBVW.DLL
CLSID : {9DBD2C50-62AD-11d0-B806-00C04FD706EC}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .doc, .ppt, .xls, .DOT, .XLT, .POT, .obd, .obt, .mic, .mix, .fpx, .mpp
File Attributes : A
File Size : 232,432
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : System Data Driven Cleaner
Disabled : No
Type : Disk Cleanup Handler
Description : Disk Space Cleanup Manager for Windows
Version : 4.10.2222
Product Name : Microsoft(R) Windows(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\DATACLEN.DLL
CLSID : {C0E13E61-0CC6-11d1-BBB6-0060978B2AE6}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 69,632
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Temporary Internet Files
Disabled : No
Type : Shell Folder
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {7BD29E00-76C1-11CF-9DD0-00A0C9034933}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Temporary Internet Files Cleaner
Disabled : No
Type : Disk Cleanup Handler
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {9B0EFD60-F7B0-11D0-BAEF-00C04FC308C9}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : The Internet
Disabled : No
Type : System
Description : Shell Doc Object and Control Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\SHDOCVW.DLL
CLSID : {3DC7A020-0ACD-11CF-A9BB-00AA004AE837}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 946,448
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Thumbnail Image
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {7487cd30-f71a-11d0-9ea7-00805f714772}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Thumbnails
Disabled : No
Type : System
Description : Thumbnail View Extension
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\THUMBVW.DLL
CLSID : {8BEBB290-52D0-11D0-B7F4-00C04FD706EC}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 232,432
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Tracking Shell Menu
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {8278F931-2A3E-11d2-838F-00C04FD918D0}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : TrayAgent
Disabled : No
Type : System
Description : Web Site Monitor
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\WEBCHECK.DLL
CLSID : {E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 274,704
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : TridentImageExtractor
Disabled : No
Type : Thumbnail
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {7376D660-C583-11d0-A3A5-00C04FD706EC}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions : .tiff, .bmp, .gif, .jpeg, .jpg, .jpe, .jfif, .png, .wmf, .art, .dib
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : URL Exec Hook
Disabled : No
Type : ShellExecute Hook
Description : Windows Shell Common Dll
Version : 4.72.3612.1700
Product Name : Microsoft(R) Windows NT(R) Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\shell32.dll
CLSID : {AEB6717E-7E19-11d0-97EE-00C04FD91972}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 1,400,832
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : User Assist
Disabled : No
Type : System
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {DD313E04-FEFF-11d1-8ECD-0000F87A470C}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Web Folders
Disabled : No
Type : Shell Folder
Description : Microsoft Office Name Space Extension
Version : 9.0.2612
Product Name : Microsoft Office
Company : Microsoft Corporation
My Computer : Yes
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\PROGRA~1\COMMON~1\MICROS~1\Web Folders\MSONSEXT.DLL
CLSID : {BDEADF00-C265-11d0-BCED-00A0C90AB50F}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 532,537
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Web Search
Disabled : No
Type : Search Handler
Description : Shell Browser UI Library
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
CLSID : {07798131-AF23-11d1-9111-00A0C98BA67D}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 803,088
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : WebCheck
Disabled : No
Type : System
Description : Web Site Monitor
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\WEBCHECK.DLL
CLSID : {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 274,704
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : WebCheck SyncMgr Handler
Disabled : No
Type : System
Description : Web Site Monitor
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\WEBCHECK.DLL
CLSID : {7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 274,704
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : WebCheckChannelAgent
Disabled : No
Type : System
Description : Web Site Monitor
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\WEBCHECK.DLL
CLSID : {E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 274,704
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : WebCheckWebCrawler
Disabled : No
Type : System
Description : Web Site Monitor
Version : 5.00.2614.3500
Product Name : Microsoft(R) Windows (R) 2000 Operating System
Company : Microsoft Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\WEBCHECK.DLL
CLSID : {08165EA0-E946-11CF-9C87-00AA005127ED}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : Yes
File Extensions :
File Attributes : A
File Size : 274,704
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

OS: Windows 98 SE
CPU: Slot 1 Pentium III Coppermine 933MHz (SL448)
RAM: Kingston 256MB 133MHz
GPU: Nvidia 16MB Riva TNT/128MB Geforce 4 Ti 4200
Motherboard: ABit AB-BE6-II Intel 440BX
HDD: C, D - IDE 1, CD-ROM - IDE 2, E - IDE 3

Reply 42 of 93, by asdf53

Posted on 2025-11-07, 02:03

asdf53 Offline

Rank Member

Rank: Member
Posts: 385
Joined: 2019-12-09, 17:57

ShellExView has "Hide all Microsoft Extensions" in the Options menu, that would tidy things up. You could then load each of those DLL files into Dependency Walker, see in the left pane if they use "shell32.dll", then click on the shell32.dll import and see if "ShellExecuteEx" appears in the upper pane.

If no results, then use the "last accessed" search method outlined above to look for third-party DLL files that had recently been accessed, and analyze them in the same way. A DLL being in C:\Windows\System can also be third-party, some installers simply drop their DLL files in the System folder, so what I said before wasn't quite correct.

Reply 43 of 93, by DustyShinigami

Posted on 2025-11-07, 21:44

DustyShinigami Offline

Rank Oldbie

Rank: Oldbie
Posts: 1480
Joined: 2024-10-10, 18:52
Location: UK

asdf53 wrote on 2025-11-07, 02:03:

ShellExView has "Hide all Microsoft Extensions" in the Options menu, that would tidy things up. You could then load each of those DLL files into Dependency Walker, see in the left pane if they use "shell32.dll", then click on the shell32.dll import and see if "ShellExecuteEx" appears in the upper pane.

If no results, then use the "last accessed" search method outlined above to look for third-party DLL files that had recently been accessed, and analyze them in the same way. A DLL being in C:\Windows\System can also be third-party, some installers simply drop their DLL files in the System folder, so what I said before wasn't quite correct.

Well, hiding all Microsoft Extensions really narrows the list down.

================================================== Extension Name : 7-Zip Shell Extension Disabled : No Type […]
Show full quote
==================================================
Extension Name : 7-Zip Shell Extension
Disabled : No
Type : Drag & Drop Handler
Description : 7-Zip Shell Extension
Version : 4.65
Product Name : 7-Zip
Company : Igor Pavlov
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\Program Files\7-Zip\7-zip.dll
CLSID : {23170F69-40C1-278A-1000-000100020000}
File Created Time : 03/02/09 07:09:46
CLSID Modified Time: N / A
Microsoft : No
File Extensions : Drive, Directory
File Attributes : A
File Size : 69,632
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : 7-Zip Shell Extension
Disabled : No
Type : Context Menu
Description : 7-Zip Shell Extension
Version : 4.65
Product Name : 7-Zip
Company : Igor Pavlov
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\Program Files\7-Zip\7-zip.dll
CLSID : {23170F69-40C1-278A-1000-000100020000}
File Created Time : 03/02/09 07:09:46
CLSID Modified Time: N / A
Microsoft : No
File Extensions : Directory, *
File Attributes : A
File Size : 69,632
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : AlcoholShellEx
Disabled : No
Type : Context Menu
Description : AXShlEx.dll
Version : 1.4.9.1024
Product Name : Alcohol ShellEx
Company : Alcohol Soft Development Team
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\PROGRA~1\ALCOHO~1\ALCOHO~1\AXSHLEX.DLL
CLSID : {32020A01-506E-484D-A2A8-BE3CF17601C3}
File Created Time : 07/09/22 01:30:26
CLSID Modified Time: N / A
Microsoft : No
File Extensions : Drive, AlcoholImageFile, .mds, .mdf
File Attributes : A
File Size : 749,056
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : AlcoholShellEx
Disabled : No
Type : Icon Handler
Description : AXShlEx.dll
Version : 1.4.9.1024
Product Name : Alcohol ShellEx
Company : Alcohol Soft Development Team
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\PROGRA~1\ALCOHO~1\ALCOHO~1\AXSHLEX.DLL
CLSID : {32020A01-506E-484D-A2A8-BE3CF17601C3}
File Created Time : 07/09/22 01:30:26
CLSID Modified Time: N / A
Microsoft : No
File Extensions : AlcoholImageFile, .mds, .mdf
File Attributes : A
File Size : 749,056
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Desktop Explorer
Disabled : No
Type : Shell Folder
Description : NVIDIA Desktop Explorer, Version 31.40
Version : 4.13.01.3140
Product Name : NVIDIA Desktop Explorer, Version 31.40
Company : NVIDIA Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\NVSHELL.DLL
CLSID : {1CDB2949-8F65-4355-8456-263E7C208A5D}
File Created Time : 04/11/25 17:42:39
CLSID Modified Time: N / A
Microsoft : No
File Extensions :
File Attributes :
File Size : 282,694
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Desktop Explorer Menu
Disabled : No
Type : System
Description : NVIDIA Desktop Explorer, Version 31.40
Version : 4.13.01.3140
Product Name : NVIDIA Desktop Explorer, Version 31.40
Company : NVIDIA Corporation
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\NVSHELL.DLL
CLSID : {1E9B04FB-F9E5-4718-997B-B8DA88302A47}
File Created Time : 04/11/25 17:42:39
CLSID Modified Time: N / A
Microsoft : No
File Extensions :
File Attributes :
File Size : 282,694
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

==================================================
Extension Name : Disk Tools Extension
Disabled : No
Type : Property Sheet
Description :
Version :
Product Name :
Company :
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\disktool.dll
CLSID : {D3B1DE00-6B94-1069-8754-08002B2BD64F}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : No
File Extensions : Drive
File Attributes :
File Size : 0
.NET Extension : No
Digital Signature :
Missing File : Yes
==================================================

==================================================
Extension Name : Kodak Image Shell Extension
Disabled : No
Type : Property Sheet
Description : Image Shell Extension
Version : 4.10.2000
Product Name : Imaging for Windows®
Company : Eastman Software, Inc., A Kodak Business
My Computer : No
Desktop : No
Control Panel : No
My Network Places : No
Entire Network : No
Remote Computer : No
Filename : C:\WINDOWS\SYSTEM\imgshl.dll
CLSID : {1D3ECD40-C835-11CE-9888-00608CC22020}
File Created Time : N / A
CLSID Modified Time: N / A
Microsoft : No
File Extensions : .tiff, .tif, .pcx, .dcx, .awd, .xif, .wif
File Attributes : A
File Size : 32,768
.NET Extension : No
Digital Signature :
Missing File : No
==================================================

I've searched their .DLLs in Dependency Walker, but I've not found any that use ShellExecuteEx. Some use Shell32, but I couldn't see ShellExecuteEx. I've saved the results anyway. One I couldn't find the DLL for is disktool.dll in Windows\System.

These are the Dependency Walker files I saved:

https://www.dropbox.com/scl/fi/j7m2ddo2ulx7r9 … t=d96i0yvc&dl=0
https://www.dropbox.com/scl/fi/c6n6t25cqblbla … t=fqjqx4k5&dl=0
https://www.dropbox.com/scl/fi/1bogsygl60hc90 … t=541kkw18&dl=0
https://www.dropbox.com/scl/fi/z7k3kbghh06xmg … t=2n85atlg&dl=0

OS: Windows 98 SE
CPU: Slot 1 Pentium III Coppermine 933MHz (SL448)
RAM: Kingston 256MB 133MHz
GPU: Nvidia 16MB Riva TNT/128MB Geforce 4 Ti 4200
Motherboard: ABit AB-BE6-II Intel 440BX
HDD: C, D - IDE 1, CD-ROM - IDE 2, E - IDE 3

Reply 44 of 93, by DustyShinigami

Posted on 2025-11-09, 17:11

DustyShinigami Offline

Rank Oldbie

Rank: Oldbie
Posts: 1480
Joined: 2024-10-10, 18:52
Location: UK

Checked in Find FIles and Folders using the suggestions given, and despite results coming up with different and incorrect dates, such as 1999, 2003, 2005 etc, only 3 come up from 2025 and they weren't from a few days ago (the 7th). And those are all in C:\Windows\System. They are Commdlg.dll, Shell.dll, and Commctrl.dll. There's Alcohol 120% allegedly from 2022 called AxShlEx.dll.

OS: Windows 98 SE
CPU: Slot 1 Pentium III Coppermine 933MHz (SL448)
RAM: Kingston 256MB 133MHz
GPU: Nvidia 16MB Riva TNT/128MB Geforce 4 Ti 4200
Motherboard: ABit AB-BE6-II Intel 440BX
HDD: C, D - IDE 1, CD-ROM - IDE 2, E - IDE 3

Reply 45 of 93, by asdf53

Posted on 2025-11-09, 18:57

asdf53 Offline

Rank Member

Rank: Member
Posts: 385
Joined: 2019-12-09, 17:57

DustyShinigami wrote on 2025-11-09, 17:11:

Checked in Find FIles and Folders using the suggestions given, and despite results coming up with different and incorrect dates, such as 1999, 2003, 2005 etc, only 3 come up from 2025 and they weren't from a few days ago (the 7th). And those are all in C:\Windows\System. They are Commdlg.dll, Shell.dll, and Commctrl.dll. There's Alcohol 120% allegedly from 2022 called AxShlEx.dll.

It's a bit confusing because if you search for last accessed files, the results do not actually show the last accessed date column, only the last modified date. These are the "incorrect" dates you're seeing. You can verify this by right-clicking one of the "old" files and select properties, there you'll see the last accessed date. The idea is to only examine last accessed files because if a DLL was never loaded during the last day, it would have been unable to cause your error.

If that leads to nothing, there's another thing you could try: Load explorer.exe into a debugger and set a breakpoint at ShellExecuteEx, and when it's called, it will stop and let you examine the call stack, which hopefully gives a clue about where that call comes from. I just tried this, but I couldn't figure out how to only stop when the executable name is "xit". To resolve the executable name, you have to poke around in memory, and explorer.exe doesn't seem to like that at all, it crashes every time. Give me some time to see if I can figure this out and I'll report back.

Reply 46 of 93, by asdf53

Posted on 2025-11-09, 20:22

asdf53 Offline

Rank Member

Rank: Member
Posts: 385
Joined: 2019-12-09, 17:57

Okay, here's how it works:

- Download OllyDbg 1.10 from https://www.ollydbg.de/
- Run OllyDbg, File->Attach, select the EXPLORER process (make sure you have no Explorer or "My Computer" windows open until this point - you want the base explorer process). Memory view should appear. If nothing happens, click the maximize/restore window button of the OllyDbg window.
- Select View->Executable Modules, double click shell32.dll
- Press CTRL+N and select Export:ShellExecuteExA from the list (it's at 90% of the way down), right click->Conditional Breakpoint, input [EAX+10] == "xit" as the condition
- Press F9 or the play button to continue execution
- Back in Windows, test if the breakpoint works: Start>Run..., enter "xit". OllyDbg window should pop up. Press play again to continue.
- Wait until the "xit" error comes up on its own, OllyDbg should pop up again, select View>Call Stack, post a screenshot of the output.

Reply 47 of 93, by DustyShinigami

Posted on 2025-11-09, 22:35

DustyShinigami Offline

Rank Oldbie

Rank: Oldbie
Posts: 1480
Joined: 2024-10-10, 18:52
Location: UK

asdf53 wrote on 2025-11-09, 20:22:
Okay, here's how it works: […]
Show full quote

Okay, here's how it works:

- Download OllyDbg 1.10 from https://www.ollydbg.de/
- Run OllyDbg, File->Attach, select the EXPLORER process (make sure you have no Explorer or "My Computer" windows open until this point - you want the base explorer process). Memory view should appear. If nothing happens, click the maximize/restore window button of the OllyDbg window.
- Select View->Executable Modules, double click shell32.dll
- Press CTRL+N and select Export:ShellExecuteExA from the list (it's at 90% of the way down), right click->Conditional Breakpoint, input [EAX+10] == "xit" as the condition
- Press F9 or the play button to continue execution
- Back in Windows, test if the breakpoint works: Start>Run..., enter "xit". OllyDbg window should pop up. Press play again to continue.
- Wait until the "xit" error comes up on its own, OllyDbg should pop up again, select View>Call Stack, post a screenshot of the output.

Great, thanks. 😁 I'll prep this in a bit and post the results once I've got them. 😀

OS: Windows 98 SE
CPU: Slot 1 Pentium III Coppermine 933MHz (SL448)
RAM: Kingston 256MB 133MHz
GPU: Nvidia 16MB Riva TNT/128MB Geforce 4 Ti 4200
Motherboard: ABit AB-BE6-II Intel 440BX
HDD: C, D - IDE 1, CD-ROM - IDE 2, E - IDE 3

Reply 48 of 93, by DustyShinigami

Posted on 2025-11-09, 23:34

DustyShinigami Offline

Rank Oldbie

Rank: Oldbie
Posts: 1480
Joined: 2024-10-10, 18:52
Location: UK

asdf53 wrote on 2025-11-09, 20:22:
Okay, here's how it works: […]
Show full quote

Okay, here's how it works:

- Download OllyDbg 1.10 from https://www.ollydbg.de/
- Run OllyDbg, File->Attach, select the EXPLORER process (make sure you have no Explorer or "My Computer" windows open until this point - you want the base explorer process). Memory view should appear. If nothing happens, click the maximize/restore window button of the OllyDbg window.
- Select View->Executable Modules, double click shell32.dll
- Press CTRL+N and select Export:ShellExecuteExA from the list (it's at 90% of the way down), right click->Conditional Breakpoint, input [EAX+10] == "xit" as the condition
- Press F9 or the play button to continue execution
- Back in Windows, test if the breakpoint works: Start>Run..., enter "xit". OllyDbg window should pop up. Press play again to continue.
- Wait until the "xit" error comes up on its own, OllyDbg should pop up again, select View>Call Stack, post a screenshot of the output.

Just having a hard time finding Export:ShellExecuteExa. I even tried Find and typing it in, but it doesn't recognise it.

OS: Windows 98 SE
CPU: Slot 1 Pentium III Coppermine 933MHz (SL448)
RAM: Kingston 256MB 133MHz
GPU: Nvidia 16MB Riva TNT/128MB Geforce 4 Ti 4200
Motherboard: ABit AB-BE6-II Intel 440BX
HDD: C, D - IDE 1, CD-ROM - IDE 2, E - IDE 3

Reply 49 of 93, by asdf53

Posted on 2025-11-10, 04:09

asdf53 Offline

Rank Member

Rank: Member
Posts: 385
Joined: 2019-12-09, 17:57

Something else first: To prevent the system from freezing on opening "My computer" and Explorer windows, In OllyDbg, select Options>Debugging options>Exceptions and check "Memory access violation" in the "ignore exceptions" list. You need to do this before setting up the breakpoint.

DustyShinigami wrote on 2025-11-09, 23:34:

Just having a hard time finding Export:ShellExecuteExa. I even tried Find and typing it in, but it doesn't recognise it.

At that point, it's showing a window titled "Names in SHELL32" with a long list of stuff, right? Look for the function that has "ShellExecuteExA" in the Name column. This is an exported function, but its name does not actually begin with "Export", so the way I wrote it was misleading. The list is ordered by name, so "S" appears at 90% of the way down.

There's another gotcha I should have mentioned: Since OllyDbg hooks into the main Explorer process, it will freeze the system UI (desktop, taskbar) once the breakpoint hits. This is to be expected, OllyDbg literally stops explorer from working until you click the resume button. Because Explorer also controls the taskbar, this means that you need the OllyDbg window to be open and visible at all times, because you won't be able to click the taskbar to bring it up. Never minimize the window and you should be good.

Reply 50 of 93, by DustyShinigami

Posted on 2025-11-10, 08:44

DustyShinigami Offline

Rank Oldbie

Rank: Oldbie
Posts: 1480
Joined: 2024-10-10, 18:52
Location: UK

asdf53 wrote on 2025-11-10, 04:09:
Something else first: To prevent the system from freezing on opening "My computer" and Explorer windows, In OllyDbg, select Opti […]
Show full quote

Something else first: To prevent the system from freezing on opening "My computer" and Explorer windows, In OllyDbg, select Options>Debugging options>Exceptions and check "Memory access violation" in the "ignore exceptions" list. You need to do this before setting up the breakpoint.

DustyShinigami wrote on 2025-11-09, 23:34:

Just having a hard time finding Export:ShellExecuteExa. I even tried Find and typing it in, but it doesn't recognise it.

At that point, it's showing a window titled "Names in SHELL32" with a long list of stuff, right? Look for the function that has "ShellExecuteExA" in the Name column. This is an exported function, but its name does not actually begin with "Export", so the way I wrote it was misleading. The list is ordered by name, so "S" appears at 90% of the way down.

There's another gotcha I should have mentioned: Since OllyDbg hooks into the main Explorer process, it will freeze the system UI (desktop, taskbar) once the breakpoint hits. This is to be expected, OllyDbg literally stops explorer from working until you click the resume button. Because Explorer also controls the taskbar, this means that you need the OllyDbg window to be open and visible at all times, because you won't be able to click the taskbar to bring it up. Never minimize the window and you should be good.

I’ve not had a freeze at those points, I don’t think, but I have had a blank desktop if I try to close the program down. All my icons and the taskbar disappear and I’m not able to do anything. I’ve had to force shutdown or reset.

Also, I don’t recall the list of items in Shell32 being in alphabetical order; they were mixed, so that’s made it even harder to pinpoint. 😬

OS: Windows 98 SE
CPU: Slot 1 Pentium III Coppermine 933MHz (SL448)
RAM: Kingston 256MB 133MHz
GPU: Nvidia 16MB Riva TNT/128MB Geforce 4 Ti 4200
Motherboard: ABit AB-BE6-II Intel 440BX
HDD: C, D - IDE 1, CD-ROM - IDE 2, E - IDE 3

Reply 51 of 93, by asdf53

Posted on 2025-11-10, 08:54

asdf53 Offline

Rank Member

Rank: Member
Posts: 385
Joined: 2019-12-09, 17:57

DustyShinigami wrote on 2025-11-10, 08:44:

I’ve not had a freeze at those points, I don’t think, but I have had a blank desktop if I try to close the program down. All my icons and the taskbar disappear and I’m not able to do anything. I’ve had to force shutdown or reset.

Also, I don’t recall the list of items in Shell32 being in alphabetical order; they were mixed, so that’s made it even harder to pinpoint. 😬

That happens when you close the debugger while explorer.exe is still paused. A yellow "paused" indicator will show at the bottom right of OllyDbg. Pausing happens on a breakpoint hit or on access violations. Before closing OllyDbg, you need to make sure it's not currently paused. Click the resume (play) button in the toolbar (and make sure it's not going into pause again after that). This is also why you need to set it to ignore the access violation exceptions, because it can generate hundreds at one point, and you would need to be clicking resume all day long.

And again, if it's pausing for whatever reason while you don't have the OllyDbg window on screen, you are stuck, because you can't unpause it. So never minimize the window.

The list should be ordered by name by default, the names can have gray prefixes but these are ignored for sorting, this is why it might not appear sorted. If you ignore the gray prefixes, it should be ordered from A to Z. If it still isn't, right-click the list and select "Sort by>Name".

Something else, are you on Windows 98? If using Windows 2000 or later, you might have to use ShellExecuteExW instead of A. You can test which one it will respond to by setting the conditional breakpoint on it and then Start>Run... "xit". Or simply set the conditional breakpoint on both the W and A function.

Reply 52 of 93, by DustyShinigami

Posted on 2025-11-10, 11:36

DustyShinigami Offline

Rank Oldbie

Rank: Oldbie
Posts: 1480
Joined: 2024-10-10, 18:52
Location: UK

asdf53 wrote on 2025-11-10, 08:54:
That happens when you close the debugger while explorer.exe is still paused. A yellow "paused" indicator will show at the bottom […]
Show full quote

DustyShinigami wrote on 2025-11-10, 08:44:

I’ve not had a freeze at those points, I don’t think, but I have had a blank desktop if I try to close the program down. All my icons and the taskbar disappear and I’m not able to do anything. I’ve had to force shutdown or reset.

Also, I don’t recall the list of items in Shell32 being in alphabetical order; they were mixed, so that’s made it even harder to pinpoint. 😬

That happens when you close the debugger while explorer.exe is still paused. A yellow "paused" indicator will show at the bottom right of OllyDbg. Pausing happens on a breakpoint hit or on access violations. Before closing OllyDbg, you need to make sure it's not currently paused. Click the resume (play) button in the toolbar (and make sure it's not going into pause again after that). This is also why you need to set it to ignore the access violation exceptions, because it can generate hundreds at one point, and you would need to be clicking resume all day long.

And again, if it's pausing for whatever reason while you don't have the OllyDbg window on screen, you are stuck, because you can't unpause it. So never minimize the window.

The list should be ordered by name by default, the names can have gray prefixes but these are ignored for sorting, this is why it might not appear sorted. If you ignore the gray prefixes, it should be ordered from A to Z. If it still isn't, right-click the list and select "Sort by>Name".

Something else, are you on Windows 98? If using Windows 2000 or later, you might have to use ShellExecuteExW instead of A. You can test which one it will respond to by setting the conditional breakpoint on it and then Start>Run... "xit". Or simply set the conditional breakpoint on both the W and A function.

Ahh, I see. Gotcha. I’ll have a play around with it and see once I’m back from work. 🙂 And yeah, Windows 98.

OS: Windows 98 SE
CPU: Slot 1 Pentium III Coppermine 933MHz (SL448)
RAM: Kingston 256MB 133MHz
GPU: Nvidia 16MB Riva TNT/128MB Geforce 4 Ti 4200
Motherboard: ABit AB-BE6-II Intel 440BX
HDD: C, D - IDE 1, CD-ROM - IDE 2, E - IDE 3

Reply 53 of 93, by DustyShinigami

Posted on 2025-11-10, 13:35

DustyShinigami Offline

Rank Oldbie

Rank: Oldbie
Posts: 1480
Joined: 2024-10-10, 18:52
Location: UK

With that Filemon, I can't seem to have multiple filters. At least, not when I last checked. It says to separate them with ',', which I have done, but it hasn't come up with anything to do with Sound Blaster or Creative alongside 'xit'. I still don't know why the audio cuts out at random if I have the Sound Blaster set as the primary audio device. Not sure if it's a bug with the WDM drivers. Hopefully when I put the modified vxd drivers on, it'll stop.

Also tried adding '*' at the beginning of each word.

EDIT: Ahh, that's why. I misread it. It's semicolon, not comma. ^^

OS: Windows 98 SE
CPU: Slot 1 Pentium III Coppermine 933MHz (SL448)
RAM: Kingston 256MB 133MHz
GPU: Nvidia 16MB Riva TNT/128MB Geforce 4 Ti 4200
Motherboard: ABit AB-BE6-II Intel 440BX
HDD: C, D - IDE 1, CD-ROM - IDE 2, E - IDE 3

Reply 54 of 93, by DustyShinigami

Posted on 2025-11-10, 14:06

DustyShinigami Offline

Rank Oldbie

Rank: Oldbie
Posts: 1480
Joined: 2024-10-10, 18:52
Location: UK

asdf53 wrote on 2025-11-10, 08:54:
That happens when you close the debugger while explorer.exe is still paused. A yellow "paused" indicator will show at the bottom […]
Show full quote

DustyShinigami wrote on 2025-11-10, 08:44:

I’ve not had a freeze at those points, I don’t think, but I have had a blank desktop if I try to close the program down. All my icons and the taskbar disappear and I’m not able to do anything. I’ve had to force shutdown or reset.

Also, I don’t recall the list of items in Shell32 being in alphabetical order; they were mixed, so that’s made it even harder to pinpoint. 😬

That happens when you close the debugger while explorer.exe is still paused. A yellow "paused" indicator will show at the bottom right of OllyDbg. Pausing happens on a breakpoint hit or on access violations. Before closing OllyDbg, you need to make sure it's not currently paused. Click the resume (play) button in the toolbar (and make sure it's not going into pause again after that). This is also why you need to set it to ignore the access violation exceptions, because it can generate hundreds at one point, and you would need to be clicking resume all day long.

And again, if it's pausing for whatever reason while you don't have the OllyDbg window on screen, you are stuck, because you can't unpause it. So never minimize the window.

The list should be ordered by name by default, the names can have gray prefixes but these are ignored for sorting, this is why it might not appear sorted. If you ignore the gray prefixes, it should be ordered from A to Z. If it still isn't, right-click the list and select "Sort by>Name".

Something else, are you on Windows 98? If using Windows 2000 or later, you might have to use ShellExecuteExW instead of A. You can test which one it will respond to by setting the conditional breakpoint on it and then Start>Run... "xit". Or simply set the conditional breakpoint on both the W and A function.

With Sort by > Name, do you mean to do this in the CPU Main Thread window? Because right clicking there doesn't give me an option to sort by name. Or is it Memory Map I should be looking through? Or All Names? I did press Ctrl + N, but nothing happens. In All Names, it does list ExecuteExA and Execute ExW. I set a breakpoint for both of them just in case.

EDIT: Ahh, got it. Yeah, select Shell32 then Ctrl + N and it comes up with All Names. 😀

Last edited by DustyShinigami on 2025-11-10, 14:24. Edited 1 time in total.

OS: Windows 98 SE
CPU: Slot 1 Pentium III Coppermine 933MHz (SL448)
RAM: Kingston 256MB 133MHz
GPU: Nvidia 16MB Riva TNT/128MB Geforce 4 Ti 4200
Motherboard: ABit AB-BE6-II Intel 440BX
HDD: C, D - IDE 1, CD-ROM - IDE 2, E - IDE 3

Reply 55 of 93, by DustyShinigami

Posted on 2025-11-10, 14:18

DustyShinigami Offline

Rank Oldbie

Rank: Oldbie
Posts: 1480
Joined: 2024-10-10, 18:52
Location: UK

asdf53 wrote on 2025-11-10, 04:09:
There's another gotcha I should have mentioned: Since OllyDbg hooks into the main Explorer process, it will freeze the system UI (desktop, taskbar) once the breakpoint hits. This is to be expected, OllyDbg literally stops explorer from working until you click the resume button. Because Explorer also controls the taskbar, this means that you need the OllyDbg window to be open and visible at all times, because you won't be able to click the taskbar to bring it up. Never minimize the window and you should be good.

Once the testing is done, what's the best way of disabling/closing the program? Because if I try and close all windows, even with it running, it causes the desktop to disappear.

OS: Windows 98 SE
CPU: Slot 1 Pentium III Coppermine 933MHz (SL448)
RAM: Kingston 256MB 133MHz
GPU: Nvidia 16MB Riva TNT/128MB Geforce 4 Ti 4200
Motherboard: ABit AB-BE6-II Intel 440BX
HDD: C, D - IDE 1, CD-ROM - IDE 2, E - IDE 3

Reply 56 of 93, by DustyShinigami

Posted on 2025-11-10, 14:27

DustyShinigami Offline

Rank Oldbie

Rank: Oldbie
Posts: 1480
Joined: 2024-10-10, 18:52
Location: UK

asdf53 wrote on 2025-11-09, 20:22:
Okay, here's how it works: […]
Show full quote

Okay, here's how it works:

- Download OllyDbg 1.10 from https://www.ollydbg.de/
- Run OllyDbg, File->Attach, select the EXPLORER process (make sure you have no Explorer or "My Computer" windows open until this point - you want the base explorer process). Memory view should appear. If nothing happens, click the maximize/restore window button of the OllyDbg window.
- Select View->Executable Modules, double click shell32.dll
- Press CTRL+N and select Export:ShellExecuteExA from the list (it's at 90% of the way down), right click->Conditional Breakpoint, input [EAX+10] == "xit" as the condition
- Press F9 or the play button to continue execution
- Back in Windows, test if the breakpoint works: Start>Run..., enter "xit". OllyDbg window should pop up. Press play again to continue.
- Wait until the "xit" error comes up on its own, OllyDbg should pop up again, select View>Call Stack, post a screenshot of the output.

Okay, the OllyDbg window is already open as I don't know how best to close it without everything freezing. ^^; But typing "xit" under Start > Run brings the error back up again. The things highlighted are as follows:

In CPU - Push EBX
In Memory - PE header

OS: Windows 98 SE
CPU: Slot 1 Pentium III Coppermine 933MHz (SL448)
RAM: Kingston 256MB 133MHz
GPU: Nvidia 16MB Riva TNT/128MB Geforce 4 Ti 4200
Motherboard: ABit AB-BE6-II Intel 440BX
HDD: C, D - IDE 1, CD-ROM - IDE 2, E - IDE 3

Reply 57 of 93, by asdf53

Posted on 2025-11-10, 15:23

asdf53 Offline

Rank Member

Rank: Member
Posts: 385
Joined: 2019-12-09, 17:57

DustyShinigami wrote on 2025-11-10, 14:27:

Okay, the OllyDbg window is already open as I don't know how best to close it without everything freezing. ^^; But typing "xit" under Start > Run brings the error back up again. The things highlighted are as follows:

In CPU - Push EBX
In Memory - PE header

It should never freeze when you close or minimize it unless "xit" is triggered. Double check that you have Options>Debugging options>Exceptions>Memory Access violation checked.

It's probably clearer if I summarize the steps again. Attach explorer.exe in OllyDbg, Explorer is paused. Set up the breakpoint at ShellExecuteExA. Click resume in OllyDbg. Keep OllyDbg maximized. System should never freeze at this point unless the breakpoint hits (xit is called), and you should be doing other stuff while waiting for the error to appear. To test if the breakpoint works: Start>Run...>"xit", OllyDbg pauses explorer.exe and shows "Conditional breakpoint at SHELL32.ShellExecuteExA" in the status bar. At this point, keep it paused, and select View>Call Stack, and post the screenshot here (when the actual error appears of course). Then click "resume" in OllyDbg.

Reply 58 of 93, by DustyShinigami

Posted on 2025-11-10, 17:45

DustyShinigami Offline

Rank Oldbie

Rank: Oldbie
Posts: 1480
Joined: 2024-10-10, 18:52
Location: UK

asdf53 wrote on 2025-11-10, 15:23:

DustyShinigami wrote on 2025-11-10, 14:27:

Okay, the OllyDbg window is already open as I don't know how best to close it without everything freezing. ^^; But typing "xit" under Start > Run brings the error back up again. The things highlighted are as follows:

In CPU - Push EBX
In Memory - PE header

It should never freeze when you close or minimize it unless "xit" is triggered. Double check that you have Options>Debugging options>Exceptions>Memory Access violation checked.

It's probably clearer if I summarize the steps again. Attach explorer.exe in OllyDbg, Explorer is paused. Set up the breakpoint at ShellExecuteExA. Click resume in OllyDbg. Keep OllyDbg maximized. System should never freeze at this point unless the breakpoint hits (xit is called), and you should be doing other stuff while waiting for the error to appear. To test if the breakpoint works: Start>Run...>"xit", OllyDbg pauses explorer.exe and shows "Conditional breakpoint at SHELL32.ShellExecuteExA" in the status bar. At this point, keep it paused, and select View>Call Stack, and post the screenshot here (when the actual error appears of course). Then click "resume" in OllyDbg.

Yep, Memory Access Violation is checked. It'll let me minimise whilst it's playing, but as soon as I close, everything disappears from the desktop and I have no choice but to restart the PC. I'm guessing Explorer would need to be unloaded...? If I hit File > Exit, I get a warning about it not clearing up leftovers and if I'm sure I want to close. I imagine the same thing will happen if I accept.

The other problem is, I don't believe, if and when the error triggers on startup, that it'll trigger OllyDbg. I get the impression I have to initialise Olly first. The error never pops up at random whilst I'm using the PC. Only at random during boot. On one occasion the PC booted, Filemon listed everything to do with XIT, but despite none of the associated files to do with it being found, the error never showed.

288 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.PIF NOTFOUND GetAttributes 289 17:36:12 Explorer:FFFFB36B Attributes C […]
Show full quote
288 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.PIF NOTFOUND GetAttributes
289 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.COM NOTFOUND GetAttributes
290 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.EXE NOTFOUND GetAttributes
291 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.BAT NOTFOUND GetAttributes
292 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.LNK NOTFOUND GetAttributes
293 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.CMD NOTFOUND GetAttributes
294 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.PIF NOTFOUND GetAttributes
295 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.COM NOTFOUND GetAttributes
296 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.EXE NOTFOUND GetAttributes
297 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.BAT NOTFOUND GetAttributes
298 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.LNK NOTFOUND GetAttributes
299 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.CMD NOTFOUND GetAttributes
300 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\COMMAND\XIT.PIF NOTFOUND GetAttributes
301 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\COMMAND\XIT.COM NOTFOUND GetAttributes
302 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\COMMAND\XIT.EXE NOTFOUND GetAttributes
303 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\COMMAND\XIT.BAT NOTFOUND GetAttributes
304 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\COMMAND\XIT.LNK NOTFOUND GetAttributes
305 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\COMMAND\XIT.CMD NOTFOUND GetAttributes
306 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\DESKTOP\XIT NOTFOUND GetAttributes
307 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\SYSTEM\XIT NOTFOUND GetAttributes
308 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT NOTFOUND GetAttributes
309 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT NOTFOUND GetAttributes
310 17:36:12 Explorer:FFFFB36B Attributes C:\WINDOWS\COMMAND\XIT NOTFOUND GetAttributes
311 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\DESKTOP\XIT NOTFOUND GetAttributes
312 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\DESKTOP\XIT.PIF NOTFOUND GetAttributes
313 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\DESKTOP\XIT.COM NOTFOUND GetAttributes
314 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\DESKTOP\XIT.EXE NOTFOUND GetAttributes
315 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\DESKTOP\XIT.BAT NOTFOUND GetAttributes
316 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\DESKTOP\XIT.LNK NOTFOUND GetAttributes
317 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\DESKTOP\XIT.CMD NOTFOUND GetAttributes
318 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\SYSTEM\XIT.PIF NOTFOUND GetAttributes
319 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\SYSTEM\XIT.COM NOTFOUND GetAttributes
320 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\SYSTEM\XIT.EXE NOTFOUND GetAttributes
321 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\SYSTEM\XIT.BAT NOTFOUND GetAttributes
322 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\SYSTEM\XIT.LNK NOTFOUND GetAttributes
323 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\SYSTEM\XIT.CMD NOTFOUND GetAttributes
324 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.PIF NOTFOUND GetAttributes
325 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.COM NOTFOUND GetAttributes
326 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.EXE NOTFOUND GetAttributes
327 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.BAT NOTFOUND GetAttributes
328 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.LNK NOTFOUND GetAttributes
329 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.CMD NOTFOUND GetAttributes
330 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.PIF NOTFOUND GetAttributes
331 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.COM NOTFOUND GetAttributes
332 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.EXE NOTFOUND GetAttributes
333 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.BAT NOTFOUND GetAttributes
334 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.LNK NOTFOUND GetAttributes
335 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT.CMD NOTFOUND GetAttributes
336 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\COMMAND\XIT.PIF NOTFOUND GetAttributes
337 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\COMMAND\XIT.COM NOTFOUND GetAttributes
338 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\COMMAND\XIT.EXE NOTFOUND GetAttributes
339 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\COMMAND\XIT.BAT NOTFOUND GetAttributes
340 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\COMMAND\XIT.LNK NOTFOUND GetAttributes
341 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\COMMAND\XIT.CMD NOTFOUND GetAttributes
342 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\DESKTOP\XIT NOTFOUND GetAttributes
343 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\SYSTEM\XIT NOTFOUND GetAttributes
344 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT NOTFOUND GetAttributes
345 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\XIT NOTFOUND GetAttributes
346 17:37:03 Explorer:FFFFB36B Attributes C:\WINDOWS\COMMAND\XIT NOTFOUND GetAttributes

When I did trigger xit to test it these were the associated files it showed:

The attachment xit_olly.jpg is no longer available

OS: Windows 98 SE
CPU: Slot 1 Pentium III Coppermine 933MHz (SL448)
RAM: Kingston 256MB 133MHz
GPU: Nvidia 16MB Riva TNT/128MB Geforce 4 Ti 4200
Motherboard: ABit AB-BE6-II Intel 440BX
HDD: C, D - IDE 1, CD-ROM - IDE 2, E - IDE 3

Reply 59 of 93, by asdf53

Posted on 2025-11-11, 06:34

asdf53 Offline

Rank Member

Rank: Member
Posts: 385
Joined: 2019-12-09, 17:57

DustyShinigami wrote on 2025-11-10, 17:45:

Yep, Memory Access Violation is checked. It'll let me minimise whilst it's playing, but as soon as I close, everything disappears from the desktop and I have no choice but to restart the PC. I'm guessing Explorer would need to be unloaded...? If I hit File > Exit, I get a warning about it not clearing up leftovers and if I'm sure I want to close. I imagine the same thing will happen if I accept.

I just tested this and you're correct. This seems to be a problem with OllyDbg, it can attach, but not un-attach from a process, the only option is to kill the process, which in case of a critical process such as explorer.exe seems to soft-lock the system. But in your scenario I don't see a problem, because you have to keep OllyDbg running anyway if you want to detect the error.

The other problem is, I don't believe, if and when the error triggers on startup, that it'll trigger OllyDbg. I get the impression I have to initialise Olly first. The error never pops up at random whilst I'm using the PC. Only at random during boot. On one occasion the PC booted, Filemon listed everything to do with XIT, but despite none of the associated files to do with it being found, the error never showed.

That makes it tougher, but there's still a chance. As long as the "xit" error message box is on screen, the process that called it is still in memory. So you might be able to just wait until it pops up, then run OllyDbg and attach to explorer.exe, go to ShellExecuteEx in memory, but this time, set the breakpoint at its end, not at the start. This is where it'll jump to right after you close the message box. If you then follow the process step by step, it should return to the memory region that called it, and from the memory region, you might be able to infer the DLL. It's just an idea so far, but I'll see if that's possible.

When I did trigger xit to test it these were the associated files it showed:

If you trigger the "error" yourself that won't tell you anything useful, because in that case, it's behaving just like it should. That was just to see if the breakpoint is working, which it is - nice.

Main menu