mp

+++PreCreate: FileName=\Documents and Settings\Default User\SendTo\Desktop.ini
+++ PostCreate
FFFFE0000348C6E0(104, a0000003) FileName=\Documents and Settings\DEFAULT USER\SENDTO\DESKTOP.INI
a0000003: -> \??\C:\Users
--- PostCreate
+++PreCreate: FileName=\Users\DEFAULT USER\SENDTO\DESKTOP.INI
Ecp(0): FFFFC00002B5CB58 {73d5118a-88ba-439f-92f4-46d38952d250} [bc]
SYMLINK[3]: <\Device\HarddiskVolume2\Documents and Settings\Default User\SendTo\Desktop.ini>
Device: <\Device\HarddiskVolume2>
Unparsed: <\Default User\SendTo\Desktop.ini>
SYMLINK[0]: <\Device\HarddiskVolume2\Users\DEFAULT USER\SENDTO\DESKTOP.INI>
Device: <\Device\HarddiskVolume2>
+++ PostCreate
FFFFE00002392180(104, a0000003) FileName=\Users\Default User\SENDTO\DESKTOP.INI
a0000003: -> \??\C:\Users\Default
--- PostCreate
+++PreCreate: FileName=\Users\Default\SENDTO\DESKTOP.INI
Ecp(0): FFFFC00002B5CB58 {73d5118a-88ba-439f-92f4-46d38952d250} [bc]
SYMLINK[3]: <\Device\HarddiskVolume2\Documents and Settings\Default User\SendTo\Desktop.ini>
Device: <\Device\HarddiskVolume2>
Unparsed: <\SendTo\Desktop.ini>
SYMLINK[0]: <\Device\HarddiskVolume2\Users\Default\SENDTO\DESKTOP.INI>
Device: <\Device\HarddiskVolume2>
+++ PostCreate
FFFFE00003406110(104, a0000003) FileName=\Users\Default\SendTo\DESKTOP.INI
a0000003: -> \??\C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo
--- PostCreate
+++PreCreate: FileName=\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\DESKTOP.INI
Ecp(0): FFFFC00002B5CB58 {73d5118a-88ba-439f-92f4-46d38952d250} [bc]
SYMLINK[3]: <\Device\HarddiskVolume2\Documents and Settings\Default User\SendTo\Desktop.ini>
Device: <\Device\HarddiskVolume2>
Unparsed: <\Desktop.ini>
SYMLINK[0]: <\Device\HarddiskVolume2\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\DESKTOP.INI>
Device: <\Device\HarddiskVolume2>
+++ PostCreate
0000000000000000(0, 1) FileName=\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini
--- PostCreate