rendered paste bodydate/time : 2006-09-07, 16:31:49, 656ms
computer name : MUNDUS
user name : Marvin <admin>
operating system : Windows XP Service Pack 2 build 2600
system language : German
system up time : 2 days 23 hours
program up time : 7 seconds
processors : 2x Intel(R) Pentium(R) 4 CPU 3.60GHz
physical memory : 397/1023 MB (free/total)
free disk space : (E:) 14,06 GB (D:) 61,92 GB
display mode : 1280x1024, 32 bit
process id : $c3c
allocated memory : 22,74 MB
command line : "D:\Programme\Miranda IM\miranda32.exe" "D:\Programme\Miranda IM\Marvin.dat"
executable : miranda32.exe
current module : kexx.dll
module date/time : 2006-08-18 02:23
version : 0.0.1.4
madExcept version : 3.0b
callstack crc : $2646ae60, $6601cf25, $6601cf25
exception number : 1
exception class : EAccessViolation
exception message : Zugriffsverletzung bei Adresse 7C94426D in Modul 'ntdll.dll'. Lesen von Adresse 00000000.
thread $ad8: <priority:-1>
7c94426d +23c99 ntdll.dll RtlAllocateHeap
1304bf3d +0000d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +00037 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($694) at:
11092458 +00000 rss.dll
main thread ($694):
7c912f48 +00 ntdll.dll
7c91f0a5 +59 ntdll.dll RtlAnsiStringToUnicodeString
7c91eae0 +10 ntdll.dll KiUserCallbackDispatcher
77d18a1b +0a USER32.dll DispatchMessageW
thread $eec:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9a9 +0a ntdll.dll NtWaitForMultipleObjects
7c8094dc +00 kernel32.dll WaitForMultipleObjectsEx
77d19603 +00 USER32.dll MsgWaitForMultipleObjectsEx
77d196b3 +1a USER32.dll MsgWaitForMultipleObjects
thread $f20:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91d85a +0a ntdll.dll NtDelayExecution
7c8023e7 +4b kernel32.dll SleepEx
7c80244c +0a kernel32.dll Sleep
thread $cc8:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
77d24abd +3b USER32.dll GetMessageA
thread $ce0:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
77c0a3ad +a6 msvcrt.dll _endthreadex
thread $8c0:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($694) at:
0360518e +00 shlext.dll
thread $874:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
77d24abd +3b USER32.dll GetMessageA
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($694) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $904:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
77d191fc +26 USER32.dll GetMessageW
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($694) at:
220242ae +00 updater.dll
thread $328:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91d85a +0a ntdll.dll NtDelayExecution
7c8023e7 +4b kernel32.dll SleepEx
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($694) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $ca8: <priority:-15>
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
7c80252d +0d kernel32.dll WaitForSingleObject
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($694) at:
12665740 +00 loadavatars.dll
thread $ef0:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
7c80252d +0d kernel32.dll WaitForSingleObject
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($694) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $ff0: <priority:-1>
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91d85a +0a ntdll.dll NtDelayExecution
7c8023e7 +4b kernel32.dll SleepEx
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($694) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $c04:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
7c80252d +0d kernel32.dll WaitForSingleObject
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($694) at:
127cd60b +00 tabsrmm.dll
thread $9e8:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
71a0150a +6a WS2HELP.dll WahReferenceContextByHandle
71a12e64 +a4 WS2_32.dll select
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($694) at:
220242ae +00 updater.dll
thread $594:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91d85a +0a ntdll.dll NtDelayExecution
7c8023e7 +4b kernel32.dll SleepEx
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($694) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $8d8:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91d590 +0a ntdll.dll NtClose
7c809b85 +3e kernel32.dll CloseHandle
7c80b986 +12 kernel32.dll UnmapViewOfFile
77c0a3ad +a6 msvcrt.dll _endthreadex
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($694) at:
77c0a43d +62 msvcrt.dll _beginthreadex
thread $c54: <priority:-1>
7c91eb94 +000 ntdll.dll KiFastSystemCallRet
7c91e9be +00a ntdll.dll NtWaitForSingleObject
7c8025c5 +085 kernel32.dll WaitForSingleObjectEx
7c80252d +00d kernel32.dll WaitForSingleObject
13044d49 +269 kexx.dll madExcept HandleException
1304bff1 +081 kexx.dll madExcept ThreadExceptFrame
7c91eaf5 +009 ntdll.dll KiUserExceptionDispatcher
1304bf3d +00d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +037 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($694) at:
11092458 +000 rss.dll
thread $e34: <priority:1>
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e319 +0a ntdll.dll NtRemoveIoCompletion
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $9e8 at:
719bdbb3 +00 mswsock.dll
thread $168: <priority:-1>
7c80d0be +47 kernel32.dll CompareStringA
7c80babf +1e kernel32.dll lstrcmpi
77f6c429 +34 SHLWAPI.dll ChrCmpIA
77f6c46d +30 SHLWAPI.dll StrChrIA
77f6c4b6 +28 SHLWAPI.dll StrStrIA
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($694) at:
11092458 +00 rss.dll
thread $21c:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
7c80252d +0d kernel32.dll WaitForSingleObject
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($694) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $b58:
7c91eb94 +0 ntdll.dll KiFastSystemCallRet
7c91e9a9 +a ntdll.dll NtWaitForMultipleObjects
thread $14c:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9a9 +0a ntdll.dll NtWaitForMultipleObjects
7c8094dc +00 kernel32.dll WaitForMultipleObjectsEx
7c80a070 +13 kernel32.dll WaitForMultipleObjects
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $900 at:
76628951 +00 userenv.dll
thread $924:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
7c80252d +0d kernel32.dll WaitForSingleObject
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $d4c at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $bbc:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
77c0ffb4 +2a msvcrt.dll _vsnprintf
71a20e2b +82 WS2_32.dll WSAAccept
71a2103a +12 WS2_32.dll accept
77c0a3ad +a6 msvcrt.dll _endthreadex
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $8d8 at:
77c0a43d +62 msvcrt.dll _beginthreadex
thread $dd0:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e2ef +0a ntdll.dll NtReleaseMutant
7c8024b1 +0a kernel32.dll ReleaseMutex
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $d4c at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $dd8:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $8d8 at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $c08:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e58f +0a ntdll.dll NtSetEventBoostPriority
7c929074 +1d ntdll.dll RtlpUnWaitCriticalSection
7c911105 +18 ntdll.dll RtlLeaveCriticalSection
7c92327c +53 ntdll.dll LdrUnlockLoaderLock
7c92503e +43 ntdll.dll bsearch
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($694) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $20c:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91d85a +0a ntdll.dll NtDelayExecution
7c8023e7 +4b kernel32.dll SleepEx
7c80244c +0a kernel32.dll Sleep
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($694) at:
77c0a2c1 +53 msvcrt.dll _beginthread
modules:
00400000 miranda32.exe 0.6.0.6 D:\Programme\Miranda IM
01350000 4x4x4.dll D:\Programme\Miranda IM\Plugins
01500000 avatarhistw.dll D:\Programme\Miranda IM\Plugins
01510000 buddyexpectator.dll D:\Programme\Miranda IM\Plugins
018c0000 crashrpt.dll D:\Programme\Miranda IM\Plugins
01940000 dbeditorpp.dll 3.1.3.7 D:\Programme\Miranda IM\Plugins
01970000 folders.dll D:\Programme\Miranda IM\Plugins
019b0000 historypp.dll 1.5.0.109 D:\Programme\Miranda IM\Plugins
01c10000 icolib.dll 0.0.1.3 D:\Programme\Miranda IM\Plugins
03150000 mcontacts.dll D:\Programme\Miranda IM\Plugins
03170000 mtooltip.dll D:\Programme\Miranda IM\Plugins
032a0000 PNGImg.dll D:\Programme\Miranda IM\PLUGINS
033d0000 nudge.dll 0.0.1.11 D:\Programme\Miranda IM\Plugins
03410000 popup.dll 2.0.3.97 D:\Programme\Miranda IM\Plugins
03600000 shlext.dll D:\Programme\Miranda IM\Plugins
03660000 typingnotify.dll 0.0.1.7 D:\Programme\Miranda IM\Plugins
03790000 skype.dll 0.0.0.26 D:\Programme\Miranda IM\Plugins
03b30000 whenwasit.dll D:\Programme\Miranda IM\Plugins
03b90000 whoisreadingmystatusmsg.dll D:\Programme\Miranda IM\Plugins
03bc0000 worldtime.dll D:\Programme\Miranda IM\Plugins
03ef0000 xstatus_icons.dll D:\Programme\Miranda IM\Plugins
0ffd0000 rsaenh.dll 5.1.2600.2161 E:\WINDOWS\system32
10000000 clist_modern.dll 0.4.3.45 D:\Programme\Miranda IM\Plugins
11090000 rss.dll D:\Programme\Miranda IM\Plugins
11100000 autoreplacer.dll D:\Programme\Miranda IM\Plugins
11bd0000 startupstatus.dll D:\Programme\Miranda IM\Plugins
11cd0000 keepstatus.dll D:\Programme\Miranda IM\Plugins
123a0000 dbx_3x.dll D:\Programme\Miranda IM\Plugins
12400000 icq.dll 0.3.8.1 D:\Programme\Miranda IM\Plugins
124e0000 import.dll 0.9.2.0 D:\Programme\Miranda IM\Plugins
12660000 loadavatars.dll 0.0.2.9 D:\Programme\Miranda IM\Plugins
126a0000 msn.dll 0.6.0.1 D:\Programme\Miranda IM\Plugins
12700000 png2dib.dll 0.1.3.1 D:\Programme\Miranda IM\Plugins
12780000 tabsrmm.dll 1.1.0.7 D:\Programme\Miranda IM\Plugins
13000000 kexx.dll 0.0.1.4 D:\Programme\Miranda IM\Plugins
16660000 advsplashscreen.dll 0.1.1.7 D:\Programme\Miranda IM\Plugins
20000000 xpsp2res.dll 5.1.2600.2180 E:\WINDOWS\system32
22000000 updater.dll 0.4.11.0 D:\Programme\Miranda IM\Plugins
24000000 spamfilter.dll 2.5.2.4 D:\Programme\Miranda IM\Plugins
24200000 autoshutdown.dll 1.3.1.0 D:\Programme\Miranda IM\Plugins
25010000 newstatusnotifyw.dll 1.2.2.4 D:\Programme\Miranda IM\Plugins
25040000 versioninfo.dll D:\Programme\Miranda IM\Plugins
25a20000 mtextcontrol.dll D:\Programme\Miranda IM\Plugins
27300000 historystats.dll D:\Programme\Miranda IM\Plugins
28110000 smileyaddw.dll 0.1.12.7 D:\Programme\Miranda IM\Plugins
31020000 linklist.dll D:\Programme\Miranda IM\Plugins
320b0000 xstatusnotify.dll 0.1.1.0 D:\Programme\Miranda IM\Plugins
4eba0000 gdiplus.dll 5.1.3102.2180 E:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82
590b0000 wship6.dll 5.1.2600.2180 E:\WINDOWS\System32
597d0000 NETAPI32.dll 5.1.2600.2952 E:\WINDOWS\system32
5b0f0000 uxtheme.dll 6.0.2900.2180 E:\WINDOWS\system32
5f1a0000 olepro32.dll 5.1.2600.2180 E:\WINDOWS\system32
60d20000 KeyboardHookDll.dll 10.0.4.33 D:\Programme\Other Stuff\Musik Match
62e10000 LPK.DLL 5.1.2600.2180 E:\WINDOWS\system32
63800000 ieview.dll 1.0.9.5 D:\Programme\Miranda IM\Plugins
66710000 hnetcfg.dll 5.1.2600.2180 E:\WINDOWS\system32
68100000 dssenh.dll 5.1.2600.2133 E:\WINDOWS\system32
6c040000 fingerprint.dll 0.0.0.33 D:\Programme\Miranda IM\Plugins
6f800000 PCRE.dll 5.0.1779.29128 D:\Programme\Miranda IM
719b0000 mswsock.dll 5.1.2600.2180 E:\WINDOWS\system32
719f0000 wshtcpip.dll 5.1.2600.2180 E:\WINDOWS\System32
71a00000 WS2HELP.dll 5.1.2600.2180 E:\WINDOWS\system32
71a10000 WS2_32.dll 5.1.2600.2180 E:\WINDOWS\system32
71a30000 WSOCK32.dll 5.1.2600.2180 E:\WINDOWS\system32
72030000 weather.dll 0.3.5.12 D:\Programme\Miranda IM\Plugins
72240000 sensapi.dll 5.1.2600.2180 E:\WINDOWS\system32
72f70000 winspool.drv 5.1.2600.2180 E:\WINDOWS\system32
73250000 RICHED32.DLL 5.1.2600.0 E:\WINDOWS\system32
74db0000 RICHED20.dll 5.30.23.1221 E:\WINDOWS\system32
750f0000 wshbth.dll 5.1.2600.2180 E:\WINDOWS\system32
75250000 msctfime.ime 5.1.2600.2180 E:\WINDOWS\system32
75790000 USP10.dll 1.420.2600.2180 E:\WINDOWS\system32
75ec0000 MSVFW32.dll 5.1.2600.2180 E:\WINDOWS\system32
76020000 MSVCP60.dll 6.2.3104.0 E:\WINDOWS\system32
76300000 WINSTA.dll 5.1.2600.2180 E:\WINDOWS\system32
76320000 MSIMG32.dll 5.1.2600.2180 E:\WINDOWS\system32
76330000 IMM32.DLL 5.1.2600.2180 E:\WINDOWS\system32
76350000 comdlg32.dll 6.0.2900.2180 E:\WINDOWS\system32
76620000 userenv.dll 5.1.2600.2180 E:\WINDOWS\system32
767a0000 schannel.dll 5.1.2600.2180 E:\WINDOWS\system32
76af0000 WINMM.dll 5.1.2600.2180 E:\WINDOWS\system32
76bf0000 wintrust.dll 5.131.2600.2180 E:\WINDOWS\system32
76c50000 imagehlp.dll 5.1.2600.2180 E:\WINDOWS\system32
76d20000 iphlpapi.dll 5.1.2600.2912 E:\WINDOWS\system32
76e40000 rtutils.dll 5.1.2600.2180 E:\WINDOWS\system32
76e50000 rasman.dll 5.1.2600.2180 E:\WINDOWS\system32
76e70000 TAPI32.dll 5.1.2600.2180 E:\WINDOWS\system32
76ea0000 RASAPI32.DLL 5.1.2600.2180 E:\WINDOWS\system32
76ee0000 DNSAPI.dll 5.1.2600.2938 E:\WINDOWS\system32
76f10000 wtsapi32.dll 5.1.2600.2180 E:\WINDOWS\system32
76f20000 WLDAP32.dll 5.1.2600.2180 E:\WINDOWS\system32
76f70000 winrnr.dll 5.1.2600.2180 E:\WINDOWS\System32
76f80000 rasadhlp.dll 5.1.2600.2938 E:\WINDOWS\system32
76f90000 CLBCATQ.DLL 2001.12.4414.308 E:\WINDOWS\system32
77010000 COMRes.dll 2001.12.4414.258 E:\WINDOWS\system32
770f0000 OLEAUT32.dll 5.1.2600.2180 E:\WINDOWS\system32
77180000 WININET.dll 6.0.2900.2937 E:\WINDOWS\system32
773a0000 COMCTL32.dll 6.0.2900.2180 E:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9
774b0000 ole32.dll 5.1.2600.2726 E:\WINDOWS\system32
778f0000 SETUPAPI.dll 5.1.2600.2180 E:\WINDOWS\system32
77a50000 CRYPT32.dll 5.131.2600.2180 E:\WINDOWS\system32
77af0000 MSASN1.dll 5.1.2600.2180 E:\WINDOWS\system32
77bd0000 VERSION.dll 5.1.2600.2180 E:\WINDOWS\system32
77be0000 msvcrt.dll 7.0.2600.2180 E:\WINDOWS\system32
77c40000 msv1_0.dll 5.1.2600.2180 E:\WINDOWS\system32
77d10000 USER32.dll 5.1.2600.2622 E:\WINDOWS\system32
77da0000 ADVAPI32.dll 5.1.2600.2180 E:\WINDOWS\system32
77e50000 RPCRT4.dll 5.1.2600.2180 E:\WINDOWS\system32
77ef0000 GDI32.dll 5.1.2600.2818 E:\WINDOWS\system32
77f40000 SHLWAPI.dll 6.0.2900.2937 E:\WINDOWS\system32
77fc0000 Secur32.dll 5.1.2600.2180 E:\WINDOWS\system32
7c000000 MSVCR70.dll 7.0.9466.0 E:\WINDOWS\system32
7c360000 MSVCR71.dll 7.10.6014.4 E:\WINDOWS\system32
7c800000 kernel32.dll 5.1.2600.2945 E:\WINDOWS\system32
7c910000 ntdll.dll 5.1.2600.2180 E:\WINDOWS\system32
7c9d0000 SHELL32.dll 6.0.2900.2951 E:\WINDOWS\system32
processes:
000 Idle
004 System normal
36c smss.exe normal E:\WINDOWS\system32
3b0 csrss.exe
3c8 winlogon.exe high E:\WINDOWS\system32
3f8 services.exe normal E:\WINDOWS\system32
404 lsass.exe normal E:\WINDOWS\system32
490 Ati2evxx.exe normal E:\WINDOWS\system32
4ac svchost.exe normal E:\WINDOWS\system32
500 svchost.exe
53c svchost.exe normal E:\WINDOWS\System32
5e0 svchost.exe
624 svchost.exe
630 vsmon.exe normal E:\WINDOWS\system32\ZoneLabs
0f4 Ati2evxx.exe normal E:\WINDOWS\system32
2a0 spoolsv.exe normal E:\WINDOWS\system32
5ec sched.exe normal D:\Programme\Other Stuff\AntiVir PersonalEdition Classic
648 avguard.exe normal D:\Programme\Other Stuff\AntiVir PersonalEdition Classic
658 svchost.exe
6d4 svchost.exe normal E:\WINDOWS\System32
6e8 MDM.EXE normal E:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG
570 svchost.exe normal E:\WINDOWS\system32
7c8 WinVNC4.exe normal D:\Programme\Other Stuff\VNC4
9c0 PRISMSTA.EXE normal E:\WINDOWS\system32
9f0 rundll32.exe normal E:\WINDOWS\system32
9f8 SOUNDMAN.EXE normal E:\WINDOWS
a0c zlclient.exe normal D:\Programme\Other Stuff\ZoneAlarm
a1c avgnt.exe normal D:\Programme\Other Stuff\AntiVir PersonalEdition Classic
a70 HDSentinel.exe normal D:\Programme\Other Stuff\Hard Disk Sentinel
a78 daemon.exe normal D:\Programme\Other Stuff\DAEMON Tools
ab4 alg.exe
af8 MemOptimizer.exe normal D:\Programme\Other Stuff\TuneUp Utilities
b00 MMDiag.exe normal D:\PROGRA~1\OTHERS~1\MUSIKM~1
c60 Azureus.exe normal D:\Programme\Other Stuff\Azureus
c70 SsAAD.exe normal D:\PROGRA~1\OTHERS~1\SONICS~1
d1c mim.exe normal D:\Programme\Other Stuff\Musik Match
31c MMJB.EXE normal D:\Programme\Other Stuff\Musik Match
f24 mm_director.exe normal D:\Programme\Other Stuff\Musik Match
be0 mm_TDMEngine.exe normal D:\Programme\Other Stuff\Musik Match
fb0 explorer.exe normal E:\WINDOWS
e20 FIREFOX.EXE normal D:\PROGRA~1\OTHERS~1\MORZIL~1
ea4 wuauclt.exe normal E:\WINDOWS\system32
c3c miranda32.exe normal D:\Programme\Miranda IM
718 Skype.exe normal D:\Programme\Other Stuff\Skype
hardware:
+ Anschlüsse (COM und LPT)
- Kommunikationsanschluss (COM1)
+ Audio-, Video- und Gamecontroller
- Audiocodecs
- Creatix SAA7134, Hybrid Capture Device (driver 1.3.2.3)
- Legacy-Audiotreiber
- Legacy-Videoaufnahmegerät
- Mediensteuerungsgerät
- Realtek High Definition Audio (driver 5.10.0.5116)
- Videocodecs
+ Bluetooth-Funkgeräte
- Blutonium BCM2035 Bluetooth 2.4 GHz Single Chip Transceiver
- Microsoft Bluetooth-Auflistung
+ Computer
- ACPI-Multiprocessor-PC
+ DVD/CD-ROM-Laufwerke
- _NEC DVD_RW ND-3500AG
- HL-DT-ST DVD-ROM GDR8163B
- XY3526L JAC629Z SCSI CdRom Device
+ Eingabegeräte (Human Interface Devices)
- HID-konformes Benutzersteuergerät
- HID-konformes Benutzersteuergerät
- HID-konformes Gerät
- HID-konformes Gerät
- HID-konformes Gerät
- HID-konformes Gerät
- Microsoft eHome Infrared Transceiver
- USB-HID (Human Interface Device)
- USB-HID (Human Interface Device)
+ Grafikkarte
- RADEON X800 (driver 6.14.10.6512)
- RADEON X800 Secondary (driver 6.14.10.6512)
+ IDE ATA/ATAPI-Controller
- Intel(R) 82801FB Ultra ATA Storage Controllers - 2651 (driver 6.1.0.1004)
- Intel(R) 82801FB/FBM Ultra ATA Storage Controllers - 266F (driver 6.1.0.1004)
- Primärer IDE-Kanal
- Primärer IDE-Kanal
- Sekundärer IDE-Kanal
+ IEEE 1394 Bus-Hostcontroller
- Texas Instruments OHCI-konformer IEEE 1394-Hostcontroller
+ Laufwerke
- Generic STORAGE DEVICE USB Device
- Generic STORAGE DEVICE USB Device
- Generic STORAGE DEVICE USB Device
- Generic STORAGE DEVICE USB Device
- Generic STORAGE DEVICE USB Device
- JetFlash TS128MJF2A USB Device
- WDC WD2000JD-55HBB0
- WDC WD2000JD-55HBB0
+ Modems
- PCI Soft Data Fax Modem with SmartCP (driver 7.32.0.0)
- Standardmodem über Bluetooth-Verbindung
+ Monitore
- Plug und Play-Monitor
+ Mäuse und andere Zeigegeräte
- HID-konforme Maus
- HID-konforme Maus
+ Netzwerkadapter
- 1394-Netzwerkadapter
- Bluetooth-Gerät (PAN)
- CREATIX 802.11g Adapter (driver 2.1.5.0)
- Realtek RTL8139/810x Family Fast Ethernet NIC (driver 5.620.1202.2004)
+ Prozessoren
- Intel(R) Pentium(R) 4 CPU 3.60GHz
- Intel(R) Pentium(R) 4 CPU 3.60GHz
+ SCSI- und RAID-Controller
- SCSI/RAID-Hostcontroller
- Universal SCSI Controller (driver 1.12.0.0)
+ Systemgeräte
- ACPI-Einschaltknopf
- ACPI-Schalter
- DMA-Controller
- Erweiterter E/A-Bus
- Extended PnP BIOS Enumerator (driver 1.12.0.0)
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- Intel(R) 82801 PCI Bridge - 244E (driver 6.0.0.1013)
- Intel(R) 82801FB LPC Interface Controller - 2640 (driver 6.0.0.1013)
- Intel(R) 82801FB/FBM PCI Express Root Port - 2660 (driver 6.0.0.1013)
- Intel(R) 82801FB/FBM PCI Express Root Port - 2662 (driver 6.0.0.1013)
- Intel(R) 82801FB/FBM PCI Express Root Port - 2664 (driver 6.0.0.1013)
- Intel(R) 82801FB/FBM PCI Express Root Port - 2666 (driver 6.0.0.1013)
- Intel(R) 82801FB/FBM SMBus Controller - 266A (driver 6.0.0.1013)
- Intel(R) 82802 Firmwarehub
- Intel(R) 915G/P/GV/GL/PL/910GL PCI Express Root Port - 2581 (driver 6.3.0.1008)
- Intel(R) 915G/P/GV/GL/PL/910GL Processor to I/O Controller - 2580 (driver 6.3.0.1008)
- ISAPnP-Datenleseport
- Microcode-Updategerät
- Microsoft ACPI-konformes System
- Microsoft UAA-Bustreiber für High Definition Audio
- Microsoft-Systemverwaltungs-BIOS-Treiber
- Numerischer Coprozessor
- PCI-Bus
- PnP-Softwaregeräte-Enumerator
- Programmierbarer Interruptcontroller
- System CMOS/Echtzeituhr
- Systemlautsprecher
- Systemplatine
- Systemplatine
- Systemzeitgeber
- Terminalserver-Geräteumleitung
- Terminalserver-Maustreiber
- Terminalserver-Tastaturtreiber
- Verwaltung logischer Datenträger
- Volume-Manager
+ Tastaturen
- HID-Tastatur
- Microsoft eHome MCIR 109 Keyboard
- Microsoft eHome MCIR Keyboard
- Microsoft eHome Remote Control Keyboard keys
+ USB-Controller
- eHome Infrared Receiver
- Intel(R) 82801FB/FBM USB Universal Host Controller - 2658 (driver 6.0.0.1011)
- Intel(R) 82801FB/FBM USB Universal Host Controller - 2659 (driver 6.0.0.1011)
- Intel(R) 82801FB/FBM USB Universal Host Controller - 265A (driver 6.0.0.1011)
- Intel(R) 82801FB/FBM USB Universal Host Controller - 265B (driver 6.0.0.1011)
- Intel(R) 82801FB/FBM USB2 Enhanced Host Controller - 265C (driver 6.0.0.1011)
- USB-Massenspeichergerät
- USB-Massenspeichergerät
- USB-Root-Hub
- USB-Root-Hub
- USB-Root-Hub
- USB-Root-Hub
- USB-Root-Hub
- USB-Verbundgerät
cpu registers:
eax = 00000000
ebx = 00000086
ecx = 035d05d0
edx = 00000000
esi = 035d0188
edi = 035d0198
eip = 7c94426d
esp = 0529f06c
ebp = 0529f28c
stack dump:
0529f06c ab 8b 5d 03 08 00 00 00 - 12 8a 5d 03 69 00 74 00 ..].......].i.t.
0529f07c 65 00 6d 00 3e 00 00 00 - 94 f0 29 05 02 00 00 00 e.m.>.....).....
0529f08c 80 4e 5d 03 c0 f2 29 05 - 14 14 92 7c 84 00 00 00 .N]...)....|....
0529f09c eb 06 92 7c ab 8b 5d 03 - 9b 01 00 00 12 8a 5d 03 ...|..].......].
0529f0ac 3a 00 2f 00 2f 00 6a 00 - 6f 00 6b 00 75 00 73 00 :././.j.o.k.u.s.
0529f0bc 6f 00 66 00 74 00 77 00 - 61 00 72 00 65 00 2e 00 o.f.t.w.a.r.e...
0529f0cc 77 00 7a 00 2e 00 63 00 - 7a 00 2f 00 6d 00 69 00 w.z...c.z./.m.i.
0529f0dc 72 00 61 00 6e 00 64 00 - 61 00 2f 00 00 00 00 00 r.a.n.d.a./.....
0529f0ec 2b 00 00 00 60 4c 5d 03 - 00 00 00 00 00 00 00 00 +...`L].........
0529f0fc 00 00 00 00 61 00 6e 00 - 64 00 61 00 00 00 00 00 ....a.n.d.a.....
0529f10c 00 4d 5d 03 6a 00 6f 00 - 08 4d 5d 03 73 00 6f 00 .M].j.o..M].s.o.
0529f11c 00 00 00 00 00 00 00 00 - 00 00 00 00 09 00 00 00 ................
0529f12c 00 00 00 00 00 00 00 00 - 08 00 00 00 3c 00 00 00 ............<...
0529f13c 08 00 00 00 3c 00 00 00 - 00 00 00 00 98 01 5d 03 ....<.........].
0529f14c 3c 00 00 00 00 00 00 00 - a8 50 2a 05 74 00 69 00 <........P*.t.i.
0529f15c 0f 00 00 00 65 00 3e 00 - 01 00 00 00 08 00 00 00 ....e.>.........
0529f16c 3c 00 00 00 00 00 5d 03 - 3c 00 2f 00 69 00 74 00 <.....].<./.i.t.
0529f17c 28 50 5d 03 3e 00 00 00 - 04 00 00 00 b0 01 5d 03 (P].>.........].
0529f18c 08 02 5d 03 01 00 00 00 - 41 00 6c 00 90 01 5d 03 ..].....A.l...].
0529f19c 0d 00 00 00 39 00 65 00 - 68 00 74 00 f0 03 5d 03 ....9.e.h.t...].
disassembling:
[...]
7c9424f9 jmp loc_7c920649
7c9424fe cmp byte ptr [esi+7], -1
7c942502 jz loc_7c94ba0c
7c942508 movzx ecx, cx
7c94250b mov [ebp-$b8], ecx
7c942511 lea ecx, [esi+ecx*8]
7c942514 mov [ebp-$a0], ecx
7c94251a sub ecx, 4
7c94251d mov [ebp-$a0], ecx
7c942523 mov byte ptr [esi+6], $ff
7c942527 mov [ecx], eax
7c942529 jmp loc_7c921487
7c94268f inc edx
7c942690 jmp loc_7c941aad
7c944256 mov [edi+5], cl
7c944259 lea ecx, [eax+8]
7c94425c mov edx, [ecx]
7c94425e mov [ebp-$9c], edx
7c944264 mov eax, [eax+$c]
7c944267 mov [ebp-$a4], eax
7c94426d > mov eax, [eax]
7c94426f cmp eax, [edx+4]
7c944272 jnz loc_7c94438b
7c944278 cmp eax, ecx
7c94427a jnz loc_7c94438b
7c944280 push dword ptr [ebp-$50]
7c944283 mov esi, [ebp-$1c]
7c944286 push esi
7c944287 call -$236f8 ($7c920b94)
7c94428c mov eax, [ebp-$9c]
7c944292 mov ecx, [ebp-$a4]
7c944298 mov [ecx], eax
7c94429a mov [eax+4], ecx
7c94429d cmp eax, ecx
7c94429f jz loc_7c94ba89
7c9442a5 mov eax, [ebp-$50]
7c9442a8 movzx ecx, word ptr [eax]
7c9442ab sub [esi+$28], ecx
7c9442ae movzx eax, word ptr [eax]
7c9442b1 add ebx, eax
7c9442b3 mov [ebp-$ac], ebx
[...]
date/time : 2006-09-09, 12:26:35, 0ms
computer name : MUNDUS
user name : Marvin <admin>
operating system : Windows XP Service Pack 2 build 2600
system language : German
system up time : 4 days 19 hours
program up time : 14 hours 25 minutes
processors : 2x Intel(R) Pentium(R) 4 CPU 3.60GHz
physical memory : 327/1023 MB (free/total)
free disk space : (E:) 14,47 GB (D:) 89,31 GB
display mode : 1280x1024, 32 bit
process id : $7a8
allocated memory : 22,84 MB
command line : "D:\Programme\Miranda IM\miranda32.exe" "D:\Programme\Miranda IM\Marvin.dat"
executable : miranda32.exe
current module : kexx.dll
module date/time : 2006-08-18 02:23
version : 0.0.1.4
madExcept version : 3.0b
contact name : Marvin Dickhaus
contact email : marvin.jens@gmx.net
callstack crc : $7c920f29, $4abec317, $4abec317
exception number : 1
exception class : EAccessViolation
exception message : Zugriffsverletzung bei Adresse 7C920F29 in Modul 'ntdll.dll'. Lesen von Adresse 6E617269.
thread $ce0: <priority:-1>
7c920f29 +00 ntdll.dll
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($ed0) at:
11092458 +00 rss.dll
main thread ($ed0):
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
77ef6ea5 +0d GDI32.dll DeleteDC
77c0faa1 +2b msvcrt.dll _snprintf
7c91eae0 +10 ntdll.dll KiUserCallbackDispatcher
77d18a1b +0a USER32.dll DispatchMessageW
thread $9ec:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9a9 +0a ntdll.dll NtWaitForMultipleObjects
7c8094dc +00 kernel32.dll WaitForMultipleObjectsEx
77d19603 +00 USER32.dll MsgWaitForMultipleObjectsEx
77d196b3 +1a USER32.dll MsgWaitForMultipleObjects
thread $244:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91d85a +0a ntdll.dll NtDelayExecution
7c8023e7 +4b kernel32.dll SleepEx
7c80244c +0a kernel32.dll Sleep
thread $ca4:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
77c0a3ad +a6 msvcrt.dll _endthreadex
thread $eb8:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($ed0) at:
0359518e +00 shlext.dll
thread $58c:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
77d24abd +3b USER32.dll GetMessageA
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($ed0) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $798:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
77d191fc +26 USER32.dll GetMessageW
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($ed0) at:
220242ae +00 updater.dll
thread $fc4:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91d85a +0a ntdll.dll NtDelayExecution
7c8023e7 +4b kernel32.dll SleepEx
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($ed0) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $cc4: <priority:-15>
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
7c80252d +0d kernel32.dll WaitForSingleObject
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($ed0) at:
12625651 +00 loadavatars.dll
thread $6c0:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
7c80252d +0d kernel32.dll WaitForSingleObject
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($ed0) at:
1276d60b +00 tabsrmm.dll
thread $150:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91d85a +0a ntdll.dll NtDelayExecution
7c8023e7 +4b kernel32.dll SleepEx
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($ed0) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $8b0:
7c91eb94 +0 ntdll.dll KiFastSystemCallRet
7c91e9a9 +a ntdll.dll NtWaitForMultipleObjects
thread $f34:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9a9 +0a ntdll.dll NtWaitForMultipleObjects
7c8094dc +00 kernel32.dll WaitForMultipleObjectsEx
7c80a070 +13 kernel32.dll WaitForMultipleObjects
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $fe4 at:
76628951 +00 userenv.dll
thread $9e4:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
7c80252d +0d kernel32.dll WaitForSingleObject
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $f18 at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $20c:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e397 +0a ntdll.dll NtReplyWaitReceivePortEx
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $b94 at:
77e6760d +00 RPCRT4.dll
thread $18c:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91d85a +0a ntdll.dll NtDelayExecution
7c8023e7 +4b kernel32.dll SleepEx
7c80244c +0a kernel32.dll Sleep
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $b94 at:
774dcc4a +00 ole32.dll
thread $a18:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e397 +0a ntdll.dll NtReplyWaitReceivePortEx
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $20c at:
77e6760d +00 RPCRT4.dll
thread $b3c:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
77d24abd +3b USER32.dll GetMessageA
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($ed0) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $280:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e247 +0a ntdll.dll NtQueueApcThread
77c0a3ad +a6 msvcrt.dll _endthreadex
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($ed0) at:
77c0a43d +62 msvcrt.dll _beginthreadex
thread $c38: <priority:1>
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e319 +0a ntdll.dll NtRemoveIoCompletion
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $810 at:
719bdbb3 +00 mswsock.dll
thread $b48:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
7c80252d +0d kernel32.dll WaitForSingleObject
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($ed0) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $748:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
77d24abd +3b USER32.dll GetMessageA
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($ed0) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $a98:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
77c0ffb4 +2a msvcrt.dll _vsnprintf
7c92096d +0c ntdll.dll RtlReleasePebLock
71a20e2b +82 WS2_32.dll WSAAccept
71a2103a +12 WS2_32.dll accept
77c0a3ad +a6 msvcrt.dll _endthreadex
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $280 at:
77c0a43d +62 msvcrt.dll _beginthreadex
thread $d4c:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $280 at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $8c0:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91d85a +0a ntdll.dll NtDelayExecution
7c8023e7 +4b kernel32.dll SleepEx
7c80244c +0a kernel32.dll Sleep
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($ed0) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $8e0:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
71a0150a +6a WS2HELP.dll WahReferenceContextByHandle
71a12e64 +a4 WS2_32.dll select
77c0a3ad +a6 msvcrt.dll _endthreadex
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $280 at:
77c0a43d +62 msvcrt.dll _beginthreadex
modules:
00400000 miranda32.exe 0.6.0.7 D:\Programme\Miranda IM
01490000 avatarhistw.dll D:\Programme\Miranda IM\Plugins
014a0000 buddyexpectator.dll D:\Programme\Miranda IM\Plugins
01840000 crashrpt.dll D:\Programme\Miranda IM\Plugins
018e0000 dbeditorpp.dll 3.1.3.7 D:\Programme\Miranda IM\Plugins
01900000 folders.dll D:\Programme\Miranda IM\Plugins
01940000 historypp.dll 1.5.0.109 D:\Programme\Miranda IM\Plugins
01ba0000 icolib.dll 0.0.1.3 D:\Programme\Miranda IM\Plugins
030e0000 mcontacts.dll D:\Programme\Miranda IM\Plugins
03100000 mtooltip.dll D:\Programme\Miranda IM\Plugins
03230000 PNGImg.dll D:\Programme\Miranda IM\PLUGINS
03360000 nudge.dll 0.0.1.11 D:\Programme\Miranda IM\Plugins
033a0000 popup.dll 2.0.3.97 D:\Programme\Miranda IM\Plugins
03590000 shlext.dll D:\Programme\Miranda IM\Plugins
035f0000 typingnotify.dll 0.0.1.7 D:\Programme\Miranda IM\Plugins
03720000 skype.dll 0.0.0.26 D:\Programme\Miranda IM\Plugins
03ac0000 whenwasit.dll D:\Programme\Miranda IM\Plugins
03b20000 whoisreadingmystatusmsg.dll D:\Programme\Miranda IM\Plugins
03f60000 xstatus_icons.dll D:\Programme\Miranda IM\Plugins
044e0000 historypp_icons.dll D:\Programme\Miranda IM\Plugins
051f0000 shdoclc.dll 6.0.2900.2180 E:\WINDOWS\system32
0ffd0000 rsaenh.dll 5.1.2600.2161 E:\WINDOWS\system32
10000000 4x4x4.dll D:\Programme\Miranda IM\Plugins
11090000 rss.dll D:\Programme\Miranda IM\Plugins
11100000 autoreplacer.dll D:\Programme\Miranda IM\Plugins
11bd0000 startupstatus.dll D:\Programme\Miranda IM\Plugins
11cd0000 keepstatus.dll D:\Programme\Miranda IM\Plugins
12120000 clist_modern.dll 0.4.3.46 D:\Programme\Miranda IM\Plugins
123a0000 dbx_3x.dll D:\Programme\Miranda IM\Plugins
12400000 icq.dll 0.3.8.1 D:\Programme\Miranda IM\Plugins
124a0000 import.dll 0.9.2.0 D:\Programme\Miranda IM\Plugins
12620000 loadavatars.dll 0.0.2.9 D:\Programme\Miranda IM\Plugins
12640000 msn.dll 0.6.0.1 D:\Programme\Miranda IM\Plugins
126a0000 png2dib.dll 0.1.3.1 D:\Programme\Miranda IM\Plugins
12720000 tabsrmm.dll 1.1.0.7 D:\Programme\Miranda IM\Plugins
12840000 tabsrmm_icons.dll D:\Programme\Miranda IM\Plugins
13000000 kexx.dll 0.0.1.4 D:\Programme\Miranda IM\Plugins
16660000 advsplashscreen.dll 0.1.1.7 D:\Programme\Miranda IM\Plugins
20000000 xpsp2res.dll 5.1.2600.2180 E:\WINDOWS\system32
22000000 updater.dll 0.4.11.0 D:\Programme\Miranda IM\Plugins
22070000 worldtime.dll D:\Programme\Miranda IM\Plugins
24000000 spamfilter.dll 2.5.2.4 D:\Programme\Miranda IM\Plugins
24200000 autoshutdown.dll 1.3.1.0 D:\Programme\Miranda IM\Plugins
25010000 newstatusnotifyw.dll 1.2.2.4 D:\Programme\Miranda IM\Plugins
25040000 versioninfo.dll D:\Programme\Miranda IM\Plugins
25a20000 mtextcontrol.dll D:\Programme\Miranda IM\Plugins
27300000 historystats.dll D:\Programme\Miranda IM\Plugins
28110000 smileyaddw.dll 0.1.12.7 D:\Programme\Miranda IM\Plugins
31020000 linklist.dll D:\Programme\Miranda IM\Plugins
320b0000 xstatusnotify.dll 0.1.1.0 D:\Programme\Miranda IM\Plugins
4eba0000 gdiplus.dll 5.1.3102.2180 E:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82
51580000 MSDBG2.DLL 7.0.9466.0 E:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG
51660000 PDM.DLL 7.0.9466.0 E:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG
51810000 mdmui.dll 7.0.9466.0 E:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\1031
590b0000 wship6.dll 5.1.2600.2180 E:\WINDOWS\System32
597d0000 NETAPI32.dll 5.1.2600.2952 E:\WINDOWS\system32
5b0f0000 uxtheme.dll 6.0.2900.2180 E:\WINDOWS\system32
5e6e0000 pngfilt.dll 6.0.2900.2937 E:\WINDOWS\system32
5f1a0000 olepro32.dll 5.1.2600.2180 E:\WINDOWS\system32
60d20000 KeyboardHookDll.dll 10.0.4.33 D:\Programme\Other Stuff\Musik Match
62e10000 LPK.DLL 5.1.2600.2180 E:\WINDOWS\system32
63800000 ieview.dll 1.0.9.5 D:\Programme\Miranda IM\Plugins
66710000 hnetcfg.dll 5.1.2600.2180 E:\WINDOWS\system32
66d10000 ImgUtil.dll 6.0.2900.2180 E:\WINDOWS\system32
68100000 dssenh.dll 5.1.2600.2133 E:\WINDOWS\system32
6c290000 dxtrans.dll 6.3.2900.2937 E:\WINDOWS\system32
6c2d0000 dxtmsft.dll 6.3.2900.2937 E:\WINDOWS\system32
6d910000 ddrawex.dll 5.3.2600.2180 E:\WINDOWS\system32
6f800000 PCRE.dll 5.0.1779.29128 D:\Programme\Miranda IM
70e00000 asycfilt.dll 5.1.2600.2180 E:\WINDOWS\system32
719b0000 mswsock.dll 5.1.2600.2180 E:\WINDOWS\system32
719f0000 wshtcpip.dll 5.1.2600.2180 E:\WINDOWS\System32
71a00000 WS2HELP.dll 5.1.2600.2180 E:\WINDOWS\system32
71a10000 WS2_32.dll 5.1.2600.2180 E:\WINDOWS\system32
71a30000 WSOCK32.dll 5.1.2600.2180 E:\WINDOWS\system32
72030000 weather.dll 0.3.5.12 D:\Programme\Miranda IM\Plugins
72240000 sensapi.dll 5.1.2600.2180 E:\WINDOWS\system32
72f70000 winspool.drv 5.1.2600.2180 E:\WINDOWS\system32
73250000 RICHED32.DLL 5.1.2600.0 E:\WINDOWS\system32
736d0000 DDRAW.dll 5.3.2600.2180 E:\WINDOWS\system32
73b30000 DCIMAN32.dll 5.1.2600.2180 E:\WINDOWS\system32
74640000 msls31.dll 3.10.349.0 E:\WINDOWS\system32
74670000 msimtf.dll 5.1.2600.2180 E:\WINDOWS\system32
746a0000 MSCTF.dll 5.1.2600.2575 E:\WINDOWS\system32
74db0000 RICHED20.dll 5.30.23.1221 E:\WINDOWS\system32
750f0000 wshbth.dll 5.1.2600.2180 E:\WINDOWS\system32
75250000 msctfime.ime 5.1.2600.2180 E:\WINDOWS\system32
75790000 USP10.dll 1.420.2600.2180 E:\WINDOWS\system32
75bf0000 jscript.dll 5.6.0.8831 E:\WINDOWS\system32
75dc0000 mlang.dll 6.0.2900.2530 E:\WINDOWS\system32
75ec0000 MSVFW32.dll 5.1.2600.2180 E:\WINDOWS\system32
76020000 MSVCP60.dll 6.2.3104.0 E:\WINDOWS\system32
76300000 WINSTA.dll 5.1.2600.2180 E:\WINDOWS\system32
76320000 MSIMG32.dll 5.1.2600.2180 E:\WINDOWS\system32
76330000 IMM32.DLL 5.1.2600.2180 E:\WINDOWS\system32
76350000 comdlg32.dll 6.0.2900.2180 E:\WINDOWS\system32
76620000 userenv.dll 5.1.2600.2180 E:\WINDOWS\system32
767a0000 schannel.dll 5.1.2600.2180 E:\WINDOWS\system32
76880000 CRYPTUI.dll 5.131.2600.2180 E:\WINDOWS\system32
76970000 SXS.DLL 5.1.2600.2180 E:\WINDOWS\system32
76ad0000 ATL.DLL 3.5.2284.0 E:\WINDOWS\system32
76af0000 WINMM.dll 5.1.2600.2180 E:\WINDOWS\system32
76bb0000 PSAPI.DLL 5.1.2600.2180 E:\WINDOWS\system32
76bf0000 wintrust.dll 5.131.2600.2180 E:\WINDOWS\system32
76c50000 imagehlp.dll 5.1.2600.2180 E:\WINDOWS\system32
76d20000 iphlpapi.dll 5.1.2600.2912 E:\WINDOWS\system32
76e40000 rtutils.dll 5.1.2600.2180 E:\WINDOWS\system32
76e50000 rasman.dll 5.1.2600.2180 E:\WINDOWS\system32
76e70000 TAPI32.dll 5.1.2600.2180 E:\WINDOWS\system32
76ea0000 RASAPI32.DLL 5.1.2600.2180 E:\WINDOWS\system32
76ee0000 DNSAPI.dll 5.1.2600.2938 E:\WINDOWS\system32
76f10000 wtsapi32.dll 5.1.2600.2180 E:\WINDOWS\system32
76f20000 WLDAP32.dll 5.1.2600.2180 E:\WINDOWS\system32
76f70000 winrnr.dll 5.1.2600.2180 E:\WINDOWS\System32
76f80000 rasadhlp.dll 5.1.2600.2938 E:\WINDOWS\system32
76f90000 CLBCATQ.DLL 2001.12.4414.308 E:\WINDOWS\system32
77010000 COMRes.dll 2001.12.4414.258 E:\WINDOWS\system32
770f0000 OLEAUT32.dll 5.1.2600.2180 E:\WINDOWS\system32
77180000 WININET.dll 6.0.2900.2937 E:\WINDOWS\system32
77230000 urlmon.dll 6.0.2900.2960 E:\WINDOWS\system32
773a0000 COMCTL32.dll 6.0.2900.2180 E:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9
774b0000 ole32.dll 5.1.2600.2726 E:\WINDOWS\system32
77730000 shdocvw.dll 6.0.2900.2937 E:\WINDOWS\system32
778f0000 SETUPAPI.dll 5.1.2600.2180 E:\WINDOWS\system32
77a50000 CRYPT32.dll 5.131.2600.2180 E:\WINDOWS\system32
77af0000 MSASN1.dll 5.1.2600.2180 E:\WINDOWS\system32
77b10000 appHelp.dll 5.1.2600.2180 E:\WINDOWS\system32
77bd0000 VERSION.dll 5.1.2600.2180 E:\WINDOWS\system32
77be0000 msvcrt.dll 7.0.2600.2180 E:\WINDOWS\system32
77c40000 msv1_0.dll 5.1.2600.2180 E:\WINDOWS\system32
77d10000 USER32.dll 5.1.2600.2622 E:\WINDOWS\system32
77da0000 ADVAPI32.dll 5.1.2600.2180 E:\WINDOWS\system32
77e50000 RPCRT4.dll 5.1.2600.2180 E:\WINDOWS\system32
77ef0000 GDI32.dll 5.1.2600.2818 E:\WINDOWS\system32
77f40000 SHLWAPI.dll 6.0.2900.2937 E:\WINDOWS\system32
77fc0000 Secur32.dll 5.1.2600.2180 E:\WINDOWS\system32
7c000000 MSVCR70.dll 7.0.9466.0 E:\WINDOWS\system32
7c360000 MSVCR71.dll 7.10.6014.4 E:\WINDOWS\system32
7c800000 kernel32.dll 5.1.2600.2945 E:\WINDOWS\system32
7c910000 ntdll.dll 5.1.2600.2180 E:\WINDOWS\system32
7c9d0000 SHELL32.dll 6.0.2900.2951 E:\WINDOWS\system32
7dbe0000 mshtml.dll 6.0.2900.2963 E:\WINDOWS\system32
processes:
000 Idle
004 System normal
36c smss.exe normal E:\WINDOWS\system32
3b0 csrss.exe
3c8 winlogon.exe high E:\WINDOWS\system32
3f8 services.exe normal E:\WINDOWS\system32
404 lsass.exe normal E:\WINDOWS\system32
490 Ati2evxx.exe normal E:\WINDOWS\system32
4ac svchost.exe normal E:\WINDOWS\system32
500 svchost.exe
53c svchost.exe normal E:\WINDOWS\System32
5e0 svchost.exe
624 svchost.exe
630 vsmon.exe normal E:\WINDOWS\system32\ZoneLabs
0f4 Ati2evxx.exe normal E:\WINDOWS\system32
2a0 spoolsv.exe normal E:\WINDOWS\system32
5ec sched.exe normal D:\Programme\Other Stuff\AntiVir PersonalEdition Classic
648 avguard.exe normal D:\Programme\Other Stuff\AntiVir PersonalEdition Classic
658 svchost.exe
6d4 svchost.exe normal E:\WINDOWS\System32
6e8 MDM.EXE normal E:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG
570 svchost.exe normal E:\WINDOWS\system32
7c8 WinVNC4.exe normal D:\Programme\Other Stuff\VNC4
9c0 PRISMSTA.EXE normal E:\WINDOWS\system32
9f0 rundll32.exe normal E:\WINDOWS\system32
9f8 SOUNDMAN.EXE normal E:\WINDOWS
a0c zlclient.exe normal D:\Programme\Other Stuff\ZoneAlarm
a1c avgnt.exe normal D:\Programme\Other Stuff\AntiVir PersonalEdition Classic
a70 HDSentinel.exe normal D:\Programme\Other Stuff\Hard Disk Sentinel
a78 daemon.exe normal D:\Programme\Other Stuff\DAEMON Tools
ab4 alg.exe
af8 MemOptimizer.exe normal D:\Programme\Other Stuff\TuneUp Utilities
b00 MMDiag.exe normal D:\PROGRA~1\OTHERS~1\MUSIKM~1
c60 Azureus.exe normal D:\Programme\Other Stuff\Azureus
c70 SsAAD.exe normal D:\PROGRA~1\OTHERS~1\SONICS~1
d1c mim.exe normal D:\Programme\Other Stuff\Musik Match
31c MMJB.EXE normal D:\Programme\Other Stuff\Musik Match
f24 mm_director.exe normal D:\Programme\Other Stuff\Musik Match
be0 mm_TDMEngine.exe normal D:\Programme\Other Stuff\Musik Match
da0 explorer.exe normal E:\WINDOWS
7a8 miranda32.exe normal D:\Programme\Miranda IM
114 Skype.exe normal D:\Programme\Other Stuff\Skype
hardware:
+ Anschlüsse (COM und LPT)
- Kommunikationsanschluss (COM1)
+ Audio-, Video- und Gamecontroller
- Audiocodecs
- Creatix SAA7134, Hybrid Capture Device (driver 1.3.2.3)
- Legacy-Audiotreiber
- Legacy-Videoaufnahmegerät
- Mediensteuerungsgerät
- Realtek High Definition Audio (driver 5.10.0.5116)
- Videocodecs
+ Bluetooth-Funkgeräte
- Blutonium BCM2035 Bluetooth 2.4 GHz Single Chip Transceiver
- Microsoft Bluetooth-Auflistung
+ Computer
- ACPI-Multiprocessor-PC
+ DVD/CD-ROM-Laufwerke
- _NEC DVD_RW ND-3500AG
- HL-DT-ST DVD-ROM GDR8163B
- XY3526L JAC629Z SCSI CdRom Device
+ Eingabegeräte (Human Interface Devices)
- HID-konformes Benutzersteuergerät
- HID-konformes Benutzersteuergerät
- HID-konformes Gerät
- HID-konformes Gerät
- HID-konformes Gerät
- HID-konformes Gerät
- Microsoft eHome Infrared Transceiver
- USB-HID (Human Interface Device)
- USB-HID (Human Interface Device)
+ Grafikkarte
- RADEON X800 (driver 6.14.10.6512)
- RADEON X800 Secondary (driver 6.14.10.6512)
+ IDE ATA/ATAPI-Controller
- Intel(R) 82801FB Ultra ATA Storage Controllers - 2651 (driver 6.1.0.1004)
- Intel(R) 82801FB/FBM Ultra ATA Storage Controllers - 266F (driver 6.1.0.1004)
- Primärer IDE-Kanal
- Primärer IDE-Kanal
- Sekundärer IDE-Kanal
+ IEEE 1394 Bus-Hostcontroller
- Texas Instruments OHCI-konformer IEEE 1394-Hostcontroller
+ Laufwerke
- Generic STORAGE DEVICE USB Device
- Generic STORAGE DEVICE USB Device
- Generic STORAGE DEVICE USB Device
- Generic STORAGE DEVICE USB Device
- Generic STORAGE DEVICE USB Device
- JetFlash TS128MJF2A USB Device
- WDC WD2000JD-55HBB0
- WDC WD2000JD-55HBB0
+ Modems
- PCI Soft Data Fax Modem with SmartCP (driver 7.32.0.0)
- Standardmodem über Bluetooth-Verbindung
+ Monitore
- Plug und Play-Monitor
+ Mäuse und andere Zeigegeräte
- HID-konforme Maus
- HID-konforme Maus
+ Netzwerkadapter
- 1394-Netzwerkadapter
- Bluetooth-Gerät (PAN)
- CREATIX 802.11g Adapter (driver 2.1.5.0)
- Realtek RTL8139/810x Family Fast Ethernet NIC (driver 5.620.1202.2004)
+ Prozessoren
- Intel(R) Pentium(R) 4 CPU 3.60GHz
- Intel(R) Pentium(R) 4 CPU 3.60GHz
+ SCSI- und RAID-Controller
- SCSI/RAID-Hostcontroller
- Universal SCSI Controller (driver 1.12.0.0)
+ Systemgeräte
- ACPI-Einschaltknopf
- ACPI-Schalter
- DMA-Controller
- Erweiterter E/A-Bus
- Extended PnP BIOS Enumerator (driver 1.12.0.0)
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- Intel(R) 82801 PCI Bridge - 244E (driver 6.0.0.1013)
- Intel(R) 82801FB LPC Interface Controller - 2640 (driver 6.0.0.1013)
- Intel(R) 82801FB/FBM PCI Express Root Port - 2660 (driver 6.0.0.1013)
- Intel(R) 82801FB/FBM PCI Express Root Port - 2662 (driver 6.0.0.1013)
- Intel(R) 82801FB/FBM PCI Express Root Port - 2664 (driver 6.0.0.1013)
- Intel(R) 82801FB/FBM PCI Express Root Port - 2666 (driver 6.0.0.1013)
- Intel(R) 82801FB/FBM SMBus Controller - 266A (driver 6.0.0.1013)
- Intel(R) 82802 Firmwarehub
- Intel(R) 915G/P/GV/GL/PL/910GL PCI Express Root Port - 2581 (driver 6.3.0.1008)
- Intel(R) 915G/P/GV/GL/PL/910GL Processor to I/O Controller - 2580 (driver 6.3.0.1008)
- ISAPnP-Datenleseport
- Microcode-Updategerät
- Microsoft ACPI-konformes System
- Microsoft UAA-Bustreiber für High Definition Audio
- Microsoft-Systemverwaltungs-BIOS-Treiber
- Numerischer Coprozessor
- PCI-Bus
- PnP-Softwaregeräte-Enumerator
- Programmierbarer Interruptcontroller
- System CMOS/Echtzeituhr
- Systemlautsprecher
- Systemplatine
- Systemplatine
- Systemzeitgeber
- Terminalserver-Geräteumleitung
- Terminalserver-Maustreiber
- Terminalserver-Tastaturtreiber
- Verwaltung logischer Datenträger
- Volume-Manager
+ Tastaturen
- HID-Tastatur
- Microsoft eHome MCIR 109 Keyboard
- Microsoft eHome MCIR Keyboard
- Microsoft eHome Remote Control Keyboard keys
+ USB-Controller
- eHome Infrared Receiver
- Intel(R) 82801FB/FBM USB Universal Host Controller - 2658 (driver 6.0.0.1011)
- Intel(R) 82801FB/FBM USB Universal Host Controller - 2659 (driver 6.0.0.1011)
- Intel(R) 82801FB/FBM USB Universal Host Controller - 265A (driver 6.0.0.1011)
- Intel(R) 82801FB/FBM USB Universal Host Controller - 265B (driver 6.0.0.1011)
- Intel(R) 82801FB/FBM USB2 Enhanced Host Controller - 265C (driver 6.0.0.1011)
- USB-Massenspeichergerät
- USB-Massenspeichergerät
- USB-Root-Hub
- USB-Root-Hub
- USB-Root-Hub
- USB-Root-Hub
- USB-Root-Hub
- USB-Verbundgerät
cpu registers:
eax = 05011b80
ebx = 03560000
ecx = 6e617269
edx = 6d2f7365
esi = 05011b78
edi = 05010688
eip = 7c920f29
esp = 06dbf1f4
ebp = 06dbf200
stack dump:
06dbf1f4 00 00 56 03 c8 0f 01 05 - 01 00 00 00 d4 f2 db 06 ..V.............
06dbf204 5c 0d 92 7c a8 15 01 05 - 69 72 61 6e b8 f2 db 06 \..|....iran....
06dbf214 00 00 00 00 b0 3c 56 03 - d0 0f 01 05 b0 3c 56 03 .....<V......<V.
06dbf224 00 00 00 00 07 00 00 00 - 08 40 56 03 00 00 00 04 .........@V.....
06dbf234 38 42 56 03 88 01 56 03 - d8 41 56 03 10 40 56 03 8BV...V..AV..@V.
06dbf244 08 40 56 03 60 01 56 03 - 00 00 00 00 00 00 00 00 .@V.`.V.........
06dbf254 08 40 56 03 48 03 56 03 - 10 40 56 03 04 00 00 00 .@V.H.V..@V.....
06dbf264 48 03 56 03 00 00 56 03 - 48 03 56 03 00 00 56 03 H.V...V.H.V...V.
06dbf274 d8 05 00 00 00 00 00 00 - 00 00 00 00 18 ee 01 00 ................
06dbf284 02 00 00 00 e4 f1 db 06 - eb 06 92 7c 8c ff db 06 ...........|....
06dbf294 d1 8d 00 00 c4 f2 db 06 - 00 00 56 03 07 04 00 00 ..........V.....
06dbf2a4 00 00 00 40 10 1c 56 03 - 00 00 00 00 00 00 00 00 ...@..V.........
06dbf2b4 ff ff 01 00 9e 02 00 00 - 18 f2 db 06 18 ee db 06 ................
06dbf2c4 8c ff db 06 18 ee 91 7c - 70 05 92 7c ff ff ff ff .......|p..|....
06dbf2d4 28 f3 db 06 13 ed 09 11 - 00 00 56 03 00 00 00 00 (.........V.....
06dbf2e4 d0 0f 01 05 10 40 56 03 - fc 1b 09 11 d0 0f 01 05 .....@V.........
06dbf2f4 05 00 00 00 00 00 00 00 - 00 00 00 00 4b 38 07 00 ............K8..
06dbf304 7c 7b 0a 11 44 78 0a 11 - f8 f2 db 06 44 f3 db 06 |{..Dx......D...
06dbf314 98 20 09 11 4b 38 07 00 - 44 78 0a 11 00 00 00 00 ....K8..Dx......
06dbf324 d0 0f 01 05 44 f3 db 06 - a9 20 09 11 05 00 00 00 ....D...........
disassembling:
1304bf30 public madExcept.CallThreadProcSafe: ; function entry point
1304bf30 push ebp
1304bf31 mov ebp, esp
1304bf33 push ebx
1304bf34 mov ebx, esp
1304bf36 mov eax, [ebp+$c]
1304bf39 push eax
1304bf3a mov eax, [ebp+8]
1304bf3d > call eax
1304bf3f cmp ebx, esp
1304bf41 jz loc_1304bf6a
1304bf43 ja loc_1304bf61
1304bf45 push eax
1304bf46 mov eax, ebx
1304bf48 mov ebx, esp
1304bf4a add ebx, 4
1304bf4d sub ebx, eax
1304bf4f pop eax
1304bf50 cmp ebx, $c
1304bf53 ja loc_1304bf6a
1304bf55 test ebx, 3
1304bf5b jnz loc_1304bf6a
1304bf5d sub esp, ebx
1304bf5f jmp loc_1304bf6a
1304bf61 sub ebx, esp
1304bf63 cmp ebx, 4
1304bf66 jnz loc_1304bf6a
1304bf68 add esp, ebx
1304bf6a pop ebx
[...]
error details:
Startup after Hibernate.
date/time : 2006-09-12, 19:46:38, 698ms
computer name : MUNDUS
user name : Marvin <admin>
operating system : Windows XP Service Pack 2 build 2600
system language : German
system up time : 3 days 1 hour
program up time : 19 hours 23 minutes
processors : 2x Intel(R) Pentium(R) 4 CPU 3.60GHz
physical memory : 340/1023 MB (free/total)
free disk space : (E:) 13,42 GB (D:) 93,36 GB
display mode : 1280x1024, 32 bit
process id : $bd4
allocated memory : 33,82 MB
executable : miranda32.exe
current module : kexx.dll
module date/time : 2006-08-18 02:23
version : 0.0.1.4
madExcept version : 3.0b
callstack crc : $10f94518, $62857520, $62857520
exception number : 1
exception class : EAccessViolation
exception message : Zugriffsverletzung bei Adresse 7C921F6C in Modul 'ntdll.dll'. Lesen von Adresse 03000064.
thread $b10: <priority:-1>
7c921f6c +1998 ntdll.dll RtlAllocateHeap
1304bf3d +000d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +0037 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
11092458 +0000 rss.dll
main thread ($fb0):
7c91eb94 +0 ntdll.dll KiFastSystemCallRet
77d18a1b +a USER32.dll DispatchMessageW
thread $834:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9a9 +0a ntdll.dll NtWaitForMultipleObjects
7c8094dc +00 kernel32.dll WaitForMultipleObjectsEx
77d19603 +00 USER32.dll MsgWaitForMultipleObjectsEx
77d196b3 +1a USER32.dll MsgWaitForMultipleObjects
thread $e90:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91d85a +0a ntdll.dll NtDelayExecution
7c8023e7 +4b kernel32.dll SleepEx
7c80244c +0a kernel32.dll Sleep
thread $b94:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
thread $cb4:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
thread $610:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
036d518e +00 shlext.dll
thread $c14:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
77d24abd +3b USER32.dll GetMessageA
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $e68:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
77d191fc +26 USER32.dll GetMessageW
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
220242ae +00 updater.dll
thread $308:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91d85a +0a ntdll.dll NtDelayExecution
7c8023e7 +4b kernel32.dll SleepEx
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $30c: <priority:-15>
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
7c80252d +0d kernel32.dll WaitForSingleObject
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
12665651 +00 loadavatars.dll
thread $678:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
7c80252d +0d kernel32.dll WaitForSingleObject
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
127ad60e +00 tabsrmm.dll
thread $fe0:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91d85a +0a ntdll.dll NtDelayExecution
7c8023e7 +4b kernel32.dll SleepEx
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $160:
7c91eb94 +0 ntdll.dll KiFastSystemCallRet
7c91e9a9 +a ntdll.dll NtWaitForMultipleObjects
thread $ec0:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9a9 +0a ntdll.dll NtWaitForMultipleObjects
7c8094dc +00 kernel32.dll WaitForMultipleObjectsEx
7c80a070 +13 kernel32.dll WaitForMultipleObjects
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $87c at:
76628951 +00 userenv.dll
thread $df4:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
71a14376 +5e WS2_32.dll WSARecv
71a32e9e +2e WSOCK32.dll recv
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
250efcdd +00 icq.dll
thread $770: <priority:1>
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e319 +0a ntdll.dll NtRemoveIoCompletion
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $c84 at:
719bdbb3 +00 mswsock.dll
thread $d38:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
71a20e2b +82 WS2_32.dll WSAAccept
71a2103a +12 WS2_32.dll accept
77c0a3ad +a6 msvcrt.dll _endthreadex
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $df4 at:
77c0a43d +62 msvcrt.dll _beginthreadex
thread $640:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $df4 at:
250ef90b +00 icq.dll
thread $9fc:
7c91eb94 +0 ntdll.dll KiFastSystemCallRet
7c91d85a +a ntdll.dll NtDelayExecution
thread $c98:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e319 +0a ntdll.dll NtRemoveIoCompletion
7c80a740 +23 kernel32.dll GetQueuedCompletionStatus
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
6c29b6a0 +00 dxtrans.dll
thread $abc:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e319 +0a ntdll.dll NtRemoveIoCompletion
7c80a740 +23 kernel32.dll GetQueuedCompletionStatus
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
6c29b6a0 +00 dxtrans.dll
thread $af8:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e319 +0a ntdll.dll NtRemoveIoCompletion
7c80a740 +23 kernel32.dll GetQueuedCompletionStatus
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
6c29b6a0 +00 dxtrans.dll
thread $f74:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e319 +0a ntdll.dll NtRemoveIoCompletion
7c80a740 +23 kernel32.dll GetQueuedCompletionStatus
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
6c29b6a0 +00 dxtrans.dll
thread $b6c:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e397 +0a ntdll.dll NtReplyWaitReceivePortEx
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $d84 at:
77e6760d +00 RPCRT4.dll
thread $e34:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e319 +0a ntdll.dll NtRemoveIoCompletion
7c80a740 +23 kernel32.dll GetQueuedCompletionStatus
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
6c29b6a0 +00 dxtrans.dll
thread $e78:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e319 +0a ntdll.dll NtRemoveIoCompletion
7c80a740 +23 kernel32.dll GetQueuedCompletionStatus
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
6c29b6a0 +00 dxtrans.dll
thread $bd8:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e319 +0a ntdll.dll NtRemoveIoCompletion
7c80a740 +23 kernel32.dll GetQueuedCompletionStatus
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
6c29b6a0 +00 dxtrans.dll
thread $66c:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e319 +0a ntdll.dll NtRemoveIoCompletion
7c80a740 +23 kernel32.dll GetQueuedCompletionStatus
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
6c29b6a0 +00 dxtrans.dll
thread $9a0:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
7c80252d +0d kernel32.dll WaitForSingleObject
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $8fc at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $e64:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
71a14376 +5e WS2_32.dll WSARecv
71a32e9e +2e WSOCK32.dll recv
7c92503e +43 ntdll.dll bsearch
7c9253f0 +d7 ntdll.dll RtlFindActivationContextSectionString
7c92503e +43 ntdll.dll bsearch
7c92096d +0c ntdll.dll RtlReleasePebLock
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $8fc at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $afc: <priority:-1>
7c91eb94 +000 ntdll.dll KiFastSystemCallRet
7c91e9be +00a ntdll.dll NtWaitForSingleObject
7c8025c5 +085 kernel32.dll WaitForSingleObjectEx
7c80252d +00d kernel32.dll WaitForSingleObject
13044d49 +269 kexx.dll madExcept HandleException
1304bff1 +081 kexx.dll madExcept ThreadExceptFrame
7c91eaf5 +009 ntdll.dll KiUserExceptionDispatcher
7c92096d +00c ntdll.dll RtlReleasePebLock
1304bf3d +00d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +037 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
11092458 +000 rss.dll
thread $b24: <priority:-1>
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e58f +0a ntdll.dll NtSetEventBoostPriority
7c929074 +1d ntdll.dll RtlpUnWaitCriticalSection
7c911105 +18 ntdll.dll RtlLeaveCriticalSection
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
11092458 +00 rss.dll
thread $dc4: <priority:-1>
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
71a0150a +6a WS2HELP.dll WahReferenceContextByHandle
71a12e64 +a4 WS2_32.dll select
7c92503e +43 ntdll.dll bsearch
7c9253f0 +d7 ntdll.dll RtlFindActivationContextSectionString
7c92096d +0c ntdll.dll RtlReleasePebLock
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($fb0) at:
11092458 +00 rss.dll
modules:
00400000 miranda32.exe 0.6.0.8 D:\Programme\Miranda IM
01490000 avatarhistw.dll D:\Programme\Miranda IM\Plugins
014a0000 buddyexpectator.dll D:\Programme\Miranda IM\Plugins
01840000 crashrpt.dll D:\Programme\Miranda IM\Plugins
018e0000 dbeditorpp.dll 3.1.3.7 D:\Programme\Miranda IM\Plugins
01900000 folders.dll D:\Programme\Miranda IM\Plugins
01940000 historypp.dll 1.5.0.109 D:\Programme\Miranda IM\Plugins
01ba0000 icolib.dll 0.0.1.3 D:\Programme\Miranda IM\Plugins
03200000 mcontacts.dll D:\Programme\Miranda IM\Plugins
03220000 mtooltip.dll D:\Programme\Miranda IM\Plugins
03350000 PNGImg.dll D:\Programme\Miranda IM\PLUGINS
03470000 newstatusnotifyw.dll 1.2.2.4 D:\Programme\Miranda IM\Plugins
034a0000 nudge.dll 0.0.1.11 D:\Programme\Miranda IM\Plugins
034e0000 popup.dll 2.0.3.97 D:\Programme\Miranda IM\Plugins
036d0000 shlext.dll D:\Programme\Miranda IM\Plugins
03730000 typingnotify.dll 0.0.1.7 D:\Programme\Miranda IM\Plugins
03860000 skype.dll 0.0.0.26 D:\Programme\Miranda IM\Plugins
03ae0000 versioninfo.dll D:\Programme\Miranda IM\Plugins
03c30000 whenwasit.dll D:\Programme\Miranda IM\Plugins
03c90000 whoisreadingmystatusmsg.dll D:\Programme\Miranda IM\Plugins
049f0000 shdoclc.dll 6.0.2900.2180 E:\WINDOWS\system32
0ffd0000 rsaenh.dll 5.1.2600.2161 E:\WINDOWS\system32
10000000 4x4x4.dll D:\Programme\Miranda IM\Plugins
11090000 rss.dll D:\Programme\Miranda IM\Plugins
11100000 autoreplacer.dll D:\Programme\Miranda IM\Plugins
11bd0000 startupstatus.dll D:\Programme\Miranda IM\Plugins
11cd0000 keepstatus.dll D:\Programme\Miranda IM\Plugins
12000000 xstatus_ICQ.dll D:\Programme\Miranda IM\Icons
12160000 clist_modern.dll 0.4.3.46 D:\Programme\Miranda IM\Plugins
123e0000 dbx_3x.dll D:\Programme\Miranda IM\Plugins
124e0000 import.dll 0.9.2.0 D:\Programme\Miranda IM\Plugins
12660000 loadavatars.dll 0.0.2.9 D:\Programme\Miranda IM\Plugins
12680000 msn.dll 0.6.0.1 D:\Programme\Miranda IM\Plugins
126e0000 png2dib.dll 0.1.3.1 D:\Programme\Miranda IM\Plugins
12760000 tabsrmm.dll 1.1.0.7 D:\Programme\Miranda IM\Plugins
13000000 kexx.dll 0.0.1.4 D:\Programme\Miranda IM\Plugins
16660000 advsplashscreen.dll 0.1.1.7 D:\Programme\Miranda IM\Plugins
20000000 xpsp2res.dll 5.1.2600.2180 E:\WINDOWS\system32
22000000 updater.dll 0.4.11.0 D:\Programme\Miranda IM\Plugins
22070000 worldtime.dll D:\Programme\Miranda IM\Plugins
24000000 spamfilter.dll 2.5.2.4 D:\Programme\Miranda IM\Plugins
24200000 autoshutdown.dll 1.3.1.0 D:\Programme\Miranda IM\Plugins
25000000 icq.dll 0.3.7.1 D:\Programme\Miranda IM\Plugins
25a20000 mtextcontrol.dll D:\Programme\Miranda IM\Plugins
27300000 historystats.dll D:\Programme\Miranda IM\Plugins
28110000 smileyaddw.dll 0.1.12.7 D:\Programme\Miranda IM\Plugins
31020000 linklist.dll D:\Programme\Miranda IM\Plugins
320b0000 xstatusnotify.dll 0.1.1.0 D:\Programme\Miranda IM\Plugins
4eba0000 gdiplus.dll 5.1.3102.2180 E:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82
51580000 MSDBG2.DLL 7.0.9466.0 E:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG
51660000 PDM.DLL 7.0.9466.0 E:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG
51810000 mdmui.dll 7.0.9466.0 E:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\1031
590b0000 wship6.dll 5.1.2600.2180 E:\WINDOWS\System32
597d0000 NETAPI32.dll 5.1.2600.2952 E:\WINDOWS\system32
5b0f0000 uxtheme.dll 6.0.2900.2180 E:\WINDOWS\system32
5e6e0000 pngfilt.dll 6.0.2900.2937 E:\WINDOWS\system32
5f1a0000 olepro32.dll 5.1.2600.2180 E:\WINDOWS\system32
60d20000 KeyboardHookDll.dll 10.0.4.33 D:\Programme\Other Stuff\Musik Match
62e10000 LPK.DLL 5.1.2600.2180 E:\WINDOWS\system32
63800000 ieview.dll 1.0.9.5 D:\Programme\Miranda IM\Plugins
66710000 hnetcfg.dll 5.1.2600.2180 E:\WINDOWS\system32
66d10000 ImgUtil.dll 6.0.2900.2180 E:\WINDOWS\system32
68100000 dssenh.dll 5.1.2600.2133 E:\WINDOWS\system32
6c040000 fingerprint.dll 0.0.0.33 D:\Programme\Miranda IM\Plugins
6c290000 dxtrans.dll 6.3.2900.2937 E:\WINDOWS\system32
6c2d0000 dxtmsft.dll 6.3.2900.2937 E:\WINDOWS\system32
6d910000 ddrawex.dll 5.3.2600.2180 E:\WINDOWS\system32
6f800000 PCRE.dll 5.0.1779.29128 D:\Programme\Miranda IM
70e00000 asycfilt.dll 5.1.2600.2180 E:\WINDOWS\system32
719b0000 mswsock.dll 5.1.2600.2180 E:\WINDOWS\system32
719f0000 wshtcpip.dll 5.1.2600.2180 E:\WINDOWS\System32
71a00000 WS2HELP.dll 5.1.2600.2180 E:\WINDOWS\system32
71a10000 WS2_32.dll 5.1.2600.2180 E:\WINDOWS\system32
71a30000 WSOCK32.dll 5.1.2600.2180 E:\WINDOWS\system32
72030000 weather.dll 0.3.5.12 D:\Programme\Miranda IM\Plugins
72240000 sensapi.dll 5.1.2600.2180 E:\WINDOWS\system32
72f70000 winspool.drv 5.1.2600.2180 E:\WINDOWS\system32
73250000 RICHED32.DLL 5.1.2600.0 E:\WINDOWS\system32
736d0000 DDRAW.dll 5.3.2600.2180 E:\WINDOWS\system32
73b30000 DCIMAN32.dll 5.1.2600.2180 E:\WINDOWS\system32
74640000 msls31.dll 3.10.349.0 E:\WINDOWS\system32
74670000 msimtf.dll 5.1.2600.2180 E:\WINDOWS\system32
746a0000 MSCTF.dll 5.1.2600.2575 E:\WINDOWS\system32
74db0000 RICHED20.dll 5.30.23.1221 E:\WINDOWS\system32
750f0000 wshbth.dll 5.1.2600.2180 E:\WINDOWS\system32
75250000 msctfime.ime 5.1.2600.2180 E:\WINDOWS\system32
75790000 USP10.dll 1.420.2600.2180 E:\WINDOWS\system32
75bf0000 jscript.dll 5.6.0.8831 E:\WINDOWS\system32
75d40000 mshtmled.dll 6.0.2900.2937 E:\WINDOWS\system32
75dc0000 mlang.dll 6.0.2900.2530 E:\WINDOWS\system32
75ec0000 MSVFW32.dll 5.1.2600.2180 E:\WINDOWS\system32
75f20000 browseui.dll 6.0.2900.2937 E:\WINDOWS\system32
76020000 MSVCP60.dll 6.2.3104.0 E:\WINDOWS\system32
76300000 WINSTA.dll 5.1.2600.2180 E:\WINDOWS\system32
76320000 MSIMG32.dll 5.1.2600.2180 E:\WINDOWS\system32
76330000 IMM32.DLL 5.1.2600.2180 E:\WINDOWS\system32
76350000 comdlg32.dll 6.0.2900.2180 E:\WINDOWS\system32
76620000 userenv.dll 5.1.2600.2180 E:\WINDOWS\system32
767a0000 schannel.dll 5.1.2600.2180 E:\WINDOWS\system32
76880000 CRYPTUI.dll 5.131.2600.2180 E:\WINDOWS\system32
76970000 SXS.DLL 5.1.2600.2180 E:\WINDOWS\system32
76ad0000 ATL.DLL 3.5.2284.0 E:\WINDOWS\system32
76af0000 WINMM.dll 5.1.2600.2180 E:\WINDOWS\system32
76bb0000 PSAPI.DLL 5.1.2600.2180 E:\WINDOWS\system32
76bf0000 wintrust.dll 5.131.2600.2180 E:\WINDOWS\system32
76c50000 imagehlp.dll 5.1.2600.2180 E:\WINDOWS\system32
76d20000 iphlpapi.dll 5.1.2600.2912 E:\WINDOWS\system32
76e40000 rtutils.dll 5.1.2600.2180 E:\WINDOWS\system32
76e50000 rasman.dll 5.1.2600.2180 E:\WINDOWS\system32
76e70000 TAPI32.dll 5.1.2600.2180 E:\WINDOWS\system32
76ea0000 RASAPI32.DLL 5.1.2600.2180 E:\WINDOWS\system32
76ee0000 DNSAPI.dll 5.1.2600.2938 E:\WINDOWS\system32
76f10000 wtsapi32.dll 5.1.2600.2180 E:\WINDOWS\system32
76f20000 WLDAP32.dll 5.1.2600.2180 E:\WINDOWS\system32
76f70000 winrnr.dll 5.1.2600.2180 E:\WINDOWS\System32
76f80000 rasadhlp.dll 5.1.2600.2938 E:\WINDOWS\system32
76f90000 CLBCATQ.DLL 2001.12.4414.308 E:\WINDOWS\system32
77010000 COMRes.dll 2001.12.4414.258 E:\WINDOWS\system32
770f0000 OLEAUT32.dll 5.1.2600.2180 E:\WINDOWS\system32
77180000 WININET.dll 6.0.2900.2937 E:\WINDOWS\system32
77230000 urlmon.dll 6.0.2900.2960 E:\WINDOWS\system32
773a0000 COMCTL32.dll 6.0.2900.2180 E:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9
774b0000 ole32.dll 5.1.2600.2726 E:\WINDOWS\system32
77730000 shdocvw.dll 6.0.2900.2937 E:\WINDOWS\system32
778f0000 SETUPAPI.dll 5.1.2600.2180 E:\WINDOWS\system32
77a50000 CRYPT32.dll 5.131.2600.2180 E:\WINDOWS\system32
77af0000 MSASN1.dll 5.1.2600.2180 E:\WINDOWS\system32
77b10000 appHelp.dll 5.1.2600.2180 E:\WINDOWS\system32
77bd0000 VERSION.dll 5.1.2600.2180 E:\WINDOWS\system32
77be0000 msvcrt.dll 7.0.2600.2180 E:\WINDOWS\system32
77c40000 msv1_0.dll 5.1.2600.2180 E:\WINDOWS\system32
77d10000 USER32.dll 5.1.2600.2622 E:\WINDOWS\system32
77da0000 ADVAPI32.dll 5.1.2600.2180 E:\WINDOWS\system32
77e50000 RPCRT4.dll 5.1.2600.2180 E:\WINDOWS\system32
77ef0000 GDI32.dll 5.1.2600.2818 E:\WINDOWS\system32
77f40000 SHLWAPI.dll 6.0.2900.2937 E:\WINDOWS\system32
77fc0000 Secur32.dll 5.1.2600.2180 E:\WINDOWS\system32
7c000000 MSVCR70.dll 7.0.9466.0 E:\WINDOWS\system32
7c360000 MSVCR71.dll 7.10.6014.4 E:\WINDOWS\system32
7c800000 kernel32.dll 5.1.2600.2945 E:\WINDOWS\system32
7c910000 ntdll.dll 5.1.2600.2180 E:\WINDOWS\system32
7c9d0000 SHELL32.dll 6.0.2900.2951 E:\WINDOWS\system32
7dbe0000 mshtml.dll 6.0.2900.2963 E:\WINDOWS\system32
processes:
000 Idle
004 System normal
370 smss.exe normal E:\WINDOWS\system32
3b4 csrss.exe
3cc winlogon.exe high E:\WINDOWS\system32
3fc services.exe normal E:\WINDOWS\system32
410 lsass.exe normal E:\WINDOWS\system32
4a0 Ati2evxx.exe normal E:\WINDOWS\system32
4c0 svchost.exe normal E:\WINDOWS\system32
514 svchost.exe
53c svchost.exe normal E:\WINDOWS\System32
5d0 svchost.exe
5f0 svchost.exe
5fc vsmon.exe normal E:\WINDOWS\system32\ZoneLabs
0e8 spoolsv.exe normal E:\WINDOWS\system32
550 sched.exe normal D:\Programme\Other Stuff\AntiVir PersonalEdition Classic
56c avguard.exe normal D:\Programme\Other Stuff\AntiVir PersonalEdition Classic
57c svchost.exe
634 svchost.exe normal E:\WINDOWS\System32
660 MDM.EXE normal E:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG
6f8 svchost.exe normal E:\WINDOWS\system32
840 Ati2evxx.exe normal E:\WINDOWS\system32
8c8 Explorer.EXE normal E:\WINDOWS
9b4 alg.exe
c38 PRISMSTA.EXE normal E:\WINDOWS\system32
c64 rundll32.exe normal E:\WINDOWS\system32
c90 SOUNDMAN.EXE normal E:\WINDOWS
cf8 zlclient.exe normal D:\Programme\Other Stuff\ZoneAlarm
d00 avgnt.exe normal D:\Programme\Other Stuff\AntiVir PersonalEdition Classic
d20 HDSentinel.exe normal D:\Programme\Other Stuff\Hard Disk Sentinel
d8c MemOptimizer.exe normal D:\Programme\Other Stuff\TuneUp Utilities
e48 SsAAD.exe normal D:\PROGRA~1\OTHERS~1\SONICS~1
f98 MMDiag.exe normal D:\Programme\Other Stuff\Musik Match
124 Azureus.exe normal D:\Programme\Other Stuff\Azureus
b08 taskmgr.exe high E:\WINDOWS\system32
ae4 MMJB.EXE normal D:\Programme\Other Stuff\Musik Match
d60 mim.exe normal D:\Programme\Other Stuff\Musik Match
ce8 mm_director.exe normal D:\Programme\Other Stuff\Musik Match
bd4 miranda32.exe normal D:\Programme\Miranda IM
cd8 mm_TDMEngine.exe normal D:\Programme\Other Stuff\Musik Match
b7c Skype.exe normal D:\Programme\Other Stuff\Skype
300 WINWORD.EXE normal D:\Programme\Office\OFFICE11
d28 FIREFOX.EXE normal D:\PROGRA~1\OTHERS~1\MORZIL~1
hardware:
+ Anschlüsse (COM und LPT)
- Kommunikationsanschluss (COM1)
+ Audio-, Video- und Gamecontroller
- Audiocodecs
- Creatix SAA7134, Hybrid Capture Device (driver 1.3.2.3)
- Legacy-Audiotreiber
- Legacy-Videoaufnahmegerät
- Mediensteuerungsgerät
- Realtek High Definition Audio (driver 5.10.0.5116)
- Videocodecs
+ Bluetooth-Funkgeräte
- Blutonium BCM2035 Bluetooth 2.4 GHz Single Chip Transceiver
- Microsoft Bluetooth-Auflistung
+ Computer
- ACPI-Multiprocessor-PC
+ DVD/CD-ROM-Laufwerke
- _NEC DVD_RW ND-3500AG
- HL-DT-ST DVD-ROM GDR8163B
+ Eingabegeräte (Human Interface Devices)
- HID-konformes Benutzersteuergerät
- HID-konformes Benutzersteuergerät
- HID-konformes Gerät
- HID-konformes Gerät
- HID-konformes Gerät
- HID-konformes Gerät
- Microsoft eHome Infrared Transceiver
- USB-HID (Human Interface Device)
- USB-HID (Human Interface Device)
+ Grafikkarte
- RADEON X800 (driver 6.14.10.6512)
- RADEON X800 Secondary (driver 6.14.10.6512)
+ IDE ATA/ATAPI-Controller
- Intel(R) 82801FB Ultra ATA Storage Controllers - 2651 (driver 6.1.0.1004)
- Intel(R) 82801FB/FBM Ultra ATA Storage Controllers - 266F (driver 6.1.0.1004)
- Primärer IDE-Kanal
- Primärer IDE-Kanal
- Sekundärer IDE-Kanal
+ IEEE 1394 Bus-Hostcontroller
- Texas Instruments OHCI-konformer IEEE 1394-Hostcontroller
+ Laufwerke
- Generic STORAGE DEVICE USB Device
- Generic STORAGE DEVICE USB Device
- Generic STORAGE DEVICE USB Device
- Generic STORAGE DEVICE USB Device
- Generic STORAGE DEVICE USB Device
- JetFlash TS128MJF2A USB Device
- WDC WD2000JD-55HBB0
- WDC WD2000JD-55HBB0
+ Modems
- PCI Soft Data Fax Modem with SmartCP (driver 7.32.0.0)
- Standardmodem über Bluetooth-Verbindung
+ Monitore
- Plug und Play-Monitor
+ Mäuse und andere Zeigegeräte
- HID-konforme Maus
- HID-konforme Maus
+ Netzwerkadapter
- 1394-Netzwerkadapter
- Bluetooth-Gerät (PAN)
- CREATIX 802.11g Adapter (driver 2.1.5.0)
- Realtek RTL8139/810x Family Fast Ethernet NIC (driver 5.620.1202.2004)
+ Prozessoren
- Intel(R) Pentium(R) 4 CPU 3.60GHz
- Intel(R) Pentium(R) 4 CPU 3.60GHz
+ SCSI- und RAID-Controller
- SCSI/RAID-Hostcontroller
- Universal SCSI Controller (driver 1.12.0.0)
+ Systemgeräte
- ACPI-Einschaltknopf
- ACPI-Schalter
- DMA-Controller
- Erweiterter E/A-Bus
- Extended PnP BIOS Enumerator (driver 1.12.0.0)
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- Intel(R) 82801 PCI Bridge - 244E (driver 6.0.0.1013)
- Intel(R) 82801FB LPC Interface Controller - 2640 (driver 6.0.0.1013)
- Intel(R) 82801FB/FBM PCI Express Root Port - 2660 (driver 6.0.0.1013)
- Intel(R) 82801FB/FBM PCI Express Root Port - 2662 (driver 6.0.0.1013)
- Intel(R) 82801FB/FBM PCI Express Root Port - 2664 (driver 6.0.0.1013)
- Intel(R) 82801FB/FBM PCI Express Root Port - 2666 (driver 6.0.0.1013)
- Intel(R) 82801FB/FBM SMBus Controller - 266A (driver 6.0.0.1013)
- Intel(R) 82802 Firmwarehub
- Intel(R) 915G/P/GV/GL/PL/910GL PCI Express Root Port - 2581 (driver 6.3.0.1008)
- Intel(R) 915G/P/GV/GL/PL/910GL Processor to I/O Controller - 2580 (driver 6.3.0.1008)
- ISAPnP-Datenleseport
- Microcode-Updategerät
- Microsoft ACPI-konformes System
- Microsoft UAA-Bustreiber für High Definition Audio
- Microsoft-Systemverwaltungs-BIOS-Treiber
- Numerischer Coprozessor
- PCI-Bus
- PnP-Softwaregeräte-Enumerator
- Programmierbarer Interruptcontroller
- System CMOS/Echtzeituhr
- Systemlautsprecher
- Systemplatine
- Systemplatine
- Systemzeitgeber
- Terminalserver-Geräteumleitung
- Terminalserver-Maustreiber
- Terminalserver-Tastaturtreiber
- Verwaltung logischer Datenträger
- Volume-Manager
+ Tastaturen
- HID-Tastatur
- Microsoft eHome MCIR 109 Keyboard
- Microsoft eHome MCIR Keyboard
- Microsoft eHome Remote Control Keyboard keys
+ USB-Controller
- eHome Infrared Receiver
- Intel(R) 82801FB/FBM USB Universal Host Controller - 2658 (driver 6.0.0.1011)
- Intel(R) 82801FB/FBM USB Universal Host Controller - 2659 (driver 6.0.0.1011)
- Intel(R) 82801FB/FBM USB Universal Host Controller - 265A (driver 6.0.0.1011)
- Intel(R) 82801FB/FBM USB Universal Host Controller - 265B (driver 6.0.0.1011)
- Intel(R) 82801FB/FBM USB2 Enhanced Host Controller - 265C (driver 6.0.0.1011)
- USB-Massenspeichergerät
- USB-Massenspeichergerät
- USB-Root-Hub
- USB-Root-Hub
- USB-Root-Hub
- USB-Root-Hub
- USB-Root-Hub
- USB-Verbundgerät
cpu registers:
eax = 036a0101
ebx = 036a0000
ecx = 036a39d8
edx = 03000064
esi = 036a39d0
edi = 6975673c
eip = 7c921f6c
esp = 086df07c
ebp = 086df29c
stack dump:
086df07c b0 37 6a 03 09 00 00 00 - b0 37 6a 03 02 00 00 00 .7j......7j.....
086df08c 01 00 00 00 94 f1 6d 08 - 41 00 6c 00 70 00 68 00 ......m.A.l.p.h.
086df09c eb 06 92 7c 6e 99 6a 03 - 49 01 00 00 27 98 6a 03 ...|n.j.I...'.j.
086df0ac 2f 00 2f 00 6a 00 6f 00 - 6b 00 75 00 73 00 6f 00 /./.j.o.k.u.s.o.
086df0bc 66 00 74 00 77 00 61 00 - 72 00 65 00 00 00 00 00 f.t.w.a.r.e.....
086df0cc 00 00 00 00 88 01 6a 03 - 88 01 6a 03 69 00 72 00 ......j...j.i.r.
086df0dc 61 00 6e 00 64 00 61 00 - 3c 67 75 69 00 00 00 00 a.n.d.a.<gui....
086df0ec 00 00 00 00 c8 3d 6a 03 - 00 00 00 00 00 00 00 00 .....=j.........
086df0fc 00 00 00 00 05 00 00 00 - 77 00 61 00 00 00 00 00 ........w.a.....
086df10c 10 3a 6a 03 7a 00 2e 00 - 18 3a 6a 03 2f 00 6d 00 .:j.z....:j./.m.
086df11c 00 00 00 00 00 00 00 00 - 00 00 00 00 2f 00 00 00 ............/...
086df12c 00 00 00 00 00 00 00 00 - 08 00 00 00 3c 00 00 00 ............<...
086df13c 00 00 00 00 3c 00 00 00 - 64 00 65 00 73 00 00 00 ....<...d.e.s...
086df14c d8 37 6a 03 3e 00 00 00 - 3c 00 2f 00 09 00 00 00 .7j.>...<./.....
086df15c 09 00 00 00 65 00 3e 00 - 00 00 6a 03 90 01 6a 03 ....e.>...j...j.
086df16c 0d 00 00 00 ad ce 00 00 - fc ee 6d 08 98 01 6a 03 ..........m...j.
086df17c 94 f2 6d 08 08 00 00 00 - 08 eb 92 7c 90 01 6a 03 ..m........|..j.
086df18c 05 eb 92 7c 0a 04 94 7c - 0c 04 94 7c ff ff ff ff ...|...|...|....
086df19c 00 00 00 00 7c d9 96 7c - 00 00 00 00 b8 f1 6d 08 ....|..|......m.
086df1ac c0 39 6a 03 cc f1 6d 08 - 75 1e 92 7c 05 00 00 00 .9j...m.u..|....
disassembling:
[...]
7c921c83 push esi
7c921c84 push dword ptr [ebp-$1c]
7c921c87 call -$10f8 ($7c920b94)
7c921c8c lea edx, [esi+8]
7c921c8f mov [ebp-$19c], edx
7c921c95 mov eax, [edx]
7c921c97 mov [ebp-$11c], eax
7c921c9d mov ecx, [edx+4]
7c921ca0 mov [ebp-$174], ecx
7c921ca6 jmp loc_7c92142e
7c921f49 mov esi, [eax+4]
7c921f4c sub esi, 8
7c921f4f mov [ebp-$38], esi
7c921f52 mov al, [esi+5]
7c921f55 mov [ebp-$1d], al
7c921f58 lea ecx, [esi+8]
7c921f5b mov edi, [ecx]
7c921f5d mov [ebp-$1b8], edi
7c921f63 mov edx, [esi+$c]
7c921f66 mov [ebp-$88], edx
7c921f6c > mov edx, [edx]
7c921f6e cmp edx, [edi+4]
7c921f71 jnz loc_7c94436a
7c921f77 cmp edx, ecx
7c921f79 jnz loc_7c94436a
7c921f7f mov ecx, [ebp-$88]
7c921f85 mov [ecx], edi
7c921f87 mov [edi+4], ecx
7c921f8a cmp edi, ecx
7c921f8c jnz loc_7c921fbd
7c921f8e movzx ecx, word ptr [esi]
7c921f91 mov edx, ecx
7c921f93 shr edx, 3
7c921f96 mov [ebp-$1c0], edx
7c921f9c and ecx, 7
7c921f9f xor edi, edi
7c921fa1 inc edi
7c921fa2 shl edi, cl
7c921fa4 mov [ebp-$b0], edi
7c921faa lea edi, [edx+ebx+$158]
7c921fb1 xor ecx, ecx
[...]