EurekaLog 6.0.14 Application: ------------------------------------------------------- 1.1 Start Date : Mon, 2 Nov 2009 11:32:08 +0000 1.2 Name/Description: ModesXML.exe - (ModesXML) 1.3 Version Number : 1.2.0.149 1.4 Parameters : 1.5 Compilation Date: Fri, 30 Oct 2009 09:11:29 +0000 1.6 Up Time : 5 hours, 23 minutes, 27 seconds Exception: ---------------------------------------------------- 2.1 Date : Mon, 2 Nov 2009 16:55:36 +0000 2.2 Address : 0042B701 2.3 Module Name : ModesXML.exe - (ModesXML) 2.4 Module Version: 1.2.0.149 2.5 Type : EListError 2.6 Message : List index out of bounds (8). 2.7 ID : 5E46 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.1 ID : dul0ajg 3.2 Name : ITS 3.3 Email : a.j.gray@durham.ac.uk 3.4 Company : University of Durham 3.5 Privileges: SeChangeNotifyPrivilege - ON SeSecurityPrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeSystemtimePrivilege - OFF SeShutdownPrivilege - OFF SeRemoteShutdownPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeSystemProfilePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeLoadDriverPrivilege - ON SeCreatePagefilePrivilege - OFF SeIncreaseQuotaPrivilege - OFF SeUndockPrivilege - ON SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON Active Controls: -------------------------------------------------------------------------------------------- 4.1 Form Class : TfrmMain.UnicodeClass 4.2 Form Text : ModesXML - [Application: Project files. File: DDR/AUC cataloguing plan] 4.3 Control Class: TfrmDisplay.UnicodeClass 4.4 Control Text : Computer: ------------------------------------------------------------------------------- 5.1 Name : C5LIB-02 5.2 Total Memory : 2001 Mb 5.3 Free Memory : 1356 Mb 5.4 Total Disk : 1.95 Gb 5.5 Free Disk : 0.51 Gb 5.6 System Up Time: 7 hours, 13 seconds 5.7 Processor : Intel(R) Core(TM)2 Duo CPU E6550 @ 2.33GHz 5.8 Display Mode : 1152 x 864, 32 bit 5.9 Display DPI : 96 5.10 Video Card : Intel(R) Q35 Express Chipset Family (driver 6.14.10.4837) 5.11 Printer : HP LaserJet 2100 PCL6 (driver 6.0.6001.22116) Operating System: ------------------------------------ 6.1 Type : Microsoft Windows XP 6.2 Build # : 2600 6.3 Update : Service Pack 3 6.4 Language: English 6.5 Charset : 0 Network: --------------------------------- 7.1 IP Address: 129.234.109.005 7.2 Submask : 255.255.255.000 7.3 Gateway : 129.234.109.254 7.4 DNS 1 : 129.234.004.013 7.5 DNS 2 : 129.234.004.009 7.6 DHCP : OFF Custom Information: ------------------------------------------------------------------------------------------------------- 8.1 Server Type : Remote 8.2 StyleSheetPath : S:\Guest\Modes\stylesheets\ 8.3 ResourcePath : S:\Guest\Modes\ 8.4 DataPath : \ 8.5 DTDPath : S:\Guest\Modes\dtds\ 8.6 ServerName : lewis.dur.ac.uk 8.7 ServerPort : 16000 8.8 AppDataFolder : \\stevens\dul0ajg\application_data\ModesXML\ 8.9 AppTempFolder : \\stevens\dul0ajg\application_data\ModesXML\Temp\ 8.10 Transport : nxWinsockModes 8.11 Logged in user : dul0ajg 8.12 Server version : 2.0701 (ModesXML@lewis.dur.ac.uk) 8.13 Uptime : 3.17:59:17 8.14 Sessions : 30 8.15 Databases : 36 8.16 Transaction Contexts : 36 8.17 Cursors : 198 8.18 Statements : 0 8.19 Folders : 7 8.20 Tables : 23 8.21 Block Cache Available (Recently / Frequently): 523,264 ( 521,268 / 1,996 ) kbyte 8.22 Block Cache Used (Recently / Frequently) : 1,588 ( 1,588 / 0 ) kbyte 8.23 Block Cache Tracked (Recently / Frequently) : 28 ( 28 / 0 ) kbyte 8.24 Block Cache Miss Recently Used : 22,582 8.25 Block Cache Miss Frequently Used : 0 8.26 Block Cache Hit Recently Used : 36,474,448 8.27 Block Cache Hit Frequently Used : 0 8.28 Block Cache Eviction Recently Used : 0 8.29 Block Cache Eviction Frequently Used : 0 8.30 Transaction Commit : 668 8.31 Transaction Commit Nested : 2,643 8.32 Transaction Rollback : 4 8.33 Transaction Rollback Nested : 0 8.34 Blocks Read : 22,582 8.35 Blocks Written : 2,634 8.36 Temporary Storage in use : 0 kbyte 8.37 Registered User Name : Durham University Library 8.38 Registered Institution : Durham University Library 8.39 Max. number of screens : 9 8.40 Number of users logged on : 1 8.41 User dul0ajg : 129.234.109.5 Call Stack Information: ------------------------------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method |Line | ------------------------------------------------------------------------------------------------------------- |Running Thread: ID=3800; Priority=0; Class=; [Main] | |-----------------------------------------------------------------------------------------------------------| |0090AC95|ModesXML.exe|ModesBase.pas |TModesColumns |GetItem |773[1] | |0090AC88|ModesXML.exe|ModesBase.pas |TModesColumns |GetItem |772[0] | |00C05F52|ModesXML.exe|fdisplay.pas |TfrmDisplay |SelectCell |7018[87] | |00C05BB8|ModesXML.exe|fdisplay.pas |TfrmDisplay |SelectCell |6931[0] | |00BFF560|ModesXML.exe|fdisplay.pas |TfrmDisplay |CMDialogKey |3936[18] | |7E42B3C6|user32.dll | | |CallNextHookEx | | |00898E7D|ModesXML.exe|dxBar.pas | |dxBarWndProcHook |13542[30]| |7C802550|kernel32.dll| | |WaitForSingleObjectEx | | |7C80253D|kernel32.dll| | |WaitForSingleObject | | |7C90DA28|ntdll.dll | | |NtReleaseMutant | | |7C8024C1|kernel32.dll| | |ReleaseMutex | | |7E42B3FC|user32.dll | | |CallNextHookEx | | |00554268|ModesXML.exe|TntControls.pas |TWinControlTrap |WindowProc |672[19] | |7E42A034|user32.dll | | |CallWindowProcW | | |7E42A01E|user32.dll | | |CallWindowProcW | | |00553EBC|ModesXML.exe|TntControls.pas |TWinControlTrap |Win32Proc |560[12] | |7E42B3C6|user32.dll | | |CallNextHookEx | | |00898E7D|ModesXML.exe|dxBar.pas | |dxBarWndProcHook |13542[30]| |7E42F406|user32.dll | | |SendMessageA | | |7E42F3C2|user32.dll | | |SendMessageA | | |00C38AF5|ModesXML.exe|ModesXML.dpr | | |175[17] | |7C90DCB8|ntdll.dll | | |ZwSetInformationThread | | |-----------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3824; Priority=0; Class= | |-----------------------------------------------------------------------------------------------------------| |7C90DF48|ntdll.dll | | |NtWaitForMultipleObjects| | |7C90DDA8|ntdll.dll | | |ZwSetTimer | | |7C8095D8|kernel32.dll| | |WaitForMultipleObjectsEx| | |7C80A110|kernel32.dll| | |WaitForMultipleObjects | | |7C80A0FD|kernel32.dll| | |WaitForMultipleObjects | | |0060E9CF|ModesXML.exe|nxsrFileImplWin32.pas |TnxFlushThread |Wait |1837[2] | |0060E9BC|ModesXML.exe|nxsrFileImplWin32.pas |TnxFlushThread |Wait |1835[0] | |0060E906|ModesXML.exe|nxsrFileImplWin32.pas |TnxFlushThread |DoExecute |1811[29] | |0060E7E4|ModesXML.exe|nxsrFileImplWin32.pas |TnxFlushThread |DoExecute |1782[0] | |0060E5DB|ModesXML.exe|nxsrFileImplWin32.pas | |FlushThreadProc |1723[17] | |-----------------------------------------------------------------------------------------------------------| |Calling Thread: ID=3800; Priority=0; Class=; [Main] | |-----------------------------------------------------------------------------------------------------------| |00C389D3|ModesXML.exe|ModesXML.dpr | | |158[0] | |7C90DCB8|ntdll.dll | | |ZwSetInformationThread | | |-----------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3332; Priority=15; Class=TnxHeartbeatThread | |-----------------------------------------------------------------------------------------------------------| |7C90DF58|ntdll.dll | | |ZwWaitForSingleObject | | |7C802550|kernel32.dll| | |WaitForSingleObjectEx | | |7C80253D|kernel32.dll| | |WaitForSingleObject | | |7C802530|kernel32.dll| | |WaitForSingleObject | | |006A6411|ModesXML.exe|nxptBasePooledTransport.pas|TnxHeartbeatThread |InnerExecute |2218[3] | |005D6D28|ModesXML.exe|nxllThread.pas |TnxInitThread |DoExecute |704[14] | |005D6B45|ModesXML.exe|nxllThread.pas |TnxThread |Execute |507[3] | |-----------------------------------------------------------------------------------------------------------| |Calling Thread: ID=3800; Priority=0; Class=; [Main] | |-----------------------------------------------------------------------------------------------------------| |005D6A2F|ModesXML.exe|nxllThread.pas |TnxThread |AfterConstruction |418[1] | |005D6A2C|ModesXML.exe|nxllThread.pas |TnxThread |AfterConstruction |417[0] | |005D6C2C|ModesXML.exe|nxllThread.pas |TnxInitThread |AfterConstruction |667[1] | |006A630F|ModesXML.exe|nxptBasePooledTransport.pas|TnxHeartbeatThread |Create |2191[7] | |006A6204|ModesXML.exe|nxptBasePooledTransport.pas|TnxHeartbeatThread |Create |2184[0] | |006A9F42|ModesXML.exe|nxptBasePooledTransport.pas|TnxBasePooledTransport|scStarting |3914[30] | |006A9E50|ModesXML.exe|nxptBasePooledTransport.pas|TnxBasePooledTransport|scStarting |3884[0] | |006B3119|ModesXML.exe|nxtwWinsockTransport.pas |TnxWinsockTransport |scStarting |1612[1] | |004B7277|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scSetState |1945[38] | |7C912D19|ntdll.dll | | |LdrUnlockLoaderLock | | |004B754D|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scShouldFollowTransition|1995[6] | |004B6F38|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scDependentStateChange |1843[9] | |004B6CC7|ModesXML.exe|nxllComponent.pas |TnxStateComponent |nxcNotification |1763[4] | |004B6C80|ModesXML.exe|nxllComponent.pas |TnxStateComponent |nxcNotification |1759[0] | |006A2782|ModesXML.exe|nxllTransport.pas |TnxBaseTransport |nxcNotification |2019[1] | |006A276C|ModesXML.exe|nxllTransport.pas |TnxBaseTransport |nxcNotification |2018[0] | |006B2DFE|ModesXML.exe|nxtwWinsockTransport.pas |TnxWinsockTransport |nxcNotification |1561[1] | |004B616B|ModesXML.exe|nxllComponent.pas |TnxComponent |nxcNotifyDependents |1314[10] | |004B7649|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scStateChanging |2050[6] | |004B7173|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scSetState |1921[14] | |7C901000|ntdll.dll | | |RtlEnterCriticalSection | | |7C912CC9|ntdll.dll | | |LdrLockLoaderLock | | |00492604|ModesXML.exe|nxllUtils.pas | |nxCmpPtr |526[1] | |004906D3|ModesXML.exe|nxllList.pas |TnxSortedList |slCompare |712[1] | |00490666|ModesXML.exe|nxllList.pas |TnxSortedList |Find |689[7] | |00490483|ModesXML.exe|nxllList.pas |TnxSortedList |Add |645[5] | |0048F1B4|ModesXML.exe|nxllSync.pas |TnxPadlock |Unlock |372[1] | |00490A02|ModesXML.exe|nxllList.pas |TnxListPadlock |EndWrite |878[1] | |00490715|ModesXML.exe|nxllList.pas |TnxListSyncAccess |Add |724[4] | |004906DC|ModesXML.exe|nxllList.pas |TnxListSyncAccess |Add |720[0] | |004B5D7A|ModesXML.exe|nxllComponent.pas |TnxComponent |nxcAddDependent |1189[5] | |005EA14F|ModesXML.exe|nxdb.pas |TnxBaseSession |nxcAddDependent |5135[4] | |004B5E08|ModesXML.exe|nxllComponent.pas |TnxComponent |nxcAddDependingOn |1198[5] | |004B6F67|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scSetActive |1867[2] | |008FB623|ModesXML.exe|dmUser.pas |TuserDm |ConnectToServer |416[74] | |008FB088|ModesXML.exe|dmUser.pas |TuserDm |ConnectToServer |342[0] | |008FDD28|ModesXML.exe|dmUser.pas |TuserDm |Login |820[2] | |008FDCF8|ModesXML.exe|dmUser.pas |TuserDm |Login |818[0] | |00C38A90|ModesXML.exe|ModesXML.dpr | | |169[11] | |7C90DCB8|ntdll.dll | | |ZwSetInformationThread | | ------------------------------------------------------------------------------------------------------------- Modules Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |Handle |Name |Description |Version |Size |Modified |Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |00400000|ModesXML.exe |ModesXML |1.2.0.149 |11730432|2009-11-02 10:45:14|J:\modes\MXML\Client | |01810000|Normaliz.dll |Unicode Normalization DLL |6.0.5441.0 |23552 |2006-06-29 07:05:44|C:\WINDOWS\system32 | |02B40000|xpsp2res.dll |Service Pack 2 Messages |5.1.2600.5512 |2897920 |2008-04-13 17:39:24|C:\WINDOWS\system32 | |036D0000|ModesPDF.dll |WPViewPDF |1.4.1.0 |1108352 |2007-07-13 09:52:24|J:\modes\MXML\Client | |04270000|SPGRMR.DLL |SPTIP Grammar DLL |5.1.2600.5512 |62976 |2008-04-13 16:43:18|C:\WINDOWS\IME | |04300000|XfoInterface41.dll |XfoInterface |4.1.2007.704 |225280 |2007-07-04 11:04:30|D:\ModesXML\Client\AHFO4_1 | |04340000|pthreadVSE2.dll | |2.2.0.0 |86071 |2005-04-08 13:27:02|D:\ModesXML\Client\AHFO4_1 | |04360000|XfoEngine41.dll |XfoEngine |4.1.2007.704 |1523712 |2007-07-04 11:02:48|D:\ModesXML\Client\AHFO4_1 | |044E0000|XfoFont41.dll |XfoFont |4.1.2007.704 |147456 |2007-07-04 10:53:46|D:\ModesXML\Client\AHFO4_1 | |04510000|AHFont20.dll | | |987136 |2007-07-04 10:53:40|D:\ModesXML\Client\AHFO4_1 | |04610000|XfoDMC41.dll |XfoDMC |4.1.2007.704 |360448 |2007-07-04 10:52:58|D:\ModesXML\Client\AHFO4_1 | |04670000|XfoText41.dll |XfoText |4.1.2007.704 |86016 |2007-07-04 10:54:00|D:\ModesXML\Client\AHFO4_1 | |04900000|XfoCommon41.dll |XfoCommon |4.1.2007.704 |909312 |2007-07-04 10:53:32|D:\ModesXML\Client\AHFO4_1 | |049F0000|XfoGraphic41.dll |XfoGraphic |4.1.2007.704 |1765376 |2007-07-04 11:00:14|D:\ModesXML\Client\AHFO4_1 | |04BB0000|PDFToolPage10.dll | | |749568 |2007-07-04 10:53:56|D:\ModesXML\Client\AHFO4_1 | |04C70000|AHGraphic20.dll | | |811008 |2007-06-29 19:40:04|D:\ModesXML\Client\AHFO4_1 | |04D40000|PDFExplorer21.dll | | |1118208 |2007-07-04 10:54:06|D:\ModesXML\Client\AHFO4_1 | |04E60000|PDFRes10.dll | | |3731456 |2007-07-04 10:54:02|D:\ModesXML\Client\AHFO4_1 | |051F0000|XfoHyphen41.dll |XfoHyphen |4.1.2007.704 |81920 |2007-07-04 11:00:22|D:\ModesXML\Client\AHFO4_1 | |05210000|XfoHyphenCH41.dll |XfoHyphenCH |4.1.2007.704 |835584 |2007-07-04 11:00:40|D:\ModesXML\Client\AHFO4_1 | |052E0000|XfoTrans41.dll |XfoTrans |4.1.2007.704 |110592 |2007-07-04 11:02:52|D:\ModesXML\Client\AHFO4_1 | |05300000|XfoGdiCtl41.dll |XfoGdiCtl |4.1.2007.704 |266240 |2007-07-04 11:04:22|D:\ModesXML\Client\AHFO4_1 | |05350000|XfoRender41.dll |XfoRender |4.1.2007.704 |2420736 |2007-07-04 11:04:10|D:\ModesXML\Client\AHFO4_1 | |055B0000|PDFCreator25.dll | | |1253376 |2007-07-04 11:03:00|D:\ModesXML\Client\AHFO4_1 | |056F0000|PDFLinearizer11.dll | | |708608 |2007-07-04 11:03:02|D:\ModesXML\Client\AHFO4_1 | |057B0000|SVGCreator41.dll |SVGCreator |4.1.2007.704 |434176 |2007-07-04 11:03:06|D:\ModesXML\Client\AHFO4_1 | |06020000|SKCHUI.DLL |Draw Pen Tip |1.0.1038.0 |364607 |2001-02-07 01:17:02|C:\Program Files\Common Files\Microsoft Shared\INK | |063A0000|MSVCR80.dll |Microsoft® C Runtime Library |8.0.50727.3053 |635904 |2008-07-25 11:17:20|C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca | |08D40000|shdocvw.dll |Shell Doc Object and Control Library |6.0.2900.5512 |1499136 |2008-04-14 00:12:06|C:\WINDOWS\system32 | |0ABA0000|Audiodev.dll |Portable Media Devices Shell Extension |5.2.5721.5145 |276992 |2006-10-18 20:47:08|C:\WINDOWS\system32 | |10000000|XfoComCtl41.dll |XfoComCtl |4.1.2007.704 |90112 |2007-07-04 11:04:32|D:\ModesXML\Client\AHFO4_1 | |10930000|PortableDeviceApi.dll|Windows Portable Device API Components |5.2.5721.5145 |284160 |2006-10-18 20:47:18|C:\WINDOWS\system32 | |11C70000|WMASF.DLL |Windows Media ASF DLL |11.0.5721.5238 |222720 |2007-10-27 16:40:30|C:\WINDOWS\system32 | |14490000|scriptcl.dll |VSCore Script Scanner |13.3.2.137 |58688 |2009-01-27 19:50:00|C:\Program Files\McAfee\VirusScan Enterprise | |15110000|WMVCore.DLL |Windows Media Playback/Authoring DLL |11.0.5721.5265 |2458112 |2009-05-20 03:56:52|C:\WINDOWS\system32 | |16210000|wpdshext.dll |Portable Devices Shell Extension |5.2.5721.5145 |2603008 |2006-10-18 20:47:22|C:\WINDOWS\system32 | |20000000|xpsp3res.dll |Service Pack 3 Messages |5.1.2600.5512 |689152 |2008-04-13 17:39:26|C:\WINDOWS\system32 | |38A70000|MSOXMLMF.DLL |Microsoft Office XML MIME Filter |12.0.6413.1000 |44408 |2008-10-25 08:27:54|C:\Program Files\Common Files\Microsoft Shared\OFFICE12 | |3D930000|wininet.dll |Internet Extensions for Win32 |7.0.6000.16915 |832512 |2009-08-29 07:36:28|C:\WINDOWS\system32 | |3DA20000|mshtml.dll |Microsoft (R) HTML Viewer |7.0.6000.16915 |3598336 |2009-08-29 07:36:26|C:\WINDOWS\system32 | |3DFD0000|iertutil.dll |Run time utility for Internet Explorer |7.0.6000.16915 |268288 |2009-08-29 07:36:26|C:\WINDOWS\system32 | |3E1C0000|ieframe.dll |Internet Explorer |7.0.6000.16915 |6067200 |2009-08-29 07:36:26|C:\WINDOWS\system32 | |42640000|PSCRIPT5.DLL |PostScript Printer Driver |0.3.6000.16386 |543232 |2008-04-14 00:12:04|C:\WINDOWS\System32\spool\DRIVERS\W32X86\3 | |4A800000|icuuc34.dll |IBM ICU Common DLL |3.4.1.0 |819200 |2006-07-18 10:33:22|D:\ModesXML\Client\AHFO4_1 | |4A900000|icuin34.dll |IBM ICU I18N DLL |3.4.1.0 |696320 |2006-07-18 10:33:20|D:\ModesXML\Client\AHFO4_1 | |4AD00000|icudt34.dll |ICU Data DLL |3.4.1.0 |8876032 |2006-07-18 10:33:20|D:\ModesXML\Client\AHFO4_1 | |4EC50000|gdiplus.dll |Microsoft GDI+ |5.2.6001.22319 |1748992 |2009-08-13 13:55:04|C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df | |51860000|PDM.DLL |Process Debug Manager |7.10.3077.0 |192512 |2006-10-26 13:40:34|C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG | |548E0000|MSDBG2.DLL |Microsoft Visual Studio 7.0 Debugging Proxy/Stub|8.0.50727.42 |247296 |2006-10-26 13:45:04|C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG | |593F0000|wiashext.dll |Imaging Devices Shell Folder UI |5.1.2600.5512 |589312 |2008-04-14 00:12:08|C:\WINDOWS\system32 | |5AD70000|UxTheme.dll |Microsoft UxTheme Library |6.0.2900.5512 |218624 |2008-04-14 00:12:08|C:\WINDOWS\system32 | |5B860000|NETAPI32.dll |Net Win32 API DLL |5.1.2600.5694 |337408 |2008-10-15 16:34:24|C:\WINDOWS\system32 | |5C2C0000|sptip.dll |SAPI5.0/CTF layer DLL |5.1.2600.5512 |250368 |2008-04-14 00:12:06|C:\WINDOWS\ime | |5D090000|comctl32.dll |Common Controls Library |5.82.2900.5512 |617472 |2008-04-14 00:11:52|C:\WINDOWS\system32 | |5EDD0000|olepro32.dll | |5.1.2600.5512 |84992 |2008-04-14 00:12:02|C:\WINDOWS\system32 | |605D0000|mslbui.dll |LangageBar Add In |5.1.2600.5512 |25088 |2008-04-14 00:12:00|C:\WINDOWS\system32 | |662B0000|hnetcfg.dll |Home Networking Configuration Manager |5.1.2600.5512 |344064 |2008-04-14 00:11:54|C:\WINDOWS\system32 | |69B10000|msxml4.dll |MSXML 4.0 SP 2 |4.20.9870.0 |1286152 |2008-09-30 16:43:34|C:\WINDOWS\system32 | |71A50000|mswsock.dll |Microsoft Windows Sockets 2.0 Service Provider |5.1.2600.5625 |245248 |2008-06-20 17:46:58|C:\WINDOWS\system32 | |71A90000|wshtcpip.dll |Windows Sockets Helper DLL |5.1.2600.5512 |19456 |2008-04-14 00:12:10|C:\WINDOWS\System32 | |71AA0000|WS2HELP.dll |Windows Socket 2.0 Helper for Windows NT |5.1.2600.5512 |19968 |2008-04-14 00:12:10|C:\WINDOWS\system32 | |71AB0000|WS2_32.dll |Windows Socket 2.0 32-Bit DLL |5.1.2600.5512 |82432 |2008-04-14 00:12:10|C:\WINDOWS\system32 | |71AD0000|wsock32.dll |Windows Socket 32-Bit DLL |5.1.2600.5512 |22528 |2008-04-14 00:12:10|C:\WINDOWS\system32 | |71B20000|mpr.dll |Multiple Provider Router DLL |5.1.2600.5512 |59904 |2008-04-14 00:11:58|C:\WINDOWS\system32 | |71BF0000|SAMLIB.dll |SAM Library DLL |5.1.2600.5512 |64000 |2008-04-14 00:12:04|C:\WINDOWS\System32 | |71C10000|ntlanman.dll |Microsoft® Lan Manager |5.1.2600.5512 |44032 |2008-04-14 00:12:02|C:\WINDOWS\System32 | |71C80000|NETRAP.dll |Net Remote Admin Protocol DLL |5.1.2600.5512 |11776 |2008-04-14 00:12:02|C:\WINDOWS\System32 | |71C90000|NETUI1.dll |NT LM UI Common Code - Networking classes |5.1.2600.5512 |245760 |2008-04-14 00:12:02|C:\WINDOWS\System32 | |71CD0000|NETUI0.dll |NT LM UI Common Code - GUI Classes |5.1.2600.5512 |80896 |2008-04-14 00:12:02|C:\WINDOWS\System32 | |72D10000|msacm32.drv |Microsoft Sound Mapper |5.1.2600.0 |20480 |2004-08-04 12:00:00|C:\WINDOWS\system32 | |72D20000|wdmaud.drv |WDM Audio driver mapper |5.1.2600.5512 |23552 |2008-04-14 00:12:46|C:\WINDOWS\system32 | |73000000|winspool.drv |Windows Spooler Driver |5.1.2600.5512 |146432 |2008-04-14 00:12:46|C:\WINDOWS\system32 | |732E0000|RICHED32.DLL |Wrapper Dll for Richedit 1.0 |5.1.2600.0 |3584 |2004-08-04 12:00:00|C:\WINDOWS\system32 | |73300000|VBScript.dll |Microsoft (R) VBScript |5.7.0.18066 |430080 |2008-05-09 10:53:40|C:\WINDOWS\system32 | |73B30000|mscms.dll |Microsoft Color Matching System DLL |5.1.2600.5627 |74240 |2008-06-24 16:43:16|C:\WINDOWS\system32 | |73B50000|avifil32.dll |Microsoft AVI File support library |5.1.2600.5827 |84992 |2009-06-10 14:13:30|C:\WINDOWS\system32 | |73BA0000|sti.dll |Still Image Devices client DLL |5.1.2600.5512 |68096 |2008-04-14 00:12:08|C:\WINDOWS\system32 | |73BC0000|DCIMAN32.DLL |DCI Manager |5.1.2600.5512 |8704 |2008-04-14 00:11:52|C:\WINDOWS\system32 | |746C0000|msls31.dll |Microsoft Line Services library file |3.10.349.0 |156160 |2007-08-13 17:54:10|C:\WINDOWS\system32 | |746F0000|msimtf.dll |Active IMM Server DLL |5.1.2600.5512 |159232 |2008-04-14 00:12:00|C:\WINDOWS\system32 | |74720000|MSCTF.dll |MSCTF Server DLL |5.1.2600.5512 |297984 |2008-04-14 00:11:58|C:\WINDOWS\system32 | |74980000|msxml3.dll |MSXML 3.0 SP10 |8.100.1048.0 |1106944 |2008-09-04 17:15:04|C:\WINDOWS\system32 | |74AE0000|CFGMGR32.dll |Configuration Manager Forwarder DLL |5.1.2600.5512 |16896 |2008-04-14 00:09:06|C:\WINDOWS\system32 | |74C80000|oleacc.dll |Active Accessibility Core Component |4.2.5406.0 |163328 |2004-08-04 12:00:00|C:\WINDOWS\system32 | |74D90000|USP10.dll |Uniscribe Unicode script processor |1.420.2600.5512 |406016 |2008-04-14 00:12:08|C:\WINDOWS\system32 | |74E30000|RICHED20.DLL |Rich Text Edit Control, v3.0 |5.30.23.1230 |433664 |2008-04-14 00:12:04|C:\WINDOWS\system32 | |754D0000|CRYPTUI.dll |Microsoft Trust UI Provider |5.131.2600.5512 |512512 |2008-04-14 00:11:52|C:\WINDOWS\system32 | |755C0000|msctfime.ime |Microsoft Text Frame Work Service IME |5.1.2600.5512 |177152 |2008-04-14 00:10:06|C:\WINDOWS\system32 | |75A70000|MSVFW32.dll |Microsoft Video for Windows DLL |5.1.2600.5512 |121344 |2008-04-14 00:12:02|C:\WINDOWS\system32 | |75C50000|JScript.dll |Microsoft (R) JScript |5.7.6002.22145 |512000 |2009-08-13 15:16:06|C:\WINDOWS\system32 | |75CF0000|MLANG.dll |Multi Language Support DLL |6.0.2900.5512 |586240 |2008-04-14 00:11:58|C:\WINDOWS\system32 | |75F60000|drprov.dll |Microsoft Terminal Server Network Provider |5.1.2600.5512 |14336 |2008-04-14 00:11:52|C:\WINDOWS\System32 | |75F70000|davclnt.dll |Web DAV Client DLL |5.1.2600.5512 |25088 |2008-04-14 00:11:52|C:\WINDOWS\System32 | |75F80000|browseui.dll |Shell Browser UI Library |6.0.2900.5512 |1025024 |2008-04-14 00:11:50|C:\WINDOWS\system32 | |76080000|MSVCP60.dll |Microsoft (R) C++ Runtime Library |6.2.3104.0 |413696 |2008-04-14 00:12:02|C:\WINDOWS\system32 | |76380000|msimg32.dll |GDIEXT Client DLL |5.1.2600.5512 |4608 |2008-04-14 00:12:00|C:\WINDOWS\system32 | |76390000|IMM32.DLL |Windows XP IMM32 API Client DLL |5.1.2600.5512 |110080 |2008-04-14 00:11:54|C:\WINDOWS\system32 | |763B0000|comdlg32.dll |Common Dialogs DLL |6.0.2900.5512 |276992 |2008-04-14 00:11:52|C:\WINDOWS\system32 | |76600000|CSCDLL.dll |Offline Network Agent |5.1.2600.5512 |101888 |2008-04-14 00:11:52|C:\WINDOWS\System32 | |76980000|LINKINFO.dll |Windows Volume Tracking |5.1.2600.5512 |19968 |2008-04-14 00:11:56|C:\WINDOWS\system32 | |76990000|ntshrui.dll |Shell extensions for sharing |5.1.2600.5512 |143360 |2008-04-14 00:12:02|C:\WINDOWS\system32 | |769C0000|USERENV.dll |Userenv |5.1.2600.5512 |727040 |2008-04-14 00:12:08|C:\WINDOWS\system32 | |76B20000|ATL.DLL |ATL Module for Windows XP (Unicode) |3.5.2284.2 |58880 |2009-07-17 19:01:06|C:\WINDOWS\system32 | |76B40000|winmm.dll |MCI API DLL |5.1.2600.5512 |176128 |2008-04-14 00:12:10|C:\WINDOWS\system32 | |76BF0000|PSAPI.DLL |Process Status Helper |5.1.2600.5512 |23040 |2008-04-14 00:12:04|C:\WINDOWS\system32 | |76C30000|WINTRUST.dll |Microsoft Trust Verification APIs |5.131.2600.5512 |176640 |2008-04-14 00:12:10|C:\WINDOWS\system32 | |76C90000|IMAGEHLP.dll |Windows NT Image Helper |5.1.2600.5512 |144384 |2008-04-14 00:11:54|C:\WINDOWS\system32 | |76F20000|DNSAPI.dll |DNS Client API DLL |5.1.2600.5625 |147968 |2008-06-20 17:46:58|C:\WINDOWS\system32 | |76F60000|WLDAP32.dll |Win32 LDAP API DLL |5.1.2600.5512 |172032 |2008-04-14 00:12:10|C:\WINDOWS\system32 | |76FB0000|winrnr.dll |LDAP RnR Provider DLL |5.1.2600.5512 |16896 |2008-04-14 00:12:10|C:\WINDOWS\System32 | |76FC0000|rasadhlp.dll |Remote Access AutoDial Helper |5.1.2600.5512 |7680 |2008-04-14 00:12:04|C:\WINDOWS\system32 | |76FD0000|CLBCATQ.DLL | |2001.12.4414.700|498688 |2008-04-14 00:11:50|C:\WINDOWS\system32 | |77050000|COMRes.dll | |2001.12.4414.700|792064 |2008-04-14 00:11:52|C:\WINDOWS\system32 | |77120000|oleaut32.dll | |5.1.2600.5512 |551936 |2008-04-14 00:12:02|C:\WINDOWS\system32 | |773D0000|comctl32.dll |User Experience Controls Library |6.0.2900.5512 |1054208 |2008-04-14 00:12:52|C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83| |774E0000|ole32.dll |Microsoft OLE for Windows |5.1.2600.5512 |1287168 |2008-04-14 00:12:02|C:\WINDOWS\system32 | |77920000|SETUPAPI.dll |Windows Setup API |5.1.2600.5512 |985088 |2008-04-14 04:42:06|C:\WINDOWS\system32 | |77A20000|cscui.dll |Client Side Caching UI |5.1.2600.5512 |326656 |2008-04-14 00:11:52|C:\WINDOWS\System32 | |77A80000|CRYPT32.dll |Crypto API32 |5.131.2600.5512 |599040 |2008-04-14 00:11:52|C:\WINDOWS\system32 | |77B20000|MSASN1.dll |ASN.1 Runtime APIs |5.1.2600.5875 |58880 |2009-09-04 21:03:36|C:\WINDOWS\system32 | |77B40000|appHelp.dll |Application Compatibility Client Library |5.1.2600.5512 |125952 |2008-04-14 00:11:50|C:\WINDOWS\system32 | |77BD0000|midimap.dll |Microsoft MIDI Mapper |5.1.2600.5512 |18944 |2008-04-14 00:11:58|C:\WINDOWS\system32 | |77BE0000|MSACM32.dll |Microsoft ACM Audio Filter |5.1.2600.5512 |71680 |2008-04-14 00:11:58|C:\WINDOWS\system32 | |77C00000|version.dll |Version Checking and File Installation Libraries|5.1.2600.5512 |18944 |2008-04-14 00:12:08|C:\WINDOWS\system32 | |77C10000|msvcrt.dll |Windows NT CRT DLL |7.0.2600.5512 |343040 |2008-04-14 00:12:02|C:\WINDOWS\system32 | |77DD0000|advapi32.dll |Advanced Windows 32 Base API |5.1.2600.5755 |617472 |2009-02-09 12:10:48|C:\WINDOWS\system32 | |77E70000|RPCRT4.dll |Remote Procedure Call Runtime |5.1.2600.5795 |585216 |2009-04-15 14:51:26|C:\WINDOWS\system32 | |77F10000|GDI32.dll |GDI Client DLL |5.1.2600.5698 |286720 |2008-10-23 12:36:14|C:\WINDOWS\system32 | |77F60000|SHLWAPI.dll |Shell Light-weight Utility Library |6.0.2900.5512 |474112 |2008-04-14 00:12:06|C:\WINDOWS\system32 | |77FE0000|Secur32.dll |Security Support Provider Interface |5.1.2600.5834 |56832 |2009-06-25 08:25:26|C:\WINDOWS\system32 | |78130000|urlmon.dll |OLE32 Extensions for Win32 |7.0.6000.16915 |1168384 |2009-08-29 07:36:28|C:\WINDOWS\system32 | |7C340000|MSVCR71.dll |Microsoft® C Runtime Library |7.10.3052.4 |348160 |2004-04-20 07:58:04|D:\ModesXML\Client\AHFO4_1 | |7C800000|kernel32.dll |Windows NT BASE API Client DLL |5.1.2600.5781 |989696 |2009-03-21 14:06:58|C:\WINDOWS\system32 | |7C900000|ntdll.dll |NT Layer DLL |5.1.2600.5755 |714752 |2009-02-09 12:10:48|C:\WINDOWS\system32 | |7C9C0000|shell32.dll |Windows Shell Common Dll |6.0.2900.5622 |8461312 |2008-06-17 19:02:20|C:\WINDOWS\system32 | |7D1E0000|msi.dll |Windows Installer |3.1.4001.5512 |2843136 |2008-04-14 00:12:00|C:\WINDOWS\system32 | |7E410000|user32.dll |Windows XP USER API Client DLL |5.1.2600.5512 |578560 |2008-04-14 00:12:08|C:\WINDOWS\system32 | |7E5A0000|UNIDRVUI.DLL |UniDriver User Interface |0.3.6001.22116 |744960 |2008-07-06 12:06:10|C:\WINDOWS\System32\spool\DRIVERS\W32X86\3 | |7E660000|PS5UI.DLL |PostScript Driver User Interface |0.3.6000.16386 |728576 |2008-04-14 00:12:04|C:\WINDOWS\System32\spool\DRIVERS\W32X86\3 | |7E720000|SXS.DLL |Fusion 2.5 |5.1.2600.5512 |713216 |2008-04-14 00:12:08|C:\WINDOWS\system32 | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ Processes Information: --------------------------------------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory |Priority|Threads|Path | --------------------------------------------------------------------------------------------------------------------------------------------------------------------- |4 |System | | |253952 |Normal |85 | | |228 |svchost.exe |Generic Host Process for Win32 Services|5.1.2600.5512 |4456448 |Normal |6 |C:\WINDOWS\system32 | |432 |proquota.exe |ProQuota |5.1.2600.5512 |2985984 |Normal |2 |C:\WINDOWS\system32 | |512 |WinVNC4.exe |VNC Server Enterprise Edition for Win32|4.4.3.16583 |4190208 |Normal |5 |C:\Program Files\RealVNC\VNC4 | |624 |ModesXML.exe |ModesXML |1.2.0.149 |101150720|Normal |24 |J:\modes\MXML\Client | |708 |smss.exe | | |425984 |Normal |3 |\SystemRoot\System32 | |788 |winlogon.exe | | |7725056 |High |19 |C:\WINDOWS\system32 | |832 |services.exe |Services and Controller app |5.1.2600.5755 |4067328 |Normal |16 |C:\WINDOWS\system32 | |844 |lsass.exe |LSA Shell (Export Version) |5.1.2600.5512 |843776 |Normal |20 |C:\WINDOWS\system32 | |848 |OUTLOOK.EXE |Microsoft Office Outlook |12.0.6514.5000|69459968 |Normal |40 |C:\Program Files\Microsoft Office 2007\Office12 | |1028|svchost.exe |Generic Host Process for Win32 Services|5.1.2600.5512 |5132288 |Normal |18 |C:\WINDOWS\system32 | |1180|svchost.exe |Generic Host Process for Win32 Services|5.1.2600.5512 |22650880 |Normal |68 |C:\WINDOWS\System32 | |1436|spoolsv.exe |Spooler SubSystem App |5.1.2600.5512 |9441280 |Normal |10 |C:\WINDOWS\system32 | |1616|FrameworkService.exe|Framework Service |3.6.0.608 |11112448 |Normal |27 |C:\Program Files\McAfee\Common Framework | |1668|Mcshield.exe |On-Access Scanner service |13.3.2.137 |53161984 |High |38 |C:\Program Files\McAfee\VirusScan Enterprise | |1720|iexplore.exe |Internet Explorer |7.0.6000.16915|42512384 |Normal |14 |C:\Program Files\Internet Explorer | |1760|VsTskMgr.exe |Task Manager |8.5.0.936 |471040 |Normal |15 |C:\Program Files\McAfee\VirusScan Enterprise | |1844|MDM.EXE |Machine Debug Manager |7.10.3077.0 |3493888 |Normal |5 |C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG| |1884|NMSAccessU.exe | | |1912832 |Normal |2 |C:\Program Files\CDBurnerXP | |2156|taskmgr.exe |Windows TaskManager |5.1.2600.5512 |4145152 |High |3 |C:\WINDOWS\system32 | |3292|Explorer.EXE |Windows Explorer |6.0.2900.5512 |32649216 |Normal |18 |C:\WINDOWS | |3460|hkcmd.exe |hkcmd Module |6.14.10.4837 |3444736 |Normal |2 |C:\WINDOWS\system32 | |3472|UdaterUI.exe |Common User Interface |3.6.0.608 |3526656 |Normal |6 |C:\Program Files\McAfee\Common Framework | |3508|ctfmon.exe |CTF Loader |5.1.2600.5512 |4669440 |Normal |1 |C:\WINDOWS\system32 | |3652|McTray.exe |McAfee Security Agent Taskbar Extension|1.0.0.127 |2555904 |Normal |1 |C:\Program Files\McAfee\Common Framework | --------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: --------------------------------------------------- 0042B6E9 push esi 0042B6EA mov esi, edx 0042B6EC mov ebx, eax 0042B6EE test esi, esi 0042B6F0 jl +$05 0042B6F2 cmp esi, [ebx+$08] 0042B6F5 jl +$0F 0042B6F7 mov edx, [$C821D4] 0042B6FD mov ecx, esi 0042B6FF mov eax, [ebx] 0042B701 call -$000000E2 ; <-- EXCEPTION 0042B706 mov eax, [ebx+$04] 0042B709 mov eax, [eax+esi*4] 0042B70C pop esi 0042B70D pop ebx 0042B70E ret Registers: ----------------------------- EAX: 7F9579B0 EDI: 7F891860 EBX: 7E87A878 ESI: 00000008 ECX: 00000000 ESP: 0012F820 EDX: 0042B706 EIP: 0042B701 Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0012F820: 00000008 0042B701: E8 1E FF FF FF 8B 43 04 8B 04 B0 5E 5B C3 90 8B ......C....^[... 0012F824: 7ED15F00 0042B711: 50 0C 83 FA 40 7E 0E 8B CA 85 C9 79 03 83 C1 03 P...@~.....y.... 0012F828: 00000008 0042B721: C1 F9 02 EB 11 83 FA 08 7E 07 B9 10 00 00 00 EB ........~....... 0012F82C: 00426024 0042B731: 05 B9 04 00 00 00 03 CA 8B D1 E8 64 01 00 00 C3 ...........d.... 0012F830: 0042B656 0042B741: 8D 40 00 53 33 C9 EB 01 41 3B 48 08 7D 08 8B 58 .@.S3...A;H.}..X 0012F834: 0012F87C 0042B751: 04 3B 14 8B 75 F2 3B 48 08 75 03 83 C9 FF 8B C1 .;..u.;H.u...... 0012F838: 004051A8 0042B761: 5B C3 90 53 56 57 8B F9 8B F2 8B D8 85 F6 7C 05 [..SVW........|. 0012F83C: 0012F84C 0042B771: 3B 73 08 7E 0F 8B 15 D4 21 C8 00 8B CE 8B 03 E8 ;s.~....!....... 0012F840: 00000008 0042B781: 9F FE FF FF 8B 43 08 3B 43 0C 75 06 8B C3 8B 10 .....C.;C.u..... 0012F844: 7DF79FE0 0042B791: FF 12 8B 43 08 3B F0 7D 19 2B C6 8B C8 C1 E1 02 ...C.;.}.+...... 0012F848: 00000000 0042B7A1: 8B 43 04 8D 54 B0 04 8B 43 04 8D 04 B0 E8 3D 7B .C..T...C.....={ 0012F84C: 0012F874 0042B7B1: FD FF 8B 43 04 89 3C B0 FF 43 08 85 FF 74 0B 33 ...C..<..C...t.3 0012F850: 0042B706 0042B7C1: C9 8B D7 8B C3 8B 18 FF 53 04 5F 5E 5B C3 90 8B ........S._^[... 0012F854: 00000008 0042B7D1: 50 08 4A E8 0F FF FF FF C3 8B C0 53 56 57 55 8B P.J........SVWU. 0012F858: 7DF79FE0 0042B7E1: F1 8B FA 8B D8 3B F7 74 45 85 F6 7C 05 3B 73 08 .....;.tE..|.;s. 0012F85C: 004C3A4B 0042B7F1: 7C 0F 8B 15 D4 21 C8 00 8B CE 8B 03 E8 22 FE FF |....!......."..