EurekaLog 6.0.14 Application: ------------------------------------------------------- 1.1 Start Date : Sun, 10 Jan 2010 11:32:38 +0000 1.2 Name/Description: ModesXML.exe - (ModesXML) 1.3 Version Number : 1.2.0.165 1.4 Parameters : 1.5 Compilation Date: Fri, 8 Jan 2010 18:13:39 +0000 1.6 Up Time : 8 hours, 6 minutes, 29 seconds Exception: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ 2.1 Date : Sun, 10 Jan 2010 19:39:07 +0000 2.2 Address : 0042F3EC 2.3 Module Name : ModesXML.exe - (ModesXML) 2.4 Module Version: 1.2.0.165 2.5 Type : EFCreateError 2.6 Message : Cannot create file "C:\Documents and Settings\ajpg\Application Data\ModesXML\Temp\frmDisplay_a_XMLReportLeft.xml". The process cannot access the file because it is being used by another process. 2.7 ID : C3BF 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.1 ID : ajpg 3.2 Name : Andrew Gray 3.3 Email : a.j.gray@durham.ac.uk 3.4 Company : 3.5 Privileges: SeChangeNotifyPrivilege - ON SeSecurityPrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeSystemtimePrivilege - OFF SeShutdownPrivilege - OFF SeRemoteShutdownPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeSystemProfilePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeLoadDriverPrivilege - ON SeCreatePagefilePrivilege - OFF SeIncreaseQuotaPrivilege - OFF SeUndockPrivilege - ON SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON Active Controls: ---------------------------------------------------------------------------------------------------------------- 4.1 Form Class : TfrmMain.UnicodeClass 4.2 Form Text : ModesXML - [Application: New application development. File: Revised controls for MXML v1.2] 4.3 Control Class: Shell DocObject View 4.4 Control Text : Computer: ------------------------------------------------------------------------ 5.1 Name : DELILAH 5.2 Total Memory : 255 Mb 5.3 Free Memory : 24 Mb 5.4 Total Disk : 3.95 Gb 5.5 Free Disk : 3.19 Gb 5.6 System Up Time: 8 hours, 48 minutes, 54 seconds 5.7 Processor : Intel(R) Pentium(R) M processor 1400MHz 5.8 Display Mode : 1024 x 768, 32 bit 5.9 Display DPI : 96 5.10 Video Card : MOBILITY RADEON 9000 (driver 8.20.0.0 - RAM 32 MB) 5.11 Printer : HP Color LaserJet PS (driver 6.0.6000.16386) Operating System: ------------------------------------ 6.1 Type : Microsoft Windows XP 6.2 Build # : 2600 6.3 Update : Service Pack 3 6.4 Language: English 6.5 Charset : 0 Network: --------------------------------- 7.1 IP Address: 192.168.001.003 7.2 Submask : 255.255.255.000 7.3 Gateway : 192.168.001.001 7.4 DNS 1 : 192.168.001.001 7.5 DNS 2 : 000.000.000.000 7.6 DHCP : ON Custom Information: -------------------------------------------------------------------------------------------------------------------- 8.1 Server Type : Remote 8.2 StyleSheetPath : E:\modesresources\stylesheets\ 8.3 ResourcePath : E:\resources\ 8.4 DataPath : E:\data\ 8.5 DTDPath : E:\modesresources\dtds\ 8.6 ServerName : ModesXML 8.7 ServerPort : 16000 8.8 AppDataFolder : C:\Documents and Settings\ajpg\Application Data\ModesXML\ 8.9 AppTempFolder : C:\Documents and Settings\ajpg\Application Data\ModesXML\Temp\ 8.10 Application : ModesApps 8.11 FileName : newcontrols 8.12 FileIndex : controls 8.13 SplitMode : False 8.14 EditMode : False 8.15 ActiveLeftTab : xml 8.16 LeftTabStylesheet : Raw XML 8.17 ActiveRightTab : N/A 8.18 RightTabStylesheet : N/A 8.19 Transport : nxSharedMemoryTransport1 8.20 Logged in user : ajpg 8.21 Server version : 2.0706 (ModesXML) 8.22 Uptime : 0.08:48:24 8.23 Sessions : 22 8.24 Databases : 28 8.25 Transaction Contexts : 28 8.26 Cursors : 142 8.27 Statements : 0 8.28 Folders : 6 8.29 Tables : 47 8.30 Block Cache Available (Recently / Frequently): 130,048 ( 120,676 / 9,372 ) kbyte 8.31 Block Cache Used (Recently / Frequently) : 5,952 ( 5,952 / 0 ) kbyte 8.32 Block Cache Tracked (Recently / Frequently) : 20 ( 20 / 0 ) kbyte 8.33 Block Cache Miss Recently Used : 1,018 8.34 Block Cache Miss Frequently Used : 0 8.35 Block Cache Hit Recently Used : 19,103,200 8.36 Block Cache Hit Frequently Used : 0 8.37 Block Cache Eviction Recently Used : 0 8.38 Block Cache Eviction Frequently Used : 0 8.39 Transaction Commit : 428 8.40 Transaction Commit Nested : 1,564 8.41 Transaction Rollback : 0 8.42 Transaction Rollback Nested : 0 8.43 Blocks Read : 1,018 8.44 Blocks Written : 854 8.45 Temporary Storage in use : 0 kbyte 8.46 Registered User Name : ModesXML testers 8.47 Registered Institution : [various] 8.48 Max. number of screens : 3 8.49 Number of users logged on : 2 8.50 User ajpg : [local connection] 8.51 User administrator : [local connection] Request: --------------------------------------------------------------------------------------------------------------------------------------------------------- 8.1 : This time, there is only one Raw XML view showing, so that's not the answer! and the XML that has appeared is for a former record that I was on. Call Stack Information: ----------------------------------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method |Line | ----------------------------------------------------------------------------------------------------------------- |Running Thread: ID=3228; Priority=0; Class=; [Main] | |---------------------------------------------------------------------------------------------------------------| |005A5238|ModesXML.exe|XpDOM.pas |TXpObjModel |SaveToFile |11897[27]| |005A50AC|ModesXML.exe|XpDOM.pas |TXpObjModel |SaveToFile |11870[0] | |00CBE09D|ModesXML.exe|fdisplay.pas |TfrmDisplay |LoadViewsLeft |11789[61]| |00CBDCF8|ModesXML.exe|fdisplay.pas |TfrmDisplay |LoadViewsLeft |11728[0] | |00CABCFB|ModesXML.exe|fdisplay.pas |TfrmDisplay |PageControlChange |4481[18] | |7E4188D5|user32.dll | | |GetWindowLongW | | |7C90ECBA|ntdll.dll | | |RtlMultiByteToUnicodeN | | |7C90EB94|ntdll.dll | | |RtlAnsiStringToUnicodeString | | |7C90D328|ntdll.dll | | |NtFindAtom | | |7E430078|user32.dll | | |GetPropA | | |7E429007|user32.dll | | |EndPaint | | |7E428FFD|user32.dll | | |EndPaint | | |7E42B3FC|user32.dll | | |CallNextHookEx | | |00874273|ModesXML.exe|cxContainer.pas | |ApplicationCallWndProcHookProc |5940[13] | |7C90ECBA|ntdll.dll | | |RtlMultiByteToUnicodeN | | |7C90EB94|ntdll.dll | | |RtlAnsiStringToUnicodeString | | |7E42B3C6|user32.dll | | |CallNextHookEx | | |0089E2DD|ModesXML.exe|dxBar.pas | |dxBarWndProcHook |13542[30]| |7E4292DE|user32.dll | | |SendMessageW | | |7E429130|user32.dll | | |GetParent | | |7E429160|user32.dll | | |GetParent | | |7E4188D5|user32.dll | | |GetWindowLongW | | |7E42A993|user32.dll | | |CallWindowProcA | | |7E42A97D|user32.dll | | |CallWindowProcA | | |7E42B3FC|user32.dll | | |CallNextHookEx | | |00557EC4|ModesXML.exe|TntForms.pas | |GetMessageForNT |783[10] | |7E42B3C6|user32.dll | | |CallNextHookEx | | |0087478D|ModesXML.exe|cxContainer.pas | |ApplicationGetMessageMsgHookProc|6099[13] | |7E418C42|user32.dll | | |KillTimer | | |7E4196C2|user32.dll | | |DispatchMessageA | | |7E4196B8|user32.dll | | |DispatchMessageA | | |00CE5440|ModesXML.exe|ModesXML.dpr | | |177[19] | |7C90DCB8|ntdll.dll | | |ZwSetInformationThread | | |---------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3236; Priority=0; Class= | |---------------------------------------------------------------------------------------------------------------| |7C90DF48|ntdll.dll | | |NtWaitForMultipleObjects | | |7C90DDA8|ntdll.dll | | |ZwSetTimer | | |7C8095D8|kernel32.dll| | |WaitForMultipleObjectsEx | | |7C80A110|kernel32.dll| | |WaitForMultipleObjects | | |7C80A0FD|kernel32.dll| | |WaitForMultipleObjects | | |006104F3|ModesXML.exe|nxsrFileImplWin32.pas |TnxFlushThread |Wait |1837[2] | |006104E0|ModesXML.exe|nxsrFileImplWin32.pas |TnxFlushThread |Wait |1835[0] | |0061042A|ModesXML.exe|nxsrFileImplWin32.pas |TnxFlushThread |DoExecute |1811[29] | |00610308|ModesXML.exe|nxsrFileImplWin32.pas |TnxFlushThread |DoExecute |1782[0] | |006100FF|ModesXML.exe|nxsrFileImplWin32.pas | |FlushThreadProc |1723[17] | |---------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=3228; Priority=0; Class=; [Main] | |---------------------------------------------------------------------------------------------------------------| |00CE52FF|ModesXML.exe|ModesXML.dpr | | |158[0] | |7C90DCB8|ntdll.dll | | |ZwSetInformationThread | | |---------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3248; Priority=2; Class=TnxSharedMemoryMutexOwner | |---------------------------------------------------------------------------------------------------------------| |7E419416|user32.dll | | |WaitMessage | | |7E41940C|user32.dll | | |WaitMessage | | |005D8B15|ModesXML.exe|nxllThread.pas |TnxMessageThread |Idle |863[10] | |005D8AB8|ModesXML.exe|nxllThread.pas |TnxMessageThread |Idle |853[0] | |005D8AAC|ModesXML.exe|nxllThread.pas |TnxMessageThread |HandleMessage |847[1] | |005D8A90|ModesXML.exe|nxllThread.pas |TnxMessageThread |HandleMessage |846[0] | |005D8B2E|ModesXML.exe|nxllThread.pas |TnxMessageThread |InnerExecute |869[2] | |005D884C|ModesXML.exe|nxllThread.pas |TnxInitThread |DoExecute |704[14] | |005D87BC|ModesXML.exe|nxllThread.pas |TnxInitThread |DoExecute |690[0] | |005D8A4D|ModesXML.exe|nxllThread.pas |TnxMessageThread |DoExecute |831[2] | |005D8669|ModesXML.exe|nxllThread.pas |TnxThread |Execute |507[3] | |---------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=3228; Priority=0; Class=; [Main] | |---------------------------------------------------------------------------------------------------------------| |00598A1C|ModesXML.exe|XpDOM.pas |TXpNode |noParsePathExpr |5774[0] | |0059BE4B|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnionExpr |6983[1] | |005923EC|ModesXML.exe|XpDOM.pas |TXpNodeList |nlGetLength |2813[1] | |0059BE55|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnionExpr |6987[5] | |0059BE20|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnionExpr |6982[0] | |0059BDF2|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnaryExpr |6967[16] | |0059BE07|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnaryExpr |6967[16] | |0059BD58|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnaryExpr |6951[0] | |00596999|ModesXML.exe|XpDOM.pas |TXpNode |noParseMultiplicativeExpr |4858[1] | |00596D39|ModesXML.exe|XpDOM.pas |TXpNode |noParseMultiplicativeExpr |4860[3] | |0059694C|ModesXML.exe|XpDOM.pas |TXpNode |noParseMultiplicativeExpr |4857[0] | |005960DE|ModesXML.exe|XpDOM.pas |TXpNode |noParseAdditiveExpr |4530[1] | |004B8245|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scShouldFollowTransition |1995[6] | |004B7C30|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scDependentStateChange |1843[9] | |004B79BF|ModesXML.exe|nxllComponent.pas |TnxStateComponent |nxcNotification |1763[4] | |004B7978|ModesXML.exe|nxllComponent.pas |TnxStateComponent |nxcNotification |1759[0] | |006A42A6|ModesXML.exe|nxllTransport.pas |TnxBaseTransport |nxcNotification |2019[1] | |004B6E63|ModesXML.exe|nxllComponent.pas |TnxComponent |nxcNotifyDependents |1314[10] | |004B8341|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scStateChanging |2050[6] | |004B7E6B|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scSetState |1921[14] | |005925C7|ModesXML.exe|XpDOM.pas |TXpNodeList |Destroy |2928[3] | |006A3EC8|ModesXML.exe|nxllTransport.pas |TnxBaseTransport |btSetServerNameRuntime |1904[5] | |004B7C5F|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scSetActive |1867[2] | |00900961|ModesXML.exe|dmUser.pas |TuserDm |ConnectToServer |434[75] | |009003B0|ModesXML.exe|dmUser.pas |TuserDm |ConnectToServer |359[0] | |00903330|ModesXML.exe|dmUser.pas |TuserDm |Login |848[2] | |00903300|ModesXML.exe|dmUser.pas |TuserDm |Login |846[0] | |00CE53BC|ModesXML.exe|ModesXML.dpr | | |169[11] | |7C90DCB8|ntdll.dll | | |ZwSetInformationThread | | |---------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3252; Priority=15; Class=TnxHeartbeatThread | |---------------------------------------------------------------------------------------------------------------| |7C90DF58|ntdll.dll | | |ZwWaitForSingleObject | | |7C802550|kernel32.dll| | |WaitForSingleObjectEx | | |7C80253D|kernel32.dll| | |WaitForSingleObject | | |7C802530|kernel32.dll| | |WaitForSingleObject | | |006A7F35|ModesXML.exe|nxptBasePooledTransport.pas|TnxHeartbeatThread|InnerExecute |2218[3] | |005D884C|ModesXML.exe|nxllThread.pas |TnxInitThread |DoExecute |704[14] | |005D8669|ModesXML.exe|nxllThread.pas |TnxThread |Execute |507[3] | |---------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=3228; Priority=0; Class=; [Main] | |---------------------------------------------------------------------------------------------------------------| |00598A1C|ModesXML.exe|XpDOM.pas |TXpNode |noParsePathExpr |5774[0] | |0059BE4B|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnionExpr |6983[1] | |005923EC|ModesXML.exe|XpDOM.pas |TXpNodeList |nlGetLength |2813[1] | |0059BE55|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnionExpr |6987[5] | |0059BE20|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnionExpr |6982[0] | |0059BDF2|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnaryExpr |6967[16] | |0059BE07|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnaryExpr |6967[16] | |0059BD58|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnaryExpr |6951[0] | |00596999|ModesXML.exe|XpDOM.pas |TXpNode |noParseMultiplicativeExpr |4858[1] | |00596D39|ModesXML.exe|XpDOM.pas |TXpNode |noParseMultiplicativeExpr |4860[3] | |0059694C|ModesXML.exe|XpDOM.pas |TXpNode |noParseMultiplicativeExpr |4857[0] | |005960DE|ModesXML.exe|XpDOM.pas |TXpNode |noParseAdditiveExpr |4530[1] | |004B8245|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scShouldFollowTransition |1995[6] | |004B7C30|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scDependentStateChange |1843[9] | |004B79BF|ModesXML.exe|nxllComponent.pas |TnxStateComponent |nxcNotification |1763[4] | |004B7978|ModesXML.exe|nxllComponent.pas |TnxStateComponent |nxcNotification |1759[0] | |006A42A6|ModesXML.exe|nxllTransport.pas |TnxBaseTransport |nxcNotification |2019[1] | |004B6E63|ModesXML.exe|nxllComponent.pas |TnxComponent |nxcNotifyDependents |1314[10] | |004B8341|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scStateChanging |2050[6] | |004B7E6B|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scSetState |1921[14] | |005925C7|ModesXML.exe|XpDOM.pas |TXpNodeList |Destroy |2928[3] | |006A3EC8|ModesXML.exe|nxllTransport.pas |TnxBaseTransport |btSetServerNameRuntime |1904[5] | |004B7C5F|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scSetActive |1867[2] | |00900961|ModesXML.exe|dmUser.pas |TuserDm |ConnectToServer |434[75] | |009003B0|ModesXML.exe|dmUser.pas |TuserDm |ConnectToServer |359[0] | |00903330|ModesXML.exe|dmUser.pas |TuserDm |Login |848[2] | |00903300|ModesXML.exe|dmUser.pas |TuserDm |Login |846[0] | |00CE53BC|ModesXML.exe|ModesXML.dpr | | |169[11] | |7C90DCB8|ntdll.dll | | |ZwSetInformationThread | | ----------------------------------------------------------------------------------------------------------------- Modules Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |Handle |Name |Description |Version |Size |Modified |Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |00400000|ModesXML.exe |ModesXML |1.2.0.165 |12590080|2010-01-08 18:13:40|E:\bin\Client | |028F0000|xpsp2res.dll |Service Pack 2 Messages |5.1.2600.5512 |2897920 |2008-04-13 17:39:24|C:\WINDOWS\system32 | |02C10000|ModesPDF.dll |WPViewPDF |1.4.1.0 |1108352 |2007-07-13 09:52:24|E:\bin\Client | |03080000|XfoInterface41.dll |XfoInterface |4.1.2007.704 |225280 |2007-07-04 12:04:30|e:\bin\Client\AHFO4_1 | |030C0000|pthreadVSE2.dll | |2.2.0.0 |86071 |2005-04-08 14:27:02|e:\bin\Client\AHFO4_1 | |030E0000|XfoFont41.dll |XfoFont |4.1.2007.704 |147456 |2007-07-04 11:53:46|e:\bin\Client\AHFO4_1 | |03840000|XfoText41.dll |XfoText |4.1.2007.704 |86016 |2007-07-04 11:54:00|e:\bin\Client\AHFO4_1 | |03880000|XfoHyphen41.dll |XfoHyphen |4.1.2007.704 |81920 |2007-07-04 12:00:22|e:\bin\Client\AHFO4_1 | |03940000|XfoEngine41.dll |XfoEngine |4.1.2007.704 |1523712 |2007-07-04 12:02:48|e:\bin\Client\AHFO4_1 | |03AC0000|XfoDMC41.dll |XfoDMC |4.1.2007.704 |360448 |2007-07-04 11:52:58|e:\bin\Client\AHFO4_1 | |03B20000|XfoTrans41.dll |XfoTrans |4.1.2007.704 |110592 |2007-07-04 12:02:52|e:\bin\Client\AHFO4_1 | |03D40000|AHFont20.dll | | |987136 |2007-07-04 11:53:40|e:\bin\Client\AHFO4_1 | |03E40000|XfoCommon41.dll |XfoCommon |4.1.2007.704 |909312 |2007-07-04 11:53:32|e:\bin\Client\AHFO4_1 | |03F30000|XfoGraphic41.dll |XfoGraphic |4.1.2007.704 |1765376 |2007-07-04 12:00:14|e:\bin\Client\AHFO4_1 | |040F0000|PDFToolPage10.dll | | |749568 |2007-07-04 11:53:56|e:\bin\Client\AHFO4_1 | |041B0000|AHGraphic20.dll | | |811008 |2007-06-29 20:40:04|e:\bin\Client\AHFO4_1 | |04280000|PDFExplorer21.dll | | |1118208 |2007-07-04 11:54:06|e:\bin\Client\AHFO4_1 | |043A0000|PDFRes10.dll | | |3731456 |2007-07-04 11:54:02|e:\bin\Client\AHFO4_1 | |04730000|XfoHyphenCH41.dll |XfoHyphenCH |4.1.2007.704 |835584 |2007-07-04 12:00:40|e:\bin\Client\AHFO4_1 | |04800000|XfoGdiCtl41.dll |XfoGdiCtl |4.1.2007.704 |266240 |2007-07-04 12:04:22|e:\bin\Client\AHFO4_1 | |04850000|XfoRender41.dll |XfoRender |4.1.2007.704 |2420736 |2007-07-04 12:04:10|e:\bin\Client\AHFO4_1 | |04AB0000|PDFCreator25.dll | | |1253376 |2007-07-04 12:03:00|e:\bin\Client\AHFO4_1 | |04BF0000|PDFLinearizer11.dll | | |708608 |2007-07-04 12:03:02|e:\bin\Client\AHFO4_1 | |04CB0000|SVGCreator41.dll |SVGCreator |4.1.2007.704 |434176 |2007-07-04 12:03:06|e:\bin\Client\AHFO4_1 | |05030000|odbcint.dll |Microsoft Data Access - ODBC Resources |3.525.1132.0 |94208 |2008-04-13 17:26:06|C:\WINDOWS\system32 | |05190000|Audiodev.dll |Portable Media Devices Shell Extension |5.2.5721.5145 |276992 |2006-10-18 20:47:08|C:\WINDOWS\system32 | |10000000|XfoComCtl41.dll |XfoComCtl |4.1.2007.704 |90112 |2007-07-04 12:04:32|e:\bin\Client\AHFO4_1 | |10930000|PortableDeviceApi.dll|Windows Portable Device API Components |5.2.5721.5145 |284160 |2006-10-18 20:47:18|C:\WINDOWS\system32 | |11C70000|WMASF.DLL |Windows Media ASF DLL |11.0.5721.5238 |222720 |2007-10-27 17:40:30|C:\WINDOWS\system32 | |15110000|WMVCore.DLL |Windows Media Playback/Authoring DLL |11.0.5721.5265 |2458112 |2009-05-20 03:56:52|C:\WINDOWS\system32 | |16210000|wpdshext.dll |Portable Devices Shell Extension |5.2.5721.5145 |2603008 |2006-10-18 20:47:22|C:\WINDOWS\system32 | |20000000|xpsp3res.dll |Service Pack 3 Messages |5.1.2600.5512 |689152 |2008-04-13 17:39:26|C:\WINDOWS\system32 | |4A800000|icuuc34.dll |IBM ICU Common DLL |3.4.1.0 |819200 |2006-07-18 11:33:22|e:\bin\Client\AHFO4_1 | |4A900000|icuin34.dll |IBM ICU I18N DLL |3.4.1.0 |696320 |2006-07-18 11:33:20|e:\bin\Client\AHFO4_1 | |4AD00000|icudt34.dll |ICU Data DLL |3.4.1.0 |8876032 |2006-07-18 11:33:20|e:\bin\Client\AHFO4_1 | |4EC50000|gdiplus.dll |Microsoft GDI+ |5.2.6001.22319 |1748992 |2009-08-13 13:55:04|C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df | |5AD70000|uxtheme.dll |Microsoft UxTheme Library |6.0.2900.5512 |218624 |2008-04-14 00:12:08|C:\WINDOWS\system32 | |5B860000|NETAPI32.dll |Net Win32 API DLL |5.1.2600.5694 |337408 |2008-10-15 16:34:24|C:\WINDOWS\system32 | |5D090000|comctl32.dll |Common Controls Library |5.82.2900.5512 |617472 |2008-04-14 00:11:52|C:\WINDOWS\system32 | |5EDD0000|olepro32.dll | |5.1.2600.5512 |84992 |2008-04-14 00:12:02|C:\WINDOWS\system32 | |662B0000|hnetcfg.dll |Home Networking Configuration Manager |5.1.2600.5512 |344064 |2008-04-14 00:11:54|C:\WINDOWS\system32 | |71800000|shdoclc.dll |Shell Doc Object and Control Library |6.0.2900.5512 |549376 |2008-04-13 17:03:20|C:\WINDOWS\system32 | |71A50000|mswsock.dll |Microsoft Windows Sockets 2.0 Service Provider |5.1.2600.5625 |245248 |2008-06-20 17:46:58|C:\WINDOWS\system32 | |71A90000|wshtcpip.dll |Windows Sockets Helper DLL |5.1.2600.5512 |19456 |2008-04-14 00:12:10|C:\WINDOWS\System32 | |71AA0000|WS2HELP.dll |Windows Socket 2.0 Helper for Windows NT |5.1.2600.5512 |19968 |2008-04-14 00:12:10|C:\WINDOWS\system32 | |71AB0000|WS2_32.dll |Windows Socket 2.0 32-Bit DLL |5.1.2600.5512 |82432 |2008-04-14 00:12:10|C:\WINDOWS\system32 | |71AD0000|wsock32.dll |Windows Socket 32-Bit DLL |5.1.2600.5512 |22528 |2008-04-14 00:12:10|C:\WINDOWS\system32 | |71B20000|mpr.dll |Multiple Provider Router DLL |5.1.2600.5512 |59904 |2008-04-14 00:11:58|C:\WINDOWS\system32 | |71BF0000|SAMLIB.dll |SAM Library DLL |5.1.2600.5512 |64000 |2008-04-14 00:12:04|C:\WINDOWS\System32 | |71C10000|ntlanman.dll |Microsoft® Lan Manager |5.1.2600.5512 |44032 |2008-04-14 00:12:02|C:\WINDOWS\System32 | |71C80000|NETRAP.dll |Net Remote Admin Protocol DLL |5.1.2600.5512 |11776 |2008-04-14 00:12:02|C:\WINDOWS\System32 | |71C90000|NETUI1.dll |NT LM UI Common Code - Networking classes |5.1.2600.5512 |245760 |2008-04-14 00:12:02|C:\WINDOWS\System32 | |71CD0000|NETUI0.dll |NT LM UI Common Code - GUI Classes |5.1.2600.5512 |80896 |2008-04-14 00:12:02|C:\WINDOWS\System32 | |72410000|mydocs.dll |My Documents Folder UI |6.0.2900.5512 |90624 |2008-04-14 00:12:02|C:\WINDOWS\system32 | |72D10000|msacm32.drv |Microsoft Sound Mapper |5.1.2600.0 |20480 |2004-08-04 12:00:00|C:\WINDOWS\system32 | |72D20000|wdmaud.drv |WDM Audio driver mapper |5.1.2600.5512 |23552 |2008-04-14 00:12:46|C:\WINDOWS\system32 | |73000000|winspool.drv |Windows Spooler Driver |5.1.2600.5512 |146432 |2008-04-14 00:12:46|C:\WINDOWS\system32 | |732E0000|RICHED32.DLL |Wrapper Dll for Richedit 1.0 |5.1.2600.0 |3584 |2004-08-04 12:00:00|C:\WINDOWS\system32 | |73B30000|mscms.dll |Microsoft Color Matching System DLL |5.1.2600.5627 |74240 |2008-06-24 16:43:16|C:\WINDOWS\system32 | |73B50000|avifil32.dll |Microsoft AVI File support library |5.1.2600.5827 |84992 |2009-06-10 14:13:30|C:\WINDOWS\system32 | |73BC0000|DCIMAN32.DLL |DCI Manager |5.1.2600.5512 |8704 |2008-04-14 00:11:52|C:\WINDOWS\system32 | |73D70000|shgina.dll |Windows Shell User Logon |6.0.2900.5512 |68096 |2008-04-14 00:12:06|C:\WINDOWS\system32 | |74320000|ODBC32.dll |Microsoft Data Access - ODBC Driver Manager |3.525.1132.0 |249856 |2008-04-14 00:12:02|C:\WINDOWS\system32 | |746C0000|msls31.dll |Microsoft Line Services library file |3.10.349.0 |146432 |2004-08-04 12:00:00|C:\WINDOWS\system32 | |746F0000|msimtf.dll |Active IMM Server DLL |5.1.2600.5512 |159232 |2008-04-14 00:12:00|C:\WINDOWS\system32 | |74720000|MSCTF.dll |MSCTF Server DLL |5.1.2600.5512 |297984 |2008-04-14 00:11:58|C:\WINDOWS\system32 | |74980000|msxml3.dll |MSXML 3.0 SP10 |8.100.1051.0 |1172480 |2009-07-31 04:35:42|C:\WINDOWS\system32 | |74C80000|oleacc.dll |Active Accessibility Core Component |4.2.5406.0 |163328 |2004-08-04 12:00:00|C:\WINDOWS\system32 | |74D90000|USP10.dll |Uniscribe Unicode script processor |1.420.2600.5512 |406016 |2008-04-14 00:12:08|C:\WINDOWS\system32 | |74E30000|RICHED20.DLL |Rich Text Edit Control, v3.0 |5.30.23.1230 |433664 |2008-04-14 00:12:04|C:\WINDOWS\system32 | |754D0000|CRYPTUI.dll |Microsoft Trust UI Provider |5.131.2600.5512 |512512 |2008-04-14 00:11:52|C:\WINDOWS\system32 | |75970000|MSGINA.dll |Windows NT Logon GINA DLL |5.1.2600.5512 |997376 |2008-04-14 00:12:00|C:\WINDOWS\system32 | |75A70000|MSVFW32.dll |Microsoft Video for Windows DLL |5.1.2600.5512 |121344 |2008-04-14 00:12:02|C:\WINDOWS\system32 | |75C50000|jscript.dll |Microsoft (R) JScript |5.7.6002.22145 |512000 |2009-08-13 15:16:06|C:\WINDOWS\system32 | |75CF0000|mlang.dll |Multi Language Support DLL |6.0.2900.5512 |586240 |2008-04-14 00:11:58|C:\WINDOWS\system32 | |75F60000|drprov.dll |Microsoft Terminal Server Network Provider |5.1.2600.5512 |14336 |2008-04-14 00:11:52|C:\WINDOWS\System32 | |75F70000|davclnt.dll |Web DAV Client DLL |5.1.2600.5512 |25088 |2008-04-14 00:11:52|C:\WINDOWS\System32 | |75F80000|browseui.dll |Shell Browser UI Library |6.0.2900.5512 |1025024 |2008-04-14 00:11:50|C:\WINDOWS\system32 | |76080000|MSVCP60.dll |Microsoft (R) C++ Runtime Library |6.2.3104.0 |413696 |2008-04-14 00:12:02|C:\WINDOWS\system32 | |76200000|mshtmled.dll |Microsoft (R) HTML Editing Component |6.0.2900.5512 |449024 |2008-04-14 00:12:00|C:\WINDOWS\system32 | |76360000|WINSTA.dll |Winstation Library |5.1.2600.5512 |53760 |2008-04-14 00:12:10|C:\WINDOWS\system32 | |76380000|msimg32.dll |GDIEXT Client DLL |5.1.2600.5512 |4608 |2008-04-14 00:12:00|C:\WINDOWS\system32 | |76390000|IMM32.DLL |Windows XP IMM32 API Client DLL |5.1.2600.5512 |110080 |2008-04-14 00:11:54|C:\WINDOWS\system32 | |763B0000|comdlg32.dll |Common Dialogs DLL |6.0.2900.5512 |276992 |2008-04-14 00:11:52|C:\WINDOWS\system32 | |76600000|CSCDLL.dll |Offline Network Agent |5.1.2600.5512 |101888 |2008-04-14 00:11:52|C:\WINDOWS\System32 | |76990000|ntshrui.dll |Shell extensions for sharing |5.1.2600.5512 |143360 |2008-04-14 00:12:02|C:\WINDOWS\system32 | |769C0000|USERENV.dll |Userenv |5.1.2600.5512 |727040 |2008-04-14 00:12:08|C:\WINDOWS\system32 | |76B20000|ATL.DLL |ATL Module for Windows XP (Unicode) |3.5.2284.2 |58880 |2009-07-17 19:01:06|C:\WINDOWS\system32 | |76B40000|winmm.dll |MCI API DLL |5.1.2600.5512 |176128 |2008-04-14 00:12:10|C:\WINDOWS\system32 | |76BF0000|PSAPI.DLL |Process Status Helper |5.1.2600.5512 |23040 |2008-04-14 00:12:04|C:\WINDOWS\system32 | |76C30000|WINTRUST.dll |Microsoft Trust Verification APIs |5.131.2600.5512 |176640 |2008-04-14 00:12:10|C:\WINDOWS\system32 | |76C90000|IMAGEHLP.dll |Windows NT Image Helper |5.1.2600.5512 |144384 |2008-04-14 00:11:54|C:\WINDOWS\system32 | |76F20000|DNSAPI.dll |DNS Client API DLL |5.1.2600.5625 |147968 |2008-06-20 17:46:58|C:\WINDOWS\system32 | |76F60000|WLDAP32.dll |Win32 LDAP API DLL |5.1.2600.5512 |172032 |2008-04-14 00:12:10|C:\WINDOWS\system32 | |76FB0000|winrnr.dll |LDAP RnR Provider DLL |5.1.2600.5512 |16896 |2008-04-14 00:12:10|C:\WINDOWS\System32 | |76FC0000|rasadhlp.dll |Remote Access AutoDial Helper |5.1.2600.5512 |7680 |2008-04-14 00:12:04|C:\WINDOWS\system32 | |76FD0000|CLBCATQ.DLL | |2001.12.4414.700|498688 |2008-04-14 00:11:50|C:\WINDOWS\system32 | |77050000|COMRes.dll | |2001.12.4414.700|792064 |2008-04-14 00:11:52|C:\WINDOWS\system32 | |77120000|oleaut32.dll | |5.1.2600.5512 |551936 |2008-04-14 00:12:02|C:\WINDOWS\system32 | |771B0000|wininet.dll |Internet Extensions for Win32 |6.0.2900.5897 |667136 |2009-10-29 05:38:24|C:\WINDOWS\system32 | |773D0000|comctl32.dll |User Experience Controls Library |6.0.2900.5512 |1054208 |2008-04-14 00:12:52|C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83| |774E0000|ole32.dll |Microsoft OLE for Windows |5.1.2600.5512 |1287168 |2008-04-14 00:12:02|C:\WINDOWS\system32 | |77920000|SETUPAPI.dll |Windows Setup API |5.1.2600.5512 |985088 |2008-04-14 04:42:06|C:\WINDOWS\system32 | |77A20000|cscui.dll |Client Side Caching UI |5.1.2600.5512 |326656 |2008-04-14 00:11:52|C:\WINDOWS\System32 | |77A80000|CRYPT32.dll |Crypto API32 |5.131.2600.5512 |599040 |2008-04-14 00:11:52|C:\WINDOWS\system32 | |77B20000|MSASN1.dll |ASN.1 Runtime APIs |5.1.2600.5875 |58880 |2009-09-04 21:03:36|C:\WINDOWS\system32 | |77B40000|appHelp.dll |Application Compatibility Client Library |5.1.2600.5512 |125952 |2008-04-14 00:11:50|C:\WINDOWS\system32 | |77BD0000|midimap.dll |Microsoft MIDI Mapper |5.1.2600.5512 |18944 |2008-04-14 00:11:58|C:\WINDOWS\system32 | |77BE0000|MSACM32.dll |Microsoft ACM Audio Filter |5.1.2600.5512 |71680 |2008-04-14 00:11:58|C:\WINDOWS\system32 | |77C00000|version.dll |Version Checking and File Installation Libraries|5.1.2600.5512 |18944 |2008-04-14 00:12:08|C:\WINDOWS\system32 | |77C10000|msvcrt.dll |Windows NT CRT DLL |7.0.2600.5512 |343040 |2008-04-14 00:12:02|C:\WINDOWS\system32 | |77DD0000|advapi32.dll |Advanced Windows 32 Base API |5.1.2600.5755 |617472 |2009-02-09 12:10:48|C:\WINDOWS\system32 | |77E70000|RPCRT4.dll |Remote Procedure Call Runtime |5.1.2600.5795 |585216 |2009-04-15 14:51:26|C:\WINDOWS\system32 | |77F10000|GDI32.dll |GDI Client DLL |5.1.2600.5698 |286720 |2008-10-23 12:36:14|C:\WINDOWS\system32 | |77F60000|SHLWAPI.dll |Shell Light-weight Utility Library |6.0.2900.5512 |474112 |2008-04-14 00:12:06|C:\WINDOWS\system32 | |77FE0000|Secur32.dll |Security Support Provider Interface |5.1.2600.5834 |56832 |2009-06-25 08:25:26|C:\WINDOWS\system32 | |7C340000|MSVCR71.dll |Microsoft® C Runtime Library |7.10.3052.4 |348160 |2004-04-20 08:58:04|e:\bin\Client\AHFO4_1 | |7C800000|kernel32.dll |Windows NT BASE API Client DLL |5.1.2600.5781 |989696 |2009-03-21 14:06:58|C:\WINDOWS\system32 | |7C900000|ntdll.dll |NT Layer DLL |5.1.2600.5755 |714752 |2009-02-09 12:10:48|C:\WINDOWS\system32 | |7C9C0000|shell32.dll |Windows Shell Common Dll |6.0.2900.5622 |8461312 |2008-06-17 19:02:20|C:\WINDOWS\system32 | |7D1E0000|msi.dll |Windows Installer |3.1.4001.5512 |2843136 |2008-04-14 00:12:00|C:\WINDOWS\system32 | |7DC30000|mshtml.dll |Microsoft (R) HTML Viewer |6.0.2900.5897 |3070976 |2009-10-29 19:08:22|C:\WINDOWS\system32 | |7E1E0000|urlmon.dll |OLE32 Extensions for Win32 |6.0.2900.5897 |627712 |2009-10-29 05:38:22|C:\WINDOWS\system32 | |7E290000|shdocvw.dll |Shell Doc Object and Control Library |6.0.2900.5897 |1509888 |2009-10-29 05:38:22|C:\WINDOWS\system32 | |7E410000|user32.dll |Windows XP USER API Client DLL |5.1.2600.5512 |578560 |2008-04-14 00:12:08|C:\WINDOWS\system32 | |7E720000|SXS.DLL |Fusion 2.5 |5.1.2600.5512 |713216 |2008-04-14 00:12:08|C:\WINDOWS\system32 | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ Processes Information: -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory |Priority|Threads|Path | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |4 |System | | |45056 |Normal |58 | | |428 |ZCfgSvc.exe |ZeroCfgSvc MFC Application |7.1.4.4 |2060288 |Normal |6 |C:\WINDOWS\system32 | |520 |Ati2evxx.exe |ATI External Event Utility EXE Module |6.14.10.4124 |856064 |Normal |6 |C:\WINDOWS\system32 | |600 |smss.exe | | |49152 |Normal |3 |\SystemRoot\System32 | |624 |Explorer.EXE |Windows Explorer |6.0.2900.5512|12062720|Normal |14 |C:\WINDOWS | |652 |1XConfig.exe |8021XConfig Module |7.1.4.4 |630784 |Normal |3 |C:\WINDOWS\system32 | |692 |winlogon.exe | | |3129344 |High |25 |C:\WINDOWS\system32 | |736 |services.exe |Services and Controller app |5.1.2600.5755|917504 |Normal |15 |C:\WINDOWS\system32 | |748 |lsass.exe |LSA Shell (Export Version) |5.1.2600.5512|2678784 |Normal |22 |C:\WINDOWS\system32 | |920 |Ati2evxx.exe |ATI External Event Utility EXE Module |6.14.10.4124 |434176 |Normal |5 |C:\WINDOWS\system32 | |932 |svchost.exe |Generic Host Process for Win32 Services |5.1.2600.5512|921600 |Normal |16 |C:\WINDOWS\system32 | |1072|svchost.exe |Generic Host Process for Win32 Services |5.1.2600.5512|7983104 |Normal |71 |C:\WINDOWS\System32 | |1108|S24EvMon.exe |Event Monitor - Supports driver extensions to NIC Driver for wireless adapters.|7.1.4.4 |651264 |Normal |5 |C:\WINDOWS\system32 | |1464|spoolsv.exe |Spooler SubSystem App |5.1.2600.5512|1335296 |Normal |13 |C:\WINDOWS\system32 | |1472|ModesAdmin.exe|MODES admin program |1.2.0.52 |10346496|Normal |8 |E:\bin\Admin | |1588|abyssws.exe |Abyss Web Server X1 |2.4.0.3 |204800 |Normal |2 |C:\Program Files\Abyss Web Server| |1600|abyssws.exe |Abyss Web Server X1 |2.4.0.3 |376832 |Normal |3 |C:\Program Files\Abyss Web Server| |1684|RegSrvc.exe |RegSrvc Module |7.1.4.4 |507904 |Normal |3 |C:\WINDOWS\system32 | |2028|SynTPEnh.exe |Synaptics TouchPad Enhancements |8.3.4.0 |1392640 |Normal |4 |C:\Program Files\Synaptics\SynTP | |2952|cmd.exe |Windows Command Processor |5.1.2600.5512|1036288 |Normal |1 |C:\WINDOWS\system32 | |3224|ModesXML.exe |ModesXML |1.2.0.165 |57569280|Normal |16 |E:\bin\Client | |3464|conkeror.exe | |1.9.0.3319 |43069440|Normal |13 |C:\Program Files\conkeror | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: ----------------------------------------------------------------- 0042F3CA mov eax, [ebp-$1C] 0042F3CD mov [ebp-$0C], eax 0042F3D0 mov byte ptr [ebp-$08], $0B 0042F3D4 lea eax, [ebp-$14] 0042F3D7 push eax 0042F3D8 push $01 0042F3DA mov ecx, [$D2FCA8] 0042F3E0 mov dl, $01 0042F3E2 mov eax, dword ptr [EFCreateError] 0042F3E7 call -$000160A8 0042F3EC call -$0002A17D ; <-- EXCEPTION 0042F3F1 jmp +$63 0042F3F3 movzx edx, di 0042F3F6 mov eax, esi 0042F3F8 call -$0001C9DD 0042F3FD mov ecx, eax 0042F3FF xor edx, edx 0042F401 mov eax, ebx 0042F403 call -$000001C8 0042F408 cmp dword ptr [ebx+$04], +$00 0042F40C jnl +$48 Registers: ----------------------------- EAX: 7BF62370 EDI: 7BF6FFFF EBX: 7BF63CD0 ESI: 7EB14FE8 ECX: 00000000 ESP: 0012F3AC EDX: 0042F3F1 EIP: 0042F3EC Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0012F3AC: 0012F3F8 0042F3EC: E8 83 5E FD FF EB 63 0F B7 D7 8B C6 E8 23 36 FE ..^...c......#6. 0012F3B0: 004051A8 0042F3FC: FF 8B C8 33 D2 8B C3 E8 38 FE FF FF 83 7B 04 00 ...3....8....{.. 0012F3B4: 0012F3E8 0042F40C: 7D 48 8D 55 E0 8B C6 E8 0C 3D FE FF 8B 45 E0 89 }H.U.....=...E.. 0012F3B8: 0012F658 0042F41C: 45 EC C6 45 F0 0B E8 75 97 FD FF 8D 55 DC E8 89 E..E...u....U... 0012F3BC: 7BF63CD0 0042F42C: 94 FE FF 8B 45 DC 89 45 F4 C6 45 F8 0B 8D 45 EC ....E..E..E...E. 0012F3C0: 00000001 0042F43C: 50 6A 01 8B 0D E4 E0 D2 00 B2 01 A1 14 84 42 00 Pj............B. 0012F3C4: 00000000 0042F44C: E8 F3 9E FE FF E8 1E 5E FD FF 33 C0 5A 59 59 64 .......^..3.ZYYd 0012F3C8: 00000000 0042F45C: 89 10 68 78 F4 42 00 8D 45 DC BA 04 00 00 00 E8 ..hx.B..E....... 0012F3CC: 00000000 0042F46C: D4 64 FD FF C3 E9 02 5D FD FF EB EB 8B C3 80 7D .d.....].......} 0012F3D0: 00000000 0042F47C: FF 00 74 0F E8 1B 59 FD FF 64 8F 05 00 00 00 00 ..t...Y..d...... 0012F3D4: 7EB19A68 0042F48C: 83 C4 0C 8B C3 5F 5E 5B 8B E5 5D C2 08 00 8B C0 ....._^[..]..... 0012F3D8: 0042930B 0042F49C: 53 56 E8 0D 59 FD FF 8B DA 8B F0 8B 46 04 85 C0 SV..Y.......F... 0012F3DC: 7C486388 0042F4AC: 7C 05 E8 8D 36 FE FF 8B D3 80 E2 FC 8B C6 E8 01 |...6........... 0012F3E0: 7FAF790B 0042F4BC: 55 FD FF 84 DB 7E 07 8B C6 E8 CE 58 FD FF 5E 5B U....~.....X..^[ 0012F3E4: 00404D52 0042F4CC: C3 8D 40 00 89 50 04 89 48 08 C3 90 53 56 57 8B ..@..P..H...SVW. 0012F3E8: 0012F410 0042F4DC: D8 8B 7B 0C 85 FF 7C 24 85 C9 7C 20 8B 73 08 2B ..{...|$..| .s.+