So, hier mal der Report:
date/time : 2007-06-27, 14:12:33, 351ms
computer name : *******
user name : **************
registered owner : ********************
operating system : Windows XP Service Pack 2 build 2600
system language : German
system up time : 6 hours 45 minutes
program up time : 3 seconds
processor : AMD Athlon(tm) XP 1900+
physical memory : 201/511 MB (free/total)
free disk space : (C
43,94 GB (S
144,87 GB
display mode : 1280x1024, 16 bit
process id : $c20
allocated memory : 10,78 MB
executable : Project1.exe
exec. date/time : 2007-06-27 14:09
compiled with : Delphi 7
madExcept version : 3.0e
callstack crc : $45525ec1, $d8b320f9, $d8b320f9
count : 3
exception number : 1
exception class : EAccessViolation
exception message : Zugriffsverletzung bei Adresse 004020B0 in Modul 'Project1.exe'. Schreiben von Adresse 00000004.
main thread ($448):
004020b0 +050 Project1.exe System 802 +15 InsertFree
00402307 +0bb Project1.exe System 955 +55 TryHarder
00402493 +153 Project1.exe System 1035 +56 SysGetMem
00402919 +005 Project1.exe System 2447 +10 @GetMem
0047c665 +129 Project1.exe Graphics 5079 +26 CopyBitmap
0047d84c +0c4 Project1.exe Graphics 5626 +17 TBitmap.DIBNeeded
0047ea11 +085 Project1.exe Graphics 6320 +11 TBitmap.WriteStream
0047ece0 +014 Project1.exe Graphics 6430 +1 TBitmap.SaveToStream
0047d172 +022 Project1.exe Graphics 5375 +2 TBitmap.Dormant
0047f7ba +0ee Project1.exe Graphics 6853 +17 TPatternManager.CreateBitmap
0047f681 +081 Project1.exe Graphics 6822 +13 TPatternManager.AllocPattern
0047f89e +02e Project1.exe Graphics 6889 +2 AllocPatternBitmap
0048d144 +418 Project1.exe Buttons 1041 +97 TSpeedButton.Paint
004afbcc +05c Project1.exe Controls 8574 +7 TGraphicControl.WMPaint
004a7663 +1df Project1.exe Controls 4645 +53 TControl.WndProc
004a736e +036 Project1.exe Controls 4552 +5 TControl.Perform
004ab715 +169 Project1.exe Controls 6463 +24 TWinControl.PaintControls
004ab53f +133 Project1.exe Controls 6418 +20 TWinControl.PaintHandler
004aba84 +04c Project1.exe Controls 6547 +6 TWinControl.WMPaint
004b0823 +01b Project1.exe Controls 8907 +2 TCustomControl.WMPaint
004a7663 +1df Project1.exe Controls 4645 +53 TControl.WndProc
004ab232 +18e Project1.exe Controls 6342 +33 TWinControl.WndProc
004aae04 +034 Project1.exe Controls 6237 +3 TWinControl.MainWndProc
004747d8 +014 Project1.exe Classes 10966 +8 StdWndProc
7c91eae0 +010 ntdll.dll KiUserCallbackDispatcher
004a6300 +018 Project1.exe Controls 4069 +1 TControl.Update
004a6418 +0f4 Project1.exe Controls 4096 +16 TControl.Repaint
0048d4d9 +0d9 Project1.exe Buttons 1145 +18 TSpeedButton.MouseUp
004a7d95 +041 Project1.exe Controls 4831 +2 TControl.DoMouseUp
004a7e1c +07c Project1.exe Controls 4843 +8 TControl.WMLButtonUp
004a7663 +1df Project1.exe Controls 4645 +53 TControl.WndProc
004a7cff +08b Project1.exe Controls 4819 +8 TControl.WMMouseMove
004a7663 +1df Project1.exe Controls 4645 +53 TControl.WndProc
004ab232 +18e Project1.exe Controls 6342 +33 TWinControl.WndProc
004c5270 +478 Project1.exe Forms 3097 +103 TCustomForm.WndProc
004a736e +036 Project1.exe Controls 4552 +5 TControl.Perform
004a7663 +1df Project1.exe Controls 4645 +53 TControl.WndProc
004aae04 +034 Project1.exe Controls 6237 +3 TWinControl.MainWndProc
004a736e +036 Project1.exe Controls 4552 +5 TControl.Perform
004ab08c +0a8 Project1.exe Controls 6301 +15 TWinControl.IsControlMouseMsg
004ab198 +0f4 Project1.exe Controls 6327 +18 TWinControl.WndProc
004aae04 +034 Project1.exe Controls 6237 +3 TWinControl.MainWndProc
004747d8 +014 Project1.exe Classes 10966 +8 StdWndProc
77d196c2 +00a user32.dll DispatchMessageA
004ccf0c +0ac Project1.exe Forms 6872 +13 TApplication.ProcessMessage
004ccf53 +00f Project1.exe Forms 6891 +1 TApplication.HandleMessage
004cd1ee +0a6 Project1.exe Forms 6975 +16 TApplication.Run
00617bd3 +03b Project1.exe Project1 32 +3 initialization
thread $ea4: <priority:1>
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e319 +0a ntdll.dll NtRemoveIoCompletion
0044dc1d +0d Project1.exe madExcept CallThreadProcSafe
0044dc87 +37 Project1.exe madExcept ThreadExceptFrame
>> created by main thread ($448) at:
719bdbb3 +00 mswsock.dll
modules:
00400000 Project1.exe S:\Eigene Dateien\AG Bestand\Tool
00b50000 iTchHk.dll 1.0.0.0 C:\Programme\Logitech\iTouch
00b80000 libintl-2.dll C:\WINDOWS\system32
020c0000 ssleay32.dll 0.9.8.1 C:\WINDOWS\system32
02120000 krb5_32.dll 1.3.5.0 C:\WINDOWS\system32
022c0000 libmysql50.dll C:\WINDOWS\system32
02530000 libeay32.dll 0.9.8.1 C:\WINDOWS\system32
02640000 libiconv-2.dll C:\WINDOWS\system32
02820000 LgMsgHk.dll 1.1.0.0 C:\Programme\Gemeinsame Dateien\Logitech\Scrolling
10000000 LgWndHk.dll 9.79.25.1 C:\Programme\Logitech\MouseWare\System
1c000000 comerr32.dll 1.3.5.0 C:\WINDOWS\system32
5b0f0000 uxtheme.dll 6.0.2900.2180 C:\WINDOWS\system32
5d450000 comctl32.dll 5.82.2900.2982 C:\WINDOWS\system32
63100000 libpq81.dll 8.1.0.5309 C:\WINDOWS\system32
66710000 hnetcfg.dll 5.1.2600.2180 C:\WINDOWS\system32
719b0000 mswsock.dll 5.1.2600.2180 C:\WINDOWS\System32
719f0000 wshtcpip.dll 5.1.2600.2180 C:\WINDOWS\System32
71a00000 WS2HELP.dll 5.1.2600.2180 C:\WINDOWS\system32
71a10000 WS2_32.dll 5.1.2600.2180 C:\WINDOWS\system32
71a30000 wsock32.dll 5.1.2600.2180 C:\WINDOWS\system32
72f70000 winspool.drv 5.1.2600.2180 C:\WINDOWS\system32
76350000 comdlg32.dll 6.0.2900.2180 C:\WINDOWS\system32
76730000 SHFOLDER.DLL 6.0.2900.2180 C:\WINDOWS\system32
767f0000 UNIDRVUI.DLL 0.3.1296.1 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3
76af0000 winmm.dll 5.1.2600.2180 C:\WINDOWS\system32
76ee0000 DNSAPI.dll 5.1.2600.2938 C:\WINDOWS\system32
76f20000 WLDAP32.dll 5.1.2600.2180 C:\WINDOWS\system32
76f70000 winrnr.dll 5.1.2600.2180 C:\WINDOWS\System32
76f80000 rasadhlp.dll 5.1.2600.2938 C:\WINDOWS\system32
770f0000 oleaut32.dll 5.1.2600.2180 C:\WINDOWS\system32
773a0000 comctl32.dll 6.0.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03
774b0000 ole32.dll 5.1.2600.2726 C:\WINDOWS\system32
77bd0000 version.dll 5.1.2600.2180 C:\WINDOWS\system32
77be0000 msvcrt.dll 7.0.2600.2180 C:\WINDOWS\system32
77d10000 user32.dll 5.1.2600.2622 C:\WINDOWS\system32
77da0000 advapi32.dll 5.1.2600.2180 C:\WINDOWS\system32
77e50000 RPCRT4.dll 5.1.2600.2180 C:\WINDOWS\system32
77ef0000 GDI32.dll 5.1.2600.2818 C:\WINDOWS\system32
77f40000 SHLWAPI.dll 6.0.2900.3020 C:\WINDOWS\system32
77fc0000 Secur32.dll 5.1.2600.2180 C:\WINDOWS\system32
7c800000 kernel32.dll 5.1.2600.2945 C:\WINDOWS\system32
7c910000 ntdll.dll 5.1.2600.2180 C:\WINDOWS\system32
7c9d0000 shell32.dll 6.0.2900.2951 C:\WINDOWS\system32
processes:
000 Idle
004 System normal
1bc smss.exe normal C:\WINDOWS\system32
1f4 csrss.exe
214 winlogon.exe high C:\WINDOWS\system32
240 services.exe normal C:\WINDOWS\system32
24c lsass.exe normal C:\WINDOWS\system32
2e4 svchost.exe normal C:\WINDOWS\system32
330 svchost.exe
36c svchost.exe normal C:\WINDOWS\System32
39c svchost.exe
3cc svchost.exe
478 spoolsv.exe normal C:\WINDOWS\system32
4f8 ibguard.exe normal C:\Programme\Borland\InterBase\bin
508 KENCLI.EXE high C:\Programme\KEN!
52c FrameworkService.exe normal C:\Programme\Network Associates\Common Framework
578 Mcshield.exe high C:\Programme\Network Associates\VirusScan
590 VsTskMgr.exe normal C:\Programme\Network Associates\VirusScan
5a4 mysqld-nt.exe normal C:\Programme\xampp\
mysql\bin
5d8 naPrdMgr.exe
614 nvsvc32.exe normal C:\WINDOWS\system32
764 ibserver.exe normal C:\Programme\Borland\InterBase\bin
0d4 alg.exe
4e4 wscntfy.exe normal C:\WINDOWS\system32
678 Explorer.EXE normal C:\WINDOWS
630 UpdaterUI.exe normal C:\Programme\Network Associates\Common Framework
660 kentbcli.exe normal C:\Programme\KEN!
868 iTouch.exe normal C:\Programme\Logitech\iTouch
870 TBMon.exe normal C:\Programme\Gemeinsame Dateien\Network Associates\TalkBack
878 SHSTAT.EXE normal C:\Programme\Network Associates\VirusScan
880 fpassist.exe normal C:\Programme\FreePDF_XP
8c4 em_exec.exe normal C:\Programme\Logitech\MouseWare\system
8fc IWatch.exe normal C:\Programme\FRITZ!
910 LANChat_En.exe normal C:\Programme\LAN Chat Enterprise
928 wuauclt.exe normal C:\WINDOWS\system32
9e0 Runit.exe normal C:\Programme\Runit
e5c svchost.exe normal C:\WINDOWS\System32
a5c TOTALCMD.EXE normal C:\Programme\Totalcmd653
7c4 AcroRd32.exe normal C:\Programme\Adobe\Acrobat 7.0\Reader
e2c iexplore.exe normal C:\Programme\Internet Explorer
ae8 TOTALCMD.EXE normal C:\Programme\Totalcmd653
c20 Project1.exe normal S:\Eigene Dateien\AG Bestand\Tool
hardware:
+ Anschlüsse (
COM und LPT)
- ECP-Druckeranschluss (LPT1)
- Kommunikationsanschluss (COM1)
+ Audio-, Video- und Gamecontroller
- Audiocodecs
- Legacy-Audiotreiber
- Legacy-Videoaufnahmegerät
- Mediensteuerungsgerät
- Standardgameport
- VIA Audio controller - SigmaTel CODEC (driver 5.10.0.3510)
- Videocodecs
+ Computer
- ACPI-Uniprozessor-PC
+ Diskettencontroller
- Standard-Diskettenlaufwerkcontroller
+ Diskettenlaufwerke
- Diskettenlaufwerk
+ DVD/CD-ROM-Laufwerke
- LG CD-ROM CRD-8521B
+ Eingabegeräte (Human Interface Devices)
- USB-HID (Human Interface Device)
+ Grafikkarte
- NVIDIA GeForce2 MX/MX 400 (driver 6.14.10.9371)
+
IDE ATA/ATAPI-Controller
- Primärer
IDE-Kanal
- Sekundärer
IDE-Kanal
- VIA Bus-Master-
IDE-Controller
+ Laufwerke
- Maxtor 4D060H3
+ Monitore
- Plug und Play-Monitor
+ Mäuse und andere Zeigegeräte
- HID-compliant Wheel Mouse (driver 9.79.0.0)
+ Netzwerkadapter
- Realtek RTL8139/810x Family Fast Ethernet NIC (driver 5.663.1212.2006)
+ Prozessoren
- AMD Athlon(tm) XP 1900+
+ Systemgeräte
- ACPI-Einschaltknopf
- ACPI-Schalter
- DMA-Controller
- ISAPnP-Datenleseport
- Logische Schnittstelle für Druckeranschluss
- Microcode-Updategerät
- Microsoft ACPI-konformes System
- Microsoft-Systemverwaltungs-BIOS-Treiber
- Numerischer Coprozessor
- PCI-Bus
- PnP-Softwaregeräte-Enumerator
- System CMOS/Echtzeituhr
- Systemlautsprecher
- Systemzeitgeber
- Terminalserver-Geräteumleitung
- Terminalserver-Maustreiber
- Terminalserver-Tastaturtreiber
- Verwaltung logischer Datenträger
- VIA CPU to AGP Controller (driver 5.1.0.3442)
- VIA Tech CPU-zu-PCI-Brücke
- VIA Tech Energieverwaltungscontroller
- VIA Tech PCI-zu-ISA-Brücke
- Volume-Manager
+ Tastaturen
- Easy Internet Keyboard (driver 2.21.0.0)
+ USB-Controller
- USB-Root-Hub
- USB-Root-Hub
- VIA Rev 5 oder höher USB universeller Hostcontroller
- VIA Rev 5 oder höher USB universeller Hostcontroller
cpu registers:
eax = 00d07580
ebx = 00d022d4
ecx = 00000121
edx = 00000000
esi = 00000054
edi = 00d022d4
eip = 004020b0
esp = 0012ef14
ebp = 0062161c
stack dump:
0012ef14 18 16 62 00 30 04 00 00 - a4 1e d0 00 0c 23 40 00 ..b.0........#@.
0012ef24 58 ef 12 00 c8 fa 12 00 - c8 0f b4 00 30 04 00 00 X...........0...
0012ef34 98 24 40 00 68 ef 12 00 - b4 42 40 00 58 ef 12 00 .$@.h....B@.X...
0012ef44 c8 fa 12 00 c8 0f b4 00 - b0 c1 c6 00 6c ef 12 00 ............l...
0012ef54 7a 60 ef 77 20 f0 12 00 - 1f 29 40 00 b0 c1 c6 00 z`.w.....)@.....
0012ef64 6a c6 47 00 14 f5 12 00 - b4 42 40 00 20 f0 12 00 j.G......B@.....
0012ef74 c8 fa 12 00 c8 0f b4 00 - b0 c1 c6 00 f6 48 0f 5b .............H.[
0012ef84 7e 00 80 00 00
dc fd 7f - 9c ef 12 00 00 00 00 00 ~...............
0012ef94 08 00 00 00 08 00 00 00 - 10 00 00 00 01 00 10 00 ................
0012efa4 00 00 00 00 00 00 00 00 - 61 00 6d 00 6d 00 65 00 ........a.m.m.e.
0012efb4 5c 00 47 00 65 00 6d 00 - 65 00 69 00 d8 02 0a 02 \.G.e.m.e.i.....
0012efc4 61 00 6d 00 65 00 20 00 - 44 00 61 00 74 00 65 00 a.m.e...D.a.t.e.
0012efd4 00 00 00 00 6e 00 5c 00 - a8 1e 0a 02 08 06 0a 02 ....n.\.........
0012efe4 74 00 65 00 63 00 68 00 - 5c 00 53 00 00 00 00 00 t.e.c.h.\.S.....
0012eff4 6f 00 6c 00 a8 1e 0a 02 - 08 06 0a 02 46 12 01 bd o.l.........F...
0012f004 d9 0f 01 20 3d 02 00 00 - 02 00 00 00 00 00 00 00 ....=...........
0012f014 00 00 00 00 00 00 00 00 - a1 12 05 1b 44 f0 12 00 ............D...
0012f024 51 d8 47 00 00 00 00 00 - 0c 74 d0 00 24 74 d0 00 Q.G......t..$t..
0012f034 0c 74 d0 00 0c 74 d0 00 - f4 73 d0 00 28 02 ca 00 .t...t...s..(...
0012f044 90 f4 12 00 16 ea 47 00 - b0 c1 c6 00 b4 f4 12 00 ......G.........
disassembling:
[...]
004020a5 jmp loc_4020e1
004020a7 798 mov edx, [eax]
004020a9 799 mov [ebx+4], eax
004020ac 800 mov [ebx], edx
004020ae 801 mov [eax], ebx
004020b0 802 > mov [edx+4], ebx
004020b3 jmp loc_4020e1
004020b5 804 cmp esi, $3c00
004020bb jl loc_4020ca
004020bd mov edx, esi
004020bf mov eax, edi
[...]
date/time : 2007-06-27, 14:12:37, 196ms
computer name : *****
user name : **********
registered owner : ***********************
operating system : Windows XP Service Pack 2 build 2600
system language : German
system up time : 6 hours 45 minutes
program up time : 6 seconds
processor : AMD Athlon(tm) XP 1900+
physical memory : 200/511 MB (free/total)
free disk space : (C
43,94 GB (S
144,87 GB
display mode : 1280x1024, 16 bit
process id : $c20
allocated memory : 12,23 MB
executable : Project1.exe
exec. date/time : 2007-06-27 14:09
compiled with : Delphi 7
madExcept version : 3.0e
callstack crc : $5aa27af1, $de6afec3, $de6afec3
exception number : 2
exception class : EInvalidPointer
exception message : Ungültige Zeigeroperation.
main thread ($448):
00402947 +13 Project1.exe System 2477 +13 @FreeMem
00406297 +33 Project1.exe System 16228 +31 @DynArrayClear
00613cd8 +24 Project1.exe Customize 202 +0 Finalization
00404602 +36 Project1.exe System 10712 +20 FinalizeUnits
0044d24c +54 Project1.exe madExcept InterceptFinalizeUnits
004048ad +59 Project1.exe System 11382 +44 @Halt0
00617bd8 +40 Project1.exe Project1 33 +4 initialization
thread $ea4: <priority:1>
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e319 +0a ntdll.dll NtRemoveIoCompletion
0044dc1d +0d Project1.exe madExcept CallThreadProcSafe
0044dc87 +37 Project1.exe madExcept ThreadExceptFrame
>> created by main thread ($448) at:
719bdbb3 +00 mswsock.dll
modules:
00400000 Project1.exe S:\Eigene Dateien\AG Bestand\Tool
00b50000 iTchHk.dll 1.0.0.0 C:\Programme\Logitech\iTouch
00b80000 libintl-2.dll C:\WINDOWS\system32
020c0000 ssleay32.dll 0.9.8.1 C:\WINDOWS\system32
02120000 krb5_32.dll 1.3.5.0 C:\WINDOWS\system32
022c0000 libmysql50.dll C:\WINDOWS\system32
02530000 libeay32.dll 0.9.8.1 C:\WINDOWS\system32
02640000 libiconv-2.dll C:\WINDOWS\system32
02820000 LgMsgHk.dll 1.1.0.0 C:\Programme\Gemeinsame Dateien\Logitech\Scrolling
10000000 LgWndHk.dll 9.79.25.1 C:\Programme\Logitech\MouseWare\System
1c000000 comerr32.dll 1.3.5.0 C:\WINDOWS\system32
5b0f0000 uxtheme.dll 6.0.2900.2180 C:\WINDOWS\system32
5d450000 comctl32.dll 5.82.2900.2982 C:\WINDOWS\system32
63100000 libpq81.dll 8.1.0.5309 C:\WINDOWS\system32
66710000 hnetcfg.dll 5.1.2600.2180 C:\WINDOWS\system32
719b0000 mswsock.dll 5.1.2600.2180 C:\WINDOWS\System32
719f0000 wshtcpip.dll 5.1.2600.2180 C:\WINDOWS\System32
71a00000 WS2HELP.dll 5.1.2600.2180 C:\WINDOWS\system32
71a10000 WS2_32.dll 5.1.2600.2180 C:\WINDOWS\system32
71a30000 wsock32.dll 5.1.2600.2180 C:\WINDOWS\system32
72f70000 winspool.drv 5.1.2600.2180 C:\WINDOWS\system32
76350000 comdlg32.dll 6.0.2900.2180 C:\WINDOWS\system32
76730000 SHFOLDER.DLL 6.0.2900.2180 C:\WINDOWS\system32
767f0000 UNIDRVUI.DLL 0.3.1296.1 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3
76af0000 winmm.dll 5.1.2600.2180 C:\WINDOWS\system32
76bb0000 psapi.dll 5.1.2600.2180 C:\WINDOWS\system32
76bf0000 WINTRUST.dll 5.131.2600.2180 C:\WINDOWS\system32
76c50000 IMAGEHLP.dll 5.1.2600.2180 C:\WINDOWS\system32
76ee0000 DNSAPI.dll 5.1.2600.2938 C:\WINDOWS\system32
76f20000 WLDAP32.dll 5.1.2600.2180 C:\WINDOWS\system32
76f70000 winrnr.dll 5.1.2600.2180 C:\WINDOWS\System32
76f80000 rasadhlp.dll 5.1.2600.2938 C:\WINDOWS\system32
770f0000 oleaut32.dll 5.1.2600.2180 C:\WINDOWS\system32
773a0000 comctl32.dll 6.0.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03
774b0000 ole32.dll 5.1.2600.2726 C:\WINDOWS\system32
77a50000 CRYPT32.dll 5.131.2600.2180 C:\WINDOWS\system32
77af0000 MSASN1.dll 5.1.2600.2180 C:\WINDOWS\system32
77bd0000 version.dll 5.1.2600.2180 C:\WINDOWS\system32
77be0000 msvcrt.dll 7.0.2600.2180 C:\WINDOWS\system32
77d10000 user32.dll 5.1.2600.2622 C:\WINDOWS\system32
77da0000 advapi32.dll 5.1.2600.2180 C:\WINDOWS\system32
77e50000 RPCRT4.dll 5.1.2600.2180 C:\WINDOWS\system32
77ef0000 GDI32.dll 5.1.2600.2818 C:\WINDOWS\system32
77f40000 SHLWAPI.dll 6.0.2900.3020 C:\WINDOWS\system32
77fc0000 Secur32.dll 5.1.2600.2180 C:\WINDOWS\system32
7c800000 kernel32.dll 5.1.2600.2945 C:\WINDOWS\system32
7c910000 ntdll.dll 5.1.2600.2180 C:\WINDOWS\system32
7c9d0000 shell32.dll 6.0.2900.2951 C:\WINDOWS\system32
processes:
000 Idle
004 System normal
1bc smss.exe normal C:\WINDOWS\system32
1f4 csrss.exe
214 winlogon.exe high C:\WINDOWS\system32
240 services.exe normal C:\WINDOWS\system32
24c lsass.exe normal C:\WINDOWS\system32
2e4 svchost.exe normal C:\WINDOWS\system32
330 svchost.exe
36c svchost.exe normal C:\WINDOWS\System32
39c svchost.exe
3cc svchost.exe
478 spoolsv.exe normal C:\WINDOWS\system32
4f8 ibguard.exe normal C:\Programme\Borland\InterBase\bin
508 KENCLI.EXE high C:\Programme\KEN!
52c FrameworkService.exe normal C:\Programme\Network Associates\Common Framework
578 Mcshield.exe high C:\Programme\Network Associates\VirusScan
590 VsTskMgr.exe normal C:\Programme\Network Associates\VirusScan
5a4 mysqld-nt.exe normal C:\Programme\xampp\
mysql\bin
5d8 naPrdMgr.exe
614 nvsvc32.exe normal C:\WINDOWS\system32
764 ibserver.exe normal C:\Programme\Borland\InterBase\bin
0d4 alg.exe
4e4 wscntfy.exe normal C:\WINDOWS\system32
678 Explorer.EXE normal C:\WINDOWS
630 UpdaterUI.exe normal C:\Programme\Network Associates\Common Framework
660 kentbcli.exe normal C:\Programme\KEN!
868 iTouch.exe normal C:\Programme\Logitech\iTouch
870 TBMon.exe normal C:\Programme\Gemeinsame Dateien\Network Associates\TalkBack
878 SHSTAT.EXE normal C:\Programme\Network Associates\VirusScan
880 fpassist.exe normal C:\Programme\FreePDF_XP
8c4 em_exec.exe normal C:\Programme\Logitech\MouseWare\system
8fc IWatch.exe normal C:\Programme\FRITZ!
910 LANChat_En.exe normal C:\Programme\LAN Chat Enterprise
928 wuauclt.exe normal C:\WINDOWS\system32
9e0 Runit.exe normal C:\Programme\Runit
e5c svchost.exe normal C:\WINDOWS\System32
a5c TOTALCMD.EXE normal C:\Programme\Totalcmd653
7c4 AcroRd32.exe normal C:\Programme\Adobe\Acrobat 7.0\Reader
e2c iexplore.exe normal C:\Programme\Internet Explorer
ae8 TOTALCMD.EXE normal C:\Programme\Totalcmd653
c20 Project1.exe normal S:\Eigene Dateien\AG Bestand\Tool
hardware:
+ Anschlüsse (
COM und LPT)
- ECP-Druckeranschluss (LPT1)
- Kommunikationsanschluss (COM1)
+ Audio-, Video- und Gamecontroller
- Audiocodecs
- Legacy-Audiotreiber
- Legacy-Videoaufnahmegerät
- Mediensteuerungsgerät
- Standardgameport
- VIA Audio controller - SigmaTel CODEC (driver 5.10.0.3510)
- Videocodecs
+ Computer
- ACPI-Uniprozessor-PC
+ Diskettencontroller
- Standard-Diskettenlaufwerkcontroller
+ Diskettenlaufwerke
- Diskettenlaufwerk
+ DVD/CD-ROM-Laufwerke
- LG CD-ROM CRD-8521B
+ Eingabegeräte (Human Interface Devices)
- USB-HID (Human Interface Device)
+ Grafikkarte
- NVIDIA GeForce2 MX/MX 400 (driver 6.14.10.9371)
+
IDE ATA/ATAPI-Controller
- Primärer
IDE-Kanal
- Sekundärer
IDE-Kanal
- VIA Bus-Master-
IDE-Controller
+ Laufwerke
- Maxtor 4D060H3
+ Monitore
- Plug und Play-Monitor
+ Mäuse und andere Zeigegeräte
- HID-compliant Wheel Mouse (driver 9.79.0.0)
+ Netzwerkadapter
- Realtek RTL8139/810x Family Fast Ethernet NIC (driver 5.663.1212.2006)
+ Prozessoren
- AMD Athlon(tm) XP 1900+
+ Systemgeräte
- ACPI-Einschaltknopf
- ACPI-Schalter
- DMA-Controller
- ISAPnP-Datenleseport
- Logische Schnittstelle für Druckeranschluss
- Microcode-Updategerät
- Microsoft ACPI-konformes System
- Microsoft-Systemverwaltungs-BIOS-Treiber
- Numerischer Coprozessor
- PCI-Bus
- PnP-Softwaregeräte-Enumerator
- System CMOS/Echtzeituhr
- Systemlautsprecher
- Systemzeitgeber
- Terminalserver-Geräteumleitung
- Terminalserver-Maustreiber
- Terminalserver-Tastaturtreiber
- Verwaltung logischer Datenträger
- VIA CPU to AGP Controller (driver 5.1.0.3442)
- VIA Tech CPU-zu-PCI-Brücke
- VIA Tech Energieverwaltungscontroller
- VIA Tech PCI-zu-ISA-Brücke
- Volume-Manager
+ Tastaturen
- Easy Internet Keyboard (driver 2.21.0.0)
+ USB-Controller
- USB-Root-Hub
- USB-Root-Hub
- VIA Rev 5 oder höher USB universeller Hostcontroller
- VIA Rev 5 oder höher USB universeller Hostcontroller
cpu registers:
eax = 00c20e74
ebx = 00000002
ecx = 0000000b
edx = 0040294c
esi = 0040294c
edi = 00621638
eip = 0040294c
esp = 0012ff00
ebp = 0012ff40
stack dump:
0012ff00 4c 29 40 00 de fa ed 0e - 01 00 00 00 07 00 00 00 L)@.............
0012ff10 14 ff 12 00 4c 29 40 00 - 74 0e c2 00 02 00 00 00 ....L)@.t.......
0012ff20 4c 29 40 00 38 16 62 00 - 40 ff 12 00 30 ff 12 00 L)@.8.b.@...0...
0012ff30 61 26 40 00 74 0e c2 00 - 4c 29 40 00 38 16 62 02 a&@.t...L)@.8.b.
0012ff40 70 ff 12 00 4c 2a 40 00 - 00 74 61 00 0b 00 00 00 p...L*@..ta.....
0012ff50 4c 29 40 00 ea 00 00 00 - 9c 62 40 00 50 42 62 00 L)@......b@.PBb.
0012ff60 dd 3c 61 00 78 ff 12 00 - b4 42 40 00 70 ff 12 00 .<a.x....B@.p...
0012ff70 90 ff 12 00 04 46 40 00 - b4 ff 12 00 f3 43 40 00 .....F@......C@.
0012ff80 90 ff 12 00 48 10 62 00 - 00 80 61 00 38 16 62 00 ....H.b...a.8.b.
0012ff90 50 33 45 00 52 d2 44 00 - b2 48 40 00 c0 ff 12 00 P3E.R.D..H@.....
0012ffa0 95 06 01 43 a8 47 ac 00 - 00 e0 fd 7f dd 7b 61 00 ...C.G.......{a.
0012ffb0 4e e6 91 7c e0 ff 12 00 - e4 44 40 00 c0 ff 12 00 N..|.....D@.....
0012ffc0 f0 ff 12 00 d7 6f 81 7c - 95 06 01 43 a8 47 ac 00 .....o.|...C.G..
0012ffd0 00 e0 fd 7f 38 a9 54 80 - c8 ff 12 00 50 8a be 81 ....8.T.....P...
0012ffe0 ff ff ff ff a8 9a 83 7c - e0 6f 81 7c 00 00 00 00 .......|.o.|....
0012fff0 00 00 00 00 00 00 00 00 - 98 7b 61 00 00 00 00 00 .........{a.....
disassembling:
[...]
00402939 2474 call dword ptr [$618048] ; System.SysFreeMem
0040293f mov ebx, eax
00402941 2476 test ebx, ebx
00402943 jz loc_402950
00402945 2477 mov al, 2
00402947 > call +$130 ($402a7c) ; System.Error
0040294c jmp loc_402950
0040294e 2480 xor ebx, ebx
00402950 mov eax, ebx
00402952 2481 pop ebx
00402953 ret