I think the bug report i saved in the morning, that day is enough....
date/time : 2007-05-03, 12:49:53, 62ms
computer name : S4BER
user name : Dagger <admin>
operating system : Windows XP Service Pack 2 build 2600
system language : German
system up time : 6 minutes 6 seconds
program up time : 1 minute 18 seconds
processor : AMD Athlon(tm) 64 Processor 4000+
physical memory : 478/1023 MB (free/total)
free disk space : (C:) 322,12 GB
display mode : 1280x1024, 32 bit
process id : $b28
allocated memory : 28,51 MB
executable : miranda32.exe
current module : kexx.dll
module date/time : 2006-08-18 02:23
version : 0.0.1.4
madExcept version : 3.0b
contact name : JG
contact email :
Baltok@gmx.net
callstack crc : $012d6a7e, $a23b222c, $a23b222c
count : 24
exception number : 2
exception class : EAccessViolation
exception message : Zugriffsverletzung bei Adresse 012D6A7E in Modul 'bnet.dll'. Lesen von Adresse 00000000.
thread $988:
012d6a7e +00 bnet.dll
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $ac4 at:
012d18a9 +00 bnet.dll
main thread ($834):
7c91eb94 +0 ntdll.dll KiFastSystemCallRet
7c91e9a9 +a ntdll.dll NtWaitForMultipleObjects
7c8094dc +0 kernel32.dll WaitForMultipleObjectsEx
7e3695f3 +0 USER32.dll MsgWaitForMultipleObjectsEx
thread $e18:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9a9 +0a ntdll.dll NtWaitForMultipleObjects
7c8094dc +00 kernel32.dll WaitForMultipleObjectsEx
7e3695f3 +00 USER32.dll MsgWaitForMultipleObjectsEx
7e3696a3 +1a USER32.dll MsgWaitForMultipleObjects
thread $c8:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
77c0a240 +ac msvcrt.dll _endthread
thread $ee8:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9a9 +0a ntdll.dll NtWaitForMultipleObjects
7c8094dc +00 kernel32.dll WaitForMultipleObjectsEx
7c80a070 +13 kernel32.dll WaitForMultipleObjects
thread $494: <priority:2>
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9a9 +0a ntdll.dll NtWaitForMultipleObjects
7c8094dc +00 kernel32.dll WaitForMultipleObjectsEx
7c80a070 +13 kernel32.dll WaitForMultipleObjects
thread $640:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
77c0a3ad +a6 msvcrt.dll _endthreadex
thread $72c: <suspended>
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e859 +0a ntdll.dll NtSuspendThread
7c83973e +0c kernel32.dll SuspendThread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($834) at:
04eadf89 +00 mbot.dll
thread $99c:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7e37e03d +3b USER32.dll GetMessageA
7c349562 +9d MSVCR71.DLL _endthreadex
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($834) at:
7c3495ea +60 MSVCR71.DLL _beginthreadex
thread $d20:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7e37e03d +3b USER32.dll GetMessageA
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($834) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $a7c:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91d85a +0a ntdll.dll NtDelayExecution
7c8023e7 +4b kernel32.dll SleepEx
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($834) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $42c: <priority:-15>
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
7c80252d +0d kernel32.dll WaitForSingleObject
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($834) at:
1272631d +00 loadavatars.dll
thread $650:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
7c80252d +0d kernel32.dll WaitForSingleObject
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($834) at:
04e9a2a1 +00 mbot.dll
thread $848:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
7c80252d +0d kernel32.dll WaitForSingleObject
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($834) at:
04ea0347 +00 mbot.dll
thread $260:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c92096d +0c ntdll.dll RtlReleasePebLock
71a20e2b +82 WS2_32.dll WSAAccept
71a2103a +12 WS2_32.dll accept
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($834) at:
04ea046f +00 mbot.dll
thread $dec: <priority:-15>
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
7c80252d +0d kernel32.dll WaitForSingleObject
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($834) at:
123a7bea +00 clist_nicer.dll
thread $fb8:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91d85a +0a ntdll.dll NtDelayExecution
7c8023e7 +4b kernel32.dll SleepEx
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($834) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $b74: <priority:1>
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e319 +0a ntdll.dll NtRemoveIoCompletion
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($834) at:
719bdbb3 +00 mswsock.dll
thread $518:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
71a14376 +5e WS2_32.dll WSARecv
71a32e9e +2e WSOCK32.dll recv
77c0a3ad +a6 msvcrt.dll _endthreadex
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($834) at:
77c0a43d +62 msvcrt.dll _beginthreadex
thread $d68:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
71a0150a +6a WS2HELP.dll WahReferenceContextByHandle
71a12e64 +a4 WS2_32.dll select
71a142f5 +6b WS2_32.dll send
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by main thread ($834) at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $804:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
7c80252d +0d kernel32.dll WaitForSingleObject
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $568 at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $eb0:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
71a14376 +5e WS2_32.dll WSARecv
71a32e9e +2e WSOCK32.dll recv
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $7b4 at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $3a8:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
71a14376 +5e WS2_32.dll WSARecv
71a32e9e +2e WSOCK32.dll recv
7c91f0a5 +59 ntdll.dll RtlAnsiStringToUnicodeString
77c0f95d +2c msvcrt.dll sprintf
7c92503e +43 ntdll.dll bsearch
7c9253f0 +d7 ntdll.dll RtlFindActivationContextSectionString
7c92503e +43 ntdll.dll bsearch
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $568 at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $c44:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
71a20e2b +82 WS2_32.dll WSAAccept
71a2103a +12 WS2_32.dll accept
77c0a3ad +a6 msvcrt.dll _endthreadex
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $518 at:
77c0a43d +62 msvcrt.dll _beginthreadex
thread $c5c:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
71a14376 +5e WS2_32.dll WSARecv
71a32e9e +2e WSOCK32.dll recv
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $810 at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $534:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
71a20e2b +82 WS2_32.dll WSAAccept
71a2103a +12 WS2_32.dll accept
77c0a3ad +a6 msvcrt.dll _endthreadex
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $eb0 at:
77c0a43d +62 msvcrt.dll _beginthreadex
thread $658:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91d85a +0a ntdll.dll NtDelayExecution
7c8023e7 +4b kernel32.dll SleepEx
7c80244c +0a kernel32.dll Sleep
77c0a240 +ac msvcrt.dll _endthread
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $eb0 at:
77c0a2c1 +53 msvcrt.dll _beginthread
thread $9a8:
7c91eb94 +0 ntdll.dll KiFastSystemCallRet
7c91e9a9 +a ntdll.dll NtWaitForMultipleObjects
thread $994:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9a9 +0a ntdll.dll NtWaitForMultipleObjects
7c8094dc +00 kernel32.dll WaitForMultipleObjectsEx
7c80a070 +13 kernel32.dll WaitForMultipleObjects
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $3a8 at:
76628951 +00 userenv.dll
thread $ce8:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
7c8025c5 +85 kernel32.dll WaitForSingleObjectEx
77c0a3ad +a6 msvcrt.dll _endthreadex
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $518 at:
77c0a43d +62 msvcrt.dll _beginthreadex
thread $8e4:
7c91eb94 +00 ntdll.dll KiFastSystemCallRet
7c91e9be +0a ntdll.dll NtWaitForSingleObject
71a0150a +6a WS2HELP.dll WahReferenceContextByHandle
71a12e64 +a4 WS2_32.dll select
77c0a3ad +a6 msvcrt.dll _endthreadex
1304bf3d +0d kexx.dll madExcept CallThreadProcSafe
1304bfa7 +37 kexx.dll madExcept ThreadExceptFrame
>> created by thread $518 at:
77c0a43d +62 msvcrt.dll _beginthreadex
thread $874:
7c91eb94 +0 ntdll.dll KiFastSystemCallRet
7c91d85a +a ntdll.dll NtDelayExecution
thread $a04:
7c91eb94 +0 ntdll.dll KiFastSystemCallRet
7c91e319 +a ntdll.dll NtRemoveIoCompletion
thread $6ac:
7c91eb94 +0 ntdll.dll KiFastSystemCallRet
7c91e319 +a ntdll.dll NtRemoveIoCompletion
modules:
00400000 miranda32.exe 0.7.0.24 C:\Programme\Miranda IM
009f0000 xfire_toucan_25831.dll 1.0.0.25432 C:\Programme\Xfire
01170000 atictactoe.dll 0.1.0.2 C:\Programme\Miranda IM\Plugins
012c0000 battleship.dll C:\Programme\Miranda IM\Plugins
012d0000 bnet.dll C:\Programme\Miranda IM\Plugins
01300000 hyphen.dll 0.8.5.1 C:\Programme\Miranda IM\Plugins
03920000 ssleay32.dll 0.9.8.5 C:\WINDOWS\system32
03950000 LIBEAY32.dll 0.9.8.5 C:\WINDOWS\system32
04b50000 xpsp2res.dll 5.1.2600.2180 C:\WINDOWS\system32
04e90000 mbot.dll 0.0.3.2 C:\Programme\Miranda IM\Plugins
04ec0000 php5ts.dll 5.0.4.4 C:\Programme\Miranda IM
05630000 skype.dll 0.0.0.35 C:\Programme\Miranda IM\Plugins
05770000 worldtimeproto.dll C:\Programme\Miranda IM\Plugins
0ffd0000 rsaenh.dll 5.1.2600.2161 C:\WINDOWS\system32
10000000 IadHide4.dll 6.1.4.68 C:\DOKUME~1\Dagger\LOKALE~1\Temp
10100000 lgscroll.dll C:\Programme\Logitech\SetPoint
12000000 zlib.dll 1.2.3.0 C:\Programme\Miranda IM
120e0000 aim.dll C:\Programme\Miranda IM\Plugins
12140000 chat.dll C:\Programme\Miranda IM\Plugins
123a0000 clist_nicer.dll C:\Programme\Miranda IM\Plugins
124a0000 dbx_mmap.dll 0.7.1.0 C:\Programme\Miranda IM\Plugins
124c0000 gg.dll C:\Programme\Miranda IM\Plugins
12520000 icq.dll 0.3.10.1 C:\Programme\Miranda IM\Plugins
125c0000 import.dll 0.9.2.0 C:\Programme\Miranda IM\Plugins
125e0000 irc.dll C:\Programme\Miranda IM\Plugins
12720000 loadavatars.dll 0.0.2.13 C:\Programme\Miranda IM\Plugins
12760000 msn.dll 0.7.1.0 C:\Programme\Miranda IM\Plugins
127c0000 png2dib.dll 0.1.3.2 C:\Programme\Miranda IM\Plugins
12800000 scriver.dll C:\Programme\Miranda IM\Plugins
12a40000 yahoo.dll 0.7.0.1 C:\Programme\Miranda IM\Plugins
13000000 kexx.dll 0.0.1.4 C:\Programme\Miranda IM\Plugins
20000000 odbcint.dll 3.525.1117.0 C:\WINDOWS\system32
25020000 popup.dll C:\Programme\Miranda IM\Plugins
4eba0000 gdiplus.dll 5.1.3102.2180 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82
597d0000 NETAPI32.dll 5.1.2600.2976 C:\WINDOWS\system32
5b0f0000 UxTheme.dll 6.0.2900.2180 C:\WINDOWS\system32
66710000 hnetcfg.dll 5.1.2600.2180 C:\WINDOWS\system32
67920000 System.Security.ni.dll 2.0.50727.42 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security\3f96bbd14bf0394fa102baceecb67f3a
68100000 dssenh.dll 5.1.2600.2133 C:\WINDOWS\system32
70e00000 asycfilt.dll 5.1.2600.2180 C:\WINDOWS\system32
719b0000 mswsock.dll 5.1.2600.2180 C:\WINDOWS\system32
719f0000 wshtcpip.dll 5.1.2600.2180 C:\WINDOWS\System32
71a00000 WS2HELP.dll 5.1.2600.2180 C:\WINDOWS\system32
71a10000 WS2_32.dll 5.1.2600.2180 C:\WINDOWS\system32
71a30000 WSOCK32.dll 5.1.2600.2180 C:\WINDOWS\system32
71a80000 MPR.dll 5.1.2600.2180 C:\WINDOWS\system32
71b70000 SAMLIB.dll 5.1.2600.2180 C:\WINDOWS\System32
71b90000 ntlanman.dll 5.1.2600.2180 C:\WINDOWS\System32
71c00000 NETRAP.dll 5.1.2600.2180 C:\WINDOWS\System32
71c10000 NETUI1.dll 5.1.2600.2180 C:\WINDOWS\System32
71c50000 NETUI0.dll 5.1.2600.2180 C:\WINDOWS\System32
72030000 weather.dll 0.3.5.19 C:\Programme\Miranda IM\Plugins
72240000 sensapi.dll 5.1.2600.2180 C:\WINDOWS\system32
745d0000 ODBC32.dll 3.525.1117.0 C:\WINDOWS\system32
74640000 msls31.dll 3.10.349.0 C:\WINDOWS\system32
746a0000 MSCTF.dll 5.1.2600.2180 C:\WINDOWS\system32
74db0000 riched20.dll 5.30.23.1228 C:\WINDOWS\system32
75790000 USP10.dll 1.420.2600.2180 C:\WINDOWS\system32
75910000 MSGINA.dll 5.1.2600.2180 C:\WINDOWS\system32
75dc0000 mlang.dll 6.0.2900.2180 C:\WINDOWS\system32
75f00000 drprov.dll 5.1.2600.2180 C:\WINDOWS\System32
75f10000 davclnt.dll 5.1.2600.2180 C:\WINDOWS\System32
75f20000 browseui.dll 6.0.2900.3059 C:\WINDOWS\System32
76020000 MSVCP60.dll 6.2.3104.0 C:\WINDOWS\system32
76300000 WINSTA.dll 5.1.2600.2180 C:\WINDOWS\system32
76320000 MSIMG32.dll 5.1.2600.2180 C:\WINDOWS\system32
76350000 comdlg32.dll 6.0.2900.2180 C:\WINDOWS\system32
76620000 userenv.dll 5.1.2600.2180 C:\WINDOWS\system32
767a0000 schannel.dll 5.1.2600.2180 C:\WINDOWS\system32
76880000 CRYPTUI.dll 5.131.2600.2180 C:\WINDOWS\system32
76940000 ntshrui.dll 5.1.2600.2180 C:\WINDOWS\system32
76ad0000 ATL.DLL 3.5.2284.0 C:\WINDOWS\system32
76af0000 WINMM.dll 5.1.2600.2180 C:\WINDOWS\system32
76bb0000 psapi.dll 5.1.2600.2180 C:\WINDOWS\system32
76bf0000 WINTRUST.dll 5.131.2600.2180 C:\WINDOWS\system32
76c50000 IMAGEHLP.dll 5.1.2600.2180 C:\WINDOWS\system32
76d20000 iphlpapi.dll 5.1.2600.2912 C:\WINDOWS\system32
76e40000 rtutils.dll 5.1.2600.2180 C:\WINDOWS\system32
76e50000 rasman.dll 5.1.2600.2180 C:\WINDOWS\system32
76e70000 TAPI32.dll 5.1.2600.2180 C:\WINDOWS\system32
76ea0000 RASAPI32.DLL 5.1.2600.2180 C:\WINDOWS\system32
76ee0000 DNSAPI.dll 5.1.2600.2938 C:\WINDOWS\system32
76f10000 wtsapi32.dll 5.1.2600.2180 C:\WINDOWS\system32
76f20000 WLDAP32.dll 5.1.2600.2180 C:\WINDOWS\system32
76f70000 winrnr.dll 5.1.2600.2180 C:\WINDOWS\System32
76f80000 rasadhlp.dll 5.1.2600.2938 C:\WINDOWS\system32
76f90000 CLBCATQ.DLL 2001.12.4414.308 C:\WINDOWS\system32
77010000 COMRes.dll 2001.12.4414.258 C:\WINDOWS\system32
770f0000 OLEAUT32.dll 5.1.2600.2180 C:\WINDOWS\system32
77180000 WININET.dll 6.0.2900.3059 C:\WINDOWS\system32
773a0000 COMCTL32.dll 6.0.2900.2180 C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9
774b0000 ole32.dll 5.1.2600.2726 C:\WINDOWS\system32
778f0000 SETUPAPI.dll 5.1.2600.2180 C:\WINDOWS\system32
77a50000 CRYPT32.dll 5.131.2600.2180 C:\WINDOWS\system32
77af0000 MSASN1.dll 5.1.2600.2180 C:\WINDOWS\system32
77b10000 appHelp.dll 5.1.2600.2180 C:\WINDOWS\system32
77bd0000 VERSION.dll 5.1.2600.2180 C:\WINDOWS\system32
77be0000 msvcrt.dll 7.0.2600.2180 C:\WINDOWS\system32
77c40000 msv1_0.dll 5.1.2600.2180 C:\WINDOWS\system32
77da0000 ADVAPI32.dll 5.1.2600.2180 C:\WINDOWS\system32
77e50000 RPCRT4.dll 5.1.2600.2180 C:\WINDOWS\system32
77ef0000 GDI32.dll 5.1.2600.3099 C:\WINDOWS\system32
77f40000 SHLWAPI.dll 6.0.2900.3059 C:\WINDOWS\system32
77fc0000 Secur32.dll 5.1.2600.2180 C:\WINDOWS\system32
78130000 MSVCR80.dll 8.0.50727.42 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd
79000000 mscoree.dll 2.0.50727.42 C:\WINDOWS\system32
79060000 mscorjit.dll 2.0.50727.42 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727
790c0000 mscorlib.ni.dll 2.0.50727.42 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\114e3334750ed945be2e615309ecdafb
79e70000 mscorwks.dll 2.0.50727.42 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727
7a440000 System.ni.dll 2.0.50727.42 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\f8a2fc9b59dc1f45853089520461faba
7ade0000 System.Drawing.ni.dll 2.0.50727.42 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\21a7b98434e6d647ae771f4f9dbe2bdc
7afd0000 System.Windows.Forms.ni.dll 2.0.50727.42 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\5fb72dd3e15ac9499dd0f22b1fcd0eec
7c000000 MSVCR70.dll 7.0.9466.0 C:\Programme\Miranda IM
7c340000 MSVCR71.DLL 7.10.3052.4 C:\WINDOWS\system32
7c800000 kernel32.dll 5.1.2600.2945 C:\WINDOWS\system32
7c910000 ntdll.dll 5.1.2600.2180 C:\WINDOWS\system32
7c9d0000 SHELL32.dll 6.0.2900.3051 C:\WINDOWS\system32
7df20000 urlmon.dll 6.0.2900.3072 C:\WINDOWS\system32
7e1e0000 shdocvw.dll 6.0.2900.3059 C:\WINDOWS\System32
7e360000 USER32.dll 5.1.2600.3099 C:\WINDOWS\system32
processes:
000 Idle
004 System normal
370 smss.exe normal C:\WINDOWS\system32
464 csrss.exe
480 winlogon.exe high C:\WINDOWS\system32
4ac services.exe normal C:\WINDOWS\system32
4b8 lsass.exe normal C:\WINDOWS\system32
54c Ati2evxx.exe normal C:\WINDOWS\system32
558 svchost.exe normal C:\WINDOWS\system32
59c svchost.exe
5fc svchost.exe normal C:\WINDOWS\System32
634 svchost.exe
738 svchost.exe
744 vsmon.exe normal C:\WINDOWS\system32\ZoneLabs
1e0 spoolsv.exe normal C:\WINDOWS\system32
22c Ati2evxx.exe normal C:\WINDOWS\system32
5e0 Explorer.EXE normal C:\WINDOWS
6c8 RTHDCPL.EXE normal C:\WINDOWS
6dc jusched.exe normal C:\Programme\Java\jre1.6.0_01\bin
6e8 aaCenter.exe normal C:\Programme\ASUS\AASP\1.00.12
6f8 E_S10IC2.EXE normal C:\WINDOWS\System32\spool\DRIVERS\W32X86\3
708 avgnt.exe normal C:\Programme\AntiVir PersonalEdition Classic
710 zlclient.exe normal C:\Programme\Zone Labs\ZoneAlarm
718 Winampa.exe normal C:\Programme\Winamp
720 RunDll32.exe normal C:\WINDOWS\system32
730 ctfmon.exe normal C:\WINDOWS\system32
774 BackWeb-8876480.exe normal C:\Programme\Logitech\Desktop Messenger\8876480\Program
78c TeaTimer.exe idle C:\Programme\Spybot - Search & Destroy
7bc Skype.exe normal C:\Programme\Skype\Phone
7e8 MOM.EXE normal C:\Programme\ATI Technologies\ATI.ACE\Core-Static
7fc reader_sl.exe normal C:\Programme\Adobe\Acrobat 7.0\Reader
768 Capictrl.exe normal C:\Programme\Telekom\Eumex 704PC LAN
118 HNetCtrl.exe normal C:\Programme\Telekom\Eumex 704PC LAN
154 KEM.exe normal C:\Programme\Logitech\SetPoint
250 WG111v2.exe normal C:\Programme\NETGEAR\WG111v2
26c xfire.exe normal C:\Programme\Xfire
2a8 KHALMNPR.EXE normal C:\Programme\Logitech\SetPoint
3b4 sched.exe normal C:\Programme\AntiVir PersonalEdition Classic
0d4 avguard.exe normal C:\Programme\AntiVir PersonalEdition Classic
908 SAgent2.exe normal C:\Programme\Gemeinsame Dateien\EPSON\EBAPI
b9c StarWindService.exe normal C:\Programme\Alcohol Soft\Alcohol 120\StarWind
e2c wdfmgr.exe
27c ccc.exe normal C:\Programme\ATI Technologies\ATI.ACE\Core-Static
e68 SkypePM.exe normal C:\Programme\Skype\Plugin Manager
c98 alg.exe
2f4 svchost.exe normal C:\WINDOWS\System32
f58 wuauclt.exe normal C:\WINDOWS\system32
58c Steam.exe normal C:\Programme\Steam
cb4 Opera.exe normal C:\Programme\Opera
b28 miranda32.exe normal C:\Programme\Miranda IM
e84 wmiprvse.exe
hardware:
+ Anschlüsse (COM und LPT)
- ECP-Druckeranschluss (LPT1)
- Kommunikationsanschluss (COM2)
+ Audio-, Video- und Gamecontroller
- ATI T200 Unified AVStream Driver (driver 6.14.10.1078)
- Audiocodecs
- Legacy-Audiotreiber
- Legacy-Videoaufnahmegerät
- Mediensteuerungsgerät
- Realtek High Definition Audio (driver 5.10.0.5296)
- USB-Audiogerät
- Videocodecs
+ Computer
- ACPI-Uniprozessor-PC
+ Diskettencontroller
- Standard-Diskettenlaufwerkcontroller
+ Diskettenlaufwerke
- Diskettenlaufwerk
+ DVD/CD-ROM-Laufwerke
- CD2600W HJY194M SCSI CdRom Device
- HL-DT-ST RW/DVD GCC-4520B
+ Eingabegeräte (Human Interface Devices)
- HID-konformes Benutzersteuergerät
- Logitech Cordless USB Mouse (driver 2.11.0.0)
- USB-HID (Human Interface Device)
+ Grafikkarte
- Radeon X1950 Series (driver 8.351.0.0)
- Radeon X1950 Series Secondary (driver 8.351.0.0)
+ IDE ATA/ATAPI-Controller
- Primärer IDE-Kanal
- Primärer IDE-Kanal
- Sekundärer IDE-Kanal
- Sekundärer IDE-Kanal
- Standard-Zweikanal-PCI-IDE-Controller
- VIA Bus-Master-IDE-Controller
+ Laufwerke
- ST3160021A
- WDC WD4000YR-01PLB0
+ Modems
- Telekom ISDN (driver 1.0.0.0)
- Telekom ISDN #2 (driver 1.0.0.0)
+ Monitore
- SyncMaster 931B/931BF/931BA/930BA(Digital) (driver 2.0.0.0)
+ Mäuse und andere Zeigegeräte
- Logitech HID-compliant Cordless Mouse (driver 2.11.0.0)
+ Netzwerkadapter
- Eumex 704PC LAN (driver 1.1.0.1)
- Hamachi Network Interface (driver 6.0.1.0)
- NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter (driver 5.1213.6.327)
- VIA Rhine II Fast Ethernet Adapter (driver 3.47.0.432)
+ Prozessoren
- AMD Athlon(tm) 64 Processor 4000+ (driver 1.2.2.0)
+ SCSI- und RAID-Controller
- VAXSCSI Controller
+ Systemgeräte
- ACPI-Einschaltknopf
- ACPI-Schalter
- ATK0110 ACPI UTILITY (driver 1043.2.15.37)
- DMA-Controller
- Erweiterter E/A-Bus
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- Hauptplatinenressourcen
- ISAPnP-Datenleseport
- Logische Schnittstelle für Druckeranschluss
- Microcode-Updategerät
- Microsoft ACPI-konformes System
- Microsoft UAA Bus Driver for High Definition Audio
- Microsoft-Systemverwaltungs-BIOS-Treiber
- Numerischer Coprozessor
- PCI Standard-Host-CPU-Brücke
- PCI Standard-Host-CPU-Brücke
- PCI Standard-Host-CPU-Brücke
- PCI Standard-Host-CPU-Brücke
- PCI Standard-Host-CPU-Brücke
- PCI-Bus
- PnP-Softwaregeräte-Enumerator
- Programmierbarer Interruptcontroller
- System CMOS/Echtzeituhr
- Systemlautsprecher
- Systemplatine
- Systemzeitgeber
- Terminalserver-Maustreiber
- Terminalserver-Tastaturtreiber
- VIA CPU-zu-AGP-Controller
- VIA I/O APIC Interrupt Controller (driver 5.1.0.270)
- VIA PCI to PCI Bridge Controller (driver 5.1.0.270)
- VIA PCI to PCI Bridge Controller (driver 5.1.0.270)
- VIA Standard Host Bridge (driver 5.1.0.270)
- VIA Standard Host Bridge (driver 5.1.0.270)
- VIA Standard Host Bridge (driver 5.1.0.270)
- VIA Standard Host Bridge (driver 5.1.0.270)
- VIA Standard Host Bridge (driver 5.1.0.270)
- VIA Standard Host Bridge (driver 5.1.0.270)
- VIA Standard PCI to ISA Bridge (driver 5.1.0.270)
- VIA Standard PCI to PCI Bridge (driver 5.1.0.270)
- VIA Standard PCI to PCIE Bridge (driver 5.1.0.270)
- VIA Ultra VLINK Controller (driver 5.1.0.270)
- Volume-Manager
+ Tastaturen
- Standardtastatur (101/102 Tasten) oder Microsoft Natural Keyboard (PS/2)
+ USB-Controller
- USB-Root-Hub
- USB-Root-Hub
- USB-Root-Hub
- USB-Root-Hub
- USB-Root-Hub
- USB-Verbundgerät
- VIA Rev 5 oder höher USB universeller Hostcontroller
- VIA Rev 5 oder höher USB universeller Hostcontroller
- VIA Rev 5 oder höher USB universeller Hostcontroller
- VIA Rev 5 oder höher USB universeller Hostcontroller
- VIA USB 2.0 Enhanced Host Controller (driver 5.1.2600.1106)
cpu registers:
eax = 00000000
ebx = 0924ff78
ecx = 012e0ac4
edx = 012f6572
esi = 00000000
edi = 00000000
eip = 012d6a7e
esp = 0924ff3c
ebp = 0924ff64
stack dump:
0924ff3c 00 00 00 00 78 ff 24 09 - 08 fb 14 07 77 1f 2d 01 ....x.$.....w.-.
0924ff4c 00 00 00 00 c4 0a 2e 01 - c0 5e 2e 01 28 88 2e 01 .........^..(...
0924ff5c 6c ff 24 09 65 1e 2d 01 - 6c ff 24 09 72 1e 2d 01 l.$.e.-.l.$.r.-.
0924ff6c 7c ff 24 09 3f bf 04 13 - 00 00 00 00 53 1e 2d 01 |.$.?.......S.-.
0924ff7c b4 ff 24 09 ac bf 04 13 - 53 1e 2d 01 00 00 00 00 ..$.....S.-.....
0924ff8c 98 ff 24 09 50 3e 00 13 - b4 ff 24 09 dc ff 24 09 ..$.P>....$...$.
0924ff9c 1d c0 04 13 b4 ff 24 09 - 08 fb 14 07 1c 26 80 7c ......$......&.|
0924ffac 6c 55 b1 03 ff ff ff ff - ec ff 24 09 83 b6 80 7c lU........$....|
0924ffbc 6c 55 b1 03 08 fb 14 07 - 1c 26 80 7c 6c 55 b1 03 lU.......&.|lU..
0924ffcc 00 50 fa 7f 00 06 7c 86 - c0 ff 24 09 98 81 11 85 .P....|...$.....
0924ffdc ff ff ff ff a8 9a 83 7c - 90 b6 80 7c 00 00 00 00 .......|...|....
0924ffec 00 00 00 00 00 00 00 00 - 70 bf 04 13 6c 55 b1 03 ........p...lU..
0924fffc 00 00 00 00 ....
disassembling:
1304bf30 public madExcept.CallThreadProcSafe: ; function entry point
1304bf30 push ebp
1304bf31 mov ebp, esp
1304bf33 push ebx
1304bf34 mov ebx, esp
1304bf36 mov eax, [ebp+$c]
1304bf39 push eax
1304bf3a mov eax, [ebp+8]
1304bf3d > call eax
1304bf3f cmp ebx, esp
1304bf41 jz loc_1304bf6a
1304bf43 ja loc_1304bf61
1304bf45 push eax
1304bf46 mov eax, ebx
1304bf48 mov ebx, esp
1304bf4a add ebx, 4
1304bf4d sub ebx, eax
1304bf4f pop eax
1304bf50 cmp ebx, $c
1304bf53 ja loc_1304bf6a
1304bf55 test ebx, 3
1304bf5b jnz loc_1304bf6a
1304bf5d sub esp, ebx
1304bf5f jmp loc_1304bf6a
1304bf61 sub ebx, esp
1304bf63 cmp ebx, 4
1304bf66 jnz loc_1304bf6a
1304bf68 add esp, ebx
1304bf6a pop ebx
[...]