** Thu Oct 21 23:59:50 2010 Starting '/opt/cxgames/bin/wineloader' 'winewrapper.exe' '--workdir' '/home/chuck/.cxgames/Malwarebytes/dosdevices/c:/Program Files/Malwarebytes' Anti-Malware' '--start' '--' '/home/chuck/.cxgames/Malwarebytes/dosdevices/../drive_c/Program Files/Malwarebytes' Anti-Malware/mbam.exe' fixme:exec:SHELL_execute flags ignored: 0x00000100 fixme:ole:OleLoadPictureEx (0xa30f9c,6974,1,{7bf80980-bf32-101a-8bbb-00aa00300cab},x=0,y=0,f=0,0x33f860), partially implemented. fixme:ole:OleLoadPictureEx (0xa30f9c,6974,1,{7bf80980-bf32-101a-8bbb-00aa00300cab},x=0,y=0,f=0,0x33f860), partially implemented. fixme:ole:OleLoadPictureEx (0xa30f9c,6974,1,{7bf80980-bf32-101a-8bbb-00aa00300cab},x=0,y=0,f=0,0x33f860), partially implemented. fixme:ole:OLEFontImpl_IPersistStreamInit_InitNew (0x150cd4), stub! fixme:ole:OleLoadPictureEx (0xa30f9c,6974,1,{7bf80980-bf32-101a-8bbb-00aa00300cab},x=0,y=0,f=0,0x33f860), partially implemented. fixme:ole:OleLoadPictureEx (0xa30f9c,71049,1,{7bf80980-bf32-101a-8bbb-00aa00300cab},x=0,y=0,f=0,0x33f860), partially implemented. fixme:ole:OleLoadPictureEx (0xa30f9c,2246,1,{7bf80980-bf32-101a-8bbb-00aa00300cab},x=0,y=0,f=0,0x33f860), partially implemented. fixme:ole:OleLoadPictureEx (0xa30f9c,2495,1,{7bf80980-bf32-101a-8bbb-00aa00300cab},x=0,y=0,f=0,0x33f860), partially implemented. fixme:ole:OleLoadPictureEx (0xa30f9c,334,1,{7bf80980-bf32-101a-8bbb-00aa00300cab},x=0,y=0,f=0,0x33f890), partially implemented. fixme:ole:OLEFontImpl_IPersistStreamInit_InitNew (0x17353c), stub! fixme:ole:OleLoadPictureEx (0xa30f9c,1721,1,{7bf80980-bf32-101a-8bbb-00aa00300cab},x=0,y=0,f=0,0x33f860), partially implemented. fixme:ole:OleLoadPictureEx (0xa30f9c,1771,1,{7bf80980-bf32-101a-8bbb-00aa00300cab},x=0,y=0,f=0,0x33f860), partially implemented. fixme:ole:OLEFontImpl_IPersistStreamInit_InitNew (0x179c64), stub! fixme:ole:OleLoadPictureEx (0xa30f9c,2136,1,{7bf80980-bf32-101a-8bbb-00aa00300cab},x=0,y=0,f=0,0x33f860), partially implemented. fixme:ole:OLEFontImpl_IPersistStreamInit_InitNew (0x18350c), stub! fixme:ole:OleLoadPictureEx (0xa30f9c,6974,1,{7bf80980-bf32-101a-8bbb-00aa00300cab},x=0,y=0,f=0,0x33f860), partially implemented. fixme:ole:OleLoadPictureEx (0xa30f9c,2274,1,{7bf80980-bf32-101a-8bbb-00aa00300cab},x=0,y=0,f=0,0x33f860), partially implemented. fixme:userenv:GetProfilesDirectoryW 0x33f1fc 0x33f144 wine: Call from 0x7bc4b8a0 to unimplemented function USERENV.dll.GetDefaultUserProfileDirectoryW, aborting wine: Unimplemented function USERENV.dll.GetDefaultUserProfileDirectoryW called at address 0x7bc4b8a0 (thread 001c), starting debugger... Unhandled exception: unimplemented function USERENV.dll.GetDefaultUserProfileDirectoryW called in 32-bit code (0x7bc4b8a0). Register dump: CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b EIP:7bc4b8a0 ESP:0033ee3c EBP:0033eea0 EFLAGS:00000206( - -- I - -P- ) EAX:10042302 EBX:7bc9b46c ECX:0033ed28 EDX:00000000 ESI:0033ee48 EDI:00000104 Stack dump: 0x0033ee3c: 00000000 00000000 00000000 80000100 0x0033ee4c: 00000001 00000000 7bc4b8a0 00000002 0x0033ee5c: 10042322 10042302 7bc3ec10 00000018 0x0033ee6c: 0000003c 0033ee80 00000000 00000000 0x0033ee7c: 00000000 00720070 00000000 7bc9b46c 0x0033ee8c: 0033f1fc 0033eeb0 7bc3ed3a 00000000 Backtrace: =>0 0x7bc4b8a0 in ntdll (+0x3b8a0) (0x0033eea0) 1 0x003a000f (0x7ebb2fd0) 0x7bc4b8a0: subl $4,%esp Modules: Module Address Debug info Name (87 modules) PE 400000- 50e000 Deferred mbam PE 10000000-10059000 Deferred mbam PE 28b50000-28bc9000 Deferred vbalsgrid6 PE 2e8c0000-2e8ca000 Deferred ssubtmr6 PE 66000000-66152000 Deferred msvbvm60 PE 76340000-7634f000 Deferred winsta PE 76f50000-76f58000 Deferred wtsapi32 ELF 7b800000-7b971000 Deferred kernel32 \-PE 7b810000-7b971000 \ kernel32 ELF 7bc00000-7bcb7000 Export ntdll \-PE 7bc10000-7bcb7000 \ ntdll ELF 7bf00000-7bf03000 Deferred ELF 7dea6000-7df42000 Deferred crypt32 \-PE 7deb0000-7df42000 \ crypt32 ELF 7df42000-7df69000 Deferred winhttp \-PE 7df50000-7df69000 \ winhttp ELF 7df69000-7dfea000 Deferred msvcrt \-PE 7df80000-7dfea000 \ msvcrt ELF 7dfea000-7dffd000 Deferred lz32 \-PE 7dff0000-7dffd000 \ lz32 ELF 7dffd000-7e01f000 Deferred mpr \-PE 7e000000-7e01f000 \ mpr ELF 7e01f000-7e07a000 Deferred wininet \-PE 7e030000-7e07a000 \ wininet ELF 7e07a000-7e08e000 Deferred userenv \-PE 7e080000-7e08e000 \ userenv ELF 7e08e000-7e0af000 Deferred libjpeg.so.62 ELF 7e0b4000-7e0cc000 Deferred version \-PE 7e0c0000-7e0cc000 \ version ELF 7e0f9000-7e2d6000 Deferred shell32 \-PE 7e110000-7e2d6000 \ shell32 ELF 7e2d6000-7e309000 Deferred uxtheme \-PE 7e2e0000-7e309000 \ uxtheme ELF 7e309000-7e348000 Deferred windowscodecs \-PE 7e310000-7e348000 \ windowscodecs ELF 7e348000-7e431000 Deferred comctl32 \-PE 7e350000-7e431000 \ comctl32 ELF 7e474000-7e487000 Deferred olepro32 \-PE 7e480000-7e487000 \ olepro32 ELF 7e487000-7e4e8000 Deferred shlwapi \-PE 7e4a0000-7e4e8000 \ shlwapi ELF 7e4ff000-7e509000 Deferred libxcursor.so.1 ELF 7e578000-7e59f000 Deferred libexpat.so.1 ELF 7e59f000-7e616000 Deferred libfreetype.so.6 ELF 7e616000-7e646000 Deferred libfontconfig.so.1 ELF 7e646000-7e64c000 Deferred libxfixes.so.3 ELF 7e64c000-7e650000 Deferred libxcomposite.so.1 ELF 7e650000-7e658000 Deferred libxrandr.so.2 ELF 7e658000-7e662000 Deferred libxrender.so.1 ELF 7e662000-7e668000 Deferred libxxf86vm.so.1 ELF 7e668000-7e688000 Deferred imm32 \-PE 7e670000-7e688000 \ imm32 ELF 7e688000-7e68e000 Deferred libxdmcp.so.6 ELF 7e68e000-7e6a8000 Deferred libxcb.so.1 ELF 7e6a8000-7e6ad000 Deferred libuuid.so.1 ELF 7e6ad000-7e7ca000 Deferred libx11.so.6 ELF 7e7ca000-7e7da000 Deferred libxext.so.6 ELF 7e7da000-7e7f3000 Deferred libice.so.6 ELF 7e7f3000-7e7fc000 Deferred libsm.so.6 ELF 7e819000-7e8bf000 Deferred winex11 \-PE 7e830000-7e8bf000 \ winex11 ELF 7e8bf000-7e92a000 Deferred libcxfreetype.so ELF 7e92a000-7ea10000 Deferred oleaut32 \-PE 7e940000-7ea10000 \ oleaut32 ELF 7ea10000-7ea84000 Deferred rpcrt4 \-PE 7ea20000-7ea84000 \ rpcrt4 ELF 7ea84000-7eb81000 Deferred ole32 \-PE 7eaa0000-7eb81000 \ ole32 ELF 7eb81000-7ebda000 Deferred advapi32 \-PE 7eb90000-7ebda000 \ advapi32 ELF 7ebda000-7ec68000 Deferred gdi32 \-PE 7ebf0000-7ec68000 \ gdi32 ELF 7ec68000-7ed9a000 Deferred user32 \-PE 7ec80000-7ed9a000 \ user32 ELF 7ed9a000-7eda6000 Deferred libnss_files.so.2 ELF 7eda6000-7edbd000 Deferred libnsl.so.1 ELF 7efbd000-7efe3000 Deferred libm.so.6 ELF 7efe4000-7eff9000 Deferred libz.so.1 ELF f7480000-f7484000 Deferred libxinerama.so.1 ELF f7484000-f748f000 Deferred libnss_nis.so.2 ELF f7490000-f7494000 Deferred libdl.so.2 ELF f7494000-f75ee000 Deferred libc.so.6 ELF f75ee000-f7607000 Deferred libpthread.so.0 ELF f7608000-f7610000 Deferred libnss_compat.so.2 ELF f7620000-f7624000 Deferred libxau.so.6 ELF f7625000-f7765000 Deferred libwine.so.1 ELF f7767000-f7785000 Deferred ld-linux.so.2 Threads: process tid prio (all id:s are in hex) 0000000c services.exe 00000014 0 00000013 0 00000012 0 0000000e 0 0000000d 0 0000000f winedevice.exe 00000016 0 00000015 0 00000011 0 00000010 0 00000019 winewrapper.exe 0000001a 0 0000001b (D) C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe 0000001c 0 <== 0000001d explorer.exe 0000001e 0 0000001f rpcss.exe 00000024 0 00000023 0 00000022 0 00000021 0 00000020 0 Backtrace: =>0 0x7bc4b8a0 in ntdll (+0x3b8a0) (0x0033eea0) 1 0x003a000f (0x7ebb2fd0) wine: Call from 0x7bc4b8a0 to unimplemented function USERENV.dll.GetDefaultUserProfileDirectoryW, aborting