Microsoft (R) DrWtsn32 Copyright (C) 1985-2001 Microsoft Corp. Alle rechten voorbehouden. Toepassingsuitzondering: Toep: C:\Program Files\Safari\Safari.exe (PID=6028) Tijd: 19-11-2007 @ 06:56:31.988 Uitzonderingsnummer: c0000005 (schending van toegang) *----> Systeemgegevens <----* Computernaam: LEOPARDS-86787yu Gebruikersnaam: Leopard Terminalsessie-id: 0 Aantal processors: 1 Processortype: x86 Family 6 Model 10 Stepping 0 Windows-versie: 5.1 Actieve gecompileerde versie: 2600 Service Pack: 2 Huidig type: Uniprocessor Free Geregistreerde organisatie: Geregistreerde eigenaar: dreamcast *----> Taakoverzicht <----* 0 System Process 4 System 928 smss.exe 976 csrss.exe 1000 winlogon.exe 1044 services.exe 1056 lsass.exe 1232 Ati2evxx.exe 1248 svchost.exe 1324 svchost.exe 1824 svchost.exe 1860 svchost.exe 2044 svchost.exe 556 svchost.exe 804 spoolsv.exe 1716 SDMCP.exe 1380 Ati2evxx.exe 1488 Explorer.EXE 1808 schedul2.exe 1920 AppleMobileDeviceService.exe 1948 avgamsvr.exe 2016 avgupsvc.exe 456 avgemc.exe 472 mDNSResponder.exe 676 cmdagent.exe 1652 CTsvcCDA.exe 1712 EBstrSvc.exe 1980 MacDriveService.exe 2096 RoxWatch10.exe 2168 SbieSvc.exe 2220 svchost.exe 2240 TrueImageTryStartService.exe 2340 vmware-authd.exe 2444 vmount2.exe 2468 vmnat.exe 2628 MsPMSPSv.exe 2648 vmnetdhcp.exe 3176 wmiprvse.exe 3880 alg.exe 2480 ctfmon.exe 2520 RoxMediaDB10.exe 3512 TrayServer.exe 3592 htpatch.exe 3696 CTHELPER.EXE 3756 jusched.exe 3768 vmware-tray.exe 3780 hqtray.exe 3828 avgcc.exe 3864 atiptaxx.exe 3932 CPF.exe 3964 DMXLauncher.exe 3980 RdTask.exe 4040 iTunesHelper.exe 772 TrueImageMonitor.exe 868 TimounterMonitor.exe 968 schedhlp.exe 1120 Alt+Q Hotkey.exe 1264 RocketDock.exe 1372 CTDetect.exe 1908 CTSyncU.exe 648 daemon.exe 1516 msmsgs.exe 728 snarl.exe 2608 hpotdd01.exe 3168 Launchy.exe 3476 SetPoint.exe 2080 SnagIt32.exe 1592 AlarmMasterPlus.exe 956 im-history.exe 1952 NoteScraps.exe 3944 PNotes.exe 3976 TSCHelp.exe 4068 SnagPriv.exe 1224 YahooWidgetEngine.exe 2284 KHALMNPR.EXE 2476 YahooWidgetEngine.exe 2856 YahooWidgetEngine.exe 2916 iPodService.exe 3452 YahooWidgetEngine.exe 2068 YahooWidgetEngine.exe 4588 DOpus.exe 6028 Safari.exe 6084 dwwin.exe 6132 drwtsn32.exe *----> Modulelijst <----* (0000000000350000 - 0000000000359000: F:\WINDOWS\system32\Normaliz.dll (0000000000400000 - 0000000000731000: C:\Program Files\Safari\Safari.exe (0000000000740000 - 0000000000b3f000: C:\Program Files\Safari\WebKit.dll (0000000000b40000 - 0000000000c4f000: C:\Program Files\Safari\libxml2.dll (0000000001770000 - 0000000001802000: F:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (0000000001a50000 - 0000000001a5f000: C:\Backuk RK\RK Launcher\RK Launcher 0.41 Beta Nightly\RKLauncher.dll (0000000001a80000 - 0000000001a92000: F:\Program Files\RocketDock\RocketDock.dll (0000000001b60000 - 0000000001c36000: F:\WINDOWS\system32\COMRes.dll (0000000001fa0000 - 0000000001fac000: F:\Program Files\Object Desktop\ObjectBar\ShellHook.dll (0000000001fc0000 - 0000000001fd0000: F:\WINDOWS\system32\ctagent.dll (0000000010000000 - 0000000010010000: C:\Program Files\Safari\pthreadVC2.dll (0000000010100000 - 000000001010f000: F:\Program Files\Logitech\SetPoint\lgscroll.dll (0000000016000000 - 0000000016010000: F:\WINDOWS\system32\dnssd.dll (0000000044350000 - 0000000044395000: F:\WINDOWS\system32\iertutil.dll (00000000445d0000 - 000000004469a000: F:\WINDOWS\system32\WININET.dll (000000004ad00000 - 000000004b580000: C:\Program Files\Safari\icudt36.dll (000000005b190000 - 000000005b1c8000: F:\WINDOWS\system32\UXTHEME.DLL (0000000061900000 - 0000000061956000: C:\Program Files\Safari\SQLite3.dll (0000000065500000 - 0000000065572000: C:\Program Files\Safari\CoreFoundation.dll (0000000065a00000 - 0000000065a13000: C:\Program Files\Safari\zlib1.dll (0000000065f00000 - 00000000662a1000: C:\Program Files\Safari\CoreGraphics.dll (0000000066500000 - 000000006650a000: F:\WINDOWS\system32\wbsys.dll (0000000066600000 - 0000000066617000: F:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (000000006a500000 - 000000006a56b000: C:\Program Files\Safari\CFNetwork.dll (000000006b400000 - 000000006b4fc000: C:\Program Files\Safari\icuuc36.dll (000000006f500000 - 000000006f53f000: C:\Program Files\Safari\SafariTheme.dll (000000006fa00000 - 000000006faa7000: C:\Program Files\Safari\icuin36.dll (0000000071a20000 - 0000000071a28000: F:\WINDOWS\system32\WS2HELP.dll (0000000071a30000 - 0000000071a47000: F:\WINDOWS\system32\WS2_32.dll (0000000071a50000 - 0000000071a5a000: F:\WINDOWS\system32\WSOCK32.dll (0000000071b80000 - 0000000071b93000: F:\WINDOWS\system32\SAMLIB.dll (0000000072f70000 - 0000000072f96000: F:\WINDOWS\system32\WINSPOOL.DRV (0000000073aa0000 - 0000000073ab5000: F:\WINDOWS\system32\mscms.dll (00000000746a0000 - 00000000746eb000: F:\WINDOWS\system32\MSCTF.dll (0000000075250000 - 000000007527e000: F:\WINDOWS\system32\msctfime.ime (0000000076320000 - 0000000076325000: F:\WINDOWS\system32\msimg32.dll (0000000076330000 - 000000007634d000: F:\WINDOWS\system32\IMM32.DLL (0000000076740000 - 000000007674c000: F:\WINDOWS\system32\Cryptdll.dll (0000000076af0000 - 0000000076b1e000: F:\WINDOWS\system32\WINMM.dll (0000000076bb0000 - 0000000076bbb000: F:\WINDOWS\system32\PSAPI.DLL (0000000076d20000 - 0000000076d39000: F:\WINDOWS\system32\iphlpapi.dll (0000000076f20000 - 0000000076f4d000: F:\WINDOWS\system32\WLDAP32.dll (0000000076f90000 - 000000007700f000: F:\WINDOWS\system32\CLBCATQ.DLL (00000000770e0000 - 000000007716b000: F:\WINDOWS\system32\OLEAUT32.dll (0000000077390000 - 0000000077493000: F:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll (00000000774a0000 - 00000000775e4000: F:\WINDOWS\system32\ole32.dll (0000000077650000 - 0000000077671000: F:\WINDOWS\system32\NTMARTA.DLL (0000000077a40000 - 0000000077ad5000: F:\WINDOWS\system32\CRYPT32.dll (0000000077ae0000 - 0000000077af2000: F:\WINDOWS\system32\MSASN1.dll (0000000077b00000 - 0000000077b22000: F:\WINDOWS\system32\Apphelp.dll (0000000077bd0000 - 0000000077bd8000: F:\WINDOWS\system32\VERSION.dll (0000000077be0000 - 0000000077c38000: F:\WINDOWS\system32\msvcrt.dll (0000000077da0000 - 0000000077e31000: F:\WINDOWS\system32\RPCRT4.dll (0000000077e40000 - 0000000077e87000: F:\WINDOWS\system32\GDI32.dll (0000000077e90000 - 0000000077f06000: F:\WINDOWS\system32\SHLWAPI.dll (0000000077f10000 - 0000000077f21000: F:\WINDOWS\system32\Secur32.dll (0000000077f40000 - 0000000077feb000: F:\WINDOWS\system32\ADVAPI32.dll (0000000078130000 - 00000000781cb000: F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll (000000007c420000 - 000000007c4a7000: F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll (000000007c800000 - 000000007c8ff000: F:\WINDOWS\system32\kernel32.dll (000000007c900000 - 000000007c9b6000: F:\WINDOWS\system32\ntdll.dll (000000007c9c0000 - 000000007d1b2000: F:\WINDOWS\system32\SHELL32.dll (000000007e390000 - 000000007e421000: F:\WINDOWS\system32\USER32.dll *----> Statusdump voor subproces-ID 0xe54 <----* eax=00000000 ebx=fffce002 ecx=00000000 edx=7feadc00 esi=fffce002 edi=7ff7a968 eip=007ca039 esp=0012f4a0 ebp=0012f4ec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Safari\WebKit.dll - functie: WebKit!JSValueMakeUndefined 007ca01d 99 cdq 007ca01e 83e20f and edx,0xf 007ca021 03c2 add eax,edx 007ca023 c1f804 sar eax,0x4 007ca026 89742408 mov [esp+0x8],esi 007ca02a 7915 jns WebKit!JSValueMakeUndefined+0x35651 (007ca041) 007ca02c 8b4138 mov eax,[ecx+0x38] 007ca02f 8d5114 lea edx,[ecx+0x14] 007ca032 33c9 xor ecx,ecx 007ca034 e8b79b1200 call WebKit!JSValueMakeUndefined+0x15f200 (008f3bf0) Fout ->007ca039 668b4008 mov ax,[eax+0x8] ds:0023:00000008=???? 007ca03d 5e pop esi 007ca03e c20800 ret 0x8 007ca041 8bd6 mov edx,esi 007ca043 80e207 and dl,0x7 007ca046 80fa02 cmp dl,0x2 007ca049 7518 jnz WebKit!JSValueMakeUndefined+0x35673 (007ca063) 007ca04b d94124 fld dword ptr [ecx+0x24] 007ca04e dc052883a400 fadd qword ptr [WebKit+0x308328 (00a48328)] 007ca054 e8e7522500 call WebKit+0x2df340 (00a1f340) 007ca059 50 push eax *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 0012f4ec 0094f5c1 0012f524 0012f520 0012f518 WebKit!JSValueMakeUndefined+0x35649 7ff7a9dc 00000000 00000000 00000000 00000000 WebKit!JSValueMakeUndefined+0x1babd1 *----> Raw Stack Dump <----* 000000000012f4a0 b8 a9 f7 7f 68 2f 92 00 - 02 e0 fc ff 00 00 00 00 ....h/.......... 000000000012f4b0 00 f5 12 00 58 ad f7 7f - b8 a9 f7 7f fa 79 87 00 ....X........y.. 000000000012f4c0 02 e0 fc ff 01 00 00 00 - 58 ad f7 7f 75 f7 94 00 ........X...u... 000000000012f4d0 01 00 00 00 01 00 00 00 - 00 00 00 00 58 ad f7 7f ............X... 000000000012f4e0 00 f5 12 00 58 ad f7 7f - 81 02 00 00 dc a9 f7 7f ....X........... 000000000012f4f0 c1 f5 94 00 24 f5 12 00 - 20 f5 12 00 18 f5 12 00 ....$... ....... 000000000012f500 1c f5 12 00 00 f5 12 00 - b8 a9 f7 7f 58 ad f7 7f ............X... 000000000012f510 dc a9 f7 7f 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000012f520 00 00 00 00 00 00 00 00 - 00 f5 12 00 2a 00 92 00 ............*... 000000000012f530 81 02 00 00 81 02 00 00 - 81 02 00 00 b4 7b 92 00 .............{.. 000000000012f540 dc a9 f7 7f 58 ad f7 7f - 40 f6 12 00 af 84 92 00 ....X...@....... 000000000012f550 d8 a9 f7 7f b8 a9 f7 7f - dc a9 f7 7f 24 14 4d 6b ............$.Mk 000000000012f560 74 00 00 00 00 00 00 00 - 00 00 00 00 60 b6 e9 7f t...........`... 000000000012f570 a0 00 00 00 dc a9 f7 7f - 00 00 00 00 b8 a9 f7 7f ................ 000000000012f580 9c aa f7 7f 00 00 00 00 - b8 a9 f7 7f 00 00 00 00 ................ 000000000012f590 00 00 00 00 0a 00 00 00 - 0a 00 00 00 0a 00 00 00 ................ 000000000012f5a0 00 00 00 00 3c aa f7 7f - 00 00 00 00 00 00 00 00 ....<........... 000000000012f5b0 00 00 00 00 00 00 00 00 - b8 a9 f7 7f 00 00 00 00 ................ 000000000012f5c0 00 00 00 00 b8 a9 f7 7f - 9c aa f7 7f 00 00 00 00 ................ 000000000012f5d0 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 a9 f7 7f ................ *----> Statusdump voor subproces-ID 0x1794 <----* eax=77f69981 ebx=016afed0 ecx=00000006 edx=00000000 esi=00000000 edi=7ffd7000 eip=7c90eb94 esp=016afea8 ebp=016aff44 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\ntdll.dll - functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\ADVAPI32.dll - WARNING: Stack unwind information not available. Following frames may be wrong. *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\kernel32.dll - ChildEBP RetAddr Args to Child 016aff44 77f69b26 00000002 016aff6c 00000000 ntdll!KiFastSystemCallRet 016affb4 7c80b6a3 00000000 7c9140bb 00000000 ADVAPI32!RegDeleteKeyW+0x2a2 016affec 00000000 77f69981 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 00000000016afea8 ab e9 90 7c 0b 95 80 7c - 02 00 00 00 d0 fe 6a 01 ...|...|......j. 00000000016afeb8 01 00 00 00 01 00 00 00 - 04 ff 6a 01 e0 2e 4b 01 ..........j...K. 00000000016afec8 40 65 fb 77 00 10 00 00 - 78 00 00 00 84 00 00 00 @e.w....x....... 00000000016afed8 c0 fe 6a 01 ec 0b d6 98 - dc ff 6a 01 30 9a 83 7c ..j.......j.0..| 00000000016afee8 d0 0a 81 7c 00 10 00 00 - 14 00 00 00 01 00 00 00 ...|............ 00000000016afef8 98 c4 15 00 00 00 00 00 - 00 00 00 00 00 a2 2f 4d ............../M 00000000016aff08 ff ff ff ff 00 10 00 00 - 00 70 fd 7f 00 e0 fd 7f .........p...... 00000000016aff18 dc ff 6a 01 04 ff 6a 01 - d0 fe 6a 01 06 00 00 00 ..j...j...j..... 00000000016aff28 02 00 00 00 c4 fe 6a 01 - 06 00 00 00 dc ff 6a 01 ......j.......j. 00000000016aff38 30 9a 83 7c 00 96 80 7c - 00 00 00 00 b4 ff 6a 01 0..|...|......j. 00000000016aff48 26 9b f6 77 02 00 00 00 - 6c ff 6a 01 00 00 00 00 &..w....l.j..... 00000000016aff58 e0 93 04 00 01 00 00 00 - bb 40 91 7c 00 00 00 00 .........@.|.... 00000000016aff68 00 00 00 00 78 00 00 00 - 84 00 00 00 00 10 00 00 ....x........... 00000000016aff78 e0 2e 4b 01 00 00 00 00 - 00 10 00 00 e8 3e 4b 01 ..K..........>K. 00000000016aff88 a0 66 fb 77 28 00 00 00 - 80 66 fb 77 00 10 00 00 .f.w(....f.w.... 00000000016aff98 00 00 00 00 a0 66 fb 77 - e0 2e 4b 01 80 66 fb 77 .....f.w..K..f.w 00000000016affa8 e5 03 00 00 00 10 00 00 - e8 3e 4b 01 ec ff 6a 01 .........>K...j. 00000000016affb8 a3 b6 80 7c 00 00 00 00 - bb 40 91 7c 00 00 00 00 ...|.....@.|.... 00000000016affc8 00 00 00 00 00 e0 fd 7f - 00 66 46 8a c0 ff 6a 01 .........fF...j. 00000000016affd8 98 17 cd 88 ff ff ff ff - 30 9a 83 7c b0 b6 80 7c ........0..|...| *----> Statusdump voor subproces-ID 0x574 <----* eax=00000000 ebx=00000000 ecx=0190fee8 edx=76b10200 esi=00000001 edi=02100210 eip=7c90eb94 esp=0190ff08 ebp=0190ffb4 iopl=0 nv up ei ng nz ac po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000296 functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 0190ffb4 7c80b6a3 00000000 02100210 02140210 ntdll!KiFastSystemCallRet 0190ffec 00000000 76b0aee7 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 000000000190ff08 ab e9 90 7c 21 af b0 76 - 02 00 00 00 6c ff 90 01 ...|!..v....l... 000000000190ff18 01 00 00 00 01 00 00 00 - 00 00 00 00 10 02 14 02 ................ 000000000190ff28 18 7b cc 88 10 00 00 00 - d0 ba 21 8a a3 57 8a 80 .{........!..W.. 000000000190ff38 e8 d9 54 88 18 7b cc 88 - 00 d0 fd 7f 84 cc 83 98 ..T..{.......... 000000000190ff48 b9 1c 82 80 00 00 00 00 - 05 00 00 00 00 00 00 00 ................ 000000000190ff58 00 00 00 00 00 00 00 00 - 10 a7 81 80 00 00 00 00 ................ 000000000190ff68 00 00 00 00 a8 03 00 00 - b4 03 00 00 18 7b cc 88 .............{.. 000000000190ff78 50 cd 83 98 7f dc 8a 80 - 00 00 00 00 01 ba 21 00 P.............!. 000000000190ff88 00 00 00 00 e8 d9 54 88 - c1 1c 82 80 00 00 00 00 ......T......... 000000000190ff98 00 00 00 00 00 00 00 00 - a1 1c 82 80 9c cc 83 98 ................ 000000000190ffa8 35 ec a0 80 00 00 00 00 - 02 00 00 00 ec ff 90 01 5............... 000000000190ffb8 a3 b6 80 7c 00 00 00 00 - 10 02 10 02 10 02 14 02 ...|............ 000000000190ffc8 00 00 00 00 00 d0 fd 7f - 00 66 46 8a c0 ff 90 01 .........fF..... 000000000190ffd8 18 a3 61 88 ff ff ff ff - 30 9a 83 7c b0 b6 80 7c ..a.....0..|...| 000000000190ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 e7 ae b0 76 ...............v 000000000190fff8 00 00 00 00 00 00 00 00 - c8 00 00 00 e1 01 00 00 ................ 0000000001910008 ff ee ff ee 02 10 00 00 - 00 00 00 00 00 fe 00 00 ................ 0000000001910018 00 00 10 00 00 20 00 00 - 00 02 00 00 00 20 00 00 ..... ....... .. 0000000001910028 15 02 00 00 ff ef fd 7f - 0b 00 08 06 00 00 00 00 ................ 0000000001910038 00 00 00 00 00 00 00 00 - 00 00 00 00 98 05 91 01 ................ *----> Statusdump voor subproces-ID 0x17a8 <----* eax=01cd8000 ebx=01f4fdcc ecx=01f4f940 edx=00001000 esi=00000000 edi=7ffd7000 eip=7c90eb94 esp=01f4fda4 ebp=01f4fe40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. *** WARNING: Unable to verify checksum for C:\Program Files\Safari\pthreadVC2.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Safari\pthreadVC2.dll - ChildEBP RetAddr Args to Child 01f4fe40 7c80a095 00000002 01f4fe7c 00000000 ntdll!KiFastSystemCallRet 01f4fe5c 10002f60 00000002 01f4fe7c 00000000 kernel32!WaitForMultipleObjects+0x18 ffffffff 00000000 00000000 00000000 00000000 pthreadVC2+0x2f60 *----> Raw Stack Dump <----* 0000000001f4fda4 ab e9 90 7c 0b 95 80 7c - 02 00 00 00 cc fd f4 01 ...|...|........ 0000000001f4fdb4 01 00 00 00 00 00 00 00 - 00 00 00 00 02 00 00 00 ................ 0000000001f4fdc4 68 75 d0 01 ec ad e9 7f - ec 04 00 00 00 05 00 00 hu.............. 0000000001f4fdd4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001f4fde4 00 00 01 00 00 00 3c 00 - 14 00 00 00 01 00 00 00 ......<......... 0000000001f4fdf4 00 00 00 00 00 00 00 00 - 10 00 00 00 ff ff 01 00 ................ 0000000001f4fe04 0d 00 00 00 00 00 00 00 - 00 70 fd 7f 00 c0 fd 7f .........p...... 0000000001f4fe14 4b 00 00 00 00 00 00 00 - cc fd f4 01 6c fe f4 01 K...........l... 0000000001f4fe24 02 00 00 00 c0 fd f4 01 - ff ff ff ff 9c ff f4 01 ................ 0000000001f4fe34 30 9a 83 7c 00 96 80 7c - 00 00 00 00 5c fe f4 01 0..|...|....\... 0000000001f4fe44 95 a0 80 7c 02 00 00 00 - 7c fe f4 01 00 00 00 00 ...|....|....... 0000000001f4fe54 ff ff ff ff 00 00 00 00 - ff ff ff ff 60 2f 00 10 ............`/.. 0000000001f4fe64 02 00 00 00 7c fe f4 01 - 00 00 00 00 ff ff ff ff ....|........... 0000000001f4fe74 84 70 d0 01 80 70 d0 01 - ec 04 00 00 00 05 00 00 .p...p.......... 0000000001f4fe84 00 00 00 00 00 00 00 00 - 4e 30 00 10 ff ff ff ff ........N0...... 0000000001f4fe94 23 5d 00 10 ec 04 00 00 - ff ff ff ff c4 fe f4 01 #].............. 0000000001f4fea4 40 5c 00 10 bc fe f4 01 - e0 42 3b 01 dc 42 3b 01 @\.......B;..B;. 0000000001f4feb4 ec ad e9 7f 00 00 00 00 - 80 70 d0 01 b8 fe f4 01 .........p...... 0000000001f4fec4 40 5c 00 10 bc fe f4 01 - f4 fe f4 01 0f 28 00 10 @\...........(.. 0000000001f4fed4 dc 42 3b 01 00 00 00 00 - c0 ad e9 7f c0 ad e9 7f .B;............. Toepassingsuitzondering: Toep: C:\Program Files\Safari\Safari.exe (PID=3924) Tijd: 19-11-2007 @ 06:57:21.673 Uitzonderingsnummer: c0000005 (schending van toegang) *----> Systeemgegevens <----* Computernaam: LEOPARDS-8262D1 Gebruikersnaam: Leopard Terminalsessie-id: 0 Aantal processors: 1 Processortype: x86 Family 6 Model 10 Stepping 0 Windows-versie: 5.1 Actieve gecompileerde versie: 2600 Service Pack: 2 Huidig type: Uniprocessor Free Geregistreerde organisatie: Geregistreerde eigenaar: leopards dreamcast *----> Taakoverzicht <----* 0 System Process 4 System 928 smss.exe 976 csrss.exe 1000 winlogon.exe 1044 services.exe 1056 lsass.exe 1232 Ati2evxx.exe 1248 svchost.exe 1324 svchost.exe 1824 svchost.exe 1860 svchost.exe 2044 svchost.exe 556 svchost.exe 804 spoolsv.exe 1716 SDMCP.exe 1380 Ati2evxx.exe 1488 Explorer.EXE 1808 schedul2.exe 1920 AppleMobileDeviceService.exe 1948 avgamsvr.exe 2016 avgupsvc.exe 456 avgemc.exe 472 mDNSResponder.exe 676 cmdagent.exe 1652 CTsvcCDA.exe 1712 EBstrSvc.exe 1980 MacDriveService.exe 2096 RoxWatch10.exe 2168 SbieSvc.exe 2220 svchost.exe 2240 TrueImageTryStartService.exe 2340 vmware-authd.exe 2444 vmount2.exe 2468 vmnat.exe 2628 MsPMSPSv.exe 2648 vmnetdhcp.exe 3176 wmiprvse.exe 3880 alg.exe 2480 ctfmon.exe 2520 RoxMediaDB10.exe 3512 TrayServer.exe 3592 htpatch.exe 3696 CTHELPER.EXE 3756 jusched.exe 3768 vmware-tray.exe 3780 hqtray.exe 3828 avgcc.exe 3864 atiptaxx.exe 3932 CPF.exe 3964 DMXLauncher.exe 3980 RdTask.exe 4040 iTunesHelper.exe 772 TrueImageMonitor.exe 868 TimounterMonitor.exe 968 schedhlp.exe 1120 Alt+Q Hotkey.exe 1264 RocketDock.exe 1372 CTDetect.exe 1908 CTSyncU.exe 648 daemon.exe 1516 msmsgs.exe 728 snarl.exe 2608 hpotdd01.exe 3168 Launchy.exe 3476 SetPoint.exe 2080 SnagIt32.exe 1592 AlarmMasterPlus.exe 956 im-history.exe 1952 NoteScraps.exe 3944 PNotes.exe 3976 TSCHelp.exe 4068 SnagPriv.exe 712 RKLauncher.exe 1020 Finder.exe 1224 YahooWidgetEngine.exe 2284 KHALMNPR.EXE 2476 YahooWidgetEngine.exe 2856 YahooWidgetEngine.exe 2916 iPodService.exe 3452 YahooWidgetEngine.exe 2068 YahooWidgetEngine.exe 4588 DOpus.exe 2548 xchat.exe 3924 Safari.exe 2028 dwwin.exe 5060 drwtsn32.exe *----> Modulelijst <----* (0000000000350000 - 0000000000359000: F:\WINDOWS\system32\Normaliz.dll (0000000000400000 - 0000000000731000: C:\Program Files\Safari\Safari.exe (0000000000740000 - 0000000000b3f000: C:\Program Files\Safari\WebKit.dll (0000000000b40000 - 0000000000c4f000: C:\Program Files\Safari\libxml2.dll (0000000001770000 - 0000000001802000: F:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (0000000001a50000 - 0000000001a5f000: C:\Backuk RK\RK Launcher\RK Launcher 0.41 Beta Nightly\RKLauncher.dll (0000000001a80000 - 0000000001a92000: F:\Program Files\RocketDock\RocketDock.dll (0000000001b60000 - 0000000001c36000: F:\WINDOWS\system32\COMRes.dll (0000000001fa0000 - 0000000001fac000: F:\Program Files\Object Desktop\ObjectBar\ShellHook.dll (0000000001fc0000 - 0000000001fd0000: F:\WINDOWS\system32\ctagent.dll (0000000010000000 - 0000000010010000: C:\Program Files\Safari\pthreadVC2.dll (0000000010100000 - 000000001010f000: F:\Program Files\Logitech\SetPoint\lgscroll.dll (0000000016000000 - 0000000016010000: F:\WINDOWS\system32\dnssd.dll (0000000044350000 - 0000000044395000: F:\WINDOWS\system32\iertutil.dll (00000000445d0000 - 000000004469a000: F:\WINDOWS\system32\WININET.dll (000000004ad00000 - 000000004b580000: C:\Program Files\Safari\icudt36.dll (000000005b190000 - 000000005b1c8000: F:\WINDOWS\system32\UXTHEME.DLL (0000000061900000 - 0000000061956000: C:\Program Files\Safari\SQLite3.dll (0000000065500000 - 0000000065572000: C:\Program Files\Safari\CoreFoundation.dll (0000000065a00000 - 0000000065a13000: C:\Program Files\Safari\zlib1.dll (0000000065f00000 - 00000000662a1000: C:\Program Files\Safari\CoreGraphics.dll (0000000066500000 - 000000006650a000: F:\WINDOWS\system32\wbsys.dll (0000000066600000 - 0000000066617000: F:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (000000006a500000 - 000000006a56b000: C:\Program Files\Safari\CFNetwork.dll (000000006b400000 - 000000006b4fc000: C:\Program Files\Safari\icuuc36.dll (000000006f500000 - 000000006f53f000: C:\Program Files\Safari\SafariTheme.dll (000000006fa00000 - 000000006faa7000: C:\Program Files\Safari\icuin36.dll (0000000071a20000 - 0000000071a28000: F:\WINDOWS\system32\WS2HELP.dll (0000000071a30000 - 0000000071a47000: F:\WINDOWS\system32\WS2_32.dll (0000000071a50000 - 0000000071a5a000: F:\WINDOWS\system32\WSOCK32.dll (0000000071b80000 - 0000000071b93000: F:\WINDOWS\system32\SAMLIB.dll (0000000072f70000 - 0000000072f96000: F:\WINDOWS\system32\WINSPOOL.DRV (0000000073aa0000 - 0000000073ab5000: F:\WINDOWS\system32\mscms.dll (00000000746a0000 - 00000000746eb000: F:\WINDOWS\system32\MSCTF.dll (0000000075250000 - 000000007527e000: F:\WINDOWS\system32\msctfime.ime (0000000076320000 - 0000000076325000: F:\WINDOWS\system32\msimg32.dll (0000000076330000 - 000000007634d000: F:\WINDOWS\system32\IMM32.DLL (0000000076740000 - 000000007674c000: F:\WINDOWS\system32\Cryptdll.dll (0000000076af0000 - 0000000076b1e000: F:\WINDOWS\system32\WINMM.dll (0000000076bb0000 - 0000000076bbb000: F:\WINDOWS\system32\PSAPI.DLL (0000000076d20000 - 0000000076d39000: F:\WINDOWS\system32\iphlpapi.dll (0000000076f20000 - 0000000076f4d000: F:\WINDOWS\system32\WLDAP32.dll (0000000076f90000 - 000000007700f000: F:\WINDOWS\system32\CLBCATQ.DLL (00000000770e0000 - 000000007716b000: F:\WINDOWS\system32\OLEAUT32.dll (0000000077390000 - 0000000077493000: F:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll (00000000774a0000 - 00000000775e4000: F:\WINDOWS\system32\ole32.dll (0000000077650000 - 0000000077671000: F:\WINDOWS\system32\NTMARTA.DLL (0000000077a40000 - 0000000077ad5000: F:\WINDOWS\system32\CRYPT32.dll (0000000077ae0000 - 0000000077af2000: F:\WINDOWS\system32\MSASN1.dll (0000000077b00000 - 0000000077b22000: F:\WINDOWS\system32\Apphelp.dll (0000000077bd0000 - 0000000077bd8000: F:\WINDOWS\system32\VERSION.dll (0000000077be0000 - 0000000077c38000: F:\WINDOWS\system32\msvcrt.dll (0000000077da0000 - 0000000077e31000: F:\WINDOWS\system32\RPCRT4.dll (0000000077e40000 - 0000000077e87000: F:\WINDOWS\system32\GDI32.dll (0000000077e90000 - 0000000077f06000: F:\WINDOWS\system32\SHLWAPI.dll (0000000077f10000 - 0000000077f21000: F:\WINDOWS\system32\Secur32.dll (0000000077f40000 - 0000000077feb000: F:\WINDOWS\system32\ADVAPI32.dll (0000000078130000 - 00000000781cb000: F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll (000000007c420000 - 000000007c4a7000: F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll (000000007c800000 - 000000007c8ff000: F:\WINDOWS\system32\kernel32.dll (000000007c900000 - 000000007c9b6000: F:\WINDOWS\system32\ntdll.dll (000000007c9c0000 - 000000007d1b2000: F:\WINDOWS\system32\SHELL32.dll (000000007e390000 - 000000007e421000: F:\WINDOWS\system32\USER32.dll *----> Statusdump voor subproces-ID 0xf20 <----* eax=00000000 ebx=fffce002 ecx=00000000 edx=7feadc00 esi=fffce002 edi=7ff7a968 eip=007ca039 esp=0012f4a0 ebp=0012f4ec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Safari\WebKit.dll - functie: WebKit!JSValueMakeUndefined 007ca01d 99 cdq 007ca01e 83e20f and edx,0xf 007ca021 03c2 add eax,edx 007ca023 c1f804 sar eax,0x4 007ca026 89742408 mov [esp+0x8],esi 007ca02a 7915 jns WebKit!JSValueMakeUndefined+0x35651 (007ca041) 007ca02c 8b4138 mov eax,[ecx+0x38] 007ca02f 8d5114 lea edx,[ecx+0x14] 007ca032 33c9 xor ecx,ecx 007ca034 e8b79b1200 call WebKit!JSValueMakeUndefined+0x15f200 (008f3bf0) Fout ->007ca039 668b4008 mov ax,[eax+0x8] ds:0023:00000008=???? 007ca03d 5e pop esi 007ca03e c20800 ret 0x8 007ca041 8bd6 mov edx,esi 007ca043 80e207 and dl,0x7 007ca046 80fa02 cmp dl,0x2 007ca049 7518 jnz WebKit!JSValueMakeUndefined+0x35673 (007ca063) 007ca04b d94124 fld dword ptr [ecx+0x24] 007ca04e dc052883a400 fadd qword ptr [WebKit+0x308328 (00a48328)] 007ca054 e8e7522500 call WebKit+0x2df340 (00a1f340) 007ca059 50 push eax *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 0012f4ec 0094f5c1 0012f524 0012f520 0012f518 WebKit!JSValueMakeUndefined+0x35649 7ff7a9dc 00000000 00000000 00000000 00000000 WebKit!JSValueMakeUndefined+0x1babd1 *----> Raw Stack Dump <----* 000000000012f4a0 b8 a9 f7 7f 68 2f 92 00 - 02 e0 fc ff 00 00 00 00 ....h/.......... 000000000012f4b0 00 f5 12 00 58 ad f7 7f - b8 a9 f7 7f fa 79 87 00 ....X........y.. 000000000012f4c0 02 e0 fc ff 01 00 00 00 - 58 ad f7 7f 75 f7 94 00 ........X...u... 000000000012f4d0 01 00 00 00 01 00 00 00 - 00 00 00 00 58 ad f7 7f ............X... 000000000012f4e0 00 f5 12 00 58 ad f7 7f - 81 02 00 00 dc a9 f7 7f ....X........... 000000000012f4f0 c1 f5 94 00 24 f5 12 00 - 20 f5 12 00 18 f5 12 00 ....$... ....... 000000000012f500 1c f5 12 00 00 f5 12 00 - b8 a9 f7 7f 58 ad f7 7f ............X... 000000000012f510 dc a9 f7 7f 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000012f520 00 00 00 00 00 00 00 00 - 00 f5 12 00 2a 00 92 00 ............*... 000000000012f530 81 02 00 00 81 02 00 00 - 81 02 00 00 b4 7b 92 00 .............{.. 000000000012f540 dc a9 f7 7f 58 ad f7 7f - 40 f6 12 00 af 84 92 00 ....X...@....... 000000000012f550 d8 a9 f7 7f b8 a9 f7 7f - dc a9 f7 7f 24 14 4d 6b ............$.Mk 000000000012f560 74 00 00 00 00 00 00 00 - 00 00 00 00 60 b6 e9 7f t...........`... 000000000012f570 a0 00 00 00 dc a9 f7 7f - 00 00 00 00 b8 a9 f7 7f ................ 000000000012f580 9c aa f7 7f 00 00 00 00 - b8 a9 f7 7f 00 00 00 00 ................ 000000000012f590 00 00 00 00 0a 00 00 00 - 0a 00 00 00 0a 00 00 00 ................ 000000000012f5a0 00 00 00 00 3c aa f7 7f - 00 00 00 00 00 00 00 00 ....<........... 000000000012f5b0 00 00 00 00 00 00 00 00 - b8 a9 f7 7f 00 00 00 00 ................ 000000000012f5c0 00 00 00 00 b8 a9 f7 7f - 9c aa f7 7f 00 00 00 00 ................ 000000000012f5d0 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 a9 f7 7f ................ *----> Statusdump voor subproces-ID 0x115c <----* eax=77f69981 ebx=016afed0 ecx=00000006 edx=00000000 esi=00000000 edi=7ffdb000 eip=7c90eb94 esp=016afea8 ebp=016aff44 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\ntdll.dll - functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\ADVAPI32.dll - WARNING: Stack unwind information not available. Following frames may be wrong. *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\kernel32.dll - ChildEBP RetAddr Args to Child 016aff44 77f69b26 00000002 016aff6c 00000000 ntdll!KiFastSystemCallRet 016affb4 7c80b6a3 00000000 7c9140bb 00000000 ADVAPI32!RegDeleteKeyW+0x2a2 016affec 00000000 77f69981 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 00000000016afea8 ab e9 90 7c 0b 95 80 7c - 02 00 00 00 d0 fe 6a 01 ...|...|......j. 00000000016afeb8 01 00 00 00 01 00 00 00 - 04 ff 6a 01 e0 2e 4b 01 ..........j...K. 00000000016afec8 40 65 fb 77 00 10 00 00 - 78 00 00 00 84 00 00 00 @e.w....x....... 00000000016afed8 c0 fe 6a 01 ec 4b cb ba - dc ff 6a 01 30 9a 83 7c ..j..K....j.0..| 00000000016afee8 d0 0a 81 7c 00 10 00 00 - 14 00 00 00 01 00 00 00 ...|............ 00000000016afef8 98 c4 15 00 00 00 00 00 - 00 00 00 00 00 a2 2f 4d ............../M 00000000016aff08 ff ff ff ff 00 10 00 00 - 00 b0 fd 7f 00 e0 fd 7f ................ 00000000016aff18 dc ff 6a 01 04 ff 6a 01 - d0 fe 6a 01 06 00 00 00 ..j...j...j..... 00000000016aff28 02 00 00 00 c4 fe 6a 01 - 06 00 00 00 dc ff 6a 01 ......j.......j. 00000000016aff38 30 9a 83 7c 00 96 80 7c - 00 00 00 00 b4 ff 6a 01 0..|...|......j. 00000000016aff48 26 9b f6 77 02 00 00 00 - 6c ff 6a 01 00 00 00 00 &..w....l.j..... 00000000016aff58 e0 93 04 00 01 00 00 00 - bb 40 91 7c 00 00 00 00 .........@.|.... 00000000016aff68 00 00 00 00 78 00 00 00 - 84 00 00 00 00 10 00 00 ....x........... 00000000016aff78 e0 2e 4b 01 00 00 00 00 - 00 10 00 00 e8 3e 4b 01 ..K..........>K. 00000000016aff88 a0 66 fb 77 28 00 00 00 - 80 66 fb 77 00 10 00 00 .f.w(....f.w.... 00000000016aff98 00 00 00 00 a0 66 fb 77 - e0 2e 4b 01 80 66 fb 77 .....f.w..K..f.w 00000000016affa8 e5 03 00 00 00 10 00 00 - e8 3e 4b 01 ec ff 6a 01 .........>K...j. 00000000016affb8 a3 b6 80 7c 00 00 00 00 - bb 40 91 7c 00 00 00 00 ...|.....@.|.... 00000000016affc8 00 00 00 00 00 e0 fd 7f - 00 66 46 8a c0 ff 6a 01 .........fF...j. 00000000016affd8 68 ab 85 88 ff ff ff ff - 30 9a 83 7c b0 b6 80 7c h.......0..|...| *----> Statusdump voor subproces-ID 0x12f4 <----* eax=00000000 ebx=00000000 ecx=0190fee8 edx=76b10200 esi=00000001 edi=02100210 eip=7c90eb94 esp=0190ff08 ebp=0190ffb4 iopl=0 nv up ei ng nz ac po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000296 functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 0190ffb4 7c80b6a3 00000000 02100210 02140210 ntdll!KiFastSystemCallRet 0190ffec 00000000 76b0aee7 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 000000000190ff08 ab e9 90 7c 21 af b0 76 - 02 00 00 00 6c ff 90 01 ...|!..v....l... 000000000190ff18 01 00 00 00 01 00 00 00 - 00 00 00 00 10 02 14 02 ................ 000000000190ff28 d8 2c 56 88 10 00 00 00 - d0 ba 21 8a a3 57 8a 80 .,V.......!..W.. 000000000190ff38 20 70 53 88 d8 2c 56 88 - 00 d0 fd 7f 84 dc 8b 99 pS..,V......... 000000000190ff48 b9 1c 82 80 e2 cd a0 80 - 86 0a 00 00 00 00 00 00 ................ 000000000190ff58 0f c3 80 80 01 00 00 00 - d1 00 00 00 ec dc 8b 99 ................ 000000000190ff68 79 3c 87 80 a8 03 00 00 - b4 03 00 00 d8 2c 56 88 y<...........,V. 000000000190ff78 50 dd 8b 99 00 00 00 00 - 00 00 00 00 01 ba 21 00 P.............!. 000000000190ff88 00 00 00 00 20 70 53 88 - c1 1c 82 80 00 00 00 00 .... pS......... 000000000190ff98 00 00 00 00 00 00 00 00 - 07 00 00 00 07 0a 00 00 ................ 000000000190ffa8 00 18 cd 88 00 00 00 00 - 02 00 00 00 ec ff 90 01 ................ 000000000190ffb8 a3 b6 80 7c 00 00 00 00 - 10 02 10 02 10 02 14 02 ...|............ 000000000190ffc8 00 00 00 00 00 d0 fd 7f - 00 66 46 8a c0 ff 90 01 .........fF..... 000000000190ffd8 d0 17 cd 88 ff ff ff ff - 30 9a 83 7c b0 b6 80 7c ........0..|...| 000000000190ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 e7 ae b0 76 ...............v 000000000190fff8 00 00 00 00 00 00 00 00 - c8 00 00 00 59 01 00 00 ............Y... 0000000001910008 ff ee ff ee 02 10 00 00 - 00 00 00 00 00 fe 00 00 ................ 0000000001910018 00 00 10 00 00 20 00 00 - 00 02 00 00 00 20 00 00 ..... ....... .. 0000000001910028 15 02 00 00 ff ef fd 7f - 0b 00 08 06 00 00 00 00 ................ 0000000001910038 00 00 00 00 00 00 00 00 - 00 00 00 00 98 05 91 01 ................ *----> Statusdump voor subproces-ID 0x1164 <----* eax=01cd8000 ebx=01f4fdcc ecx=01f4f940 edx=00001000 esi=00000000 edi=7ffdb000 eip=7c90eb94 esp=01f4fda4 ebp=01f4fe40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. *** WARNING: Unable to verify checksum for C:\Program Files\Safari\pthreadVC2.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Safari\pthreadVC2.dll - ChildEBP RetAddr Args to Child 01f4fe40 7c80a095 00000002 01f4fe7c 00000000 ntdll!KiFastSystemCallRet 01f4fe5c 10002f60 00000002 01f4fe7c 00000000 kernel32!WaitForMultipleObjects+0x18 ffffffff 00000000 00000000 00000000 00000000 pthreadVC2+0x2f60 *----> Raw Stack Dump <----* 0000000001f4fda4 ab e9 90 7c 0b 95 80 7c - 02 00 00 00 cc fd f4 01 ...|...|........ 0000000001f4fdb4 01 00 00 00 00 00 00 00 - 00 00 00 00 02 00 00 00 ................ 0000000001f4fdc4 68 75 d0 01 ec ad e9 7f - ec 04 00 00 00 05 00 00 hu.............. 0000000001f4fdd4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001f4fde4 00 00 01 00 00 00 3c 00 - 14 00 00 00 01 00 00 00 ......<......... 0000000001f4fdf4 00 00 00 00 00 00 00 00 - 10 00 00 00 ff ff 01 00 ................ 0000000001f4fe04 0d 00 00 00 00 00 00 00 - 00 b0 fd 7f 00 c0 fd 7f ................ 0000000001f4fe14 4b 00 00 00 00 00 00 00 - cc fd f4 01 6c fe f4 01 K...........l... 0000000001f4fe24 02 00 00 00 c0 fd f4 01 - ff ff ff ff 9c ff f4 01 ................ 0000000001f4fe34 30 9a 83 7c 00 96 80 7c - 00 00 00 00 5c fe f4 01 0..|...|....\... 0000000001f4fe44 95 a0 80 7c 02 00 00 00 - 7c fe f4 01 00 00 00 00 ...|....|....... 0000000001f4fe54 ff ff ff ff 00 00 00 00 - ff ff ff ff 60 2f 00 10 ............`/.. 0000000001f4fe64 02 00 00 00 7c fe f4 01 - 00 00 00 00 ff ff ff ff ....|........... 0000000001f4fe74 84 70 d0 01 80 70 d0 01 - ec 04 00 00 00 05 00 00 .p...p.......... 0000000001f4fe84 00 00 00 00 00 00 00 00 - 4e 30 00 10 ff ff ff ff ........N0...... 0000000001f4fe94 23 5d 00 10 ec 04 00 00 - ff ff ff ff c4 fe f4 01 #].............. 0000000001f4fea4 40 5c 00 10 bc fe f4 01 - e0 42 3b 01 dc 42 3b 01 @\.......B;..B;. 0000000001f4feb4 ec ad e9 7f 00 00 00 00 - 80 70 d0 01 b8 fe f4 01 .........p...... 0000000001f4fec4 40 5c 00 10 bc fe f4 01 - f4 fe f4 01 0f 28 00 10 @\...........(.. 0000000001f4fed4 dc 42 3b 01 00 00 00 00 - c0 ad e9 7f c0 ad e9 7f .B;............. Toepassingsuitzondering: Toep: F:\Program Files\Safari\Safari.exe (PID=4680) Tijd: 19-11-2007 @ 06:57:56.639 Uitzonderingsnummer: c0000005 (schending van toegang) *----> Systeemgegevens <----* Computernaam: LEOPARDS-8262D1 Gebruikersnaam: Leopard Terminalsessie-id: 0 Aantal processors: 1 Processortype: x86 Family 6 Model 10 Stepping 0 Windows-versie: 5.1 Actieve gecompileerde versie: 2600 Service Pack: 2 Huidig type: Uniprocessor Free Geregistreerde organisatie: Geregistreerde eigenaar: leopards dreamcast *----> Taakoverzicht <----* 0 System Process 4 System 928 smss.exe 976 csrss.exe 1000 winlogon.exe 1044 services.exe 1056 lsass.exe 1232 Ati2evxx.exe 1248 svchost.exe 1324 svchost.exe 1824 svchost.exe 1860 svchost.exe 2044 svchost.exe 556 svchost.exe 804 spoolsv.exe 1716 SDMCP.exe 1380 Ati2evxx.exe 1488 Explorer.EXE 1808 schedul2.exe 1920 AppleMobileDeviceService.exe 1948 avgamsvr.exe 2016 avgupsvc.exe 456 avgemc.exe 472 mDNSResponder.exe 676 cmdagent.exe 1652 CTsvcCDA.exe 1712 EBstrSvc.exe 1980 MacDriveService.exe 2096 RoxWatch10.exe 2168 SbieSvc.exe 2220 svchost.exe 2240 TrueImageTryStartService.exe 2340 vmware-authd.exe 2444 vmount2.exe 2468 vmnat.exe 2628 MsPMSPSv.exe 2648 vmnetdhcp.exe 3176 wmiprvse.exe 3880 alg.exe 2480 ctfmon.exe 2520 RoxMediaDB10.exe 3512 TrayServer.exe 3592 htpatch.exe 3696 CTHELPER.EXE 3756 jusched.exe 3768 vmware-tray.exe 3780 hqtray.exe 3828 avgcc.exe 3864 atiptaxx.exe 3932 CPF.exe 3964 DMXLauncher.exe 3980 RdTask.exe 4040 iTunesHelper.exe 772 TrueImageMonitor.exe 868 TimounterMonitor.exe 968 schedhlp.exe 1120 Alt+Q Hotkey.exe 1264 RocketDock.exe 1372 CTDetect.exe 1908 CTSyncU.exe 648 daemon.exe 1516 msmsgs.exe 728 snarl.exe 2608 hpotdd01.exe 3168 Launchy.exe 3476 SetPoint.exe 2080 SnagIt32.exe 1592 AlarmMasterPlus.exe 956 im-history.exe 1952 NoteScraps.exe 3944 PNotes.exe 3976 TSCHelp.exe 4068 SnagPriv.exe 712 RKLauncher.exe 1020 Finder.exe 1224 YahooWidgetEngine.exe 2284 KHALMNPR.EXE 2476 YahooWidgetEngine.exe 2856 YahooWidgetEngine.exe 2916 iPodService.exe 3452 YahooWidgetEngine.exe 2068 YahooWidgetEngine.exe 4588 DOpus.exe 2548 xchat.exe 4680 Safari.exe 6048 drwtsn32.exe *----> Modulelijst <----* (0000000000350000 - 0000000000359000: F:\WINDOWS\system32\Normaliz.dll (0000000000400000 - 000000000057e000: F:\Program Files\Safari\Safari.exe (0000000001090000 - 000000000119f000: F:\Program Files\Safari\libxml2.dll (0000000001720000 - 000000000172f000: C:\Backuk RK\RK Launcher\RK Launcher 0.41 Beta Nightly\RKLauncher.dll (0000000001750000 - 0000000001762000: F:\Program Files\RocketDock\RocketDock.dll (00000000017e0000 - 00000000017ef000: F:\Program Files\Logitech\SetPoint\lgscroll.dll (0000000001810000 - 00000000018e6000: F:\WINDOWS\system32\COMRes.dll (0000000010000000 - 00000000103c6000: F:\Program Files\Safari\WebKit.dll (0000000044350000 - 0000000044395000: F:\WINDOWS\system32\iertutil.dll (00000000445d0000 - 000000004469a000: F:\WINDOWS\system32\WININET.dll (000000004ad00000 - 000000004b56a000: F:\Program Files\Safari\icudt36.dll (000000005b190000 - 000000005b1c8000: F:\WINDOWS\system32\UXTHEME.DLL (0000000061800000 - 0000000061865000: F:\Program Files\Safari\CFNetwork.dll (0000000061c00000 - 0000000061c56000: F:\Program Files\Safari\SQLite3.dll (0000000062400000 - 00000000624a7000: F:\Program Files\Safari\icuin36.dll (0000000066000000 - 0000000066092000: F:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (0000000066600000 - 0000000066617000: F:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (000000006a400000 - 000000006a413000: F:\Program Files\Safari\zlib1.dll (000000006a800000 - 000000006a833000: F:\Program Files\Safari\libxslt.dll (000000006b000000 - 000000006b36e000: F:\Program Files\Safari\CoreGraphics.dll (000000006b800000 - 000000006b8fb000: F:\Program Files\Safari\icuuc36.dll (000000006c800000 - 000000006c810000: F:\Program Files\Safari\pthreadVC2.dll (000000006fc00000 - 000000006fc71000: F:\Program Files\Safari\CoreFoundation.dll (0000000071a20000 - 0000000071a28000: F:\WINDOWS\system32\WS2HELP.dll (0000000071a30000 - 0000000071a47000: F:\WINDOWS\system32\WS2_32.dll (0000000071a50000 - 0000000071a5a000: F:\WINDOWS\system32\WSOCK32.dll (0000000071aa0000 - 0000000071ab2000: F:\WINDOWS\system32\MPR.dll (0000000071b80000 - 0000000071b93000: F:\WINDOWS\system32\SAMLIB.dll (0000000072f70000 - 0000000072f96000: F:\WINDOWS\system32\WINSPOOL.DRV (00000000746a0000 - 00000000746eb000: F:\WINDOWS\system32\MSCTF.dll (0000000074d10000 - 0000000074d7b000: F:\WINDOWS\system32\USP10.dll (0000000075250000 - 000000007527e000: F:\WINDOWS\system32\msctfime.ime (0000000076320000 - 0000000076325000: F:\WINDOWS\system32\MSIMG32.dll (0000000076330000 - 000000007634d000: F:\WINDOWS\system32\IMM32.DLL (0000000076350000 - 000000007639a000: F:\WINDOWS\system32\comdlg32.dll (0000000076af0000 - 0000000076b1e000: F:\WINDOWS\system32\WINMM.dll (0000000076bb0000 - 0000000076bbb000: F:\WINDOWS\system32\PSAPI.DLL (0000000076bf0000 - 0000000076c1e000: F:\WINDOWS\system32\WINTRUST.dll (0000000076c50000 - 0000000076c78000: F:\WINDOWS\system32\IMAGEHLP.dll (0000000076d20000 - 0000000076d39000: F:\WINDOWS\system32\iphlpapi.dll (0000000076f20000 - 0000000076f4d000: F:\WINDOWS\system32\WLDAP32.dll (0000000076f90000 - 000000007700f000: F:\WINDOWS\system32\CLBCATQ.DLL (00000000770e0000 - 000000007716b000: F:\WINDOWS\system32\OLEAUT32.dll (0000000077390000 - 0000000077493000: F:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll (00000000774a0000 - 00000000775e4000: F:\WINDOWS\system32\ole32.dll (0000000077650000 - 0000000077671000: F:\WINDOWS\system32\NTMARTA.DLL (0000000077a40000 - 0000000077ad5000: F:\WINDOWS\system32\CRYPT32.dll (0000000077ae0000 - 0000000077af2000: F:\WINDOWS\system32\MSASN1.dll (0000000077b00000 - 0000000077b22000: F:\WINDOWS\system32\Apphelp.dll (0000000077bd0000 - 0000000077bd8000: F:\WINDOWS\system32\VERSION.dll (0000000077be0000 - 0000000077c38000: F:\WINDOWS\system32\msvcrt.dll (0000000077da0000 - 0000000077e31000: F:\WINDOWS\system32\RPCRT4.dll (0000000077e40000 - 0000000077e87000: F:\WINDOWS\system32\GDI32.dll (0000000077e90000 - 0000000077f06000: F:\WINDOWS\system32\SHLWAPI.dll (0000000077f10000 - 0000000077f21000: F:\WINDOWS\system32\Secur32.dll (0000000077f40000 - 0000000077feb000: F:\WINDOWS\system32\ADVAPI32.dll (0000000078130000 - 00000000781cb000: F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll (000000007c420000 - 000000007c4a7000: F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll (000000007c800000 - 000000007c8ff000: F:\WINDOWS\system32\kernel32.dll (000000007c900000 - 000000007c9b6000: F:\WINDOWS\system32\ntdll.dll (000000007c9c0000 - 000000007d1b2000: F:\WINDOWS\system32\SHELL32.dll (000000007e390000 - 000000007e421000: F:\WINDOWS\system32\USER32.dll *----> Statusdump voor subproces-ID 0x10b0 <----* eax=00000000 ebx=7feb2d00 ecx=7feb2d00 edx=0012f2e8 esi=7feadee0 edi=00000000 eip=0048c125 esp=0012f2e0 ebp=0012f318 iopl=0 nv up ei pl nz ac po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000216 *** ERROR: Module load completed but symbols could not be loaded for F:\Program Files\Safari\Safari.exe functie: Safari 0048c10b d7 xlat 0048c10c 0000 add [eax],al 0048c10e 5f pop edi 0048c10f c3 ret 0048c110 83ec0c sub esp,0xc 0048c113 56 push esi 0048c114 8bf0 mov esi,eax 0048c116 8b462c mov eax,[esi+0x2c] 0048c119 8d542408 lea edx,[esp+0x8] 0048c11d c744240800000000 mov dword ptr [esp+0x8],0x0 Fout ->0048c125 8b08 mov ecx,[eax] ds:0023:00000000=???????? 0048c127 52 push edx 0048c128 50 push eax 0048c129 8b4150 mov eax,[ecx+0x50] 0048c12c ffd0 call eax 0048c12e 85c0 test eax,eax 0048c130 7c61 jl Safari+0x8c193 (0048c193) 0048c132 8b442408 mov eax,[esp+0x8] 0048c136 8d542404 lea edx,[esp+0x4] 0048c13a c744240400000000 mov dword ptr [esp+0x4],0x0 0048c142 8b08 mov ecx,[eax] *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 0012f318 004ab7e0 7fe9bea0 7feadee0 0012f384 Safari+0x8c125 004eb244 0000003c 00400000 011c0001 00000001 Safari+0xab7e0 *----> Raw Stack Dump <----* 000000000012f2e0 14 f3 12 00 00 00 00 00 - 00 00 00 00 8a c0 44 00 ..............D. 000000000012f2f0 77 8d 4a 00 00 00 00 00 - 00 2d eb 7f 3c f3 12 00 w.J......-..<... 000000000012f300 00 2d eb 7f 23 8f 4a 00 - 18 f3 12 00 a0 be e9 7f .-..#.J......... 000000000012f310 00 2d eb 7f 44 b2 4e 00 - 44 b2 4e 00 e0 b7 4a 00 .-..D.N.D.N...J. 000000000012f320 a0 be e9 7f e0 de ea 7f - 84 f3 12 00 44 fe 12 01 ............D... 000000000012f330 90 7a ea 7f 00 00 00 00 - 00 00 00 00 58 f3 12 00 .z..........X... 000000000012f340 64 b6 4a 00 e0 de ea 7f - 01 00 00 00 ff ff ff ff d.J............. 000000000012f350 44 fe 12 00 8c f3 12 00 - 0c f4 12 00 3c a8 49 00 D...........<.I. 000000000012f360 01 00 00 00 8c f3 12 00 - c0 8d e9 7f 21 61 49 00 ............!aI. 000000000012f370 00 00 00 00 01 00 00 00 - 01 00 00 00 78 73 17 00 ............xs.. 000000000012f380 44 fe 12 00 04 8e e9 7f - 08 00 00 00 44 b2 4e 00 D...........D.N. 000000000012f390 44 b2 4e 00 82 09 02 00 - d0 fe 12 00 00 00 00 00 D.N............. 000000000012f3a0 00 00 00 00 60 04 00 00 - 35 03 00 00 0c 00 00 00 ....`...5....... 000000000012f3b0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000012f3c0 54 02 00 00 10 00 00 00 - 00 00 00 00 00 00 00 00 T............... 000000000012f3d0 71 01 00 00 10 00 00 00 - 00 00 00 00 00 00 00 00 q............... 000000000012f3e0 01 00 00 00 17 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000012f3f0 32 00 00 00 14 00 00 00 - 00 00 00 00 00 00 00 00 2............... 000000000012f400 00 00 00 00 00 00 00 00 - 10 00 00 00 cc f5 12 00 ................ 000000000012f410 f6 3c 49 00 c0 8d e9 7f - cc f5 12 00 00 00 00 00 . Statusdump voor subproces-ID 0xe48 <----* eax=77f69981 ebx=00f4fed0 ecx=00000006 edx=00000000 esi=00000000 edi=7ffdb000 eip=7c90eb94 esp=00f4fea8 ebp=00f4ff44 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\ntdll.dll - functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\ADVAPI32.dll - WARNING: Stack unwind information not available. Following frames may be wrong. *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\kernel32.dll - ChildEBP RetAddr Args to Child 00f4ff44 77f69b26 00000002 00f4ff6c 00000000 ntdll!KiFastSystemCallRet 00f4ffb4 7c80b6a3 00000000 7c9140bb 00000000 ADVAPI32!RegDeleteKeyW+0x2a2 00f4ffec 00000000 77f69981 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 0000000000f4fea8 ab e9 90 7c 0b 95 80 7c - 02 00 00 00 d0 fe f4 00 ...|...|........ 0000000000f4feb8 01 00 00 00 01 00 00 00 - 04 ff f4 00 e0 2e d5 00 ................ 0000000000f4fec8 40 65 fb 77 00 10 00 00 - 80 00 00 00 8c 00 00 00 @e.w............ 0000000000f4fed8 c0 fe f4 00 90 84 c4 89 - dc ff f4 00 30 9a 83 7c ............0..| 0000000000f4fee8 d0 0a 81 7c 00 10 00 00 - 14 00 00 00 01 00 00 00 ...|............ 0000000000f4fef8 e0 c1 15 00 00 00 00 00 - 00 00 00 00 00 a2 2f 4d ............../M 0000000000f4ff08 ff ff ff ff 00 10 00 00 - 00 b0 fd 7f 00 e0 fd 7f ................ 0000000000f4ff18 dc ff f4 00 04 ff f4 00 - d0 fe f4 00 06 00 00 00 ................ 0000000000f4ff28 02 00 00 00 c4 fe f4 00 - 06 00 00 00 dc ff f4 00 ................ 0000000000f4ff38 30 9a 83 7c 00 96 80 7c - 00 00 00 00 b4 ff f4 00 0..|...|........ 0000000000f4ff48 26 9b f6 77 02 00 00 00 - 6c ff f4 00 00 00 00 00 &..w....l....... 0000000000f4ff58 e0 93 04 00 01 00 00 00 - bb 40 91 7c 00 00 00 00 .........@.|.... 0000000000f4ff68 00 00 00 00 80 00 00 00 - 8c 00 00 00 00 10 00 00 ................ 0000000000f4ff78 e0 2e d5 00 00 00 00 00 - 00 10 00 00 e8 3e d5 00 .............>.. 0000000000f4ff88 a0 66 fb 77 28 00 00 00 - 80 66 fb 77 00 10 00 00 .f.w(....f.w.... 0000000000f4ff98 00 00 00 00 a0 66 fb 77 - e0 2e d5 00 80 66 fb 77 .....f.w.....f.w 0000000000f4ffa8 e5 03 00 00 00 10 00 00 - e8 3e d5 00 ec ff f4 00 .........>...... 0000000000f4ffb8 a3 b6 80 7c 00 00 00 00 - bb 40 91 7c 00 00 00 00 ...|.....@.|.... 0000000000f4ffc8 00 00 00 00 00 e0 fd 7f - 00 66 46 8a c0 ff f4 00 .........fF..... 0000000000f4ffd8 10 61 5d 88 ff ff ff ff - 30 9a 83 7c b0 b6 80 7c .a].....0..|...| *----> Statusdump voor subproces-ID 0x1720 <----* eax=00000000 ebx=00000000 ecx=014cfee8 edx=76b10200 esi=00000001 edi=02100210 eip=7c90eb94 esp=014cff08 ebp=014cffb4 iopl=0 nv up ei ng nz ac po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000296 functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 014cffb4 7c80b6a3 00000000 02100210 02140210 ntdll!KiFastSystemCallRet 014cffec 00000000 76b0aee7 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 00000000014cff08 ab e9 90 7c 21 af b0 76 - 02 00 00 00 6c ff 4c 01 ...|!..v....l.L. 00000000014cff18 01 00 00 00 01 00 00 00 - 00 00 00 00 10 02 14 02 ................ 00000000014cff28 20 f0 7a 88 10 00 00 00 - d0 ba 21 8a a3 57 8a 80 .z.......!..W.. 00000000014cff38 18 8d 51 88 20 f0 7a 88 - 00 d0 fd 7f 84 6c 05 9a ..Q. .z......l.. 00000000014cff48 b9 1c 82 80 00 00 00 00 - 05 00 00 00 00 00 00 00 ................ 00000000014cff58 00 00 00 00 00 00 00 00 - 10 a7 81 80 00 00 00 00 ................ 00000000014cff68 00 00 00 00 00 04 00 00 - 08 04 00 00 20 f0 7a 88 ............ .z. 00000000014cff78 50 6d 05 9a 00 00 00 00 - 00 00 00 00 01 ba 21 00 Pm............!. 00000000014cff88 00 00 00 00 18 8d 51 88 - c1 1c 82 80 00 00 00 00 ......Q......... 00000000014cff98 00 00 00 00 00 00 00 00 - a1 1c 82 80 9c 6c 05 9a .............l.. 00000000014cffa8 35 ec a0 80 00 00 00 00 - 02 00 00 00 ec ff 4c 01 5.............L. 00000000014cffb8 a3 b6 80 7c 00 00 00 00 - 10 02 10 02 10 02 14 02 ...|............ 00000000014cffc8 00 00 00 00 00 d0 fd 7f - 00 66 46 8a c0 ff 4c 01 .........fF...L. 00000000014cffd8 f0 44 5d 88 ff ff ff ff - 30 9a 83 7c b0 b6 80 7c .D].....0..|...| 00000000014cffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 e7 ae b0 76 ...............v 00000000014cfff8 00 00 00 00 00 00 00 00 - c8 00 00 00 17 01 00 00 ................ 00000000014d0008 ff ee ff ee 02 10 00 00 - 00 00 00 00 00 fe 00 00 ................ 00000000014d0018 00 00 10 00 00 20 00 00 - 00 02 00 00 00 20 00 00 ..... ....... .. 00000000014d0028 2f 02 00 00 ff ef fd 7f - 0d 00 08 06 00 00 00 00 /............... 00000000014d0038 00 00 00 00 00 00 00 00 - 00 00 00 00 98 05 4d 01 ..............M. Toepassingsuitzondering: Toep: C:\Program Files\Safari\Safari.exe (PID=6088) Tijd: 19-11-2007 @ 06:58:03.264 Uitzonderingsnummer: c0000005 (schending van toegang) *----> Systeemgegevens <----* Computernaam: LEOPARDS-8262D1 Gebruikersnaam: Leopard Terminalsessie-id: 0 Aantal processors: 1 Processortype: x86 Family 6 Model 10 Stepping 0 Windows-versie: 5.1 Actieve gecompileerde versie: 2600 Service Pack: 2 Huidig type: Uniprocessor Free Geregistreerde organisatie: Geregistreerde eigenaar: leopards dreamcast *----> Taakoverzicht <----* 0 System Process 4 System 928 smss.exe 976 csrss.exe 1000 winlogon.exe 1044 services.exe 1056 lsass.exe 1232 Ati2evxx.exe 1248 svchost.exe 1324 svchost.exe 1824 svchost.exe 1860 svchost.exe 2044 svchost.exe 556 svchost.exe 804 spoolsv.exe 1716 SDMCP.exe 1380 Ati2evxx.exe 1488 Explorer.EXE 1808 schedul2.exe 1920 AppleMobileDeviceService.exe 1948 avgamsvr.exe 2016 avgupsvc.exe 456 avgemc.exe 472 mDNSResponder.exe 676 cmdagent.exe 1652 CTsvcCDA.exe 1712 EBstrSvc.exe 1980 MacDriveService.exe 2096 RoxWatch10.exe 2168 SbieSvc.exe 2220 svchost.exe 2240 TrueImageTryStartService.exe 2340 vmware-authd.exe 2444 vmount2.exe 2468 vmnat.exe 2628 MsPMSPSv.exe 2648 vmnetdhcp.exe 3176 wmiprvse.exe 3880 alg.exe 2480 ctfmon.exe 2520 RoxMediaDB10.exe 3512 TrayServer.exe 3592 htpatch.exe 3696 CTHELPER.EXE 3756 jusched.exe 3768 vmware-tray.exe 3780 hqtray.exe 3828 avgcc.exe 3864 atiptaxx.exe 3932 CPF.exe 3964 DMXLauncher.exe 3980 RdTask.exe 4040 iTunesHelper.exe 772 TrueImageMonitor.exe 868 TimounterMonitor.exe 968 schedhlp.exe 1120 Alt+Q Hotkey.exe 1264 RocketDock.exe 1372 CTDetect.exe 1908 CTSyncU.exe 648 daemon.exe 1516 msmsgs.exe 728 snarl.exe 2608 hpotdd01.exe 3168 Launchy.exe 3476 SetPoint.exe 2080 SnagIt32.exe 1592 AlarmMasterPlus.exe 956 im-history.exe 1952 NoteScraps.exe 3944 PNotes.exe 3976 TSCHelp.exe 4068 SnagPriv.exe 712 RKLauncher.exe 1020 Finder.exe 1224 YahooWidgetEngine.exe 2284 KHALMNPR.EXE 2476 YahooWidgetEngine.exe 2856 YahooWidgetEngine.exe 2916 iPodService.exe 3452 YahooWidgetEngine.exe 2068 YahooWidgetEngine.exe 4588 DOpus.exe 2548 xchat.exe 6088 Safari.exe 6140 dwwin.exe 1668 drwtsn32.exe *----> Modulelijst <----* (0000000000350000 - 0000000000359000: F:\WINDOWS\system32\Normaliz.dll (0000000000400000 - 0000000000731000: C:\Program Files\Safari\Safari.exe (0000000000740000 - 0000000000b3f000: C:\Program Files\Safari\WebKit.dll (0000000000b40000 - 0000000000c4f000: C:\Program Files\Safari\libxml2.dll (0000000001770000 - 0000000001802000: F:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (0000000001a50000 - 0000000001a5f000: C:\Backuk RK\RK Launcher\RK Launcher 0.41 Beta Nightly\RKLauncher.dll (0000000001a80000 - 0000000001a92000: F:\Program Files\RocketDock\RocketDock.dll (0000000001b60000 - 0000000001c36000: F:\WINDOWS\system32\COMRes.dll (0000000001fa0000 - 0000000001fac000: F:\Program Files\Object Desktop\ObjectBar\ShellHook.dll (0000000001fc0000 - 0000000001fd0000: F:\WINDOWS\system32\ctagent.dll (0000000010000000 - 0000000010010000: C:\Program Files\Safari\pthreadVC2.dll (0000000010100000 - 000000001010f000: F:\Program Files\Logitech\SetPoint\lgscroll.dll (0000000016000000 - 0000000016010000: F:\WINDOWS\system32\dnssd.dll (0000000044350000 - 0000000044395000: F:\WINDOWS\system32\iertutil.dll (00000000445d0000 - 000000004469a000: F:\WINDOWS\system32\WININET.dll (000000004ad00000 - 000000004b580000: C:\Program Files\Safari\icudt36.dll (000000005b190000 - 000000005b1c8000: F:\WINDOWS\system32\UXTHEME.DLL (0000000061900000 - 0000000061956000: C:\Program Files\Safari\SQLite3.dll (0000000065500000 - 0000000065572000: C:\Program Files\Safari\CoreFoundation.dll (0000000065a00000 - 0000000065a13000: C:\Program Files\Safari\zlib1.dll (0000000065f00000 - 00000000662a1000: C:\Program Files\Safari\CoreGraphics.dll (0000000066500000 - 000000006650a000: F:\WINDOWS\system32\wbsys.dll (0000000066600000 - 0000000066617000: F:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (000000006a500000 - 000000006a56b000: C:\Program Files\Safari\CFNetwork.dll (000000006b400000 - 000000006b4fc000: C:\Program Files\Safari\icuuc36.dll (000000006f500000 - 000000006f53f000: C:\Program Files\Safari\SafariTheme.dll (000000006fa00000 - 000000006faa7000: C:\Program Files\Safari\icuin36.dll (0000000071a20000 - 0000000071a28000: F:\WINDOWS\system32\WS2HELP.dll (0000000071a30000 - 0000000071a47000: F:\WINDOWS\system32\WS2_32.dll (0000000071a50000 - 0000000071a5a000: F:\WINDOWS\system32\WSOCK32.dll (0000000071b80000 - 0000000071b93000: F:\WINDOWS\system32\SAMLIB.dll (0000000072f70000 - 0000000072f96000: F:\WINDOWS\system32\WINSPOOL.DRV (0000000073aa0000 - 0000000073ab5000: F:\WINDOWS\system32\mscms.dll (00000000746a0000 - 00000000746eb000: F:\WINDOWS\system32\MSCTF.dll (0000000075250000 - 000000007527e000: F:\WINDOWS\system32\msctfime.ime (0000000076320000 - 0000000076325000: F:\WINDOWS\system32\msimg32.dll (0000000076330000 - 000000007634d000: F:\WINDOWS\system32\IMM32.DLL (0000000076740000 - 000000007674c000: F:\WINDOWS\system32\Cryptdll.dll (0000000076af0000 - 0000000076b1e000: F:\WINDOWS\system32\WINMM.dll (0000000076bb0000 - 0000000076bbb000: F:\WINDOWS\system32\PSAPI.DLL (0000000076d20000 - 0000000076d39000: F:\WINDOWS\system32\iphlpapi.dll (0000000076f20000 - 0000000076f4d000: F:\WINDOWS\system32\WLDAP32.dll (0000000076f90000 - 000000007700f000: F:\WINDOWS\system32\CLBCATQ.DLL (00000000770e0000 - 000000007716b000: F:\WINDOWS\system32\OLEAUT32.dll (0000000077390000 - 0000000077493000: F:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll (00000000774a0000 - 00000000775e4000: F:\WINDOWS\system32\ole32.dll (0000000077650000 - 0000000077671000: F:\WINDOWS\system32\NTMARTA.DLL (0000000077a40000 - 0000000077ad5000: F:\WINDOWS\system32\CRYPT32.dll (0000000077ae0000 - 0000000077af2000: F:\WINDOWS\system32\MSASN1.dll (0000000077b00000 - 0000000077b22000: F:\WINDOWS\system32\Apphelp.dll (0000000077bd0000 - 0000000077bd8000: F:\WINDOWS\system32\VERSION.dll (0000000077be0000 - 0000000077c38000: F:\WINDOWS\system32\msvcrt.dll (0000000077da0000 - 0000000077e31000: F:\WINDOWS\system32\RPCRT4.dll (0000000077e40000 - 0000000077e87000: F:\WINDOWS\system32\GDI32.dll (0000000077e90000 - 0000000077f06000: F:\WINDOWS\system32\SHLWAPI.dll (0000000077f10000 - 0000000077f21000: F:\WINDOWS\system32\Secur32.dll (0000000077f40000 - 0000000077feb000: F:\WINDOWS\system32\ADVAPI32.dll (0000000078130000 - 00000000781cb000: F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll (000000007c420000 - 000000007c4a7000: F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll (000000007c800000 - 000000007c8ff000: F:\WINDOWS\system32\kernel32.dll (000000007c900000 - 000000007c9b6000: F:\WINDOWS\system32\ntdll.dll (000000007c9c0000 - 000000007d1b2000: F:\WINDOWS\system32\SHELL32.dll (000000007e390000 - 000000007e421000: F:\WINDOWS\system32\USER32.dll *----> Statusdump voor subproces-ID 0x17cc <----* eax=00000000 ebx=fffce002 ecx=00000000 edx=7feadc00 esi=fffce002 edi=7ff7a968 eip=007ca039 esp=0012f4a0 ebp=0012f4ec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Safari\WebKit.dll - functie: WebKit!JSValueMakeUndefined 007ca01d 99 cdq 007ca01e 83e20f and edx,0xf 007ca021 03c2 add eax,edx 007ca023 c1f804 sar eax,0x4 007ca026 89742408 mov [esp+0x8],esi 007ca02a 7915 jns WebKit!JSValueMakeUndefined+0x35651 (007ca041) 007ca02c 8b4138 mov eax,[ecx+0x38] 007ca02f 8d5114 lea edx,[ecx+0x14] 007ca032 33c9 xor ecx,ecx 007ca034 e8b79b1200 call WebKit!JSValueMakeUndefined+0x15f200 (008f3bf0) Fout ->007ca039 668b4008 mov ax,[eax+0x8] ds:0023:00000008=???? 007ca03d 5e pop esi 007ca03e c20800 ret 0x8 007ca041 8bd6 mov edx,esi 007ca043 80e207 and dl,0x7 007ca046 80fa02 cmp dl,0x2 007ca049 7518 jnz WebKit!JSValueMakeUndefined+0x35673 (007ca063) 007ca04b d94124 fld dword ptr [ecx+0x24] 007ca04e dc052883a400 fadd qword ptr [WebKit+0x308328 (00a48328)] 007ca054 e8e7522500 call WebKit+0x2df340 (00a1f340) 007ca059 50 push eax *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 0012f4ec 0094f5c1 0012f524 0012f520 0012f518 WebKit!JSValueMakeUndefined+0x35649 7ff7a9dc 00000000 00000000 00000000 00000000 WebKit!JSValueMakeUndefined+0x1babd1 *----> Raw Stack Dump <----* 000000000012f4a0 b8 a9 f7 7f 68 2f 92 00 - 02 e0 fc ff 00 00 00 00 ....h/.......... 000000000012f4b0 00 f5 12 00 58 ad f7 7f - b8 a9 f7 7f fa 79 87 00 ....X........y.. 000000000012f4c0 02 e0 fc ff 01 00 00 00 - 58 ad f7 7f 75 f7 94 00 ........X...u... 000000000012f4d0 01 00 00 00 01 00 00 00 - 00 00 00 00 58 ad f7 7f ............X... 000000000012f4e0 00 f5 12 00 58 ad f7 7f - 81 02 00 00 dc a9 f7 7f ....X........... 000000000012f4f0 c1 f5 94 00 24 f5 12 00 - 20 f5 12 00 18 f5 12 00 ....$... ....... 000000000012f500 1c f5 12 00 00 f5 12 00 - b8 a9 f7 7f 58 ad f7 7f ............X... 000000000012f510 dc a9 f7 7f 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000012f520 00 00 00 00 00 00 00 00 - 00 f5 12 00 2a 00 92 00 ............*... 000000000012f530 81 02 00 00 81 02 00 00 - 81 02 00 00 b4 7b 92 00 .............{.. 000000000012f540 dc a9 f7 7f 58 ad f7 7f - 40 f6 12 00 af 84 92 00 ....X...@....... 000000000012f550 d8 a9 f7 7f b8 a9 f7 7f - dc a9 f7 7f 24 14 4d 6b ............$.Mk 000000000012f560 74 00 00 00 00 00 00 00 - 00 00 00 00 60 b6 e9 7f t...........`... 000000000012f570 a0 00 00 00 dc a9 f7 7f - 00 00 00 00 b8 a9 f7 7f ................ 000000000012f580 9c aa f7 7f 00 00 00 00 - b8 a9 f7 7f 00 00 00 00 ................ 000000000012f590 00 00 00 00 0a 00 00 00 - 0a 00 00 00 0a 00 00 00 ................ 000000000012f5a0 00 00 00 00 3c aa f7 7f - 00 00 00 00 00 00 00 00 ....<........... 000000000012f5b0 00 00 00 00 00 00 00 00 - b8 a9 f7 7f 00 00 00 00 ................ 000000000012f5c0 00 00 00 00 b8 a9 f7 7f - 9c aa f7 7f 00 00 00 00 ................ 000000000012f5d0 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 a9 f7 7f ................ *----> Statusdump voor subproces-ID 0x17c4 <----* eax=77f69981 ebx=016afed0 ecx=00000006 edx=00000000 esi=00000000 edi=7ffd6000 eip=7c90eb94 esp=016afea8 ebp=016aff44 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\ntdll.dll - functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\ADVAPI32.dll - WARNING: Stack unwind information not available. Following frames may be wrong. *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\kernel32.dll - ChildEBP RetAddr Args to Child 016aff44 77f69b26 00000002 016aff6c 00000000 ntdll!KiFastSystemCallRet 016affb4 7c80b6a3 00000000 7c9140bb 00000000 ADVAPI32!RegDeleteKeyW+0x2a2 016affec 00000000 77f69981 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 00000000016afea8 ab e9 90 7c 0b 95 80 7c - 02 00 00 00 d0 fe 6a 01 ...|...|......j. 00000000016afeb8 01 00 00 00 01 00 00 00 - 04 ff 6a 01 e0 2e 4b 01 ..........j...K. 00000000016afec8 40 65 fb 77 00 10 00 00 - 78 00 00 00 84 00 00 00 @e.w....x....... 00000000016afed8 c0 fe 6a 01 ec 6b f2 99 - dc ff 6a 01 30 9a 83 7c ..j..k....j.0..| 00000000016afee8 d0 0a 81 7c 00 10 00 00 - 14 00 00 00 01 00 00 00 ...|............ 00000000016afef8 98 c4 15 00 00 00 00 00 - 00 00 00 00 00 a2 2f 4d ............../M 00000000016aff08 ff ff ff ff 00 10 00 00 - 00 60 fd 7f 00 e0 fd 7f .........`...... 00000000016aff18 dc ff 6a 01 04 ff 6a 01 - d0 fe 6a 01 06 00 00 00 ..j...j...j..... 00000000016aff28 02 00 00 00 c4 fe 6a 01 - 06 00 00 00 dc ff 6a 01 ......j.......j. 00000000016aff38 30 9a 83 7c 00 96 80 7c - 00 00 00 00 b4 ff 6a 01 0..|...|......j. 00000000016aff48 26 9b f6 77 02 00 00 00 - 6c ff 6a 01 00 00 00 00 &..w....l.j..... 00000000016aff58 e0 93 04 00 01 00 00 00 - bb 40 91 7c 00 00 00 00 .........@.|.... 00000000016aff68 00 00 00 00 78 00 00 00 - 84 00 00 00 00 10 00 00 ....x........... 00000000016aff78 e0 2e 4b 01 00 00 00 00 - 00 10 00 00 e8 3e 4b 01 ..K..........>K. 00000000016aff88 a0 66 fb 77 28 00 00 00 - 80 66 fb 77 00 10 00 00 .f.w(....f.w.... 00000000016aff98 00 00 00 00 a0 66 fb 77 - e0 2e 4b 01 80 66 fb 77 .....f.w..K..f.w 00000000016affa8 e5 03 00 00 00 10 00 00 - e8 3e 4b 01 ec ff 6a 01 .........>K...j. 00000000016affb8 a3 b6 80 7c 00 00 00 00 - bb 40 91 7c 00 00 00 00 ...|.....@.|.... 00000000016affc8 00 00 00 00 00 e0 fd 7f - 00 66 46 8a c0 ff 6a 01 .........fF...j. 00000000016affd8 f0 41 51 88 ff ff ff ff - 30 9a 83 7c b0 b6 80 7c .AQ.....0..|...| *----> Statusdump voor subproces-ID 0xf74 <----* eax=00000000 ebx=00000000 ecx=0190fee8 edx=76b10200 esi=00000001 edi=02100210 eip=7c90eb94 esp=0190ff08 ebp=0190ffb4 iopl=0 nv up ei ng nz ac po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000296 functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 0190ffb4 7c80b6a3 00000000 02100210 02140210 ntdll!KiFastSystemCallRet 0190ffec 00000000 76b0aee7 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 000000000190ff08 ab e9 90 7c 21 af b0 76 - 02 00 00 00 6c ff 90 01 ...|!..v....l... 000000000190ff18 01 00 00 00 01 00 00 00 - 00 00 00 00 10 02 14 02 ................ 000000000190ff28 a8 1d 51 88 10 00 00 00 - d0 ba 21 8a a3 57 8a 80 ..Q.......!..W.. 000000000190ff38 a0 9d 4f 88 a8 1d 51 88 - 00 d0 fd 7f 84 6c e4 99 ..O...Q......l.. 000000000190ff48 b9 1c 82 80 00 00 00 00 - 05 00 00 00 00 00 00 00 ................ 000000000190ff58 00 00 00 00 00 00 00 00 - 10 a7 81 80 00 00 00 00 ................ 000000000190ff68 00 00 00 00 a8 03 00 00 - b4 03 00 00 a8 1d 51 88 ..............Q. 000000000190ff78 50 6d e4 99 06 16 82 80 - 00 00 00 00 01 ba 21 00 Pm............!. 000000000190ff88 00 00 00 00 a0 9d 4f 88 - c1 1c 82 80 00 00 00 00 ......O......... 000000000190ff98 00 00 00 00 00 00 00 00 - a1 1c 82 80 9c 6c e4 99 .............l.. 000000000190ffa8 35 ec a0 80 00 00 00 00 - 02 00 00 00 ec ff 90 01 5............... 000000000190ffb8 a3 b6 80 7c 00 00 00 00 - 10 02 10 02 10 02 14 02 ...|............ 000000000190ffc8 00 00 00 00 00 d0 fd 7f - 00 66 46 8a c0 ff 90 01 .........fF..... 000000000190ffd8 58 96 5c 88 ff ff ff ff - 30 9a 83 7c b0 b6 80 7c X.\.....0..|...| 000000000190ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 e7 ae b0 76 ...............v 000000000190fff8 00 00 00 00 00 00 00 00 - c8 00 00 00 99 01 00 00 ................ 0000000001910008 ff ee ff ee 02 10 00 00 - 00 00 00 00 00 fe 00 00 ................ 0000000001910018 00 00 10 00 00 20 00 00 - 00 02 00 00 00 20 00 00 ..... ....... .. 0000000001910028 15 02 00 00 ff ef fd 7f - 0b 00 08 06 00 00 00 00 ................ 0000000001910038 00 00 00 00 00 00 00 00 - 00 00 00 00 98 05 91 01 ................ *----> Statusdump voor subproces-ID 0xa24 <----* eax=01cd8000 ebx=01f4fdcc ecx=01f4f940 edx=00001000 esi=00000000 edi=7ffd6000 eip=7c90eb94 esp=01f4fda4 ebp=01f4fe40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. *** WARNING: Unable to verify checksum for C:\Program Files\Safari\pthreadVC2.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Safari\pthreadVC2.dll - ChildEBP RetAddr Args to Child 01f4fe40 7c80a095 00000002 01f4fe7c 00000000 ntdll!KiFastSystemCallRet 01f4fe5c 10002f60 00000002 01f4fe7c 00000000 kernel32!WaitForMultipleObjects+0x18 ffffffff 00000000 00000000 00000000 00000000 pthreadVC2+0x2f60 *----> Raw Stack Dump <----* 0000000001f4fda4 ab e9 90 7c 0b 95 80 7c - 02 00 00 00 cc fd f4 01 ...|...|........ 0000000001f4fdb4 01 00 00 00 00 00 00 00 - 00 00 00 00 02 00 00 00 ................ 0000000001f4fdc4 68 75 d0 01 ec ad e9 7f - ec 04 00 00 00 05 00 00 hu.............. 0000000001f4fdd4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001f4fde4 00 00 01 00 00 00 3c 00 - 14 00 00 00 01 00 00 00 ......<......... 0000000001f4fdf4 00 00 00 00 00 00 00 00 - 10 00 00 00 ff ff 01 00 ................ 0000000001f4fe04 0d 00 00 00 00 00 00 00 - 00 60 fd 7f 00 c0 fd 7f .........`...... 0000000001f4fe14 4b 00 00 00 00 00 00 00 - cc fd f4 01 6c fe f4 01 K...........l... 0000000001f4fe24 02 00 00 00 c0 fd f4 01 - ff ff ff ff 9c ff f4 01 ................ 0000000001f4fe34 30 9a 83 7c 00 96 80 7c - 00 00 00 00 5c fe f4 01 0..|...|....\... 0000000001f4fe44 95 a0 80 7c 02 00 00 00 - 7c fe f4 01 00 00 00 00 ...|....|....... 0000000001f4fe54 ff ff ff ff 00 00 00 00 - ff ff ff ff 60 2f 00 10 ............`/.. 0000000001f4fe64 02 00 00 00 7c fe f4 01 - 00 00 00 00 ff ff ff ff ....|........... 0000000001f4fe74 84 70 d0 01 80 70 d0 01 - ec 04 00 00 00 05 00 00 .p...p.......... 0000000001f4fe84 00 00 00 00 00 00 00 00 - 4e 30 00 10 ff ff ff ff ........N0...... 0000000001f4fe94 23 5d 00 10 ec 04 00 00 - ff ff ff ff c4 fe f4 01 #].............. 0000000001f4fea4 40 5c 00 10 bc fe f4 01 - e0 42 3b 01 dc 42 3b 01 @\.......B;..B;. 0000000001f4feb4 ec ad e9 7f 00 00 00 00 - 80 70 d0 01 b8 fe f4 01 .........p...... 0000000001f4fec4 40 5c 00 10 bc fe f4 01 - f4 fe f4 01 0f 28 00 10 @\...........(.. 0000000001f4fed4 dc 42 3b 01 00 00 00 00 - c0 ad e9 7f c0 ad e9 7f .B;............. Toepassingsuitzondering: Toep: F:\Program Files\Safari\Safari.exe (PID=5484) Tijd: 19-11-2007 @ 07:22:27.421 Uitzonderingsnummer: c0000005 (schending van toegang) *----> Systeemgegevens <----* Computernaam: LEOPARDS-8262D1 Gebruikersnaam: Leopard Terminalsessie-id: 0 Aantal processors: 1 Processortype: x86 Family 6 Model 10 Stepping 0 Windows-versie: 5.1 Actieve gecompileerde versie: 2600 Service Pack: 2 Huidig type: Uniprocessor Free Geregistreerde organisatie: Geregistreerde eigenaar: leopards dreamcast *----> Taakoverzicht <----* 0 System Process 4 System 928 smss.exe 976 csrss.exe 1000 winlogon.exe 1044 services.exe 1056 lsass.exe 1232 Ati2evxx.exe 1248 svchost.exe 1324 svchost.exe 1824 svchost.exe 1860 svchost.exe 2044 svchost.exe 556 svchost.exe 804 spoolsv.exe 1716 SDMCP.exe 1380 Ati2evxx.exe 1488 Explorer.EXE 1808 schedul2.exe 1920 AppleMobileDeviceService.exe 1948 avgamsvr.exe 2016 avgupsvc.exe 456 avgemc.exe 472 mDNSResponder.exe 676 cmdagent.exe 1652 CTsvcCDA.exe 1712 EBstrSvc.exe 1980 MacDriveService.exe 2096 RoxWatch10.exe 2168 SbieSvc.exe 2220 svchost.exe 2240 TrueImageTryStartService.exe 2340 vmware-authd.exe 2444 vmount2.exe 2468 vmnat.exe 2628 MsPMSPSv.exe 2648 vmnetdhcp.exe 3176 wmiprvse.exe 3880 alg.exe 2480 ctfmon.exe 2520 RoxMediaDB10.exe 3512 TrayServer.exe 3592 htpatch.exe 3696 CTHELPER.EXE 3756 jusched.exe 3768 vmware-tray.exe 3780 hqtray.exe 3828 avgcc.exe 3864 atiptaxx.exe 3932 CPF.exe 3964 DMXLauncher.exe 3980 RdTask.exe 4040 iTunesHelper.exe 772 TrueImageMonitor.exe 868 TimounterMonitor.exe 968 schedhlp.exe 1120 Alt+Q Hotkey.exe 1264 RocketDock.exe 1372 CTDetect.exe 1908 CTSyncU.exe 648 daemon.exe 1516 msmsgs.exe 728 snarl.exe 2608 hpotdd01.exe 3168 Launchy.exe 3476 SetPoint.exe 2080 SnagIt32.exe 1592 AlarmMasterPlus.exe 956 im-history.exe 1952 NoteScraps.exe 3944 PNotes.exe 3976 TSCHelp.exe 4068 SnagPriv.exe 712 RKLauncher.exe 1020 Finder.exe 1224 YahooWidgetEngine.exe 2284 KHALMNPR.EXE 2476 YahooWidgetEngine.exe 2856 YahooWidgetEngine.exe 2916 iPodService.exe 3452 YahooWidgetEngine.exe 2068 YahooWidgetEngine.exe 4588 DOpus.exe 2548 xchat.exe 4480 firefox.exe 5484 Safari.exe 4260 dwwin.exe 4524 drwtsn32.exe *----> Modulelijst <----* (0000000000350000 - 0000000000359000: F:\WINDOWS\system32\Normaliz.dll (0000000000400000 - 000000000057e000: F:\Program Files\Safari\Safari.exe (0000000001090000 - 000000000119f000: F:\Program Files\Safari\libxml2.dll (0000000001720000 - 000000000172f000: C:\Backuk RK\RK Launcher\RK Launcher 0.41 Beta Nightly\RKLauncher.dll (0000000001750000 - 0000000001762000: F:\Program Files\RocketDock\RocketDock.dll (00000000017e0000 - 00000000017ef000: F:\Program Files\Logitech\SetPoint\lgscroll.dll (0000000001810000 - 00000000018e6000: F:\WINDOWS\system32\COMRes.dll (0000000010000000 - 00000000103c6000: F:\Program Files\Safari\WebKit.dll (0000000044350000 - 0000000044395000: F:\WINDOWS\system32\iertutil.dll (00000000445d0000 - 000000004469a000: F:\WINDOWS\system32\WININET.dll (000000004ad00000 - 000000004b56a000: F:\Program Files\Safari\icudt36.dll (000000005b190000 - 000000005b1c8000: F:\WINDOWS\system32\UXTHEME.DLL (0000000061800000 - 0000000061865000: F:\Program Files\Safari\CFNetwork.dll (0000000061c00000 - 0000000061c56000: F:\Program Files\Safari\SQLite3.dll (0000000062400000 - 00000000624a7000: F:\Program Files\Safari\icuin36.dll (0000000066000000 - 0000000066092000: F:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (0000000066600000 - 0000000066617000: F:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (000000006a400000 - 000000006a413000: F:\Program Files\Safari\zlib1.dll (000000006a800000 - 000000006a833000: F:\Program Files\Safari\libxslt.dll (000000006b000000 - 000000006b36e000: F:\Program Files\Safari\CoreGraphics.dll (000000006b800000 - 000000006b8fb000: F:\Program Files\Safari\icuuc36.dll (000000006c800000 - 000000006c810000: F:\Program Files\Safari\pthreadVC2.dll (000000006fc00000 - 000000006fc71000: F:\Program Files\Safari\CoreFoundation.dll (0000000071a20000 - 0000000071a28000: F:\WINDOWS\system32\WS2HELP.dll (0000000071a30000 - 0000000071a47000: F:\WINDOWS\system32\WS2_32.dll (0000000071a50000 - 0000000071a5a000: F:\WINDOWS\system32\WSOCK32.dll (0000000071aa0000 - 0000000071ab2000: F:\WINDOWS\system32\MPR.dll (0000000071b80000 - 0000000071b93000: F:\WINDOWS\system32\SAMLIB.dll (0000000072f70000 - 0000000072f96000: F:\WINDOWS\system32\WINSPOOL.DRV (00000000746a0000 - 00000000746eb000: F:\WINDOWS\system32\MSCTF.dll (0000000074d10000 - 0000000074d7b000: F:\WINDOWS\system32\USP10.dll (0000000075250000 - 000000007527e000: F:\WINDOWS\system32\msctfime.ime (0000000076320000 - 0000000076325000: F:\WINDOWS\system32\MSIMG32.dll (0000000076330000 - 000000007634d000: F:\WINDOWS\system32\IMM32.DLL (0000000076350000 - 000000007639a000: F:\WINDOWS\system32\comdlg32.dll (0000000076af0000 - 0000000076b1e000: F:\WINDOWS\system32\WINMM.dll (0000000076bb0000 - 0000000076bbb000: F:\WINDOWS\system32\PSAPI.DLL (0000000076bf0000 - 0000000076c1e000: F:\WINDOWS\system32\WINTRUST.dll (0000000076c50000 - 0000000076c78000: F:\WINDOWS\system32\IMAGEHLP.dll (0000000076d20000 - 0000000076d39000: F:\WINDOWS\system32\iphlpapi.dll (0000000076f20000 - 0000000076f4d000: F:\WINDOWS\system32\WLDAP32.dll (0000000076f90000 - 000000007700f000: F:\WINDOWS\system32\CLBCATQ.DLL (00000000770e0000 - 000000007716b000: F:\WINDOWS\system32\OLEAUT32.dll (0000000077390000 - 0000000077493000: F:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll (00000000774a0000 - 00000000775e4000: F:\WINDOWS\system32\ole32.dll (0000000077650000 - 0000000077671000: F:\WINDOWS\system32\NTMARTA.DLL (0000000077a40000 - 0000000077ad5000: F:\WINDOWS\system32\CRYPT32.dll (0000000077ae0000 - 0000000077af2000: F:\WINDOWS\system32\MSASN1.dll (0000000077b00000 - 0000000077b22000: F:\WINDOWS\system32\Apphelp.dll (0000000077bd0000 - 0000000077bd8000: F:\WINDOWS\system32\VERSION.dll (0000000077be0000 - 0000000077c38000: F:\WINDOWS\system32\msvcrt.dll (0000000077da0000 - 0000000077e31000: F:\WINDOWS\system32\RPCRT4.dll (0000000077e40000 - 0000000077e87000: F:\WINDOWS\system32\GDI32.dll (0000000077e90000 - 0000000077f06000: F:\WINDOWS\system32\SHLWAPI.dll (0000000077f10000 - 0000000077f21000: F:\WINDOWS\system32\Secur32.dll (0000000077f40000 - 0000000077feb000: F:\WINDOWS\system32\ADVAPI32.dll (0000000078130000 - 00000000781cb000: F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll (000000007c420000 - 000000007c4a7000: F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll (000000007c800000 - 000000007c8ff000: F:\WINDOWS\system32\kernel32.dll (000000007c900000 - 000000007c9b6000: F:\WINDOWS\system32\ntdll.dll (000000007c9c0000 - 000000007d1b2000: F:\WINDOWS\system32\SHELL32.dll (000000007e390000 - 000000007e421000: F:\WINDOWS\system32\USER32.dll *----> Statusdump voor subproces-ID 0x1518 <----* eax=00000000 ebx=7feb2d00 ecx=7feb2d00 edx=0012f2e8 esi=7feadee0 edi=00000000 eip=0048c125 esp=0012f2e0 ebp=0012f318 iopl=0 nv up ei pl nz ac po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000216 *** ERROR: Module load completed but symbols could not be loaded for F:\Program Files\Safari\Safari.exe functie: Safari 0048c10b d7 xlat 0048c10c 0000 add [eax],al 0048c10e 5f pop edi 0048c10f c3 ret 0048c110 83ec0c sub esp,0xc 0048c113 56 push esi 0048c114 8bf0 mov esi,eax 0048c116 8b462c mov eax,[esi+0x2c] 0048c119 8d542408 lea edx,[esp+0x8] 0048c11d c744240800000000 mov dword ptr [esp+0x8],0x0 Fout ->0048c125 8b08 mov ecx,[eax] ds:0023:00000000=???????? 0048c127 52 push edx 0048c128 50 push eax 0048c129 8b4150 mov eax,[ecx+0x50] 0048c12c ffd0 call eax 0048c12e 85c0 test eax,eax 0048c130 7c61 jl Safari+0x8c193 (0048c193) 0048c132 8b442408 mov eax,[esp+0x8] 0048c136 8d542404 lea edx,[esp+0x4] 0048c13a c744240400000000 mov dword ptr [esp+0x4],0x0 0048c142 8b08 mov ecx,[eax] *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 0012f318 004ab7e0 7fe9bea0 7feadee0 0012f384 Safari+0x8c125 004eb244 0000003c 00400000 011c0001 00000001 Safari+0xab7e0 *----> Raw Stack Dump <----* 000000000012f2e0 14 f3 12 00 00 00 00 00 - 00 00 00 00 8a c0 44 00 ..............D. 000000000012f2f0 77 8d 4a 00 00 00 00 00 - 00 2d eb 7f 3c f3 12 00 w.J......-..<... 000000000012f300 00 2d eb 7f 23 8f 4a 00 - 18 f3 12 00 a0 be e9 7f .-..#.J......... 000000000012f310 00 2d eb 7f 44 b2 4e 00 - 44 b2 4e 00 e0 b7 4a 00 .-..D.N.D.N...J. 000000000012f320 a0 be e9 7f e0 de ea 7f - 84 f3 12 00 44 fe 12 01 ............D... 000000000012f330 90 7a ea 7f 00 00 00 00 - 00 00 00 00 58 f3 12 00 .z..........X... 000000000012f340 64 b6 4a 00 e0 de ea 7f - 01 00 00 00 ff ff ff ff d.J............. 000000000012f350 44 fe 12 00 8c f3 12 00 - 0c f4 12 00 3c a8 49 00 D...........<.I. 000000000012f360 01 00 00 00 8c f3 12 00 - c0 8d e9 7f 21 61 49 00 ............!aI. 000000000012f370 00 00 00 00 01 00 00 00 - 01 00 00 00 18 77 17 00 .............w.. 000000000012f380 44 fe 12 00 04 8e e9 7f - 08 00 00 00 44 b2 4e 00 D...........D.N. 000000000012f390 44 b2 4e 00 82 09 02 00 - d0 fe 12 00 00 00 00 00 D.N............. 000000000012f3a0 00 00 00 00 60 04 00 00 - 35 03 00 00 0c 00 00 00 ....`...5....... 000000000012f3b0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000012f3c0 54 02 00 00 10 00 00 00 - 00 00 00 00 00 00 00 00 T............... 000000000012f3d0 71 01 00 00 10 00 00 00 - 00 00 00 00 00 00 00 00 q............... 000000000012f3e0 01 00 00 00 17 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000012f3f0 32 00 00 00 14 00 00 00 - 00 00 00 00 00 00 00 00 2............... 000000000012f400 00 00 00 00 00 00 00 00 - 10 00 00 00 cc f5 12 00 ................ 000000000012f410 f6 3c 49 00 c0 8d e9 7f - cc f5 12 00 00 00 00 00 . Statusdump voor subproces-ID 0x1570 <----* eax=77f69981 ebx=00f4fed0 ecx=00000006 edx=00000000 esi=00000000 edi=7ffd4000 eip=7c90eb94 esp=00f4fea8 ebp=00f4ff44 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\ntdll.dll - functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\ADVAPI32.dll - WARNING: Stack unwind information not available. Following frames may be wrong. *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\kernel32.dll - ChildEBP RetAddr Args to Child 00f4ff44 77f69b26 00000002 00f4ff6c 00000000 ntdll!KiFastSystemCallRet 00f4ffb4 7c80b6a3 00000000 7c9140bb 00000000 ADVAPI32!RegDeleteKeyW+0x2a2 00f4ffec 00000000 77f69981 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 0000000000f4fea8 ab e9 90 7c 0b 95 80 7c - 02 00 00 00 d0 fe f4 00 ...|...|........ 0000000000f4feb8 01 00 00 00 01 00 00 00 - 04 ff f4 00 e0 2e d5 00 ................ 0000000000f4fec8 40 65 fb 77 00 10 00 00 - 80 00 00 00 8c 00 00 00 @e.w............ 0000000000f4fed8 c0 fe f4 00 ec cb d3 98 - dc ff f4 00 30 9a 83 7c ............0..| 0000000000f4fee8 d0 0a 81 7c 00 10 00 00 - 14 00 00 00 01 00 00 00 ...|............ 0000000000f4fef8 e0 c1 15 00 00 00 00 00 - 00 00 00 00 00 a2 2f 4d ............../M 0000000000f4ff08 ff ff ff ff 00 10 00 00 - 00 40 fd 7f 00 e0 fd 7f .........@...... 0000000000f4ff18 dc ff f4 00 04 ff f4 00 - d0 fe f4 00 06 00 00 00 ................ 0000000000f4ff28 02 00 00 00 c4 fe f4 00 - 06 00 00 00 dc ff f4 00 ................ 0000000000f4ff38 30 9a 83 7c 00 96 80 7c - 00 00 00 00 b4 ff f4 00 0..|...|........ 0000000000f4ff48 26 9b f6 77 02 00 00 00 - 6c ff f4 00 00 00 00 00 &..w....l....... 0000000000f4ff58 e0 93 04 00 01 00 00 00 - bb 40 91 7c 00 00 00 00 .........@.|.... 0000000000f4ff68 00 00 00 00 80 00 00 00 - 8c 00 00 00 00 10 00 00 ................ 0000000000f4ff78 e0 2e d5 00 00 00 00 00 - 00 10 00 00 e8 3e d5 00 .............>.. 0000000000f4ff88 a0 66 fb 77 28 00 00 00 - 80 66 fb 77 00 10 00 00 .f.w(....f.w.... 0000000000f4ff98 00 00 00 00 a0 66 fb 77 - e0 2e d5 00 80 66 fb 77 .....f.w.....f.w 0000000000f4ffa8 e5 03 00 00 00 10 00 00 - e8 3e d5 00 ec ff f4 00 .........>...... 0000000000f4ffb8 a3 b6 80 7c 00 00 00 00 - bb 40 91 7c 00 00 00 00 ...|.....@.|.... 0000000000f4ffc8 00 00 00 00 00 e0 fd 7f - 00 66 46 8a c0 ff f4 00 .........fF..... 0000000000f4ffd8 f0 e2 4c 88 ff ff ff ff - 30 9a 83 7c b0 b6 80 7c ..L.....0..|...| *----> Statusdump voor subproces-ID 0x280 <----* eax=00000000 ebx=00000000 ecx=014cfee8 edx=76b10200 esi=00000001 edi=02100210 eip=7c90eb94 esp=014cff08 ebp=014cffb4 iopl=0 nv up ei ng nz ac po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000296 functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 014cffb4 7c80b6a3 00000000 02100210 02140210 ntdll!KiFastSystemCallRet 014cffec 00000000 76b0aee7 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 00000000014cff08 ab e9 90 7c 21 af b0 76 - 02 00 00 00 6c ff 4c 01 ...|!..v....l.L. 00000000014cff18 01 00 00 00 01 00 00 00 - 00 00 00 00 10 02 14 02 ................ 00000000014cff28 18 db a2 88 10 00 00 00 - d0 ba 21 8a a3 57 8a 80 ..........!..W.. 00000000014cff38 f8 75 94 88 18 db a2 88 - 00 d0 fd 7f 84 4c ab 98 .u...........L.. 00000000014cff48 b9 1c 82 80 00 00 00 00 - 05 00 00 00 00 00 00 00 ................ 00000000014cff58 00 00 00 00 00 00 00 00 - 10 a7 81 80 00 00 00 00 ................ 00000000014cff68 00 00 00 00 00 04 00 00 - 08 04 00 00 18 db a2 88 ................ 00000000014cff78 50 4d ab 98 7f dc 8a 80 - 00 00 00 00 01 ba 21 00 PM............!. 00000000014cff88 00 00 00 00 f8 75 94 88 - c1 1c 82 80 00 00 00 00 .....u.......... 00000000014cff98 00 00 00 00 00 00 00 00 - a1 1c 82 80 9c 4c ab 98 .............L.. 00000000014cffa8 35 ec a0 80 00 00 00 00 - 02 00 00 00 ec ff 4c 01 5.............L. 00000000014cffb8 a3 b6 80 7c 00 00 00 00 - 10 02 10 02 10 02 14 02 ...|............ 00000000014cffc8 00 00 00 00 00 d0 fd 7f - 00 66 46 8a c0 ff 4c 01 .........fF...L. 00000000014cffd8 b8 6d 4f 88 ff ff ff ff - 30 9a 83 7c b0 b6 80 7c .mO.....0..|...| 00000000014cffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 e7 ae b0 76 ...............v 00000000014cfff8 00 00 00 00 00 00 00 00 - c8 00 00 00 ab 01 00 00 ................ 00000000014d0008 ff ee ff ee 02 10 00 00 - 00 00 00 00 00 fe 00 00 ................ 00000000014d0018 00 00 10 00 00 20 00 00 - 00 02 00 00 00 20 00 00 ..... ....... .. 00000000014d0028 2f 02 00 00 ff ef fd 7f - 0d 00 08 06 00 00 00 00 /............... 00000000014d0038 00 00 00 00 00 00 00 00 - 00 00 00 00 98 05 4d 01 ..............M. Toepassingsuitzondering: Toep: C:\Program Files\Safari\Safari.exe (PID=2128) Tijd: 19-11-2007 @ 07:27:19.705 Uitzonderingsnummer: c0000005 (schending van toegang) *----> Systeemgegevens <----* Computernaam: LEOPARDS-8262D1 Gebruikersnaam: Leopard Terminalsessie-id: 0 Aantal processors: 1 Processortype: x86 Family 6 Model 10 Stepping 0 Windows-versie: 5.1 Actieve gecompileerde versie: 2600 Service Pack: 2 Huidig type: Uniprocessor Free Geregistreerde organisatie: Geregistreerde eigenaar: leopards dreamcast *----> Taakoverzicht <----* 0 System Process 4 System 928 smss.exe 976 csrss.exe 1000 winlogon.exe 1044 services.exe 1056 lsass.exe 1232 Ati2evxx.exe 1248 svchost.exe 1324 svchost.exe 1824 svchost.exe 1860 svchost.exe 2044 svchost.exe 556 svchost.exe 804 spoolsv.exe 1716 SDMCP.exe 1380 Ati2evxx.exe 1488 Explorer.EXE 1808 schedul2.exe 1920 AppleMobileDeviceService.exe 1948 avgamsvr.exe 2016 avgupsvc.exe 456 avgemc.exe 472 mDNSResponder.exe 676 cmdagent.exe 1652 CTsvcCDA.exe 1712 EBstrSvc.exe 1980 MacDriveService.exe 2096 RoxWatch10.exe 2168 SbieSvc.exe 2220 svchost.exe 2240 TrueImageTryStartService.exe 2340 vmware-authd.exe 2444 vmount2.exe 2468 vmnat.exe 2628 MsPMSPSv.exe 2648 vmnetdhcp.exe 3176 wmiprvse.exe 3880 alg.exe 2480 ctfmon.exe 2520 RoxMediaDB10.exe 3512 TrayServer.exe 3592 htpatch.exe 3696 CTHELPER.EXE 3756 jusched.exe 3768 vmware-tray.exe 3780 hqtray.exe 3828 avgcc.exe 3864 atiptaxx.exe 3932 CPF.exe 3964 DMXLauncher.exe 3980 RdTask.exe 4040 iTunesHelper.exe 772 TrueImageMonitor.exe 868 TimounterMonitor.exe 968 schedhlp.exe 1120 Alt+Q Hotkey.exe 1264 RocketDock.exe 1372 CTDetect.exe 1908 CTSyncU.exe 648 daemon.exe 1516 msmsgs.exe 728 snarl.exe 2608 hpotdd01.exe 3168 Launchy.exe 3476 SetPoint.exe 2080 SnagIt32.exe 1592 AlarmMasterPlus.exe 956 im-history.exe 1952 NoteScraps.exe 3944 PNotes.exe 3976 TSCHelp.exe 4068 SnagPriv.exe 712 RKLauncher.exe 1020 Finder.exe 1224 YahooWidgetEngine.exe 2284 KHALMNPR.EXE 2476 YahooWidgetEngine.exe 2856 YahooWidgetEngine.exe 2916 iPodService.exe 3452 YahooWidgetEngine.exe 2068 YahooWidgetEngine.exe 4588 DOpus.exe 2548 xchat.exe 4480 firefox.exe 3388 uruninstaller.exe 4140 uruninstaller.exe 2128 Safari.exe 5104 dwwin.exe 5184 drwtsn32.exe *----> Modulelijst <----* (0000000000350000 - 0000000000359000: F:\WINDOWS\system32\Normaliz.dll (0000000000400000 - 0000000000731000: C:\Program Files\Safari\Safari.exe (0000000000740000 - 0000000000b3f000: C:\Program Files\Safari\WebKit.dll (0000000000b40000 - 0000000000c4f000: C:\Program Files\Safari\libxml2.dll (0000000001770000 - 0000000001802000: F:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (0000000001a50000 - 0000000001a5f000: C:\Backuk RK\RK Launcher\RK Launcher 0.41 Beta Nightly\RKLauncher.dll (0000000001a80000 - 0000000001a92000: F:\Program Files\RocketDock\RocketDock.dll (0000000001b60000 - 0000000001c36000: F:\WINDOWS\system32\COMRes.dll (0000000001fa0000 - 0000000001fac000: F:\Program Files\Object Desktop\ObjectBar\ShellHook.dll (0000000001fc0000 - 0000000001fd0000: F:\WINDOWS\system32\ctagent.dll (0000000010000000 - 0000000010010000: C:\Program Files\Safari\pthreadVC2.dll (0000000010100000 - 000000001010f000: F:\Program Files\Logitech\SetPoint\lgscroll.dll (0000000016000000 - 0000000016010000: F:\WINDOWS\system32\dnssd.dll (0000000044350000 - 0000000044395000: F:\WINDOWS\system32\iertutil.dll (00000000445d0000 - 000000004469a000: F:\WINDOWS\system32\WININET.dll (000000004ad00000 - 000000004b580000: C:\Program Files\Safari\icudt36.dll (000000005b190000 - 000000005b1c8000: F:\WINDOWS\system32\UXTHEME.DLL (0000000061900000 - 0000000061956000: C:\Program Files\Safari\SQLite3.dll (0000000065500000 - 0000000065572000: C:\Program Files\Safari\CoreFoundation.dll (0000000065a00000 - 0000000065a13000: C:\Program Files\Safari\zlib1.dll (0000000065f00000 - 00000000662a1000: C:\Program Files\Safari\CoreGraphics.dll (0000000066500000 - 000000006650a000: F:\WINDOWS\system32\wbsys.dll (0000000066600000 - 0000000066617000: F:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (000000006a500000 - 000000006a56b000: C:\Program Files\Safari\CFNetwork.dll (000000006b400000 - 000000006b4fc000: C:\Program Files\Safari\icuuc36.dll (000000006f500000 - 000000006f53f000: C:\Program Files\Safari\SafariTheme.dll (000000006fa00000 - 000000006faa7000: C:\Program Files\Safari\icuin36.dll (0000000071a20000 - 0000000071a28000: F:\WINDOWS\system32\WS2HELP.dll (0000000071a30000 - 0000000071a47000: F:\WINDOWS\system32\WS2_32.dll (0000000071a50000 - 0000000071a5a000: F:\WINDOWS\system32\WSOCK32.dll (0000000071b80000 - 0000000071b93000: F:\WINDOWS\system32\SAMLIB.dll (0000000072f70000 - 0000000072f96000: F:\WINDOWS\system32\WINSPOOL.DRV (0000000073aa0000 - 0000000073ab5000: F:\WINDOWS\system32\mscms.dll (00000000746a0000 - 00000000746eb000: F:\WINDOWS\system32\MSCTF.dll (0000000075250000 - 000000007527e000: F:\WINDOWS\system32\msctfime.ime (0000000076320000 - 0000000076325000: F:\WINDOWS\system32\msimg32.dll (0000000076330000 - 000000007634d000: F:\WINDOWS\system32\IMM32.DLL (0000000076740000 - 000000007674c000: F:\WINDOWS\system32\Cryptdll.dll (0000000076af0000 - 0000000076b1e000: F:\WINDOWS\system32\WINMM.dll (0000000076bb0000 - 0000000076bbb000: F:\WINDOWS\system32\PSAPI.DLL (0000000076d20000 - 0000000076d39000: F:\WINDOWS\system32\iphlpapi.dll (0000000076f20000 - 0000000076f4d000: F:\WINDOWS\system32\WLDAP32.dll (0000000076f90000 - 000000007700f000: F:\WINDOWS\system32\CLBCATQ.DLL (00000000770e0000 - 000000007716b000: F:\WINDOWS\system32\OLEAUT32.dll (0000000077390000 - 0000000077493000: F:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll (00000000774a0000 - 00000000775e4000: F:\WINDOWS\system32\ole32.dll (0000000077650000 - 0000000077671000: F:\WINDOWS\system32\NTMARTA.DLL (0000000077a40000 - 0000000077ad5000: F:\WINDOWS\system32\CRYPT32.dll (0000000077ae0000 - 0000000077af2000: F:\WINDOWS\system32\MSASN1.dll (0000000077b00000 - 0000000077b22000: F:\WINDOWS\system32\Apphelp.dll (0000000077bd0000 - 0000000077bd8000: F:\WINDOWS\system32\VERSION.dll (0000000077be0000 - 0000000077c38000: F:\WINDOWS\system32\msvcrt.dll (0000000077da0000 - 0000000077e31000: F:\WINDOWS\system32\RPCRT4.dll (0000000077e40000 - 0000000077e87000: F:\WINDOWS\system32\GDI32.dll (0000000077e90000 - 0000000077f06000: F:\WINDOWS\system32\SHLWAPI.dll (0000000077f10000 - 0000000077f21000: F:\WINDOWS\system32\Secur32.dll (0000000077f40000 - 0000000077feb000: F:\WINDOWS\system32\ADVAPI32.dll (0000000078130000 - 00000000781cb000: F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll (000000007c420000 - 000000007c4a7000: F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll (000000007c800000 - 000000007c8ff000: F:\WINDOWS\system32\kernel32.dll (000000007c900000 - 000000007c9b6000: F:\WINDOWS\system32\ntdll.dll (000000007c9c0000 - 000000007d1b2000: F:\WINDOWS\system32\SHELL32.dll (000000007e390000 - 000000007e421000: F:\WINDOWS\system32\USER32.dll *----> Statusdump voor subproces-ID 0xbd8 <----* eax=00000000 ebx=fffce002 ecx=00000000 edx=7feadc00 esi=fffce002 edi=7ff7a968 eip=007ca039 esp=0012f4a0 ebp=0012f4ec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Safari\WebKit.dll - functie: WebKit!JSValueMakeUndefined 007ca01d 99 cdq 007ca01e 83e20f and edx,0xf 007ca021 03c2 add eax,edx 007ca023 c1f804 sar eax,0x4 007ca026 89742408 mov [esp+0x8],esi 007ca02a 7915 jns WebKit!JSValueMakeUndefined+0x35651 (007ca041) 007ca02c 8b4138 mov eax,[ecx+0x38] 007ca02f 8d5114 lea edx,[ecx+0x14] 007ca032 33c9 xor ecx,ecx 007ca034 e8b79b1200 call WebKit!JSValueMakeUndefined+0x15f200 (008f3bf0) Fout ->007ca039 668b4008 mov ax,[eax+0x8] ds:0023:00000008=???? 007ca03d 5e pop esi 007ca03e c20800 ret 0x8 007ca041 8bd6 mov edx,esi 007ca043 80e207 and dl,0x7 007ca046 80fa02 cmp dl,0x2 007ca049 7518 jnz WebKit!JSValueMakeUndefined+0x35673 (007ca063) 007ca04b d94124 fld dword ptr [ecx+0x24] 007ca04e dc052883a400 fadd qword ptr [WebKit+0x308328 (00a48328)] 007ca054 e8e7522500 call WebKit+0x2df340 (00a1f340) 007ca059 50 push eax *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 0012f4ec 0094f5c1 0012f524 0012f520 0012f518 WebKit!JSValueMakeUndefined+0x35649 7ff7a9dc 00000000 00000000 00000000 00000000 WebKit!JSValueMakeUndefined+0x1babd1 *----> Raw Stack Dump <----* 000000000012f4a0 b8 a9 f7 7f 68 2f 92 00 - 02 e0 fc ff 00 00 00 00 ....h/.......... 000000000012f4b0 00 f5 12 00 58 ad f7 7f - b8 a9 f7 7f fa 79 87 00 ....X........y.. 000000000012f4c0 02 e0 fc ff 01 00 00 00 - 58 ad f7 7f 75 f7 94 00 ........X...u... 000000000012f4d0 01 00 00 00 01 00 00 00 - 00 00 00 00 58 ad f7 7f ............X... 000000000012f4e0 00 f5 12 00 58 ad f7 7f - 81 02 00 00 dc a9 f7 7f ....X........... 000000000012f4f0 c1 f5 94 00 24 f5 12 00 - 20 f5 12 00 18 f5 12 00 ....$... ....... 000000000012f500 1c f5 12 00 00 f5 12 00 - b8 a9 f7 7f 58 ad f7 7f ............X... 000000000012f510 dc a9 f7 7f 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000012f520 00 00 00 00 00 00 00 00 - 00 f5 12 00 2a 00 92 00 ............*... 000000000012f530 81 02 00 00 81 02 00 00 - 81 02 00 00 b4 7b 92 00 .............{.. 000000000012f540 dc a9 f7 7f 58 ad f7 7f - 40 f6 12 00 af 84 92 00 ....X...@....... 000000000012f550 d8 a9 f7 7f b8 a9 f7 7f - dc a9 f7 7f 24 14 4d 6b ............$.Mk 000000000012f560 74 00 00 00 00 00 00 00 - 00 00 00 00 60 b6 e9 7f t...........`... 000000000012f570 a0 00 00 00 dc a9 f7 7f - 00 00 00 00 b8 a9 f7 7f ................ 000000000012f580 9c aa f7 7f 00 00 00 00 - b8 a9 f7 7f 00 00 00 00 ................ 000000000012f590 00 00 00 00 0a 00 00 00 - 0a 00 00 00 0a 00 00 00 ................ 000000000012f5a0 00 00 00 00 3c aa f7 7f - 00 00 00 00 00 00 00 00 ....<........... 000000000012f5b0 00 00 00 00 00 00 00 00 - b8 a9 f7 7f 00 00 00 00 ................ 000000000012f5c0 00 00 00 00 b8 a9 f7 7f - 9c aa f7 7f 00 00 00 00 ................ 000000000012f5d0 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 a9 f7 7f ................ *----> Statusdump voor subproces-ID 0x13cc <----* eax=77f69981 ebx=016afed0 ecx=00000006 edx=00000000 esi=00000000 edi=7ffd7000 eip=7c90eb94 esp=016afea8 ebp=016aff44 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\ntdll.dll - functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\ADVAPI32.dll - WARNING: Stack unwind information not available. Following frames may be wrong. *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\kernel32.dll - ChildEBP RetAddr Args to Child 016aff44 77f69b26 00000002 016aff6c 00000000 ntdll!KiFastSystemCallRet 016affb4 7c80b6a3 00000000 7c9140bb 00000000 ADVAPI32!RegDeleteKeyW+0x2a2 016affec 00000000 77f69981 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 00000000016afea8 ab e9 90 7c 0b 95 80 7c - 02 00 00 00 d0 fe 6a 01 ...|...|......j. 00000000016afeb8 01 00 00 00 01 00 00 00 - 04 ff 6a 01 e0 2e 4b 01 ..........j...K. 00000000016afec8 40 65 fb 77 00 10 00 00 - 78 00 00 00 84 00 00 00 @e.w....x....... 00000000016afed8 c0 fe 6a 01 ec 8b ba 98 - dc ff 6a 01 30 9a 83 7c ..j.......j.0..| 00000000016afee8 d0 0a 81 7c 00 10 00 00 - 14 00 00 00 01 00 00 00 ...|............ 00000000016afef8 98 c4 15 00 00 00 00 00 - 00 00 00 00 00 a2 2f 4d ............../M 00000000016aff08 ff ff ff ff 00 10 00 00 - 00 70 fd 7f 00 e0 fd 7f .........p...... 00000000016aff18 dc ff 6a 01 04 ff 6a 01 - d0 fe 6a 01 06 00 00 00 ..j...j...j..... 00000000016aff28 02 00 00 00 c4 fe 6a 01 - 06 00 00 00 dc ff 6a 01 ......j.......j. 00000000016aff38 30 9a 83 7c 00 96 80 7c - 00 00 00 00 b4 ff 6a 01 0..|...|......j. 00000000016aff48 26 9b f6 77 02 00 00 00 - 6c ff 6a 01 00 00 00 00 &..w....l.j..... 00000000016aff58 e0 93 04 00 01 00 00 00 - bb 40 91 7c 00 00 00 00 .........@.|.... 00000000016aff68 00 00 00 00 78 00 00 00 - 84 00 00 00 00 10 00 00 ....x........... 00000000016aff78 e0 2e 4b 01 00 00 00 00 - 00 10 00 00 e8 3e 4b 01 ..K..........>K. 00000000016aff88 a0 66 fb 77 28 00 00 00 - 80 66 fb 77 00 10 00 00 .f.w(....f.w.... 00000000016aff98 00 00 00 00 a0 66 fb 77 - e0 2e 4b 01 80 66 fb 77 .....f.w..K..f.w 00000000016affa8 e5 03 00 00 00 10 00 00 - e8 3e 4b 01 ec ff 6a 01 .........>K...j. 00000000016affb8 a3 b6 80 7c 00 00 00 00 - bb 40 91 7c 00 00 00 00 ...|.....@.|.... 00000000016affc8 00 00 00 00 00 e0 fd 7f - 00 66 46 8a c0 ff 6a 01 .........fF...j. 00000000016affd8 d0 fb 99 88 ff ff ff ff - 30 9a 83 7c b0 b6 80 7c ........0..|...| *----> Statusdump voor subproces-ID 0x1304 <----* eax=00000000 ebx=00000000 ecx=0190fee8 edx=76b10200 esi=00000001 edi=02100210 eip=7c90eb94 esp=0190ff08 ebp=0190ffb4 iopl=0 nv up ei ng nz ac po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000296 functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 0190ffb4 7c80b6a3 00000000 02100210 02140210 ntdll!KiFastSystemCallRet 0190ffec 00000000 76b0aee7 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 000000000190ff08 ab e9 90 7c 21 af b0 76 - 02 00 00 00 6c ff 90 01 ...|!..v....l... 000000000190ff18 01 00 00 00 01 00 00 00 - 00 00 00 00 10 02 14 02 ................ 000000000190ff28 28 94 39 88 10 00 00 00 - d0 ba 21 8a a3 57 8a 80 (.9.......!..W.. 000000000190ff38 e8 38 3d 88 28 94 39 88 - 00 d0 fd 7f 84 ec e3 99 .8=.(.9......... 000000000190ff48 b9 1c 82 80 00 00 00 00 - 05 00 00 00 00 00 00 00 ................ 000000000190ff58 00 00 00 00 00 00 00 00 - 10 a7 81 80 00 00 00 00 ................ 000000000190ff68 00 00 00 00 a8 03 00 00 - b4 03 00 00 28 94 39 88 ............(.9. 000000000190ff78 50 ed e3 99 86 02 00 00 - 00 00 00 00 01 ba 21 00 P.............!. 000000000190ff88 00 00 00 00 e8 38 3d 88 - c1 1c 82 80 00 00 00 00 .....8=......... 000000000190ff98 00 00 00 00 00 00 00 00 - a1 1c 82 80 9c ec e3 99 ................ 000000000190ffa8 35 ec a0 80 00 00 00 00 - 02 00 00 00 ec ff 90 01 5............... 000000000190ffb8 a3 b6 80 7c 00 00 00 00 - 10 02 10 02 10 02 14 02 ...|............ 000000000190ffc8 00 00 00 00 00 d0 fd 7f - 00 66 46 8a c0 ff 90 01 .........fF..... 000000000190ffd8 18 f6 8c 88 ff ff ff ff - 30 9a 83 7c b0 b6 80 7c ........0..|...| 000000000190ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 e7 ae b0 76 ...............v 000000000190fff8 00 00 00 00 00 00 00 00 - c8 00 00 00 bc 01 00 00 ................ 0000000001910008 ff ee ff ee 02 10 00 00 - 00 00 00 00 00 fe 00 00 ................ 0000000001910018 00 00 10 00 00 20 00 00 - 00 02 00 00 00 20 00 00 ..... ....... .. 0000000001910028 15 02 00 00 ff ef fd 7f - 0b 00 08 06 00 00 00 00 ................ 0000000001910038 00 00 00 00 00 00 00 00 - 00 00 00 00 98 05 91 01 ................ *----> Statusdump voor subproces-ID 0x13dc <----* eax=01cd8000 ebx=01f4fdcc ecx=01f4f940 edx=00001000 esi=00000000 edi=7ffd7000 eip=7c90eb94 esp=01f4fda4 ebp=01f4fe40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. *** WARNING: Unable to verify checksum for C:\Program Files\Safari\pthreadVC2.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Safari\pthreadVC2.dll - ChildEBP RetAddr Args to Child 01f4fe40 7c80a095 00000002 01f4fe7c 00000000 ntdll!KiFastSystemCallRet 01f4fe5c 10002f60 00000002 01f4fe7c 00000000 kernel32!WaitForMultipleObjects+0x18 ffffffff 00000000 00000000 00000000 00000000 pthreadVC2+0x2f60 *----> Raw Stack Dump <----* 0000000001f4fda4 ab e9 90 7c 0b 95 80 7c - 02 00 00 00 cc fd f4 01 ...|...|........ 0000000001f4fdb4 01 00 00 00 00 00 00 00 - 00 00 00 00 02 00 00 00 ................ 0000000001f4fdc4 68 75 d0 01 ec ad e9 7f - ec 04 00 00 00 05 00 00 hu.............. 0000000001f4fdd4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001f4fde4 00 00 01 00 00 00 3c 00 - 14 00 00 00 01 00 00 00 ......<......... 0000000001f4fdf4 00 00 00 00 00 00 00 00 - 10 00 00 00 ff ff 01 00 ................ 0000000001f4fe04 0d 00 00 00 00 00 00 00 - 00 70 fd 7f 00 c0 fd 7f .........p...... 0000000001f4fe14 4b 00 00 00 00 00 00 00 - cc fd f4 01 6c fe f4 01 K...........l... 0000000001f4fe24 02 00 00 00 c0 fd f4 01 - ff ff ff ff 9c ff f4 01 ................ 0000000001f4fe34 30 9a 83 7c 00 96 80 7c - 00 00 00 00 5c fe f4 01 0..|...|....\... 0000000001f4fe44 95 a0 80 7c 02 00 00 00 - 7c fe f4 01 00 00 00 00 ...|....|....... 0000000001f4fe54 ff ff ff ff 00 00 00 00 - ff ff ff ff 60 2f 00 10 ............`/.. 0000000001f4fe64 02 00 00 00 7c fe f4 01 - 00 00 00 00 ff ff ff ff ....|........... 0000000001f4fe74 84 70 d0 01 80 70 d0 01 - ec 04 00 00 00 05 00 00 .p...p.......... 0000000001f4fe84 00 00 00 00 00 00 00 00 - 4e 30 00 10 ff ff ff ff ........N0...... 0000000001f4fe94 23 5d 00 10 ec 04 00 00 - ff ff ff ff c4 fe f4 01 #].............. 0000000001f4fea4 40 5c 00 10 bc fe f4 01 - e0 42 3b 01 dc 42 3b 01 @\.......B;..B;. 0000000001f4feb4 ec ad e9 7f 00 00 00 00 - 80 70 d0 01 b8 fe f4 01 .........p...... 0000000001f4fec4 40 5c 00 10 bc fe f4 01 - f4 fe f4 01 0f 28 00 10 @\...........(.. 0000000001f4fed4 dc 42 3b 01 00 00 00 00 - c0 ad e9 7f c0 ad e9 7f .B;............. Toepassingsuitzondering: Toep: C:\Program Files\Safari\Safari.exe (PID=4604) Tijd: 19-11-2007 @ 07:30:27.556 Uitzonderingsnummer: c0000094 (deling door nul) *----> Systeemgegevens <----* Computernaam: LEOPARDS-8262D1 Gebruikersnaam: Leopard Terminalsessie-id: 0 Aantal processors: 1 Processortype: x86 Family 6 Model 10 Stepping 0 Windows-versie: 5.1 Actieve gecompileerde versie: 2600 Service Pack: 2 Huidig type: Uniprocessor Free Geregistreerde organisatie: Geregistreerde eigenaar: leopards dreamcast *----> Taakoverzicht <----* 0 System Process 4 System 928 smss.exe 976 csrss.exe 1000 winlogon.exe 1044 services.exe 1056 lsass.exe 1232 Ati2evxx.exe 1248 svchost.exe 1324 svchost.exe 1824 svchost.exe 1860 svchost.exe 2044 svchost.exe 556 svchost.exe 804 spoolsv.exe 1716 SDMCP.exe 1380 Ati2evxx.exe 1488 Explorer.EXE 1808 schedul2.exe 1920 AppleMobileDeviceService.exe 1948 avgamsvr.exe 2016 avgupsvc.exe 456 avgemc.exe 472 mDNSResponder.exe 676 cmdagent.exe 1652 CTsvcCDA.exe 1712 EBstrSvc.exe 1980 MacDriveService.exe 2096 RoxWatch10.exe 2168 SbieSvc.exe 2220 svchost.exe 2240 TrueImageTryStartService.exe 2340 vmware-authd.exe 2444 vmount2.exe 2468 vmnat.exe 2628 MsPMSPSv.exe 2648 vmnetdhcp.exe 3176 wmiprvse.exe 3880 alg.exe 2480 ctfmon.exe 2520 RoxMediaDB10.exe 3512 TrayServer.exe 3592 htpatch.exe 3696 CTHELPER.EXE 3756 jusched.exe 3768 vmware-tray.exe 3780 hqtray.exe 3828 avgcc.exe 3864 atiptaxx.exe 3932 CPF.exe 3964 DMXLauncher.exe 3980 RdTask.exe 4040 iTunesHelper.exe 772 TrueImageMonitor.exe 868 TimounterMonitor.exe 968 schedhlp.exe 1120 Alt+Q Hotkey.exe 1264 RocketDock.exe 1372 CTDetect.exe 1908 CTSyncU.exe 648 daemon.exe 1516 msmsgs.exe 728 snarl.exe 2608 hpotdd01.exe 3168 Launchy.exe 3476 SetPoint.exe 2080 SnagIt32.exe 1592 AlarmMasterPlus.exe 956 im-history.exe 1952 NoteScraps.exe 3944 PNotes.exe 3976 TSCHelp.exe 4068 SnagPriv.exe 712 RKLauncher.exe 1020 Finder.exe 1224 YahooWidgetEngine.exe 2284 KHALMNPR.EXE 2476 YahooWidgetEngine.exe 2856 YahooWidgetEngine.exe 2916 iPodService.exe 3452 YahooWidgetEngine.exe 2068 YahooWidgetEngine.exe 4588 DOpus.exe 2548 xchat.exe 4480 firefox.exe 3388 uruninstaller.exe 4140 uruninstaller.exe 4604 Safari.exe 4932 drwtsn32.exe *----> Modulelijst <----* (0000000000350000 - 0000000000359000: F:\WINDOWS\system32\Normaliz.dll (0000000000400000 - 0000000000731000: C:\Program Files\Safari\Safari.exe (0000000000740000 - 0000000000b3f000: C:\Program Files\Safari\WebKit.dll (0000000000b40000 - 0000000000c4f000: C:\Program Files\Safari\libxml2.dll (0000000001770000 - 0000000001802000: F:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (0000000001a50000 - 0000000001a5f000: C:\Backuk RK\RK Launcher\RK Launcher 0.41 Beta Nightly\RKLauncher.dll (0000000001a80000 - 0000000001a92000: F:\Program Files\RocketDock\RocketDock.dll (0000000001b60000 - 0000000001c36000: F:\WINDOWS\system32\COMRes.dll (0000000001fa0000 - 0000000001fac000: F:\Program Files\Object Desktop\ObjectBar\ShellHook.dll (0000000001fc0000 - 0000000001fd0000: F:\WINDOWS\system32\ctagent.dll (0000000002650000 - 00000000026c7000: F:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (0000000010000000 - 0000000010010000: C:\Program Files\Safari\pthreadVC2.dll (0000000010100000 - 000000001010f000: F:\Program Files\Logitech\SetPoint\lgscroll.dll (0000000016000000 - 0000000016010000: F:\WINDOWS\system32\dnssd.dll (0000000044350000 - 0000000044395000: F:\WINDOWS\system32\iertutil.dll (00000000445d0000 - 000000004469a000: F:\WINDOWS\system32\WININET.dll (000000004ad00000 - 000000004b580000: C:\Program Files\Safari\icudt36.dll (000000005b190000 - 000000005b1c8000: F:\WINDOWS\system32\UXTHEME.DLL (0000000060000000 - 0000000060083000: C:\Program Files\Safari\PubSubDLL.dll (0000000061900000 - 0000000061956000: C:\Program Files\Safari\SQLite3.dll (0000000065500000 - 0000000065572000: C:\Program Files\Safari\CoreFoundation.dll (0000000065a00000 - 0000000065a13000: C:\Program Files\Safari\zlib1.dll (0000000065f00000 - 00000000662a1000: C:\Program Files\Safari\CoreGraphics.dll (0000000066500000 - 000000006650a000: F:\WINDOWS\system32\wbsys.dll (0000000066600000 - 0000000066617000: F:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (000000006a500000 - 000000006a56b000: C:\Program Files\Safari\CFNetwork.dll (000000006b400000 - 000000006b4fc000: C:\Program Files\Safari\icuuc36.dll (000000006e100000 - 000000006e14e000: C:\Program Files\Safari\libtidy.dll (000000006f500000 - 000000006f53f000: C:\Program Files\Safari\SafariTheme.dll (000000006fa00000 - 000000006faa7000: C:\Program Files\Safari\icuin36.dll (000000006ff20000 - 000000006ff75000: F:\WINDOWS\system32\NETAPI32.dll (0000000071a20000 - 0000000071a28000: F:\WINDOWS\system32\WS2HELP.dll (0000000071a30000 - 0000000071a47000: F:\WINDOWS\system32\WS2_32.dll (0000000071a50000 - 0000000071a5a000: F:\WINDOWS\system32\WSOCK32.dll (0000000071b80000 - 0000000071b93000: F:\WINDOWS\system32\SAMLIB.dll (0000000072f70000 - 0000000072f96000: F:\WINDOWS\system32\WINSPOOL.DRV (0000000073aa0000 - 0000000073ab5000: F:\WINDOWS\system32\mscms.dll (00000000746a0000 - 00000000746eb000: F:\WINDOWS\system32\MSCTF.dll (0000000074d10000 - 0000000074d7b000: F:\WINDOWS\system32\USP10.dll (0000000075250000 - 000000007527e000: F:\WINDOWS\system32\msctfime.ime (0000000076320000 - 0000000076325000: F:\WINDOWS\system32\msimg32.dll (0000000076330000 - 000000007634d000: F:\WINDOWS\system32\IMM32.DLL (0000000076350000 - 000000007639a000: F:\WINDOWS\system32\comdlg32.dll (0000000076740000 - 000000007674c000: F:\WINDOWS\system32\Cryptdll.dll (0000000076970000 - 0000000076a24000: F:\WINDOWS\system32\USERENV.dll (0000000076af0000 - 0000000076b1e000: F:\WINDOWS\system32\WINMM.dll (0000000076bb0000 - 0000000076bbb000: F:\WINDOWS\system32\PSAPI.DLL (0000000076d20000 - 0000000076d39000: F:\WINDOWS\system32\iphlpapi.dll (0000000076e40000 - 0000000076e4e000: F:\WINDOWS\system32\rtutils.dll (0000000076e50000 - 0000000076e62000: F:\WINDOWS\system32\rasman.dll (0000000076e70000 - 0000000076e9f000: F:\WINDOWS\system32\TAPI32.dll (0000000076ea0000 - 0000000076edc000: F:\WINDOWS\system32\RASAPI32.dll (0000000076f20000 - 0000000076f4d000: F:\WINDOWS\system32\WLDAP32.dll (0000000076f90000 - 000000007700f000: F:\WINDOWS\system32\CLBCATQ.DLL (00000000770e0000 - 000000007716b000: F:\WINDOWS\system32\OLEAUT32.dll (0000000077390000 - 0000000077493000: F:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll (00000000774a0000 - 00000000775e4000: F:\WINDOWS\system32\ole32.dll (0000000077650000 - 0000000077671000: F:\WINDOWS\system32\NTMARTA.DLL (0000000077a40000 - 0000000077ad5000: F:\WINDOWS\system32\CRYPT32.dll (0000000077ae0000 - 0000000077af2000: F:\WINDOWS\system32\MSASN1.dll (0000000077b00000 - 0000000077b22000: F:\WINDOWS\system32\Apphelp.dll (0000000077bd0000 - 0000000077bd8000: F:\WINDOWS\system32\VERSION.dll (0000000077be0000 - 0000000077c38000: F:\WINDOWS\system32\msvcrt.dll (0000000077c40000 - 0000000077c63000: F:\WINDOWS\system32\msv1_0.dll (0000000077da0000 - 0000000077e31000: F:\WINDOWS\system32\RPCRT4.dll (0000000077e40000 - 0000000077e87000: F:\WINDOWS\system32\GDI32.dll (0000000077e90000 - 0000000077f06000: F:\WINDOWS\system32\SHLWAPI.dll (0000000077f10000 - 0000000077f21000: F:\WINDOWS\system32\Secur32.dll (0000000077f40000 - 0000000077feb000: F:\WINDOWS\system32\ADVAPI32.dll (0000000078130000 - 00000000781cb000: F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll (000000007c420000 - 000000007c4a7000: F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll (000000007c800000 - 000000007c8ff000: F:\WINDOWS\system32\kernel32.dll (000000007c900000 - 000000007c9b6000: F:\WINDOWS\system32\ntdll.dll (000000007c9c0000 - 000000007d1b2000: F:\WINDOWS\system32\SHELL32.dll (000000007e390000 - 000000007e421000: F:\WINDOWS\system32\USER32.dll *----> Statusdump voor subproces-ID 0x944 <----* eax=33ef0a31 ebx=00000000 ecx=00000000 edx=00000000 esi=33ef0a31 edi=0017c2f8 eip=00743c33 esp=0012f7d0 ebp=0017c2f8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Safari\WebKit.dll - functie: WebKit!RunAsLocalServer 00743c1e 7c24 jl WebKit!RunAsLocalServer+0xf84 (00743c44) 00743c20 10eb adc bl,ch 00743c22 0a3b or bh,[ebx] 00743c24 44 inc esp 00743c25 2414 and al,0x14 00743c27 7448 jz WebKit!RunAsLocalServer+0xfb1 (00743c71) 00743c29 8b6c2418 mov ebp,[esp+0x18] 00743c2d 85d2 test edx,edx 00743c2f 7507 jnz WebKit!RunAsLocalServer+0xf78 (00743c38) 00743c31 8bc6 mov eax,esi Fout ->00743c33 f7f3 div ebx 00743c35 83ca01 or edx,0x1 00743c38 03ca add ecx,edx 00743c3a 23cb and ecx,ebx 00743c3c 8b448d00 mov eax,[ebp+ecx*4] 00743c40 85c0 test eax,eax 00743c42 8d7c8d00 lea edi,[ebp+ecx*4] 00743c46 75d0 jnz WebKit!RunAsLocalServer+0xf58 (00743c18) 00743c48 8b442410 mov eax,[esp+0x10] 00743c4c 85c0 test eax,eax 00743c4e 7402 jz WebKit!RunAsLocalServer+0xf92 (00743c52) *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 0017c2f8 7feabdc0 37462be9 00530000 00030004 WebKit!RunAsLocalServer+0xf73 042444c7 00000000 00000000 00000000 00000000 0x7feabdc0 *----> Raw Stack Dump <----* 000000000012f7d0 6c fd 12 00 28 f8 12 00 - b8 f8 12 00 f8 c2 17 00 l...(........... 000000000012f7e0 00 00 00 00 50 db f3 7f - f8 c2 17 00 a0 eb f2 7f ....P........... 000000000012f7f0 e2 3c 74 00 04 f8 12 00 - 50 db f3 7f 6c fd 12 00 . Statusdump voor subproces-ID 0x11d0 <----* eax=77f69981 ebx=016afed0 ecx=00000006 edx=00000000 esi=00000000 edi=7ffd9000 eip=7c90eb94 esp=016afea8 ebp=016aff44 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\ntdll.dll - functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\ADVAPI32.dll - WARNING: Stack unwind information not available. Following frames may be wrong. *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\system32\kernel32.dll - ChildEBP RetAddr Args to Child 016aff44 77f69b26 00000002 016aff6c 00000000 ntdll!KiFastSystemCallRet 016affb4 7c80b6a3 00000000 7c9140bb 00000000 ADVAPI32!RegDeleteKeyW+0x2a2 016affec 00000000 77f69981 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 00000000016afea8 ab e9 90 7c 0b 95 80 7c - 02 00 00 00 d0 fe 6a 01 ...|...|......j. 00000000016afeb8 01 00 00 00 01 00 00 00 - 04 ff 6a 01 e0 2e 4b 01 ..........j...K. 00000000016afec8 40 65 fb 77 00 10 00 00 - 78 00 00 00 84 00 00 00 @e.w....x....... 00000000016afed8 c0 fe 6a 01 ec fb 67 99 - dc ff 6a 01 30 9a 83 7c ..j...g...j.0..| 00000000016afee8 d0 0a 81 7c 00 10 00 00 - 14 00 00 00 01 00 00 00 ...|............ 00000000016afef8 98 c4 15 00 00 00 00 00 - 00 00 00 00 00 a2 2f 4d ............../M 00000000016aff08 ff ff ff ff 00 10 00 00 - 00 90 fd 7f 00 e0 fd 7f ................ 00000000016aff18 dc ff 6a 01 04 ff 6a 01 - d0 fe 6a 01 06 00 00 00 ..j...j...j..... 00000000016aff28 02 00 00 00 c4 fe 6a 01 - 06 00 00 00 dc ff 6a 01 ......j.......j. 00000000016aff38 30 9a 83 7c 00 96 80 7c - 00 00 00 00 b4 ff 6a 01 0..|...|......j. 00000000016aff48 26 9b f6 77 02 00 00 00 - 6c ff 6a 01 00 00 00 00 &..w....l.j..... 00000000016aff58 e0 93 04 00 01 00 00 00 - bb 40 91 7c 00 00 00 00 .........@.|.... 00000000016aff68 00 00 00 00 78 00 00 00 - 84 00 00 00 00 10 00 00 ....x........... 00000000016aff78 e0 2e 4b 01 00 00 00 00 - 00 10 00 00 e8 3e 4b 01 ..K..........>K. 00000000016aff88 a0 66 fb 77 28 00 00 00 - 80 66 fb 77 00 10 00 00 .f.w(....f.w.... 00000000016aff98 00 00 00 00 a0 66 fb 77 - e0 2e 4b 01 80 66 fb 77 .....f.w..K..f.w 00000000016affa8 e5 03 00 00 00 10 00 00 - e8 3e 4b 01 ec ff 6a 01 .........>K...j. 00000000016affb8 a3 b6 80 7c 00 00 00 00 - bb 40 91 7c 00 00 00 00 ...|.....@.|.... 00000000016affc8 00 00 00 00 00 e0 fd 7f - 00 66 46 8a c0 ff 6a 01 .........fF...j. 00000000016affd8 a0 fd bc 88 ff ff ff ff - 30 9a 83 7c b0 b6 80 7c ........0..|...| *----> Statusdump voor subproces-ID 0x1228 <----* eax=00000000 ebx=00000000 ecx=0190fee8 edx=76b10200 esi=00000001 edi=02100210 eip=7c90eb94 esp=0190ff08 ebp=0190ffb4 iopl=0 nv up ei ng nz ac po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000296 functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 0190ffb4 7c80b6a3 00000000 02100210 02140210 ntdll!KiFastSystemCallRet 0190ffec 00000000 76b0aee7 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 000000000190ff08 ab e9 90 7c 21 af b0 76 - 02 00 00 00 6c ff 90 01 ...|!..v....l... 000000000190ff18 01 00 00 00 01 00 00 00 - 00 00 00 00 10 02 14 02 ................ 000000000190ff28 a8 ed 53 88 10 00 00 00 - d0 ba 21 8a a3 57 8a 80 ..S.......!..W.. 000000000190ff38 20 10 3e 88 a8 ed 53 88 - 00 d0 fd 7f 84 8c 83 98 .>...S......... 000000000190ff48 b9 1c 82 80 00 00 00 00 - 05 00 00 00 00 00 00 00 ................ 000000000190ff58 00 00 00 00 00 00 00 00 - 10 a7 81 80 00 00 00 00 ................ 000000000190ff68 00 00 00 00 a8 03 00 00 - b4 03 00 00 a8 ed 53 88 ..............S. 000000000190ff78 50 8d 83 98 00 00 00 00 - 00 00 00 00 01 ba 21 00 P.............!. 000000000190ff88 00 00 00 00 20 10 3e 88 - c1 1c 82 80 00 00 00 00 .... .>......... 000000000190ff98 00 00 00 00 00 00 00 00 - a1 1c 82 80 9c 8c 83 98 ................ 000000000190ffa8 35 ec a0 80 00 00 00 00 - 02 00 00 00 ec ff 90 01 5............... 000000000190ffb8 a3 b6 80 7c 00 00 00 00 - 10 02 10 02 10 02 14 02 ...|............ 000000000190ffc8 00 00 00 00 00 d0 fd 7f - 00 66 46 8a c0 ff 90 01 .........fF..... 000000000190ffd8 10 e5 4c 88 ff ff ff ff - 30 9a 83 7c b0 b6 80 7c ..L.....0..|...| 000000000190ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 e7 ae b0 76 ...............v 000000000190fff8 00 00 00 00 00 00 00 00 - c8 00 00 00 6a 01 00 00 ............j... 0000000001910008 ff ee ff ee 02 10 00 00 - 00 00 00 00 00 fe 00 00 ................ 0000000001910018 00 00 10 00 00 20 00 00 - 00 02 00 00 00 20 00 00 ..... ....... .. 0000000001910028 15 02 00 00 ff ef fd 7f - 0b 00 08 06 00 00 00 00 ................ 0000000001910038 00 00 00 00 00 00 00 00 - 00 00 00 00 98 05 91 01 ................ *----> Statusdump voor subproces-ID 0x1764 <----* eax=01cd8000 ebx=01f4fdcc ecx=01f4f940 edx=00001000 esi=00000000 edi=7ffd9000 eip=7c90eb94 esp=01f4fda4 ebp=01f4fe40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. *** WARNING: Unable to verify checksum for C:\Program Files\Safari\pthreadVC2.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Safari\pthreadVC2.dll - ChildEBP RetAddr Args to Child 01f4fe40 7c80a095 00000002 01f4fe7c 00000000 ntdll!KiFastSystemCallRet 01f4fe5c 10002f60 00000002 01f4fe7c 00000000 kernel32!WaitForMultipleObjects+0x18 ffffffff 00000000 00000000 00000000 00000000 pthreadVC2+0x2f60 *----> Raw Stack Dump <----* 0000000001f4fda4 ab e9 90 7c 0b 95 80 7c - 02 00 00 00 cc fd f4 01 ...|...|........ 0000000001f4fdb4 01 00 00 00 00 00 00 00 - 00 00 00 00 02 00 00 00 ................ 0000000001f4fdc4 68 75 d0 01 ec ad e9 7f - ec 04 00 00 00 05 00 00 hu.............. 0000000001f4fdd4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001f4fde4 00 00 01 00 00 00 3c 00 - 14 00 00 00 01 00 00 00 ......<......... 0000000001f4fdf4 00 00 00 00 00 00 00 00 - 10 00 00 00 ff ff 01 00 ................ 0000000001f4fe04 0d 00 00 00 00 00 00 00 - 00 90 fd 7f 00 c0 fd 7f ................ 0000000001f4fe14 4b 00 00 00 00 00 00 00 - cc fd f4 01 6c fe f4 01 K...........l... 0000000001f4fe24 02 00 00 00 c0 fd f4 01 - ff ff ff ff 9c ff f4 01 ................ 0000000001f4fe34 30 9a 83 7c 00 96 80 7c - 00 00 00 00 5c fe f4 01 0..|...|....\... 0000000001f4fe44 95 a0 80 7c 02 00 00 00 - 7c fe f4 01 00 00 00 00 ...|....|....... 0000000001f4fe54 ff ff ff ff 00 00 00 00 - ff ff ff ff 60 2f 00 10 ............`/.. 0000000001f4fe64 02 00 00 00 7c fe f4 01 - 00 00 00 00 ff ff ff ff ....|........... 0000000001f4fe74 84 70 d0 01 80 70 d0 01 - ec 04 00 00 00 05 00 00 .p...p.......... 0000000001f4fe84 00 00 00 00 00 00 00 00 - 4e 30 00 10 ff ff ff ff ........N0...... 0000000001f4fe94 23 5d 00 10 ec 04 00 00 - ff ff ff ff c4 fe f4 01 #].............. 0000000001f4fea4 40 5c 00 10 bc fe f4 01 - e0 42 3b 01 dc 42 3b 01 @\.......B;..B;. 0000000001f4feb4 ec ad e9 7f 00 00 00 00 - 80 70 d0 01 b8 fe f4 01 .........p...... 0000000001f4fec4 40 5c 00 10 bc fe f4 01 - f4 fe f4 01 0f 28 00 10 @\...........(.. 0000000001f4fed4 dc 42 3b 01 00 00 00 00 - c0 ad e9 7f c0 ad e9 7f .B;............. *----> Statusdump voor subproces-ID 0xee0 <----* eax=00000001 ebx=0280f860 ecx=78134c58 edx=150a0054 esi=00000000 edi=7ffd9000 eip=7c90eb94 esp=0280f838 ebp=0280f8d4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Safari\CoreFoundation.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Safari\PubSubDLL.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll - ChildEBP RetAddr Args to Child 0280f8d4 7c80a095 00000001 0280f918 00000000 ntdll!KiFastSystemCallRet 0280f8f0 6552cf5d 00000001 0280f918 00000000 kernel32!WaitForMultipleObjects+0x18 0280fa5c 6552d218 01cb0468 01dc9b50 00000000 CoreFoundation!CFRunLoopFinished+0x401 0280fa90 6552d2bc 65569924 00000000 20000000 CoreFoundation!CFRunLoopFinished+0x6bc 0280fab0 60001c52 f84e6d56 7e3999d4 01dd4cd8 CoreFoundation!CFRunLoopRun+0x26 0280ff48 600059c9 f84e6d6a 7e3999d4 7e399a02 PubSubDLL+0x1c52 0280ff74 781329bb 01dd4cd8 f8a3c71d 7e3999d4 PubSubDLL+0x59c9 0280ffac 78132a47 7e399a02 7c80b6a3 01d07600 MSVCR80!endthreadex+0x3b 0280ffec 00000000 781329e1 01d07600 00000000 MSVCR80!endthreadex+0xc7 *----> Raw Stack Dump <----* 000000000280f838 ab e9 90 7c 0b 95 80 7c - 01 00 00 00 60 f8 80 02 ...|...|....`... 000000000280f848 01 00 00 00 00 00 00 00 - 94 f8 80 02 f9 54 b8 7f .............T.. 000000000280f858 01 00 00 00 ed 10 90 7c - c8 04 00 00 05 00 00 00 .......|........ 000000000280f868 c4 f7 80 02 4c f8 80 02 - bc f8 80 02 18 ee 90 7c ....L..........| 000000000280f878 70 05 91 7c ff ff ff ff - 14 00 00 00 01 00 00 00 p..|............ 000000000280f888 00 00 00 00 00 00 00 00 - 10 00 00 00 d0 45 05 d0 .............E.. 000000000280f898 fb ff ff ff e8 9a dc 01 - 00 90 fd 7f 00 b0 fd 7f ................ 000000000280f8a8 74 ab 50 65 94 f8 80 02 - 60 f8 80 02 58 9b dc 01 t.Pe....`...X... 000000000280f8b8 01 00 00 00 54 f8 80 02 - 64 d3 52 65 3c ff 80 02 ....T...d.Re<... 000000000280f8c8 30 9a 83 7c 00 96 80 7c - 00 00 00 00 f0 f8 80 02 0..|...|........ 000000000280f8d8 95 a0 80 7c 01 00 00 00 - 18 f9 80 02 00 00 00 00 ...|............ 000000000280f8e8 53 71 1b 00 00 00 00 00 - 5c fa 80 02 5d cf 52 65 Sq......\...].Re 000000000280f8f8 01 00 00 00 18 f9 80 02 - 00 00 00 00 53 71 1b 00 ............Sq.. 000000000280f908 68 04 cb 01 ed 10 90 7c - 50 9b dc 01 e8 f9 80 02 h......|P....... 000000000280f918 c8 04 00 00 00 00 3c 00 - 91 0e 91 7c 08 06 3c 00 ......<....|..<. 000000000280f928 6d 05 91 7c dc 6c db 01 - d8 6c db 01 44 f9 80 02 m..|.l...l..D... 000000000280f938 00 00 00 00 c8 05 91 7c - 98 f7 de 01 10 fa 80 02 .......|........ 000000000280f948 51 05 91 7c 18 07 3c 00 - 6d 05 91 7c a4 f7 de 01 Q..|..<.m..|.... 000000000280f958 a0 f7 de 01 ff ff 00 00 - bc f8 80 02 39 4c 13 78 ............9L.x 000000000280f968 b4 f9 80 02 f0 01 3c 00 - 70 05 91 7c 80 00 00 00 ......<.p..|.... *----> Statusdump voor subproces-ID 0x125c <----* eax=7813286e ebx=01d07600 ecx=7c85a17f edx=0280f3ac esi=00000000 edi=00000000 eip=7c90eb94 esp=0357ff20 ebp=0357ff58 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 functie: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Safari\CFNetwork.dll - WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 0357ff58 6a51f029 00000780 00000001 00000004 ntdll!KiFastSystemCallRet 0357ff78 78132848 00000000 f974c701 00000000 CFNetwork!CFHTTPGetConnectionInfoForProxyURL+0x90c 0357ffb0 781328c8 7c80b6a3 01d07600 00000000 MSVCR80!endthread+0x4b 0357ffec 00000000 7813286e 01d07600 00000000 MSVCR80!endthread+0xcb *----> Raw Stack Dump <----* 000000000357ff20 a0 dc 90 7c cd d9 f4 77 - 80 07 00 00 00 00 00 00 ...|...w........ 000000000357ff30 00 00 00 00 00 00 00 00 - d8 61 fb 77 04 00 00 00 .........a.w.... 000000000357ff40 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000357ff50 c8 0b 56 6a 00 00 00 00 - 78 ff 57 03 29 f0 51 6a ..Vj....x.W.).Qj 000000000357ff60 80 07 00 00 01 00 00 00 - 04 00 00 00 00 00 00 00 ................ 000000000357ff70 00 00 00 00 80 07 00 00 - b0 ff 57 03 48 28 13 78 ..........W.H(.x 000000000357ff80 00 00 00 00 01 c7 74 f9 - 00 00 00 00 64 a2 85 7c ......t.....d..| 000000000357ff90 00 76 d0 01 84 ff 57 03 - 84 ff 57 03 dc ff 57 03 .v....W...W...W. 000000000357ffa0 dc ff 57 03 d9 8c 13 78 - 29 73 38 82 00 00 00 00 ..W....x)s8..... 000000000357ffb0 ec ff 57 03 c8 28 13 78 - a3 b6 80 7c 00 76 d0 01 ..W..(.x...|.v.. 000000000357ffc0 00 00 00 00 64 a2 85 7c - 00 76 d0 01 00 a0 fd 7f ....d..|.v...... 000000000357ffd0 00 66 46 8a c0 ff 57 03 - 28 71 9d 88 ff ff ff ff .fF...W.(q...... 000000000357ffe0 30 9a 83 7c b0 b6 80 7c - 00 00 00 00 00 00 00 00 0..|...|........ 000000000357fff0 00 00 00 00 6e 28 13 78 - 00 76 d0 01 00 00 00 00 ....n(.x.v...... 0000000003580000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000003580010 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000003580020 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000003580030 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000003580040 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000003580050 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................