EurekaLog 6.0.21 Application: ------------------------------------------------------- 1.1 Start Date : Mon, 16 May 2011 16:14:01 -0400 1.2 Name/Description: MediaMonkey.exe - (MediaMonke) 1.3 Version Number : 4.0.0.1375 1.4 Parameters : 1.5 Compilation Date: Sat, 14 May 2011 21:29:20 -0400 1.6 Up Time : 2 seconds Exception: ----------------------------------------------------------------------------------------------------------------- 2.1 Date : Mon, 16 May 2011 16:14:04 -0400 2.2 Address : 0066811F 2.3 Module Name : MediaMonkey.exe - (MediaMonke) 2.4 Module Version: 4.0.0.1375 2.5 Type : EAccessViolation 2.6 Message : Access violation at address 0066811F in module 'MediaMonkey.exe'. Read of address 00000000. 2.7 ID : 82BF 2.8 Count : 1 2.9 Status : New 2.10 Note : Ludek User: ------------------------------------------------------- 3.1 ID : Rusty 3.2 Name : 3.3 Email : rs@mediamonkey.com 3.4 Company : 3.5 Privileges: SeShutdownPrivilege - OFF SeChangeNotifyPrivilege - ON SeUndockPrivilege - OFF SeIncreaseWorkingSetPrivilege - OFF SeTimeZonePrivilege - OFF Active Controls: ---------------------------------- 4.1 Form Class : TFMainWindow 4.2 Form Text : 4.3 Control Class: TComboBoxPlus 4.4 Control Text : Computer: ---------------------------------------------------------------------------- 5.1 Name : PUZZLE30 5.2 Total Memory : 3967 Mb 5.3 Free Memory : 1558 Mb 5.4 Total Disk : 292.97 Gb 5.5 Free Disk : 136.09 Gb 5.6 System Up Time: 5 days, 7 hours, 22 minutes, 9 seconds 5.7 Processor : AMD Athlon(tm) Dual Core Processor 5050e 5.8 Display Mode : 1920 x 1200, 32 bit 5.9 Display DPI : 96 5.10 Video Card : NVIDIA GeForce 6150 (driver 8.17.12.5896 - RAM 128 MB) 5.11 Printer : Brother MFC-7440N Printer (driver 1.08) Operating System: -------------------------------------------- 6.1 Type : Microsoft Windows 7 (64 bit) 6.2 Build # : 7601 6.3 Update : Service Pack 1 6.4 Language: English 6.5 Charset : 0 Network: --------------------------------------------------- 7.1 IP Address: 192.168.000.118 - 169.254.140.137 7.2 Submask : 255.255.255.000 - 255.255.000.000 7.3 Gateway : 192.168.000.001 - 000.000.000.000 7.4 DNS 1 : 192.168.000.001 - 000.000.000.000 7.5 DNS 2 : 000.000.000.000 - 000.000.000.000 7.6 DHCP : ON - OFF DebugView: ------------------------------------------------------------------------------------------------------------------------------------------------ 8.1 : 458525.856s - PID:15812 - Win7Tools - Windows 7 detected 0.000s - PID:15812 - Win7Tools - running on Windows Vista or later - initialize DWM 0.000s - PID:15812 - Win7Tools - Windows Vista DWM initialized 0.000s - PID:15812 - Win7Tools - Windows 7 DWM initialized 0.000s - PID:15812 - Win7Tools - Shell initialized 0.016s - PID:15812 - InstanceManager - registering class. 0.016s - PID:15812 - InstanceManager - creating mutex. 0.016s - PID:15812 - InstanceManager - creating window. 0.016s - PID:15812 - InstanceManager - releasing mutex. 0.016s - PID:15812 - Received command line:_'"C:\Program Files (x86)\MediaMonkey4\MediaMonkey.exe" ' 0.016s - PID:15812 - Going to read brand data. 0.016s - PID:15812 - Going to init Application. 0.063s - PID:15812 - Application was inicialized 0.063s - PID:15812 - Version:_4.0.0.1375 0.078s - PID:15812 - Splash screen was shown. 0.312s - PID:15812 - Forms:_Received WM_ACTIVATEAPP 0.312s - PID:15812 - MainForm:_NC Activate + 1.779s - PID:15812 - User uses Gold version (registered user) 1.779s - PID:15812 - Creating main form. 1.841s - PID:15812 - Going to read ini settings. 1.841s - PID:15812 - DB path:_C:\Users\Rusty\AppData\Roaming\MediaMonkey\MM.DB , default:_ , MyDir:_C:\Program Files (x86)\MediaMonkey4\ 1.857s - PID:15812 - Going to set a language. 1.857s - PID:15812 - Installing language:_http://www.mediamonkey.com/sw/lang/4.0/fr.mmip->C:\Users\Rusty\AppData\Local\Temp\FBA2.mmip 2.512s - PID:15812 - Extensions:_storing information about installed products. 2.512s - PID:15812 - Extensions:_loading "install.ini" file from "C:\Users\Rusty\AppData\Local\Temp\FBA2.mmip" extension. 2.527s - PID:15812 - Extensions:_reading "install.ini" section keys and values. 2.527s - PID:15812 - Extensions:_storing uninstall information. 2.527s - PID:15812 - Extensions:_extracting uninstall files to the "C:\ProgramData\MediaMonkey\Extensions\fr_language\" location. 2.527s - PID:15812 - Extensions:_copying files from installer. 2.527s - PID:15812 - Extensions:_extracting installation file "C:\ProgramData\MediaMonkey\Locale\fr\LC_MESSAGES\context.mo". 2.543s - PID:15812 - Extensions:_copying files from installer. 2.543s - PID:15812 - Extensions:_extracting installation file "C:\ProgramData\MediaMonkey\Locale\fr\LC_MESSAGES\DB.mo". 2.543s - PID:15812 - Extensions:_copying files from installer. 2.543s - PID:15812 - Extensions:_extracting installation file "C:\ProgramData\MediaMonkey\Locale\fr\LC_MESSAGES\default.mo". 2.543s - PID:15812 - Extensions:_copying files from installer. 2.543s - PID:15812 - Moving file to trash:_C:\ProgramData\MediaMonkey\Locale\fr\LC_MESSAGES\language.mo 2.543s - PID:15812 - Extensions:_extracting installation file "C:\ProgramData\MediaMonkey\Locale\fr\LC_MESSAGES\language.mo". Request: ---------------------------------------------------------------------------------------------- 8.1 : Restarted MediaMonkey after having switched languages to 'Francais (download)'. --> AV Call Stack Information: ------------------------------------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method |Line | ------------------------------------------------------------------------------------------------------------------- |*Exception Thread: ID=23704; Priority=0; Class=; [Main] | |-----------------------------------------------------------------------------------------------------------------| |0066811F|MediaMonkey.exe|ZipUtils.pas |TZipFile |ExtractFileTo |546[14] | |00667F7C|MediaMonkey.exe|ZipUtils.pas |TZipFile |ExtractFileTo |532[0] | |007A76C2|MediaMonkey.exe|Extensions.pas | |InstallExtension |1515[161]| |007A7028|MediaMonkey.exe|Extensions.pas | |InstallExtension |1354[0] | |007A6E76|MediaMonkey.exe|Extensions.pas | |InstallLanguage |1326[13] | |007A6D94|MediaMonkey.exe|Extensions.pas | |InstallLanguage |1313[0] | |007A6B86|MediaMonkey.exe|Extensions.pas | |CheckLanguage |1299[6] | |007A6B14|MediaMonkey.exe|Extensions.pas | |CheckLanguage |1293[0] | |007C016F|MediaMonkey.exe|MP3Datab.pas |TFMainWindow |FormCreate |2678[206]| |004F2E93|MediaMonkey.exe|Forms.pas |TCustomForm |DoCreate |3385[10] | |004F2DC0|MediaMonkey.exe|Forms.pas |TCustomForm |DoCreate |3375[0] | |00AB055E|MediaMonkey.exe|FormPlus.pas |TFormPlus |DoCreate |227[1] | |00AB053C|MediaMonkey.exe|FormPlus.pas |TFormPlus |DoCreate |226[0] | |007F0212|MediaMonkey.exe|MP3Datab.pas |TFMainWindow |DoCreate |18836[1] | |004F2949|MediaMonkey.exe|Forms.pas |TCustomForm |AfterConstruction |3262[1] | |00406355|MediaMonkey.exe|System.pas | |_AfterConstruction |10325[2] | |00406338|MediaMonkey.exe|System.pas | |_AfterConstruction |10323[0] | |007EFEBA|MediaMonkey.exe|MP3Datab.pas |TFMainWindow |Create |18796[6] | |004FF99D|MediaMonkey.exe|Forms.pas |TApplication |CreateForm |10177[13]| |004FF924|MediaMonkey.exe|Forms.pas |TApplication |CreateForm |10164[0] | |00B579CC|MediaMonkey.exe|MediaMonkey.dpr | | |451[125] | |767333C8|kernel32.dll | | |GetEnvironmentVariableA | | |-----------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=12016; Priority=0; Class=TODSThread | |-----------------------------------------------------------------------------------------------------------------| |750FDF0D|KERNELBASE.dll | | |MapViewOfFile | | |7510077E|KERNELBASE.dll | | |WaitForSingleObjectEx | | |7673118F|kernel32.dll | | |WaitForSingleObjectEx | | |76731151|kernel32.dll | | |WaitForSingleObjectEx | | |76731143|kernel32.dll | | |Sleep | | |76731136|kernel32.dll | | |Sleep | | |004575AD|MediaMonkey.exe|ODS.pas |TODSThread |Execute |405[75] | |00445017|MediaMonkey.exe|Classes.pas | |ThreadProc |11165[8] | |0040447C|MediaMonkey.exe|System.pas | |_FreeMem |3030[6] | |004070E8|MediaMonkey.exe|System.pas | |ThreadWrapper |13579[33]| |767333C8|kernel32.dll | | |GetEnvironmentVariableA | | |-----------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=23704; Priority=0; Class=; [Main] | |-----------------------------------------------------------------------------------------------------------------| |00B57673|MediaMonkey.exe|MediaMonkey.dpr | | |326[0] | |767333C8|kernel32.dll | | |GetEnvironmentVariableA | | |-----------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=8124; Priority=0; Class=TWorkerThread | |-----------------------------------------------------------------------------------------------------------------| |004209B4|MediaMonkey.exe|SysUtils.pas |TThreadLocalCounter |Delete |20834[0] | |00420D0D|MediaMonkey.exe|SysUtils.pas |TMultiReadExclusiveWriteSynchronizer|EndWrite |21037[21]| |00445017|MediaMonkey.exe|Classes.pas | |ThreadProc |11165[8] | |0040447C|MediaMonkey.exe|System.pas | |_FreeMem |3030[6] | |004070E8|MediaMonkey.exe|System.pas | |ThreadWrapper |13579[33]| |767333C8|kernel32.dll | | |GetEnvironmentVariableA | | |-----------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=23704; Priority=0; Class=; [Main] | |-----------------------------------------------------------------------------------------------------------------| |0040D1AC|MediaMonkey.exe|Windows.pas | |ResumeThread |31966[1] | |00445468|MediaMonkey.exe|Classes.pas |TThread |InternalStart |11332[5] | |00445414|MediaMonkey.exe|Classes.pas |TThread |InternalStart |11327[0] | |004452B6|MediaMonkey.exe|Classes.pas |TThread |AfterConstruction |11262[2] | |00406355|MediaMonkey.exe|System.pas | |_AfterConstruction |10325[2] | |00406338|MediaMonkey.exe|System.pas | |_AfterConstruction |10323[0] | |00A71021|MediaMonkey.exe|VirtualTrees.pas|TWorkerThread |Create |6493[4] | |00A70FCC|MediaMonkey.exe|VirtualTrees.pas|TWorkerThread |Create |6489[0] | |00A70F44|MediaMonkey.exe|VirtualTrees.pas| |AddThreadReference |6454[10] | |00A70F04|MediaMonkey.exe|VirtualTrees.pas| |AddThreadReference |6444[0] | |00A811DD|MediaMonkey.exe|VirtualTrees.pas|TBaseVirtualTree |Create |14594[97]| |00A80D9C|MediaMonkey.exe|VirtualTrees.pas|TBaseVirtualTree |Create |14497[0] | |00AA869B|MediaMonkey.exe|VirtualTrees.pas|TCustomVirtualStringTree |Create |35681[1] | |0043C7E9|MediaMonkey.exe|Classes.pas | |CreateComponent |7408[15] | |0043C738|MediaMonkey.exe|Classes.pas | |CreateComponent |7393[0] | |0043CA1C|MediaMonkey.exe|Classes.pas |TReader |ReadComponent |7454[11] | |0043C994|MediaMonkey.exe|Classes.pas |TReader |ReadComponent |7443[0] | |0043CCD6|MediaMonkey.exe|Classes.pas |TReader |ReadDataInner |7520[9] | |0043CC48|MediaMonkey.exe|Classes.pas |TReader |ReadDataInner |7511[0] | |0043CC3F|MediaMonkey.exe|Classes.pas |TReader |ReadData |7505[11] | |0043CBD4|MediaMonkey.exe|Classes.pas |TReader |ReadData |7494[0] | |00446332|MediaMonkey.exe|Classes.pas |TComponent |ReadState |12125[1] | |00446320|MediaMonkey.exe|Classes.pas |TComponent |ReadState |12124[0] | |005143B7|MediaMonkey.exe|Controls.pas |TControl |ReadState |5482[3] | |00514378|MediaMonkey.exe|Controls.pas |TControl |ReadState |5479[0] | |0051A120|MediaMonkey.exe|Controls.pas |TWinControl |ReadState |8438[3] | |0043CAB1|MediaMonkey.exe|Classes.pas |TReader |ReadComponent |7466[23] | |0043C994|MediaMonkey.exe|Classes.pas |TReader |ReadComponent |7443[0] | |0043CCD6|MediaMonkey.exe|Classes.pas |TReader |ReadDataInner |7520[9] | |0043CC48|MediaMonkey.exe|Classes.pas |TReader |ReadDataInner |7511[0] | |0043CC3F|MediaMonkey.exe|Classes.pas |TReader |ReadData |7505[11] | |0043CBD4|MediaMonkey.exe|Classes.pas |TReader |ReadData |7494[0] | |00446332|MediaMonkey.exe|Classes.pas |TComponent |ReadState |12125[1] | |00446320|MediaMonkey.exe|Classes.pas |TComponent |ReadState |12124[0] | |005143B7|MediaMonkey.exe|Controls.pas |TControl |ReadState |5482[3] | |00514378|MediaMonkey.exe|Controls.pas |TControl |ReadState |5479[0] | |0051A120|MediaMonkey.exe|Controls.pas |TWinControl |ReadState |8438[3] | |0043CAB1|MediaMonkey.exe|Classes.pas |TReader |ReadComponent |7466[23] | |0043C994|MediaMonkey.exe|Classes.pas |TReader |ReadComponent |7443[0] | |0043CCD6|MediaMonkey.exe|Classes.pas |TReader |ReadDataInner |7520[9] | |0043CC48|MediaMonkey.exe|Classes.pas |TReader |ReadDataInner |7511[0] | |0043CC3F|MediaMonkey.exe|Classes.pas |TReader |ReadData |7505[11] | |0043CBD4|MediaMonkey.exe|Classes.pas |TReader |ReadData |7494[0] | |00446332|MediaMonkey.exe|Classes.pas |TComponent |ReadState |12125[1] | |00446320|MediaMonkey.exe|Classes.pas |TComponent |ReadState |12124[0] | |005143B7|MediaMonkey.exe|Controls.pas |TControl |ReadState |5482[3] | |00514378|MediaMonkey.exe|Controls.pas |TControl |ReadState |5479[0] | |0051A120|MediaMonkey.exe|Controls.pas |TWinControl |ReadState |8438[3] | |0043CAB1|MediaMonkey.exe|Classes.pas |TReader |ReadComponent |7466[23] | |0043C994|MediaMonkey.exe|Classes.pas |TReader |ReadComponent |7443[0] | |0043CCD6|MediaMonkey.exe|Classes.pas |TReader |ReadDataInner |7520[9] | |0043CC48|MediaMonkey.exe|Classes.pas |TReader |ReadDataInner |7511[0] | |0043CC0F|MediaMonkey.exe|Classes.pas |TReader |ReadData |7499[5] | |0043CBD4|MediaMonkey.exe|Classes.pas |TReader |ReadData |7494[0] | |00446332|MediaMonkey.exe|Classes.pas |TComponent |ReadState |12125[1] | |00446320|MediaMonkey.exe|Classes.pas |TComponent |ReadState |12124[0] | |005143B7|MediaMonkey.exe|Controls.pas |TControl |ReadState |5482[3] | |00514378|MediaMonkey.exe|Controls.pas |TControl |ReadState |5479[0] | |0051A120|MediaMonkey.exe|Controls.pas |TWinControl |ReadState |8438[3] | |0051A0F8|MediaMonkey.exe|Controls.pas |TWinControl |ReadState |8435[0] | |004F329D|MediaMonkey.exe|Forms.pas |TCustomForm |ReadState |3487[13] | |0043DC93|MediaMonkey.exe|Classes.pas |TReader |ReadRootComponent |7907[37] | |0043DAB8|MediaMonkey.exe|Classes.pas |TReader |ReadRootComponent |7870[0] | |0043A323|MediaMonkey.exe|Classes.pas |TStream |ReadComponent |6077[3] | |0043A2EC|MediaMonkey.exe|Classes.pas |TStream |ReadComponent |6074[0] | |00434638|MediaMonkey.exe|Classes.pas | |InternalReadComponentRes|3055[7] | |004345C8|MediaMonkey.exe|Classes.pas | |InternalReadComponentRes|3048[0] | |004347F8|MediaMonkey.exe|Classes.pas | |InitComponent |3112[4] | |00434788|MediaMonkey.exe|Classes.pas | |InitComponent |3108[0] | |0043488D|MediaMonkey.exe|Classes.pas | |InitInheritedComponent |3124[6] | |00434828|MediaMonkey.exe|Classes.pas | |InitInheritedComponent |3118[0] | |004F27B3|MediaMonkey.exe|Forms.pas |TCustomForm |Create |3233[17] | |004F26DC|MediaMonkey.exe|Forms.pas |TCustomForm |Create |3216[0] | |00AB03BB|MediaMonkey.exe|FormPlus.pas |TFormPlus |Create |157[18] | |00AB0368|MediaMonkey.exe|FormPlus.pas |TFormPlus |Create |139[0] | |007EFE7F|MediaMonkey.exe|MP3Datab.pas |TFMainWindow |Create |18791[1] | |004FF99D|MediaMonkey.exe|Forms.pas |TApplication |CreateForm |10177[13]| |004FF924|MediaMonkey.exe|Forms.pas |TApplication |CreateForm |10164[0] | |00B579CC|MediaMonkey.exe|MediaMonkey.dpr | | |451[125] | |767333C8|kernel32.dll | | |GetEnvironmentVariableA | | ------------------------------------------------------------------------------------------------------------------- Modules Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Handle |Name |Description |Version |Size |Modified |Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |00400000|MediaMonkey.exe |MediaMonke |4.0.0.1375 |11649680|2011-05-15 03:38:08|C:\Program Files (x86)\MediaMonkey4 | |05200000|sqlite3MM.dll | | |794624 |2011-05-15 03:33:26|C:\Program Files (x86)\MediaMonkey4 | |10000000|MMHelper.dll | | |53904 |2011-05-15 03:38:30|C:\Program Files (x86)\MediaMonkey4 | |67AB0000|ieframe.dll |Internet Browser |9.0.8112.16421 |9702400 |2011-05-02 11:17:40|C:\Windows\SysWOW64 | |6BFA0000|opengl32.dll |OpenGL Client DLL |6.1.7600.16385 |791552 |2009-07-13 21:16:14|C:\Windows\system32 | |6E580000|Fwpuclnt.dll |FWP/IPsec User-Mode API |6.1.7601.17514 |216576 |2010-11-20 08:19:04|C:\Windows\system32 | |6E5C0000|GLU32.dll |OpenGL Utility Library DLL |6.1.7600.16385 |130048 |2009-07-13 21:15:24|C:\Windows\system32 | |6E690000|ntshrui.dll |Shell extensions for sharing |6.1.7601.17514 |442880 |2010-11-20 08:20:48|C:\Windows\system32 | |6E8E0000|mdnsNSP.dll |Bonjour Namespace Provider |2.0.4.0 |152864 |2010-10-07 13:23:00|C:\Program Files (x86)\Bonjour | |6E910000|EhStorShell.dll |Windows Enhanced Storage Shell Extension DLL |6.1.7600.16385 |189952 |2009-07-13 21:15:16|C:\Windows\system32 | |71260000|PROPSYS.dll |Microsoft Property System |7.0.7601.17514 |988160 |2010-11-20 08:20:58|C:\Windows\system32 | |71410000|uxtheme.dll |Microsoft UxTheme Library |6.1.7600.16385 |245760 |2009-07-13 21:11:26|C:\Windows\system32 | |71520000|dwmapi.dll |Microsoft Desktop Window Manager API |6.1.7600.16385 |67072 |2009-07-13 21:15:14|C:\Windows\system32 | |71570000|slc.dll |Software Licensing Client Dll |6.1.7600.16385 |27136 |2009-07-13 21:16:16|C:\Windows\system32 | |71640000|msimg32.dll |GDIEXT Client DLL |6.1.7600.16385 |4608 |2009-07-13 21:15:46|C:\Windows\system32 | |71870000|winspool.drv |Windows Spooler Driver |6.1.7601.17514 |320000 |2010-11-20 08:16:52|C:\Windows\system32 | |71B70000|comctl32.dll |User Experience Controls Library |6.10.7601.17514 |1680896 |2010-11-20 07:55:10|C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2| |71D70000|apphelp.dll |Application Compatibility Client Library |6.1.7601.17514 |295936 |2010-11-20 08:18:04|C:\Windows\system32 | |72070000|DNSAPI.dll |DNS Client API DLL |6.1.7601.17570 |270336 |2011-03-03 01:38:02|C:\Windows\system32 | |720C0000|wship6.dll |Winsock2 Helper DLL (TL/IPv6) |6.1.7600.16385 |10752 |2009-07-13 21:16:22|C:\Windows\System32 | |720D0000|rsaenh.dll |Microsoft Enhanced Cryptographic Provider |6.1.7600.16385 |242936 |2009-07-13 21:17:56|C:\Windows\system32 | |72110000|CRYPTSP.dll |Cryptographic Service Provider API |6.1.7600.16385 |78848 |2009-07-13 21:15:08|C:\Windows\system32 | |72170000|srvcli.dll |Server Service Client DLL |6.1.7601.17514 |90112 |2010-11-20 08:21:28|C:\Windows\system32 | |721C0000|WINNSI.DLL |Network Store Information RPC interface |6.1.7600.16385 |16896 |2009-07-13 21:16:20|C:\Windows\system32 | |721D0000|Iphlpapi.DLL |IP Helper API |6.1.7601.17514 |103936 |2010-11-20 08:19:24|C:\Windows\system32 | |721F0000|wshtcpip.dll |Winsock2 Helper DLL (TL/IPv4) |6.1.7600.16385 |9216 |2009-07-13 21:16:22|C:\Windows\System32 | |72200000|mswsock.dll |Microsoft Windows Sockets 2.0 Service Provider |6.1.7601.17514 |232448 |2010-11-20 08:19:58|C:\Windows\system32 | |731C0000|winmm.dll |MCI API DLL |6.1.7601.17514 |194048 |2010-11-20 08:21:38|C:\Windows\system32 | |73240000|version.dll |Version Checking and File Installation Libraries|6.1.7600.16385 |21504 |2009-07-13 21:16:18|C:\Windows\system32 | |73360000|wsock32.dll |Windows Socket 32-Bit DLL |6.1.7600.16385 |15360 |2009-07-13 21:16:22|C:\Windows\system32 | |735C0000|cscapi.dll |Offline Files Win32 API |6.1.7601.17514 |34816 |2010-11-20 08:18:26|C:\Windows\system32 | |73650000|olepro32.dll | |6.1.7601.17514 |90112 |2010-11-20 08:20:50|C:\Windows\system32 | |73670000|WindowsCodecs.dll|Microsoft Windows Codecs Library |6.1.7601.17514 |1010688 |2010-11-20 08:21:38|C:\Windows\system32 | |73770000|mpr.dll |Multiple Provider Router DLL |6.1.7600.16385 |64000 |2009-07-13 21:15:42|C:\Windows\system32 | |73AD0000|tapi32.dll |MicrosoftR Windows(TM) Telephony API Client DLL |6.1.7600.16385 |192000 |2009-07-13 21:16:16|C:\Windows\system32 | |73B30000|oleacc.dll |Active Accessibility Core Component |7.0.0.0 |233472 |2009-07-13 21:16:14|C:\Windows\system32 | |73C90000|SXS.DLL |Fusion 2.5 |6.1.7601.17514 |380416 |2010-11-20 08:21:28|C:\Windows\system32 | |73E40000|DCIMAN32.dll |DCI Manager |6.1.7600.16385 |10240 |2009-07-13 21:15:10|C:\Windows\system32 | |73E50000|DDRAW.dll |Microsoft DirectDraw |6.1.7600.16385 |531968 |2009-07-13 21:15:12|C:\Windows\system32 | |74650000|rasadhlp.dll |Remote Access AutoDial Helper |6.1.7600.16385 |11776 |2009-07-13 21:16:14|C:\Windows\system32 | |74660000|RpcRtRemote.dll |Remote RPC Extension |6.1.7601.17514 |46080 |2010-11-20 08:21:04|C:\Windows\system32 | |74BC0000|CRYPTBASE.dll |Base cryptographic API DLL |6.1.7600.16385 |36864 |2009-07-13 21:15:08|C:\Windows\syswow64 | |74BD0000|SspiCli.dll |Security Support Provider Interface |6.1.7601.17514 |96768 |2010-11-20 08:08:58|C:\Windows\syswow64 | |74C30000|urlmon.dll |OLE32 Extensions for Win32 |9.0.8112.16421 |1102336 |2011-05-02 11:17:40|C:\Windows\syswow64 | |74D40000|GDI32.dll |GDI Client DLL |6.1.7601.17514 |311296 |2010-11-20 08:08:52|C:\Windows\syswow64 | |74DE0000|WS2_32.dll |Windows Socket 2.0 32-Bit DLL |6.1.7601.17514 |206848 |2010-11-20 08:21:40|C:\Windows\syswow64 | |74E20000|USER32.dll |Multi-User Windows USER API Client DLL |6.1.7601.17514 |833024 |2010-11-20 08:08:58|C:\Windows\syswow64 | |74F20000|iertutil.dll |Run time utility for Internet Explorer |9.0.8112.16421 |1785344 |2011-05-02 11:17:40|C:\Windows\syswow64 | |750E0000|Normaliz.dll |Unicode Normalization DLL |6.1.7600.16385 |2048 |2009-07-13 21:09:02|C:\Windows\syswow64 | |750F0000|KERNELBASE.dll |Windows NT BASE API Client DLL |6.1.7601.17514 |269824 |2010-11-20 08:08:58|C:\Windows\syswow64 | |75140000|DEVOBJ.dll |Device Information Set DLL |6.1.7600.16385 |64512 |2009-07-13 21:15:12|C:\Windows\syswow64 | |75160000|NSI.dll |NSI User-mode interface DLL |6.1.7600.16385 |8704 |2009-07-13 21:16:12|C:\Windows\syswow64 | |75170000|SETUPAPI.dll |Windows Setup API |6.1.7601.17514 |1667584 |2010-11-20 08:21:16|C:\Windows\syswow64 | |75310000|shell32.dll |Windows Shell Common Dll |6.1.7601.17514 |12872192|2010-11-20 08:21:20|C:\Windows\syswow64 | |75F60000|oleaut32.dll | |6.1.7601.17514 |571904 |2010-11-20 08:20:50|C:\Windows\syswow64 | |75FF0000|RPCRT4.dll |Remote Procedure Call Runtime |6.1.7601.17514 |663040 |2010-11-20 08:08:58|C:\Windows\syswow64 | |760E0000|USP10.dll |Uniscribe Unicode script processor |1.626.7601.17514 |626176 |2010-11-20 08:21:34|C:\Windows\syswow64 | |76200000|MSCTF.dll |MSCTF Server DLL |6.1.7600.16385 |828928 |2009-07-13 21:15:44|C:\Windows\syswow64 | |76420000|ole32.dll |Microsoft OLE for Windows |6.1.7601.17514 |1414144 |2010-11-20 08:20:50|C:\Windows\syswow64 | |765E0000|msvcrt.dll |Windows NT CRT DLL |7.0.7600.16385 |690688 |2009-07-13 21:15:52|C:\Windows\syswow64 | |76690000|CLBCatQ.DLL |COM+ Configuration Catalog |2001.12.8530.16385|522240 |2009-07-13 21:15:04|C:\Windows\syswow64 | |76720000|kernel32.dll |Windows NT BASE API Client DLL |6.1.7601.17514 |837632 |2010-11-20 08:08:58|C:\Windows\syswow64 | |76830000|ADVAPI32.dll |Advanced Windows 32 Base API |6.1.7601.17514 |640512 |2010-11-20 08:18:04|C:\Windows\syswow64 | |768D0000|SHLWAPI.dll |Shell Light-weight Utility Library |6.1.7601.17514 |350208 |2010-11-20 08:21:20|C:\Windows\syswow64 | |76930000|imm32.dll |Multi-User Windows IMM32 API Client DLL |6.1.7601.17514 |119808 |2010-11-20 08:08:52|C:\Windows\syswow64 | |76990000|CFGMGR32.dll |Configuration Manager DLL |6.1.7601.17514 |145920 |2010-11-20 08:18:14|C:\Windows\syswow64 | |769C0000|LPK.dll |Language Pack |6.1.7600.16385 |25600 |2009-07-13 21:11:24|C:\Windows\syswow64 | |76A60000|sechost.dll |Host for SCM/SDDL/LSA Lookup APIs |6.1.7600.16385 |92160 |2009-07-13 21:16:14|C:\Windows\SysWOW64 | |76A80000|comdlg32.dll |Common Dialogs DLL |6.1.7601.17514 |485888 |2010-11-20 08:18:24|C:\Windows\syswow64 | |76B00000|wininet.dll |Internet Extensions for Win32 |9.0.8112.16421 |1126912 |2011-05-02 11:17:40|C:\Windows\syswow64 | |774B0000|PSAPI.DLL |Process Status Helper |6.1.7600.16385 |6144 |2009-07-13 21:16:14|C:\Windows\syswow64 | |774E0000|ntdll.dll |NT Layer DLL |6.1.7601.17514 |1292096 |2010-11-20 08:24:36|C:\Windows\SysWOW64 | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Processes Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory|Priority |Threads|Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |0 |[System Process] | | |0 | |2 | | |4 |System | | |0 |Normal |107 | | |268 |smss.exe | | |0 |Above-Normal|2 | | |380 |csrss.exe | | |0 |High |9 | | |440 |wininit.exe |Windows Start-Up Application |6.1.7600.16385|0 |High |3 | | |464 |csrss.exe | | |0 |High |11 | | |504 |services.exe | | |0 |Normal |13 | | |532 |lsass.exe | | |0 |Normal |9 | | |540 |lsm.exe | | |0 |Normal |10 | | |584 |winlogon.exe | | |0 |High |3 | | |680 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |10 | | |748 |nvvsvc.exe | | |0 |Normal |5 | | |788 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |9 | | |796 |BrMfcWnd.exe |Brother Status Monitor MFC Application |2.2.0.16 |0 |Normal |3 |C:\Program Files (x86)\Brother\Brmfcmon | |836 |MsMpEng.exe | | |0 |Normal |34 | | |944 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |23 | | |976 |SearchIndexer.exe |Microsoft Windows Search Indexer |7.0.7600.16385|0 |Normal |15 | | |984 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |30 | | |1008 |KeePass.exe |KeePass Password Safe 1.18 |1.1.8.0 |0 |Normal |3 |K:\Apps\Keepass | |1020 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |41 | | |1048 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |26 | | |1120 |nvvsvc.exe | | |0 |Normal |5 | | |1184 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |21 | | |1236 |PStart.exe |PStart personal start menu |2.11.0.5 |0 |Normal |4 |K:\ | |1248 |NisSrv.exe | | |0 |Normal |6 | | |1300 |spoolsv.exe | | |0 |Normal |19 | | |1328 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |18 | | |1492 |AppleMobileDeviceService.exe| | |0 |Normal |5 | | |1572 |iTunesHelper.exe |iTunesHelper |10.2.1.1 |0 |Normal |12 |C:\Program Files (x86)\iTunes | |1600 |pidgin-portable.exe |Pidgin |2.7.9.0 |0 |Normal |14 |Q:\Apps\PidginPortable\App\Pidgin | |1648 |jusched.exe | | |0 |Normal |5 | | |1672 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |32 | | |1720 |explorer.exe |Windows Explorer |6.1.7601.17567|0 |Normal |43 | | |1724 |MSCamS64.exe | | |0 |Normal |6 | | |1820 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |13 | | |1848 |TeamViewer_Service.exe | | |0 |Normal |4 | | |1880 |sidebar.exe | | |0 |Normal |16 | | |2012 |TrueCrypt.exe | | |0 |Normal |4 | | |2320 |thunderbird.exe |Thunderbird |1.9.2.4121 |0 |Normal |21 |Q:\Apps\ThunderbirdPortable\App\thunderbird | |2348 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |5 | | |2364 |brccMCtl.exe |Control Center 3 Main Program |3.4.16.7 |0 |Normal |3 |C:\Program Files (x86)\Brother\ControlCenter3 | |2368 |plugin-container.exe |Plugin Container for Firefox |2.0.1.4120 |0 |Normal |18 |K:\Apps\FirefoxPortable\App\firefox | |2416 |iPodService.exe | | |0 |Normal |12 | | |2492 |msseces.exe | | |0 |Normal |8 | | |2500 |PidginPortable.exe |Pidgin Portable |1.6.9.0 |0 |Normal |4 |Q:\Apps\PidginPortable | |2720 |BrMfimon.exe |Brother Status Monitor (Network) |2.2.0.5 |0 |Normal |6 |C:\Program Files (x86)\Brother\Brmfcmon | |2816 |plugin-container.exe |Plugin Container for Firefox |2.0.1.4120 |0 |Normal |3 |K:\Apps\FirefoxPortable\App\firefox | |2844 |jusched.exe |Java(TM) Update Scheduler |2.0.3.1 |0 |Normal |4 |C:\Program Files (x86)\Common Files\Java\Java Update | |2860 |wmpnetwk.exe | | |0 |Normal |19 | | |2884 |firefox.exe |Firefox |2.0.1.4120 |0 |Normal |34 |K:\Apps\FirefoxPortable\App\firefox | |2932 |taskhost.exe | | |0 |Normal |11 | | |3052 |dwm.exe | | |0 |High |5 | | |3248 |procexp64.exe | | |0 |High |8 | | |3280 |texter.exe | |1.0.46.5 |0 |Normal |6 |K:\Apps\Texter | |3304 |Launchy.exe | | |0 |Normal |6 |K:\Apps\Launchy | |3500 |FirefoxPortable.exe |Mozilla Firefox, Portable Edition |1.6.9.0 |0 |Normal |3 |K:\Apps\FirefoxPortable | |3692 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |10 | | |4352 |wuauclt.exe | | |0 |Normal |3 | | |4420 |plugin-container.exe |Plugin Container for Firefox |2.0.1.4120 |0 |Normal |13 |K:\Apps\FirefoxPortable\App\firefox | |6528 |plugin-container.exe |Plugin Container for Firefox |2.0.1.4120 |0 |Normal |2 |K:\Apps\FirefoxPortable\App\firefox | |15812|MediaMonkey.exe |MediaMonke |4.0.0.1375 |0 |Normal |9 |C:\Program Files (x86)\MediaMonkey4 | |16152|PresentationFontCache.exe | | |0 |Normal |6 | | |19580|EditPadLite.exe |EditPad Lite |6.6.3.0 |0 |Normal |3 |K:\Apps\EditPadLite | |20000|splwow64.exe |Print driver host for 32bit applications|6.1.7601.17514|0 |Normal |6 | | |21984|audiodg.exe | | |0 |Normal |6 | | |22188|googletalkplugin.exe |Google Talk Plugin |1.0.0.0 |0 |Normal |8 |C:\Users\Rusty\AppData\Local\Google\Google Talk Plugin| |23032|procexp.exe |Sysinternals Process Explorer |14.0.0.0 |0 |Normal |1 |K:\Apps\ProcessExplorer | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: ----------------------------------------------------------------------------- ; ZipUtils.TZipFile.ExtractFileTo (Line=546 - Offset=14) ; ------------------------------------------------------ 00668102 mov [ebp-$2C], eax 00668105 cmp dword ptr [ebp-$2C], +$00 00668109 jz ZipUtils.TZipFile.ExtractFileTo (Line=546) 0066810B mov eax, [ebp-$2C] 0066810E sub eax, +$04 00668111 mov eax, [eax] 00668113 mov [ebp-$2C], eax 00668116 mov ecx, [ebp-$2C] 00668119 mov edx, [ebp-$30] 0066811C mov eax, [ebp-$14] 0066811F mov ebx, [eax] ; <-- EXCEPTION 00668121 call dword ptr [ebx+$10] ; ; Line=547 - Offset=15 ; -------------------- 00668124 mov eax, [ebp-$14] 00668127 call System.TObject.Free ; ; Line=548 - Offset=16 ; -------------------- 0066812C mov byte ptr [ebp-$0D], $01 Registers: ----------------------------- EAX: 00000000 EDI: 00000000 EBX: 00000000 ESI: 00000000 ECX: 0000014A ESP: 01FEFB1C EDX: 03E4190C EIP: 0066811F Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 01FEFB1C: 01FEFB88 0066811F: 8B 18 FF 53 10 8B 45 EC E8 88 DC D9 FF C6 45 F3 ...S..E.......E. 01FEFB20: 00406824 0066812F: 01 FF 45 E4 FF 4D E0 0F 85 97 FE FF FF 33 C0 5A ..E..M.......3.Z 01FEFB24: 01FEFB7C 0066813F: 59 59 64 89 10 68 83 81 66 00 8D 45 B8 E8 23 F0 YYd..h..f..E..#. 01FEFB28: 04A2E4C0 0066814F: D9 FF 8D 45 BC BA 02 00 00 00 E8 8A 03 DA FF 8D ...E............ 01FEFB2C: 4AD77200 0066815F: 45 C4 E8 0E F0 D9 FF 8D 45 C8 BA 02 00 00 00 E8 E.......E....... 01FEFB30: 01CC12D1 0066816F: 75 03 DA FF 8D 45 E8 E8 F9 EF D9 FF C3 E9 23 E6 u....E........#. 01FEFB34: 00000000 0066817F: D9 FF EB C6 8A 45 F3 5B 8B E5 5D C2 04 00 8D 40 .....E.[..]....@ 01FEFB38: 00000000 0066818F: 00 55 8B EC 83 C4 D0 53 33 DB 89 5D E4 89 5D D8 .U.....S3..]..]. 01FEFB3C: 00000000 0066819F: 89 5D D4 89 5D D0 89 5D E0 89 5D DC 89 4D F0 89 .]..]..]..]..M.. 01FEFB40: 00000000 006681AF: 55 F8 89 45 FC 33 C0 55 68 8B 82 66 00 64 FF 30 U..E.3.Uh..f.d.0 01FEFB44: 00000000 006681BF: 64 89 20 8B 45 F0 E8 AA EF D9 FF 8B 45 FC 8B 40 d. .E.......E..@ 01FEFB48: 00000000 006681CF: 04 E8 73 1F DA FF 85 C0 7C 7A 40 89 45 E8 C7 45 ..s.....|z@.E..E 01FEFB4C: 03E4190C 006681DF: EC 00 00 00 00 8D 4D DC 8B 55 EC 8B 45 FC E8 EA ......M..U..E... 01FEFB50: 0000014A 006681EF: 00 00 00 8B 55 DC 8D 45 E0 E8 1F 05 DA FF 8B 45 ....U..E.......E 01FEFB54: 03E4190C 006681FF: E0 8D 55 E4 E8 5C B7 DA FF 8B 45 E4 50 8D 45 D0 ..U..\....E.P.E. 01FEFB58: 03E4190C 0066820F: 8B 55 F8 B9 00 00 00 00 E8 28 05 DA FF 8B 55 D0 .U.......(....U