flash clik then errr - GSM-Forum

ram_msn · 09-10-2012, 13:55

EurekaLog 6.0.16
Application:
-------------------------------------------------------
1.1 Start Date : Mon, 10 Sep 2012 18:19:23 +0500
1.2 Name/Description: Samsung.exe
1.3 Version Number :
1.4 Parameters :
1.5 Compilation Date: Sat, 9 Jun 2012 04:19:01 +0500
1.6 Up Time : 1 minute, 35 seconds
Exception:
-------------------------------------------------------------------------------------------------------------
2.1 Date : Mon, 10 Sep 2012 18:20:59 +0500
2.2 Address : 0066C6AB
2.3 Module Name : Samsung.exe
2.4 Module Version:
2.5 Type : EAccessViolation
2.6 Message : Access violation at address 0066C6AB in module 'Samsung.exe'. Read of address 00000000.
2.7 ID : 2ACC
2.8 Count : 1
2.9 Status : New
2.10 Note :
User:
-------------------------------------------------------
3.1 ID : capital
3.2 Name : abc
3.3 Email :
3.4 Company :
3.5 Privileges: SeChangeNotifyPrivilege - ON
SeSecurityPrivilege - OFF
SeBackupPrivilege - OFF
SeRestorePrivilege - OFF
SeSystemtimePrivilege - OFF
SeShutdownPrivilege - OFF
SeRemoteShutdownPrivilege - OFF
SeTakeOwnershipPrivilege - OFF
SeDebugPrivilege - OFF
SeSystemEnvironmentPrivilege - OFF
SeSystemProfilePrivilege - OFF
SeProfileSingleProcessPrivilege - OFF
SeIncreaseBasePriorityPrivilege - OFF
SeLoadDriverPrivilege - ON
SeCreatePagefilePrivilege - OFF
SeIncreaseQuotaPrivilege - OFF
SeUndockPrivilege - ON
SeManageVolumePrivilege - OFF
SeImpersonatePrivilege - ON
SeCreateGlobalPrivilege - ON
Active Controls:
-----------------------------------------------------------------------------------------
4.1 Form Class : TForm1
4.2 Form Text : Samsung 2G Tool v 3.5.0038 CPU speed: 6730Mhz, CPU core: 4
4.3 Control Class:
4.4 Control Text :
Computer:
------------------------------------------------------------------------------
5.1 Name : ABC-95957822D42
5.2 Total Memory : 2986 Mb
5.3 Free Memory : 2077 Mb
5.4 Total Disk : 58.59 Gb
5.5 Free Disk : 18.94 Gb
5.6 System Up Time: 6 hours, 26 minutes, 33 seconds
5.7 Processor : Intel(R) Core(TM) i3-2120 CPU @ 3.30GHz
5.8 Display Mode : 1024 x 768, 32 bit
5.9 Display DPI : 96
5.10 Video Card : (driver )
5.11 Printer : Send To Microsoft OneNote Driver (driver 12.3.4518.1014)
Operating System:
------------------------------------
6.1 Type : Microsoft Windows XP
6.2 Build # : 2600
6.3 Update : Service Pack 2
6.4 Language: English
6.5 Charset : 0
Network:
---------------------------------
7.1 IP Address: 192.168.001.002
7.2 Submask : 255.255.255.000
7.3 Gateway : 192.168.001.001
7.4 DNS 1 : 192.168.001.001
7.5 DNS 2 : 000.000.000.000
7.6 DHCP : ON
Call Stack Information:
-------------------------------------------------------------------------------------------------------------------------
|Address |Module |Unit |Class |Procedure/Method |Line |
-------------------------------------------------------------------------------------------------------------------------
|*Exception Thread: ID=540; Priority=1; Class=Custom_THREAD |
|-----------------------------------------------------------------------------------------------------------------------|
|0066C6AB|Samsung.exe|?pOsR50MBeNdyJ | |?/jpYaPPCH2jiz7MWMnM91iOww0iZNg==|29002[291] |
|0066BA70|Samsung.exe|?pOsR50MBeNdyJ | |?/jpYaPPCH2jiz7MWMnM91iOww0iZNg==|28711[0] |
|0064CFBF|Samsung.exe|?pOsR50MBeNdyJ | |?c6nm2yShsAmYRTQ8sTPKLpnXypbNow==|16916[2043]|
|00648FF8|Samsung.exe|?pOsR50MBeNdyJ | |?c6nm2yShsAmYRTQ8sTPKLpnXypbNow==|14873[0] |
|00764A77|Samsung.exe|?p9nZvLBIKrv+gPwdC3+iu5R0p7m zU| |?2cnWTX9aIn5zkxoMPeDscLPr |753[13] |
|007649D8|Samsung.exe|?p9nZvLBIKrv+gPwdC3+iu5R0p7m zU| |?2cnWTX9aIn5zkxoMPeDscLPr |740[0] |
|005E7296|Samsung.exe|?pM75zqG8xOZu9PHA= |?GUeyAU6VrNBp/SSZfQ==|?LnX2IraFFw== |73[46] |
|0047A01F|Samsung.exe|?pcKIaLtNpNDjDj5eb | |?1r5oiuQG1Hj5tLOAYs58E47HuQ== |15166[21] |
|-----------------------------------------------------------------------------------------------------------------------|
|Calling Thread: ID=4052; Priority=1; Class=; [Main] |
|-----------------------------------------------------------------------------------------------------------------------|
|77D4EDA4|USER32.dll | | |CallNextHookEx | |
|77D4BCC7|USER32.dll | | |DispatchMessageA | |
|007FB6FA|Samsung.exe|?pEjwR3jlpkE9Teawp | | |66[12] |
|-----------------------------------------------------------------------------------------------------------------------|
| |
|Running Thread: ID=4052; Priority=1; Class=; [Main] |
|-----------------------------------------------------------------------------------------------------------------------|
|007FB6FA|Samsung.exe|?pEjwR3jlpkE9Teawp | | |66[12] |
|-----------------------------------------------------------------------------------------------------------------------|
| |
|Running Thread: ID=3912; Priority=0; Class= |
|-----------------------------------------------------------------------------------------------------------------------|
|00595F44|Samsung.exe|?pre0Y5QlVfMo= | |?OMXQdyfE7D3g2y+ipB4HL18JGks0 |1374[0] |
|005966B0|Samsung.exe|?pFLUctpdmRDEawLk69A== | |?YR8RqQQR8DscrxDctM1aQP8= |271[10] |
|0047A162|Samsung.exe|?pcKIaLtNpNDjDj5eb | |?JC+eDQJgwAD9PwDC6APs3oMZXw== |15207[21] |
|-----------------------------------------------------------------------------------------------------------------------|
|Calling Thread: ID=4052; Priority=1; Class=; [Main] |
|-----------------------------------------------------------------------------------------------------------------------|
|00766954|Samsung.exe|?p9nZvLBIKrv+gPwdC3+iu5R0p7m zU| |?usKEIf1qiCUSqbvP97SQWoQ= |1518[0] |
|774F43DE|ole32.dll | | |CoInitializeEx | |
|007FB6B5|Samsung.exe|?pEjwR3jlpkE9Teawp | | |59[5] |
-------------------------------------------------------------------------------------------------------------------------
Modules Information:
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
|Handle |Name |Description |Version |Size |Modified |Path |
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
|00400000|Samsung.exe | | |56243200|2012-06-09 02:20:54|C:\Program Files\Z3X\Samsung\All |
|08660000|idmmkb.dll |Internet Download Manager module |6.11.2.1 |38304 |2012-03-30 11:09:32|C:\Program Files\Internet Download Manager |
|0FFD0000|rsaenh.dll |Microsoft Enhanced Cryptographic Provider |5.1.2600.2161 |152576 |2004-08-03 22:31:44|C:\WINDOWS\system32 |
|10000000|ftd2xx.dll |FTD2XX library |3.1.18.0 |206144 |2009-02-17 10:23:12|C:\Program Files\Z3X\Samsung\All |
|4EC50000|gdiplus.dll |Microsoft GDI+ |5.1.3102.2180 |1712128 |2004-08-04 00:57:00|C:\WINDOWS\WinSxS\x86_Microsoft.Windows.G diPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82 |
|58D40000|Wship6.dll |IPv6 Helper DLL |5.1.2600.2180 |14336 |2004-08-04 00:56:48|C:\WINDOWS\system32 |
|5AD70000|uxtheme.dll |Microsoft UxTheme Library |6.0.2900.2180 |218624 |2004-08-04 00:56:48|C:\WINDOWS\system32 |
|5B860000|NETAPI32.dll |Net Win32 API DLL |5.1.2600.2180 |332288 |2004-08-04 00:56:46|C:\WINDOWS\system32 |
|5EDD0000|olepro32.dll | |5.1.2600.2180 |83456 |2004-08-04 00:56:46|C:\WINDOWS\system32 |
|60300000|idle.dll |idle |1.0.0.2 |6144 |2004-08-06 15:33:46|C:\Program Files\Yahoo!\Messenger |
|661C0000|GrooveShellExtensions.dll|GrooveShellExt ensions Module |12.0.4518.1014 |2210608 |2006-10-27 00:48:42|C:\Program Files\Microsoft Office\Office12 |
|68EF0000|GrooveUtil.dll |GrooveUtil Module |12.0.4518.1014 |955680 |2006-10-27 00:48:34|C:\Program Files\Microsoft Office\Office12 |
|68FF0000|GrooveNew.dll |GrooveNew Module |12.0.4518.1014 |22808 |2006-10-27 00:47:40|C:\Program Files\Microsoft Office\Office12 |
|71AA0000|WS2HELP.dll |Windows Socket 2.0 Helper for Windows NT |5.1.2600.2180 |19968 |2004-08-04 00:56:48|C:\WINDOWS\system32 |
|71AB0000|WS2_32.dll |Windows Socket 2.0 32-Bit DLL |5.1.2600.2180 |82944 |2004-08-04 00:56:48|C:\WINDOWS\system32 |
|71AD0000|wsock32.dll |Windows Socket 32-Bit DLL |5.1.2600.2180 |22528 |2004-08-04 00:56:48|C:\WINDOWS\system32 |
|71BF0000|SAMLIB.dll |SAM Library DLL |5.1.2600.2180 |64000 |2004-08-04 00:56:46|C:\WINDOWS\system32 |
|723D0000|winscard.dll |Microsoft Smart Card API |5.1.2600.2180 |99328 |2004-08-04 00:56:48|C:\WINDOWS\system32 |
|73000000|winspool.drv |Windows Spooler Driver |5.1.2600.2180 |146432 |2004-08-04 00:56:58|C:\WINDOWS\system32 |
|732E0000|RICHED32.DLL |Wrapper Dll for Richedit 1.0 |5.1.2600.0 |3584 |2001-08-23 12:00:00|C:\WINDOWS\system32 |
|74720000|MSCTF.dll |MSCTF Server DLL |5.1.2600.2180 |294400 |2004-08-04 00:56:44|C:\WINDOWS\system32 |
|74B30000|webcheck.dll |Web Site Monitor |6.0.2900.2180 |276480 |2004-08-04 00:56:48|C:\WINDOWS\system32 |
|74E30000|RICHED20.dll |Rich Text Edit Control, v3.0 |5.30.23.1221 |431616 |2004-08-04 00:56:46|C:\WINDOWS\system32 |
|754D0000|CRYPTUI.dll |Microsoft Trust UI Provider |5.131.2600.2180 |512512 |2004-08-04 00:56:42|C:\WINDOWS\system32 |
|76360000|WINSTA.dll |Winstation Library |5.1.2600.2180 |53760 |2004-08-04 00:56:48|C:\WINDOWS\system32 |
|76380000|MSImg32.dll |GDIEXT Client DLL |5.1.2600.2180 |4608 |2004-08-04 00:56:44|C:\WINDOWS\system32 |
|76390000|imm32.dll |Windows XP IMM32 API Client DLL |5.1.2600.2180 |110080 |2004-08-04 00:56:44|C:\WINDOWS\system32 |
|763B0000|comdlg32.dll |Common Dialogs DLL |6.0.2900.2180 |276992 |2004-08-04 00:56:42|C:\WINDOWS\system32 |
|76B40000|winmm.dll |MCI API DLL |5.1.2600.2180 |176128 |2004-08-04 00:56:48|C:\WINDOWS\system32 |
|76BF0000|PSAPI.DLL |Process Status Helper |5.1.2600.2180 |23040 |2004-08-04 00:56:46|C:\WINDOWS\system32 |
|76C30000|WINTRUST.dll |Microsoft Trust Verification APIs |5.131.2600.2180 |176640 |2004-08-04 00:56:48|C:\WINDOWS\system32 |
|76C90000|IMAGEHLP.dll |Windows NT Image Helper |5.1.2600.2180 |144384 |2004-08-04 00:56:44|C:\WINDOWS\system32 |
|76F50000|WTSAPI32.dll |Windows Terminal Server SDK APIs |5.1.2600.2180 |18432 |2004-08-04 00:56:48|C:\WINDOWS\system32 |
|76F60000|WLDAP32.dll |Win32 LDAP API DLL |5.1.2600.2180 |172032 |2004-08-04 00:56:48|C:\WINDOWS\system32 |
|76FD0000|CLBCATQ.DLL | |2001.12.4414.258|501248 |2004-08-04 00:56:42|C:\WINDOWS\system32 |
|77050000|COMRes.dll | |2001.12.4414.258|792064 |2004-08-04 00:56:42|C:\WINDOWS\system32 |
|77120000|oleaut32.dll | |5.1.2600.2180 |553472 |2004-08-04 00:56:46|C:\WINDOWS\system32 |
|771B0000|wininet.dll |Internet Extensions for Win32 |6.0.2900.2180 |656384 |2004-08-04 00:56:48|C:\WINDOWS\system32 |
|77260000|urlmon.dll |OLE32 Extensions for Win32 |6.0.2900.2180 |601088 |2004-08-04 00:56:48|C:\WINDOWS\system32 |
|773D0000|comctl32.dll |User Experience Controls Library |6.0.2900.2180 |1050624 |2004-08-04 00:57:02|C:\WINDOWS\WinSxS\x86_Microsoft.Windows.C ommon-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9|
|774E0000|ole32.dll |Microsoft OLE for Windows |5.1.2600.2180 |1281536 |2004-08-04 00:56:46|C:\WINDOWS\system32 |
|77690000|NTMARTA.DLL |Windows NT MARTA provider |5.1.2600.2180 |118784 |2004-08-04 00:56:46|C:\WINDOWS\system32 |
|77760000|shdocvw.dll |Shell Doc Object and Control Library |6.0.2900.2180 |1483264 |2004-08-04 00:56:46|C:\WINDOWS\system32 |
|77920000|SETUPAPI.dll |Windows Setup API |5.1.2600.2180 |983552 |2004-08-04 00:56:46|C:\WINDOWS\system32 |
|77A80000|CRYPT32.dll |Crypto API32 |5.131.2600.2180 |597504 |2004-08-04 00:56:42|C:\WINDOWS\system32 |
|77B20000|MSASN1.dll |ASN.1 Runtime APIs |5.1.2600.2180 |57344 |2004-08-04 00:56:44|C:\WINDOWS\system32 |
|77B40000|appHelp.dll |Application Compatibility Client Library |5.1.2600.2180 |126976 |2004-08-04 00:56:42|C:\WINDOWS\system32 |
|77C00000|version.dll |Version Checking and File Installation Libraries|5.1.2600.2180 |18944 |2004-08-04 00:56:48|C:\WINDOWS\system32 |
|77C10000|msvcrt.dll |Windows NT CRT DLL |7.0.2600.2180 |343040 |2004-08-04 00:56:44|C:\WINDOWS\system32 |
|77D40000|USER32.dll |Windows XP USER API Client DLL |5.1.2600.2180 |577024 |2004-08-04 00:56:48|C:\WINDOWS\system32 |
|77DD0000|ADVAPI32.dll |Advanced Windows 32 Base API |5.1.2600.2180 |616960 |2004-08-04 00:56:42|C:\WINDOWS\system32 |
|77E70000|RPCRT4.dll |Remote Procedure Call Runtime |5.1.2600.2180 |581120 |2004-08-04 00:56:46|C:\WINDOWS\system32 |
|77F10000|GDI32.dll |GDI Client DLL |5.1.2600.2180 |278016 |2004-08-04 00:56:44|C:\WINDOWS\system32 |
|77F60000|SHLWAPI.dll |Shell Light-weight Utility Library |6.0.2900.2180 |473600 |2004-08-04 00:56:46|C:\WINDOWS\system32 |
|77FE0000|Secur32.dll |Security Support Provider Interface |5.1.2600.2180 |55808 |2004-08-04 00:56:46|C:\WINDOWS\system32 |
|78130000|MSVCR80.dll |Microsoft® C Runtime Library |8.0.50727.6195 |632656 |2011-05-14 01:17:40|C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_ 1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86 |
|7C340000|msvcr71.dll |Microsoft® C Runtime Library |7.10.3052.4 |348160 |2004-08-06 14:57:06|C:\Program Files\Yahoo!\Messenger |
|7C630000|ATL80.DLL |ATL Module for Windows (Unicode) |8.0.50727.4053 |97280 |2009-07-11 19:41:02|C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_ 1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd |
|7C800000|kernel32.dll |Windows NT BASE API Client DLL |5.1.2600.2180 |983552 |2004-08-04 00:56:44|C:\WINDOWS\system32 |
|7C900000|ntdll.dll |NT Layer DLL |5.1.2600.2180 |708096 |2004-08-04 00:56:38|C:\WINDOWS\system32 |
|7C9C0000|shell32.dll |Windows Shell Common Dll |6.0.2900.2180 |8384000 |2004-08-04 00:56:46|C:\WINDOWS\system32 |
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Processes Information:
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
|ID |Name |Description |Version |Memory |Priority |Threads|Path |
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
|4 |System | | |241664 |Normal |73 | |
|132 |mDNSResponder.exe |Bonjour Service |3.0.0.10 |2891776 |Normal |2 |C:\Program Files\Bonjour |
|188 |onlinent.exe |Online Protection |6.0.0.1 |10625024 |Normal |5 |C:\Program Files\Quick Heal\Guardian AntiVirus |
|196 |EMLPROXY.EXE |Mail Protection Service |6.0.0.1 |10117120 |Normal |70 |C:\Program Files\Quick Heal\Guardian AntiVirus |
|268 |SCANMSG.EXE |Scan messages application |6.0.0.1 |4874240 |Normal |1 |C:\Program Files\Quick Heal\Guardian AntiVirus |
|292 |UPSCHD.EXE |Update Scheduler |6.0.0.1 |4857856 |Normal |1 |C:\Program Files\Quick Heal\Guardian AntiVirus |
|300 |iTunesHelper.exe |iTunesHelper |10.6.3.25 |16433152 |Normal |9 |C:\Program Files\iTunes |
|328 |GrooveMonitor.exe |GrooveMonitor Utility |12.0.4518.1014|6701056 |Normal |1 |C:\Program Files\Microsoft Office\Office12 |
|344 |RIMBBLaunchAgent.exe |Launch Agent Service |4.2.0.14 |4169728 |Normal |2 |C:\Program Files\Common Files\Research In Motion\USB Drivers |
|400 |ypager.exe |Yahoo! Messenger |6.0.0.1750 |14700544 |Normal |10 |C:\PROGRA~1\Yahoo!\MESSEN~1 |
|432 |IDMan.exe |Internet Download Manager (IDM) |6.11.4.1 |7839744 |Normal |4 |C:\Program Files\Internet Download Manager |
|448 |uTorrent.exe |µTorrent |2.2.1.25302 |11440128 |Normal |10 |C:\Program Files\uTorrent |
|460 |iexplore.exe |Internet Explorer |6.0.2900.2180 |85454848 |Normal |33 |C:\Program Files\Internet Explorer |
|472 |ctfmon.exe |CTF Loader |5.1.2600.2180 |3219456 |Normal |1 |C:\WINDOWS\system32 |
|776 |KaraokeSer.exe |Service binary |0.1.0.0 |1531904 |Normal |3 |C:\WINDOWS\system32 |
|792 |smss.exe | | |397312 |Normal |3 |\SystemRoot\System32 |
|828 |opssvc.exe |Online Protection System Service |6.0.0.1 |5640192 |Normal |15 |C:\Program Files\Quick Heal\Guardian AntiVirus |
|884 |quhlpsvc.exe |Quick Update Helper Service |6.0.0.1 |3129344 |Normal |11 |C:\Program Files\Quick Heal\Guardian AntiVirus |
|916 |winlogon.exe | | |5533696 |High |19 |C:\WINDOWS\system32 |
|960 |services.exe |Services and Controller app |5.1.2600.2180 |5664768 |Normal |17 |C:\WINDOWS\system32 |
|972 |lsass.exe |LSA Shell (Export Version) |5.1.2600.2180 |1892352 |Normal |20 |C:\WINDOWS\system32 |
|1064|ouc.exe | | |4567040 |Normal |3 |C:\Documents and Settings\All Users\Application Data\Aircel\OnlineUpdate |
|1140|svchost.exe |Generic Host Process for Win32 Services |5.1.2600.2180 |4812800 |Normal |16 |C:\WINDOWS\system32 |
|1280|SCANWSCS.EXE |Helper Service |6.0.0.1 |3796992 |Normal |3 |C:\Program Files\Quick Heal\Guardian AntiVirus |
|1332|svchost.exe |Generic Host Process for Win32 Services |5.1.2600.2180 |33013760 |Normal |83 |C:\WINDOWS\System32 |
|1372|svchost.exe |Generic Host Process for Win32 Services |5.1.2600.2180 |3108864 |Normal |5 |C:\WINDOWS\system32 |
|1468|mmc.exe |Microsoft Management Console |5.1.2600.2180 |2981888 |Normal |4 |C:\WINDOWS\system32 |
|1532|chrome.exe |Google Chrome |21.0.1180.89 |23752704 |Normal |26 |C:\Documents and Settings\capital\Local Settings\Application Data\Google\Chrome\Application|
|1568|z3x_shell.exe | | |84094976 |Normal |27 |C:\Program Files\Z3X |
|1748|HDeck.exe |HDeck MFC Application |10.1.0.21 |16138240 |Normal |10 |C:\Program Files\VIA\VIAudioi\HDADeck |
|1820|spoolsv.exe |Spooler SubSystem App |5.1.2600.2180 |5181440 |Normal |12 |C:\WINDOWS\system32 |
|2024|AppleMobileDeviceService.exe|MobileDeviceSer vice |17.89.0.42 |12222464 |Normal |8 |C:\Program Files\Common Files\Apple\Mobile Device Support |
|2032|Explorer.EXE |Windows Explorer |6.0.2900.2180 |25735168 |Normal |16 |C:\WINDOWS |
|2100|chrome.exe |Google Chrome |21.0.1180.89 |47837184 |Below-Normal|5 |C:\Documents and Settings\capital\Local Settings\Application Data\Google\Chrome\Application|
|2188|chrome.exe |Google Chrome |21.0.1180.89 |12120064 |Normal |4 |C:\Documents and Settings\capital\Local Settings\Application Data\Google\Chrome\Application|
|2460|IEMonitor.exe |Internet Download Manager agent for click monitoring in IE-based browsers|5.19.3.1 |3522560 |Normal |1 |C:\Program Files\Internet Download Manager |
|3012|Samsung.exe | | |126132224|Normal |4 |C:\Program Files\Z3X\Samsung\All |
|3312|HWDeviceService.exe |DCSHOST |2.0.0.47 |3870720 |Normal |5 |C:\Documents and Settings\All Users\Application Data\DatacardService |
|3676|iPodService.exe |iPodService Module (32-bit) |10.6.3.25 |3960832 |Normal |11 |C:\Program Files\iPod\bin |
|3712|wscntfy.exe |Windows Security Center Notification App |5.1.2600.2180 |2314240 |Normal |1 |C:\WINDOWS\system32 |
|3804|SAPISSVC.EXE |Quick Heal Scanner |6.0.0.1 |58851328 |Normal |35 |C:\Program Files\Quick Heal\Guardian AntiVirus |
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Assembler Information:
----------------------------------------------------------------------------
; ?pOsR50MBeNdyJ.?/jpYaPPCH2jiz7MWMnM91iOww0iZNg== (Line=28998 - Offset=287)
; --------------------------------------------------------------------------
0066C685 mov byte ptr [eax], $03
;
; Line=28999 - Offset=288
; -----------------------
0066C688 lea eax, [ebp-$08]
0066C68B call -$00266A04
0066C690 mov byte ptr [eax+$05], $01
;
; Line=29000 - Offset=289
; -----------------------
0066C694 lea eax, [ebp-$08]
0066C697 call -$00266A10
0066C69C mov byte ptr [eax+$08], $01
;
; Line=29002 - Offset=291
; -----------------------
0066C6A0 lea eax, [ebp-$08]
0066C6A3 call -$00266A1C
0066C6A8 mov edx, [ebp-$10]
0066C6AB movzx edx, byte ptr [edx] ; <-- EXCEPTION
0066C6AE mov [eax+$0C], dl
;
; Line=29003 - Offset=292
; -----------------------
0066C6B1 lea eax, [ebp-$08]
0066C6B4 call -$00266A2D
0066C6B9 mov edx, [ebp-$10]
0066C6BC movzx edx, byte ptr [edx+$01]
0066C6C0 mov [eax+$0D], dl
;
; Line=29004 - Offset=293
; -----------------------
0066C6C3 lea eax, [ebp-$0C]
0066C6C6 push eax
0066C6C7 lea eax, [ebp-$20]
0066C6CA push eax
Registers:
-----------------------------
EAX: 08029CD8 EDI: 000004CC
EBX: 00222010 ESI: 010CE938
ECX: 00000000 ESP: 0847F6FC
EDX: 00000000 EIP: 0066C6AB
Stack: Memory Dump:
------------------ ---------------------------------------------------------------------------
0847F6FC: 0847FA24 0066C6AB: 0F B6 12 88 50 0C 8D 45 F8 E8 D3 95 D9 FF 8B 55 ....P..E.......U
0847F700: 00404FB4 0066C6BB: F0 0F B6 52 01 88 50 0D 8D 45 F4 50 8D 45 E0 50 ...R..P..E.P.E.P
0847F704: 0847FA1C 0066C6CB: 8D 4D F8 8B 06 8B D3 E8 41 CB 0E 00 B8 10 00 00 .M......A.......
0847F708: 08015860 0066C6DB: 00 C7 45 E0 00 01 00 00 8D 55 F8 33 C9 92 E8 0A ..E......U.3....
0847F70C: 00000066 0066C6EB: D3 0E 00 BB 10 20 22 00 8D 45 F8 E8 91 95 D9 FF ..... "..E......
0847F710: 00000000 0066C6FB: C6 00 03 8D 45 F8 E8 86 95 D9 FF C6 40 05 01 8D ....E.......@...
0847F714: 00000000 0066C70B: 45 F8 E8 7A 95 D9 FF C6 40 08 02 8D 45 F8 E8 6E [email protected]
0847F718: 00000000 0066C71B: 95 D9 FF 8B 55 F0 0F B6 12 88 50 0C 8D 45 F8 E8 ....U.....P..E..
0847F71C: 00000000 0066C72B: 5D 95 D9 FF 8B 55 F0 0F B6 52 01 88 50 0D 8D 45 ]....U...R..P..E
0847F720: 00000000 0066C73B: F4 50 8D 45 E0 50 8D 4D F8 8B 06 8B D3 E8 CB CA .P.E.P.M........
0847F724: 00000000 0066C74B: 0E 00 B8 01 00 00 00 C7 45 E0 00 01 00 00 8D 55 ........E......U
0847F728: 00000000 0066C75B: F8 33 C9 92 E8 94 D2 0E 00 BB 0C 20 22 00 8D 45 .3......... "..E
0847F72C: 00000000 0066C76B: F4 50 8D 45 E0 50 8D 4D F8 8B 06 8B D3 E8 9B CA .P.E.P.M........
0847F730: 00000000 0066C77B: 0E 00 A1 98 4F 81 00 50 B9 19 00 00 00 BA 01 00 ....O..P........
0847F734: 00000000 0066C78B: 00 00 8B 45 F4 E8 FF 94 D9 FF C7 45 E0 0A 00 00 ...E.......E....
0847F738: 00000000 0066C79B: 00 BB 24 20 22 00 8D 45 F8 8B 15 98 4F 81 00 8B ..$ "..E....O...

09-10-2012, 13:55	#1 (permalink)
ram_msn Junior Member Join Date: Jan 2008 Posts: 26 Member: 687513 Status: Offline Thanks Meter: 2	flash clik then errr EurekaLog 6.0.16 Application: ------------------------------------------------------- 1.1 Start Date : Mon, 10 Sep 2012 18:19:23 +0500 1.2 Name/Description: Samsung.exe 1.3 Version Number : 1.4 Parameters : 1.5 Compilation Date: Sat, 9 Jun 2012 04:19:01 +0500 1.6 Up Time : 1 minute, 35 seconds Exception: ------------------------------------------------------------------------------------------------------------- 2.1 Date : Mon, 10 Sep 2012 18:20:59 +0500 2.2 Address : 0066C6AB 2.3 Module Name : Samsung.exe 2.4 Module Version: 2.5 Type : EAccessViolation 2.6 Message : Access violation at address 0066C6AB in module 'Samsung.exe'. Read of address 00000000. 2.7 ID : 2ACC 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.1 ID : capital 3.2 Name : abc 3.3 Email : 3.4 Company : 3.5 Privileges: SeChangeNotifyPrivilege - ON SeSecurityPrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeSystemtimePrivilege - OFF SeShutdownPrivilege - OFF SeRemoteShutdownPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeSystemProfilePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeLoadDriverPrivilege - ON SeCreatePagefilePrivilege - OFF SeIncreaseQuotaPrivilege - OFF SeUndockPrivilege - ON SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON Active Controls: ----------------------------------------------------------------------------------------- 4.1 Form Class : TForm1 4.2 Form Text : Samsung 2G Tool v 3.5.0038 CPU speed: 6730Mhz, CPU core: 4 4.3 Control Class: 4.4 Control Text : Computer: ------------------------------------------------------------------------------ 5.1 Name : ABC-95957822D42 5.2 Total Memory : 2986 Mb 5.3 Free Memory : 2077 Mb 5.4 Total Disk : 58.59 Gb 5.5 Free Disk : 18.94 Gb 5.6 System Up Time: 6 hours, 26 minutes, 33 seconds 5.7 Processor : Intel(R) Core(TM) i3-2120 CPU @ 3.30GHz 5.8 Display Mode : 1024 x 768, 32 bit 5.9 Display DPI : 96 5.10 Video Card : (driver ) 5.11 Printer : Send To Microsoft OneNote Driver (driver 12.3.4518.1014) Operating System: ------------------------------------ 6.1 Type : Microsoft Windows XP 6.2 Build # : 2600 6.3 Update : Service Pack 2 6.4 Language: English 6.5 Charset : 0 Network: --------------------------------- 7.1 IP Address: 192.168.001.002 7.2 Submask : 255.255.255.000 7.3 Gateway : 192.168.001.001 7.4 DNS 1 : 192.168.001.001 7.5 DNS 2 : 000.000.000.000 7.6 DHCP : ON Call Stack Information: ------------------------------------------------------------------------------------------------------------------------- \|Address \|Module \|Unit \|Class \|Procedure/Method \|Line \| ------------------------------------------------------------------------------------------------------------------------- \|*Exception Thread: ID=540; Priority=1; Class=Custom_THREAD \| \|-----------------------------------------------------------------------------------------------------------------------\| \|0066C6AB\|Samsung.exe\|?pOsR50MBeNdyJ \| \|?/jpYaPPCH2jiz7MWMnM91iOww0iZNg==\|29002[291] \| \|0066BA70\|Samsung.exe\|?pOsR50MBeNdyJ \| \|?/jpYaPPCH2jiz7MWMnM91iOww0iZNg==\|28711[0] \| \|0064CFBF\|Samsung.exe\|?pOsR50MBeNdyJ \| \|?c6nm2yShsAmYRTQ8sTPKLpnXypbNow==\|16916[2043]\| \|00648FF8\|Samsung.exe\|?pOsR50MBeNdyJ \| \|?c6nm2yShsAmYRTQ8sTPKLpnXypbNow==\|14873[0] \| \|00764A77\|Samsung.exe\|?p9nZvLBIKrv+gPwdC3+iu5R0p7m zU\| \|?2cnWTX9aIn5zkxoMPeDscLPr \|753[13] \| \|007649D8\|Samsung.exe\|?p9nZvLBIKrv+gPwdC3+iu5R0p7m zU\| \|?2cnWTX9aIn5zkxoMPeDscLPr \|740[0] \| \|005E7296\|Samsung.exe\|?pM75zqG8xOZu9PHA= \|?GUeyAU6VrNBp/SSZfQ==\|?LnX2IraFFw== \|73[46] \| \|0047A01F\|Samsung.exe\|?pcKIaLtNpNDjDj5eb \| \|?1r5oiuQG1Hj5tLOAYs58E47HuQ== \|15166[21] \| \|-----------------------------------------------------------------------------------------------------------------------\| \|Calling Thread: ID=4052; Priority=1; Class=; [Main] \| \|-----------------------------------------------------------------------------------------------------------------------\| \|77D4EDA4\|USER32.dll \| \| \|CallNextHookEx \| \| \|77D4BCC7\|USER32.dll \| \| \|DispatchMessageA \| \| \|007FB6FA\|Samsung.exe\|?pEjwR3jlpkE9Teawp \| \| \|66[12] \| \|-----------------------------------------------------------------------------------------------------------------------\| \| \| \|Running Thread: ID=4052; Priority=1; Class=; [Main] \| \|-----------------------------------------------------------------------------------------------------------------------\| \|007FB6FA\|Samsung.exe\|?pEjwR3jlpkE9Teawp \| \| \|66[12] \| \|-----------------------------------------------------------------------------------------------------------------------\| \| \| \|Running Thread: ID=3912; Priority=0; Class= \| \|-----------------------------------------------------------------------------------------------------------------------\| \|00595F44\|Samsung.exe\|?pre0Y5QlVfMo= \| \|?OMXQdyfE7D3g2y+ipB4HL18JGks0 \|1374[0] \| \|005966B0\|Samsung.exe\|?pFLUctpdmRDEawLk69A== \| \|?YR8RqQQR8DscrxDctM1aQP8= \|271[10] \| \|0047A162\|Samsung.exe\|?pcKIaLtNpNDjDj5eb \| \|?JC+eDQJgwAD9PwDC6APs3oMZXw== \|15207[21] \| \|-----------------------------------------------------------------------------------------------------------------------\| \|Calling Thread: ID=4052; Priority=1; Class=; [Main] \| \|-----------------------------------------------------------------------------------------------------------------------\| \|00766954\|Samsung.exe\|?p9nZvLBIKrv+gPwdC3+iu5R0p7m zU\| \|?usKEIf1qiCUSqbvP97SQWoQ= \|1518[0] \| \|774F43DE\|ole32.dll \| \| \|CoInitializeEx \| \| \|007FB6B5\|Samsung.exe\|?pEjwR3jlpkE9Teawp \| \| \|59[5] \| ------------------------------------------------------------------------------------------------------------------------- Modules Information: ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- \|Handle \|Name \|Description \|Version \|Size \|Modified \|Path \| ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- \|00400000\|Samsung.exe \| \| \|56243200\|2012-06-09 02:20:54\|C:\Program Files\Z3X\Samsung\All \| \|08660000\|idmmkb.dll \|Internet Download Manager module \|6.11.2.1 \|38304 \|2012-03-30 11:09:32\|C:\Program Files\Internet Download Manager \| \|0FFD0000\|rsaenh.dll \|Microsoft Enhanced Cryptographic Provider \|5.1.2600.2161 \|152576 \|2004-08-03 22:31:44\|C:\WINDOWS\system32 \| \|10000000\|ftd2xx.dll \|FTD2XX library \|3.1.18.0 \|206144 \|2009-02-17 10:23:12\|C:\Program Files\Z3X\Samsung\All \| \|4EC50000\|gdiplus.dll \|Microsoft GDI+ \|5.1.3102.2180 \|1712128 \|2004-08-04 00:57:00\|C:\WINDOWS\WinSxS\x86_Microsoft.Windows.G diPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82 \| \|58D40000\|Wship6.dll \|IPv6 Helper DLL \|5.1.2600.2180 \|14336 \|2004-08-04 00:56:48\|C:\WINDOWS\system32 \| \|5AD70000\|uxtheme.dll \|Microsoft UxTheme Library \|6.0.2900.2180 \|218624 \|2004-08-04 00:56:48\|C:\WINDOWS\system32 \| \|5B860000\|NETAPI32.dll \|Net Win32 API DLL \|5.1.2600.2180 \|332288 \|2004-08-04 00:56:46\|C:\WINDOWS\system32 \| \|5EDD0000\|olepro32.dll \| \|5.1.2600.2180 \|83456 \|2004-08-04 00:56:46\|C:\WINDOWS\system32 \| \|60300000\|idle.dll \|idle \|1.0.0.2 \|6144 \|2004-08-06 15:33:46\|C:\Program Files\Yahoo!\Messenger \| \|661C0000\|GrooveShellExtensions.dll\|GrooveShellExt ensions Module \|12.0.4518.1014 \|2210608 \|2006-10-27 00:48:42\|C:\Program Files\Microsoft Office\Office12 \| \|68EF0000\|GrooveUtil.dll \|GrooveUtil Module \|12.0.4518.1014 \|955680 \|2006-10-27 00:48:34\|C:\Program Files\Microsoft Office\Office12 \| \|68FF0000\|GrooveNew.dll \|GrooveNew Module \|12.0.4518.1014 \|22808 \|2006-10-27 00:47:40\|C:\Program Files\Microsoft Office\Office12 \| \|71AA0000\|WS2HELP.dll \|Windows Socket 2.0 Helper for Windows NT \|5.1.2600.2180 \|19968 \|2004-08-04 00:56:48\|C:\WINDOWS\system32 \| \|71AB0000\|WS2_32.dll \|Windows Socket 2.0 32-Bit DLL \|5.1.2600.2180 \|82944 \|2004-08-04 00:56:48\|C:\WINDOWS\system32 \| \|71AD0000\|wsock32.dll \|Windows Socket 32-Bit DLL \|5.1.2600.2180 \|22528 \|2004-08-04 00:56:48\|C:\WINDOWS\system32 \| \|71BF0000\|SAMLIB.dll \|SAM Library DLL \|5.1.2600.2180 \|64000 \|2004-08-04 00:56:46\|C:\WINDOWS\system32 \| \|723D0000\|winscard.dll \|Microsoft Smart Card API \|5.1.2600.2180 \|99328 \|2004-08-04 00:56:48\|C:\WINDOWS\system32 \| \|73000000\|winspool.drv \|Windows Spooler Driver \|5.1.2600.2180 \|146432 \|2004-08-04 00:56:58\|C:\WINDOWS\system32 \| \|732E0000\|RICHED32.DLL \|Wrapper Dll for Richedit 1.0 \|5.1.2600.0 \|3584 \|2001-08-23 12:00:00\|C:\WINDOWS\system32 \| \|74720000\|MSCTF.dll \|MSCTF Server DLL \|5.1.2600.2180 \|294400 \|2004-08-04 00:56:44\|C:\WINDOWS\system32 \| \|74B30000\|webcheck.dll \|Web Site Monitor \|6.0.2900.2180 \|276480 \|2004-08-04 00:56:48\|C:\WINDOWS\system32 \| \|74E30000\|RICHED20.dll \|Rich Text Edit Control, v3.0 \|5.30.23.1221 \|431616 \|2004-08-04 00:56:46\|C:\WINDOWS\system32 \| \|754D0000\|CRYPTUI.dll \|Microsoft Trust UI Provider \|5.131.2600.2180 \|512512 \|2004-08-04 00:56:42\|C:\WINDOWS\system32 \| \|76360000\|WINSTA.dll \|Winstation Library \|5.1.2600.2180 \|53760 \|2004-08-04 00:56:48\|C:\WINDOWS\system32 \| \|76380000\|MSImg32.dll \|GDIEXT Client DLL \|5.1.2600.2180 \|4608 \|2004-08-04 00:56:44\|C:\WINDOWS\system32 \| \|76390000\|imm32.dll \|Windows XP IMM32 API Client DLL \|5.1.2600.2180 \|110080 \|2004-08-04 00:56:44\|C:\WINDOWS\system32 \| \|763B0000\|comdlg32.dll \|Common Dialogs DLL \|6.0.2900.2180 \|276992 \|2004-08-04 00:56:42\|C:\WINDOWS\system32 \| \|76B40000\|winmm.dll \|MCI API DLL \|5.1.2600.2180 \|176128 \|2004-08-04 00:56:48\|C:\WINDOWS\system32 \| \|76BF0000\|PSAPI.DLL \|Process Status Helper \|5.1.2600.2180 \|23040 \|2004-08-04 00:56:46\|C:\WINDOWS\system32 \| \|76C30000\|WINTRUST.dll \|Microsoft Trust Verification APIs \|5.131.2600.2180 \|176640 \|2004-08-04 00:56:48\|C:\WINDOWS\system32 \| \|76C90000\|IMAGEHLP.dll \|Windows NT Image Helper \|5.1.2600.2180 \|144384 \|2004-08-04 00:56:44\|C:\WINDOWS\system32 \| \|76F50000\|WTSAPI32.dll \|Windows Terminal Server SDK APIs \|5.1.2600.2180 \|18432 \|2004-08-04 00:56:48\|C:\WINDOWS\system32 \| \|76F60000\|WLDAP32.dll \|Win32 LDAP API DLL \|5.1.2600.2180 \|172032 \|2004-08-04 00:56:48\|C:\WINDOWS\system32 \| \|76FD0000\|CLBCATQ.DLL \| \|2001.12.4414.258\|501248 \|2004-08-04 00:56:42\|C:\WINDOWS\system32 \| \|77050000\|COMRes.dll \| \|2001.12.4414.258\|792064 \|2004-08-04 00:56:42\|C:\WINDOWS\system32 \| \|77120000\|oleaut32.dll \| \|5.1.2600.2180 \|553472 \|2004-08-04 00:56:46\|C:\WINDOWS\system32 \| \|771B0000\|wininet.dll \|Internet Extensions for Win32 \|6.0.2900.2180 \|656384 \|2004-08-04 00:56:48\|C:\WINDOWS\system32 \| \|77260000\|urlmon.dll \|OLE32 Extensions for Win32 \|6.0.2900.2180 \|601088 \|2004-08-04 00:56:48\|C:\WINDOWS\system32 \| \|773D0000\|comctl32.dll \|User Experience Controls Library \|6.0.2900.2180 \|1050624 \|2004-08-04 00:57:02\|C:\WINDOWS\WinSxS\x86_Microsoft.Windows.C ommon-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\| \|774E0000\|ole32.dll \|Microsoft OLE for Windows \|5.1.2600.2180 \|1281536 \|2004-08-04 00:56:46\|C:\WINDOWS\system32 \| \|77690000\|NTMARTA.DLL \|Windows NT MARTA provider \|5.1.2600.2180 \|118784 \|2004-08-04 00:56:46\|C:\WINDOWS\system32 \| \|77760000\|shdocvw.dll \|Shell Doc Object and Control Library \|6.0.2900.2180 \|1483264 \|2004-08-04 00:56:46\|C:\WINDOWS\system32 \| \|77920000\|SETUPAPI.dll \|Windows Setup API \|5.1.2600.2180 \|983552 \|2004-08-04 00:56:46\|C:\WINDOWS\system32 \| \|77A80000\|CRYPT32.dll \|Crypto API32 \|5.131.2600.2180 \|597504 \|2004-08-04 00:56:42\|C:\WINDOWS\system32 \| \|77B20000\|MSASN1.dll \|ASN.1 Runtime APIs \|5.1.2600.2180 \|57344 \|2004-08-04 00:56:44\|C:\WINDOWS\system32 \| \|77B40000\|appHelp.dll \|Application Compatibility Client Library \|5.1.2600.2180 \|126976 \|2004-08-04 00:56:42\|C:\WINDOWS\system32 \| \|77C00000\|version.dll \|Version Checking and File Installation Libraries\|5.1.2600.2180 \|18944 \|2004-08-04 00:56:48\|C:\WINDOWS\system32 \| \|77C10000\|msvcrt.dll \|Windows NT CRT DLL \|7.0.2600.2180 \|343040 \|2004-08-04 00:56:44\|C:\WINDOWS\system32 \| \|77D40000\|USER32.dll \|Windows XP USER API Client DLL \|5.1.2600.2180 \|577024 \|2004-08-04 00:56:48\|C:\WINDOWS\system32 \| \|77DD0000\|ADVAPI32.dll \|Advanced Windows 32 Base API \|5.1.2600.2180 \|616960 \|2004-08-04 00:56:42\|C:\WINDOWS\system32 \| \|77E70000\|RPCRT4.dll \|Remote Procedure Call Runtime \|5.1.2600.2180 \|581120 \|2004-08-04 00:56:46\|C:\WINDOWS\system32 \| \|77F10000\|GDI32.dll \|GDI Client DLL \|5.1.2600.2180 \|278016 \|2004-08-04 00:56:44\|C:\WINDOWS\system32 \| \|77F60000\|SHLWAPI.dll \|Shell Light-weight Utility Library \|6.0.2900.2180 \|473600 \|2004-08-04 00:56:46\|C:\WINDOWS\system32 \| \|77FE0000\|Secur32.dll \|Security Support Provider Interface \|5.1.2600.2180 \|55808 \|2004-08-04 00:56:46\|C:\WINDOWS\system32 \| \|78130000\|MSVCR80.dll \|Microsoft® C Runtime Library \|8.0.50727.6195 \|632656 \|2011-05-14 01:17:40\|C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_ 1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86 \| \|7C340000\|msvcr71.dll \|Microsoft® C Runtime Library \|7.10.3052.4 \|348160 \|2004-08-06 14:57:06\|C:\Program Files\Yahoo!\Messenger \| \|7C630000\|ATL80.DLL \|ATL Module for Windows (Unicode) \|8.0.50727.4053 \|97280 \|2009-07-11 19:41:02\|C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_ 1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd \| \|7C800000\|kernel32.dll \|Windows NT BASE API Client DLL \|5.1.2600.2180 \|983552 \|2004-08-04 00:56:44\|C:\WINDOWS\system32 \| \|7C900000\|ntdll.dll \|NT Layer DLL \|5.1.2600.2180 \|708096 \|2004-08-04 00:56:38\|C:\WINDOWS\system32 \| \|7C9C0000\|shell32.dll \|Windows Shell Common Dll \|6.0.2900.2180 \|8384000 \|2004-08-04 00:56:46\|C:\WINDOWS\system32 \| ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Processes Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- \|ID \|Name \|Description \|Version \|Memory \|Priority \|Threads\|Path \| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- \|4 \|System \| \| \|241664 \|Normal \|73 \| \| \|132 \|mDNSResponder.exe \|Bonjour Service \|3.0.0.10 \|2891776 \|Normal \|2 \|C:\Program Files\Bonjour \| \|188 \|onlinent.exe \|Online Protection \|6.0.0.1 \|10625024 \|Normal \|5 \|C:\Program Files\Quick Heal\Guardian AntiVirus \| \|196 \|EMLPROXY.EXE \|Mail Protection Service \|6.0.0.1 \|10117120 \|Normal \|70 \|C:\Program Files\Quick Heal\Guardian AntiVirus \| \|268 \|SCANMSG.EXE \|Scan messages application \|6.0.0.1 \|4874240 \|Normal \|1 \|C:\Program Files\Quick Heal\Guardian AntiVirus \| \|292 \|UPSCHD.EXE \|Update Scheduler \|6.0.0.1 \|4857856 \|Normal \|1 \|C:\Program Files\Quick Heal\Guardian AntiVirus \| \|300 \|iTunesHelper.exe \|iTunesHelper \|10.6.3.25 \|16433152 \|Normal \|9 \|C:\Program Files\iTunes \| \|328 \|GrooveMonitor.exe \|GrooveMonitor Utility \|12.0.4518.1014\|6701056 \|Normal \|1 \|C:\Program Files\Microsoft Office\Office12 \| \|344 \|RIMBBLaunchAgent.exe \|Launch Agent Service \|4.2.0.14 \|4169728 \|Normal \|2 \|C:\Program Files\Common Files\Research In Motion\USB Drivers \| \|400 \|ypager.exe \|Yahoo! Messenger \|6.0.0.1750 \|14700544 \|Normal \|10 \|C:\PROGRA~1\Yahoo!\MESSEN~1 \| \|432 \|IDMan.exe \|Internet Download Manager (IDM) \|6.11.4.1 \|7839744 \|Normal \|4 \|C:\Program Files\Internet Download Manager \| \|448 \|uTorrent.exe \|µTorrent \|2.2.1.25302 \|11440128 \|Normal \|10 \|C:\Program Files\uTorrent \| \|460 \|iexplore.exe \|Internet Explorer \|6.0.2900.2180 \|85454848 \|Normal \|33 \|C:\Program Files\Internet Explorer \| \|472 \|ctfmon.exe \|CTF Loader \|5.1.2600.2180 \|3219456 \|Normal \|1 \|C:\WINDOWS\system32 \| \|776 \|KaraokeSer.exe \|Service binary \|0.1.0.0 \|1531904 \|Normal \|3 \|C:\WINDOWS\system32 \| \|792 \|smss.exe \| \| \|397312 \|Normal \|3 \|\SystemRoot\System32 \| \|828 \|opssvc.exe \|Online Protection System Service \|6.0.0.1 \|5640192 \|Normal \|15 \|C:\Program Files\Quick Heal\Guardian AntiVirus \| \|884 \|quhlpsvc.exe \|Quick Update Helper Service \|6.0.0.1 \|3129344 \|Normal \|11 \|C:\Program Files\Quick Heal\Guardian AntiVirus \| \|916 \|winlogon.exe \| \| \|5533696 \|High \|19 \|C:\WINDOWS\system32 \| \|960 \|services.exe \|Services and Controller app \|5.1.2600.2180 \|5664768 \|Normal \|17 \|C:\WINDOWS\system32 \| \|972 \|lsass.exe \|LSA Shell (Export Version) \|5.1.2600.2180 \|1892352 \|Normal \|20 \|C:\WINDOWS\system32 \| \|1064\|ouc.exe \| \| \|4567040 \|Normal \|3 \|C:\Documents and Settings\All Users\Application Data\Aircel\OnlineUpdate \| \|1140\|svchost.exe \|Generic Host Process for Win32 Services \|5.1.2600.2180 \|4812800 \|Normal \|16 \|C:\WINDOWS\system32 \| \|1280\|SCANWSCS.EXE \|Helper Service \|6.0.0.1 \|3796992 \|Normal \|3 \|C:\Program Files\Quick Heal\Guardian AntiVirus \| \|1332\|svchost.exe \|Generic Host Process for Win32 Services \|5.1.2600.2180 \|33013760 \|Normal \|83 \|C:\WINDOWS\System32 \| \|1372\|svchost.exe \|Generic Host Process for Win32 Services \|5.1.2600.2180 \|3108864 \|Normal \|5 \|C:\WINDOWS\system32 \| \|1468\|mmc.exe \|Microsoft Management Console \|5.1.2600.2180 \|2981888 \|Normal \|4 \|C:\WINDOWS\system32 \| \|1532\|chrome.exe \|Google Chrome \|21.0.1180.89 \|23752704 \|Normal \|26 \|C:\Documents and Settings\capital\Local Settings\Application Data\Google\Chrome\Application\| \|1568\|z3x_shell.exe \| \| \|84094976 \|Normal \|27 \|C:\Program Files\Z3X \| \|1748\|HDeck.exe \|HDeck MFC Application \|10.1.0.21 \|16138240 \|Normal \|10 \|C:\Program Files\VIA\VIAudioi\HDADeck \| \|1820\|spoolsv.exe \|Spooler SubSystem App \|5.1.2600.2180 \|5181440 \|Normal \|12 \|C:\WINDOWS\system32 \| \|2024\|AppleMobileDeviceService.exe\|MobileDeviceSer vice \|17.89.0.42 \|12222464 \|Normal \|8 \|C:\Program Files\Common Files\Apple\Mobile Device Support \| \|2032\|Explorer.EXE \|Windows Explorer \|6.0.2900.2180 \|25735168 \|Normal \|16 \|C:\WINDOWS \| \|2100\|chrome.exe \|Google Chrome \|21.0.1180.89 \|47837184 \|Below-Normal\|5 \|C:\Documents and Settings\capital\Local Settings\Application Data\Google\Chrome\Application\| \|2188\|chrome.exe \|Google Chrome \|21.0.1180.89 \|12120064 \|Normal \|4 \|C:\Documents and Settings\capital\Local Settings\Application Data\Google\Chrome\Application\| \|2460\|IEMonitor.exe \|Internet Download Manager agent for click monitoring in IE-based browsers\|5.19.3.1 \|3522560 \|Normal \|1 \|C:\Program Files\Internet Download Manager \| \|3012\|Samsung.exe \| \| \|126132224\|Normal \|4 \|C:\Program Files\Z3X\Samsung\All \| \|3312\|HWDeviceService.exe \|DCSHOST \|2.0.0.47 \|3870720 \|Normal \|5 \|C:\Documents and Settings\All Users\Application Data\DatacardService \| \|3676\|iPodService.exe \|iPodService Module (32-bit) \|10.6.3.25 \|3960832 \|Normal \|11 \|C:\Program Files\iPod\bin \| \|3712\|wscntfy.exe \|Windows Security Center Notification App \|5.1.2600.2180 \|2314240 \|Normal \|1 \|C:\WINDOWS\system32 \| \|3804\|SAPISSVC.EXE \|Quick Heal Scanner \|6.0.0.1 \|58851328 \|Normal \|35 \|C:\Program Files\Quick Heal\Guardian AntiVirus \| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: ---------------------------------------------------------------------------- ; ?pOsR50MBeNdyJ.?/jpYaPPCH2jiz7MWMnM91iOww0iZNg== (Line=28998 - Offset=287) ; -------------------------------------------------------------------------- 0066C685 mov byte ptr [eax], $03 ; ; Line=28999 - Offset=288 ; ----------------------- 0066C688 lea eax, [ebp-$08] 0066C68B call -$00266A04 0066C690 mov byte ptr [eax+$05], $01 ; ; Line=29000 - Offset=289 ; ----------------------- 0066C694 lea eax, [ebp-$08] 0066C697 call -$00266A10 0066C69C mov byte ptr [eax+$08], $01 ; ; Line=29002 - Offset=291 ; ----------------------- 0066C6A0 lea eax, [ebp-$08] 0066C6A3 call -$00266A1C 0066C6A8 mov edx, [ebp-$10] 0066C6AB movzx edx, byte ptr [edx] ; <-- EXCEPTION 0066C6AE mov [eax+$0C], dl ; ; Line=29003 - Offset=292 ; ----------------------- 0066C6B1 lea eax, [ebp-$08] 0066C6B4 call -$00266A2D 0066C6B9 mov edx, [ebp-$10] 0066C6BC movzx edx, byte ptr [edx+$01] 0066C6C0 mov [eax+$0D], dl ; ; Line=29004 - Offset=293 ; ----------------------- 0066C6C3 lea eax, [ebp-$0C] 0066C6C6 push eax 0066C6C7 lea eax, [ebp-$20] 0066C6CA push eax Registers: ----------------------------- EAX: 08029CD8 EDI: 000004CC EBX: 00222010 ESI: 010CE938 ECX: 00000000 ESP: 0847F6FC EDX: 00000000 EIP: 0066C6AB Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0847F6FC: 0847FA24 0066C6AB: 0F B6 12 88 50 0C 8D 45 F8 E8 D3 95 D9 FF 8B 55 ....P..E.......U 0847F700: 00404FB4 0066C6BB: F0 0F B6 52 01 88 50 0D 8D 45 F4 50 8D 45 E0 50 ...R..P..E.P.E.P 0847F704: 0847FA1C 0066C6CB: 8D 4D F8 8B 06 8B D3 E8 41 CB 0E 00 B8 10 00 00 .M......A....... 0847F708: 08015860 0066C6DB: 00 C7 45 E0 00 01 00 00 8D 55 F8 33 C9 92 E8 0A ..E......U.3.... 0847F70C: 00000066 0066C6EB: D3 0E 00 BB 10 20 22 00 8D 45 F8 E8 91 95 D9 FF ..... "..E...... 0847F710: 00000000 0066C6FB: C6 00 03 8D 45 F8 E8 86 95 D9 FF C6 40 05 01 8D ....E.......@... 0847F714: 00000000 0066C70B: 45 F8 E8 7A 95 D9 FF C6 40 08 02 8D 45 F8 E8 6E [email protected] 0847F718: 00000000 0066C71B: 95 D9 FF 8B 55 F0 0F B6 12 88 50 0C 8D 45 F8 E8 ....U.....P..E.. 0847F71C: 00000000 0066C72B: 5D 95 D9 FF 8B 55 F0 0F B6 52 01 88 50 0D 8D 45 ]....U...R..P..E 0847F720: 00000000 0066C73B: F4 50 8D 45 E0 50 8D 4D F8 8B 06 8B D3 E8 CB CA .P.E.P.M........ 0847F724: 00000000 0066C74B: 0E 00 B8 01 00 00 00 C7 45 E0 00 01 00 00 8D 55 ........E......U 0847F728: 00000000 0066C75B: F8 33 C9 92 E8 94 D2 0E 00 BB 0C 20 22 00 8D 45 .3......... "..E 0847F72C: 00000000 0066C76B: F4 50 8D 45 E0 50 8D 4D F8 8B 06 8B D3 E8 9B CA .P.E.P.M........ 0847F730: 00000000 0066C77B: 0E 00 A1 98 4F 81 00 50 B9 19 00 00 00 BA 01 00 ....O..P........ 0847F734: 00000000 0066C78B: 00 00 8B 45 F4 E8 FF 94 D9 FF C7 45 E0 0A 00 00 ...E.......E.... 0847F738: 00000000 0066C79B: 00 BB 24 20 22 00 8D 45 F8 8B 15 98 4F 81 00 8B ..$ "..E....O...