Error is: "Application seems to be frozen" This is opening automaticly and if i try to open fbackup.exe then it dosent open.
What can be wrong?
BUGREPORT:
"Application seems to be frozen
date/time : 2010-01-05, 16:49:58, 440ms
computer name : example
wts client name : example
user name : example
registered owner : example / Hewlett-Packard Company
operating system : Windows Vista build 6000
system language : Finnish
system up time : 61 days 23 hours
program up time : 9 days 15 hours
processors : 2x Intel(R) Core(TM)2 Duo CPU E4600 @ 2.40GHz
physical memory : 899/2039 MB (free/total)
free disk space : (C:) 44,38 GB
display mode : 1600x1200, 16 bit
process id : $e20
allocated memory : 26,71 MB
command line : "C:\Program Files\Softland\FBackup 4\FBackup.EXE" /R "pstsat"
executable : FBackup.EXE
exec. date/time : 2008-12-08 17:29
version : 4.0.0.124
compiled with : Delphi 7
contact name : E
contact email : example
madExcept version : 3.0h
callstack crc : $3260d410, $37801ef4, $37801ef4
exception number : 10
exception message : The application seems to be frozen.
main thread ($11e8):
76e9fbfe +00a ntdll.dll NtOpenFile
76ab5865 +091 kernel32.dll GetVolumeInformationW
76a73e19 +083 kernel32.dll GetVolumeInformationA
00504157 +0bf FBackup.EXE DiskUtils 326 +8 GetVolumeInfo
00503fe9 +0b5 FBackup.EXE DiskUtils 291 +11 GetExternalDriveBySerialNo
00831202 +03e FBackup.EXE BckDestClass 1183 +2 TBackupDest.GetUSBFolder
0082eff1 +241 FBackup.EXE BckDestClass 546 +26 TBackupDest.Load
0080e908 +a80 FBackup.EXE BackupClass 1610 +270 TBackup.Load
007f7d13 +657 FBackup.EXE BackupGlobals 691 +181 OnAppStartUp
0085346d +4b9 FBackup.EXE Backup4all 272 +170 initialization
76ea7e04 +076 ntdll.dll RtlUnicodeStringToAnsiString
76ab3821 +010 kernel32.dll BaseThreadInitThunk
76e7a9bb +04b ntdll.dll LdrInitializeThunk
modules:
00400000 FBackup.EXE 4.0.0.124 C:\Program Files\Softland\FBackup 4
02510000 STARBURN.DLL 10.0.0.1584 C:\Program Files\Softland\FBackup 4
02a50000 ssleay32.dll C:\Program Files\Softland\FBackup 4
042f0000 LIBEAY32.dll C:\Program Files\Softland\FBackup 4
049b0000 OutlookExpressSources.dll 1.0.0.1 C:\Users\rolf\AppData\Roaming\Softland\FBackup 4\Plugins
10000000 AES.DLL C:\Program Files\Softland\FBackup 4
60900000 sqlite3.dll C:\Program Files\Softland\FBackup 4
6cbc0000 olepro32.dll 6.0.6000.16386 C:\windows\system32
70890000 snmpapi.dll 6.0.6000.16386 C:\windows\system32
72720000 wsock32.dll 6.0.6000.16386 C:\windows\system32
72a50000 Credui.dll 6.0.6000.16386 C:\windows\system32
72e80000 winspool.drv 6.0.6000.16386 C:\windows\system32
73020000 vssapi.dll 6.0.6000.16386 C:\windows\system32
73280000 vsstrace.dll 6.0.6000.16386 C:\windows\system32
73b30000 ATL.DLL 3.5.2284.2 C:\windows\system32
73e50000 OLEACC.dll 4.2.5406.0 C:\windows\system32
73e90000 winmm.dll 6.0.6000.16386 C:\windows\system32
742d0000 COMCTL32.dll 6.10.6000.16386 C:\windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100
744f0000 inetmib1.dll 6.0.6000.16386 C:\windows\system32
74540000 XmlLite.dll 1.1.1002.0 C:\windows\system32
745d0000 uxtheme.dll 6.0.6000.16386 C:\windows\system32
746d0000 WINTRUST.dll 6.0.6000.16386 C:\windows\system32
74790000 wtsapi32.dll 6.0.6000.16553 C:\windows\system32
748a0000 NTMARTA.DLL 6.0.6000.16386 C:\windows\system32
74900000 WINSTA.dll 6.0.6000.16386 C:\windows\system32
74950000 rsaenh.dll 6.0.6000.16386 C:\windows\system32
74c30000 version.dll 6.0.6000.16386 C:\windows\system32
74d80000 dhcpcsvc6.DLL 6.0.6000.16512 C:\windows\system32
74da0000 WINNSI.DLL 6.0.6000.16386 C:\windows\system32
74db0000 dhcpcsvc.DLL 6.0.6000.16512 C:\windows\system32
74df0000 IPHLPAPI.DLL 6.0.6000.16386 C:\windows\system32
74e90000 CRYPT32.dll 6.0.6000.16425 C:\windows\system32
74f90000 mpr.dll 6.0.6000.16386 C:\windows\system32
74fe0000 MSASN1.dll 6.0.6000.16386 C:\windows\system32
75000000 SAMLIB.dll 6.0.6000.16386 C:\windows\system32
75020000 DNSAPI.dll 6.0.6000.16615 C:\windows\system32
75230000 NETAPI32.dll 6.0.6000.16764 C:\windows\system32
753a0000 AUTHZ.dll 6.0.6000.16386 C:\windows\system32
753c0000 Secur32.dll 6.0.6000.16870 C:\windows\system32
753e0000 USERENV.dll 6.0.6000.16386 C:\windows\system32
75520000 PSAPI.DLL 6.0.6000.16386 C:\windows\system32
75530000 SHELL32.dll 6.0.6000.16774 C:\windows\system32
76000000 iertutil.dll 8.0.6001.18813 C:\windows\system32
761f0000 USER32.dll 6.0.6000.16438 C:\windows\system32
76290000 OLEAUT32.dll 6.0.6000.16609 C:\windows\system32
76320000 LPK.DLL 6.0.6000.16870 C:\windows\system32
76330000 SETUPAPI.dll 6.0.6000.16609 C:\windows\system32
764c0000 comdlg32.dll 6.0.6000.16386 C:\windows\system32
76540000 GDI32.dll 6.0.6000.16766 C:\windows\system32
76590000 WLDAP32.dll 6.0.6000.16386 C:\windows\system32
765e0000 urlmon.dll 8.0.6001.18813 C:\windows\system32
76720000 USP10.dll 1.626.6000.16386 C:\windows\system32
767a0000 NSI.dll 6.0.6000.16386 C:\windows\system32
767b0000 ADVAPI32.dll 6.0.6000.16386 C:\windows\system32
76870000 msvcrt.dll 7.0.6000.16386 C:\windows\system32
76920000 ole32.dll 6.0.6000.16386 C:\windows\system32
76a70000 kernel32.dll 6.0.6000.16820 C:\windows\system32
76b50000 SHLWAPI.dll 6.0.6000.16386 C:\windows\system32
76bb0000 wininet.dll 8.0.6001.18813 C:\windows\system32
76ca0000 RPCRT4.dll 6.0.6000.16850 C:\windows\system32
76d70000 MSCTF.dll 6.0.6000.16386 C:\windows\system32
76e40000 ntdll.dll 6.0.6000.16386 C:\windows\system32
76f60000 Normaliz.dll 6.0.6000.16386 C:\windows\system32
76f70000 IMM32.DLL 6.0.6000.16386 C:\windows\system32
76f90000 ws2_32.dll 6.0.6000.16386 C:\windows\system32
76fc0000 imagehlp.dll 6.0.6000.16470 C:\windows\system32
processes:
0000 Idle 0
0004 System 0
01c0 smss.exe 0
0200 csrss.exe 0
0230 wininit.exe 0
0240 csrss.exe 1
0260 services.exe 0
0270 lsass.exe 0
0278 lsm.exe 0
02e4 winlogon.exe 1
0334 svchost.exe 0
036c svchost.exe 0
038c svchost.exe 0
03d0 svchost.exe 0
040c svchost.exe 0
042c svchost.exe 0
04a0 audiodg.exe 0
04c0 svchost.exe 0
04e4 SLsvc.exe 0
0538 svchost.exe 0
05cc svchost.exe 0
0698 spoolsv.exe 0
06b0 svchost.exe 0
079c AEADISRV.EXE 0
07d4 iviRegMgr.exe 0
07ec SyncServices.exe 0
033c pdfsvc.exe 0
0584 svchost.exe 0
0710 svchost.exe 0
0544 svchost.exe 0
0838 WUDFHost.exe 0
0af4 taskeng.exe 0
0d00 taskeng.exe 1 normal C:\windows\system32
0c94 Dwm.exe 1 high C:\windows\system32
0644 fbaSched.Exe 1 below normal C:\Program Files\Softland\FBackup 4
02cc taskeng.exe 1 normal C:\windows\system32
0ecc scheduler.exe 1 normal C:\Windows\SMINST
0f18 MSASCui.exe 1 normal C:\Program Files\Windows Defender
0c98 smax4pnp.exe 1 normal C:\Program Files\Analog Devices\Core
0f14 pdfsty.exe 1 normal C:\Program Files\PDF Complete
0e1c rundll32.exe 1 normal C:\Windows\System32
0fe8 MaxMenuMgr.exe 1 normal C:\Program Files\Maxtor\OneTouch Status
0ff0 rundll32.exe 1 normal C:\Windows\System32
00f0 sidebar.exe 1 normal C:\Program Files\Windows Sidebar
0108 E_FATI8JA.EXE 1 normal C:\Windows\System32\spool\drivers\w32x86\3
00ec DevDetect.exe 1 normal C:\Program Files\Common Files\ACD Systems\EN
00e4 PCSuite.exe 1 normal C:\Program Files\Nokia\Nokia PC Suite 7
0884 ctfmon.exe 1 normal C:\Users\rolf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
0ff4 ServiceLayer.exe 0
0478 conime.exe 1 normal
0b0c SearchIndexer.exe 0
0384 conime.exe 1 normal C:\windows\system32
12f8 explorer.exe 1 normal C:\windows
0870 igfxsrvc.exe 1 normal C:\Windows\system32
10f0 FBackup.EXE 1 below normal C:\Program Files\Softland\FBackup 4
0e20 FBackup.EXE 1 below normal C:\Program Files\Softland\FBackup 4
127c NclUSBSrv.exe 0
031c NclRSSrv.exe 0
1564 OUTLOOK.EXE 1 normal C:\PROGRA~1\MICROS~1\Office12
17e0 EXCEL.EXE 1 normal C:\Program Files\Microsoft Office\Office12
1690 iexplore.exe 1 normal C:\Program Files\Internet Explorer
1390 iexplore.exe 1 normal C:\Program Files\Internet Explorer
1448 FlashUtil10c.exe 1 normal C:\windows\system32\Macromed\Flash
1534 csrss.exe 3
0ec8 winlogon.exe 3
16c0 rdpclip.exe 1 normal C:\windows\system32
02a8 LogonUI.exe 3
0904 wuauclt.exe 1 normal C:\windows\system32
hardware:
+ Computer
- ACPI x86-based PC
+ Disk drives
- Generic- Compact Flash USB Device
- Generic- MS/MS-Pro USB Device
- Generic- SD/MMC USB Device
- Generic- SM/xD-Picture USB Device
- Maxtor OneTouch Disk
- Maxtor OneTouch USB Device
- ST3250310AS ATA Device
- ST350063 0AS USB Device
+ Display adapters
- NVIDIA GeForce 8400 GS (driver 7.15.11.6235)
+ DVD/CD-ROM drives
- ATAPI DVD A DH16A1L ATA Device
+ Floppy drive controllers
- Standard floppy disk controller
+ Human Interface Devices
- Microsoft USB Wheel Mouse Optical
- USB Human Interface Device
+ IDE ATA/ATAPI controllers
- IDE Channel
- IDE Channel
- IDE Channel
- IDE Channel
- Intel(R) ICH9 2 port Serial ATA Storage Controller 1 - 2921 (driver 8.3.0.1011)
- Intel(R) ICH9 2 port Serial ATA Storage Controller 2 - 2926 (driver 8.3.0.1011)
+ Keyboards
- HID Keyboard Device
- Standard PS/2 Keyboard
+ Maxtor Personal Storage Security
- Maxtor OneTouch USB Device (driver 1.0.8.0)
- Maxtor OneTouch USB Device (driver 1.0.8.0)
+ Mice and other pointing devices
- Microsoft USB Wheel Mouse Optical
- PS/2 Compatible Mouse
+ Monitors
- Generic PnP Monitor
+ Network adapters
- Intel(R) 82566DM Gigabit Network Connection (driver 9.8.20.0)
+ Portable Devices
- Compact Flash
- MS/MS-Pro
- SD/MMC
- SM/xD-Picture
+ Ports (COM & LPT)
- Communications Port (COM1)
+ Printers
- EPSON Stylus Photo R800 (driver 6.52.0.0)
- hp business inkjet 1200
+ Processors
- Intel(R) Core(TM)2 Duo CPU E4600 @ 2.40GHz
- Intel(R) Core(TM)2 Duo CPU E4600 @ 2.40GHz
+ Security Devices
- Trusted Platform Module 1.2
+ Sound, video and game controllers
- SoundMAX Integrated Digital HD Audio (driver 6.10.1.5490)
+ Storage controllers
- Microsoft iSCSI Initiator
+ Storage volume shadow copies
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
+ System devices
- ACPI Fixed Feature Button
- ACPI Power Button
- Advanced programmable interrupt controller
- Direct memory access controller
- High Definition Audio Controller
- High precision event timer
- Intel(R) 82801 PCI Bridge - 244E
- Intel(R) ICH9 Family PCI Express Root Port 1 - 2940 (driver 8.3.0.1014)
- Intel(R) ICH9 Family PCI Express Root Port 2 - 2942 (driver 8.3.0.1014)
- Intel(R) ICH9 LPC Interface Controller - 2918 (driver 8.3.0.1014)
- Intel(R) Management Engine Interface (driver 3.0.30.1086)
- Intel(R) Q33 Express Chipset Processor to I/O Controller - 29D0 (driver 8.3.1.1003)
- Microsoft ACPI-Compliant System
- Microsoft System Management BIOS Driver
- Microsoft Windows Management Interface for ACPI
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Numeric data processor
- PCI bus
- Plug and Play Software Device Enumerator
- Programmable interrupt controller
- System board
- System CMOS/real time clock
- System speaker
- System timer
- Terminal Server Device Redirector
- Terminal Server Keyboard Driver
- Terminal Server Mouse Driver
- UMBus Enumerator
- UMBus Enumerator
- UMBus Root Bus Enumerator
- Volume Manager
+ Universal Serial Bus controllers
- Intel(R) ICH9 Family USB Universal Host Controller - 2934 (driver 8.3.0.1011)
- Intel(R) ICH9 Family USB Universal Host Controller - 2935 (driver 8.3.0.1011)
- Intel(R) ICH9 Family USB Universal Host Controller - 2936 (driver 8.3.0.1011)
- Intel(R) ICH9 Family USB Universal Host Controller - 2937 (driver 8.3.0.1011)
- Intel(R) ICH9 Family USB Universal Host Controller - 2938 (driver 8.3.0.1011)
- Intel(R) ICH9 Family USB Universal Host Controller - 2939 (driver 8.3.0.1011)
- Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293A (driver 8.3.0.1011)
- Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293C (driver 8.3.0.1011)
- Unknown Device
- USB Mass Storage Device
- USB Mass Storage Device
- USB Mass Storage Device
- USB Mass Storage Device
- USB Printing Support
- USB Printing Support
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
disassembling:
[...]
00504147 lea eax, [ebp-$118]
0050414d push eax
0050414e mov eax, [ebp-$18]
00504151 call -$fe9f2 ($405764) ; System.@LStrToPChar
00504156 push eax
00504157 > call -$fbf50 ($40820c) ; Windows.GetVolumeInformation
0050415c cmp eax, 1
0050415f sbb eax, eax
00504161 inc eax
00504162 mov [ebp-$d], al
00504165 334 cmp byte ptr [ebp-$d], 0
[...]
date/time : 2010-01-05, 19:18:47, 189ms
computer name : example
user name : example
registered owner : example / Hewlett-Packard Company
operating system : Windows Vista build 6000
system language : Finnish
system up time : 62 days 1 hour
program up time : 10 minutes
processors : 2x Intel(R) Core(TM)2 Duo CPU E4600 @ 2.40GHz
physical memory : 1047/2039 MB (free/total)
free disk space : (C:) 44,37 GB
display mode : 1680x1050, 32 bit
process id : $1700
allocated memory : 20,69 MB
executable : FBackup.exe
exec. date/time : 2008-12-08 17:29
version : 4.0.0.124
compiled with : Delphi 7
madExcept version : 3.0h
contact name : enari
contact email : example
callstack crc : $3260d410, $37801ef4, $37801ef4
exception number : 1
exception message : The application seems to be frozen.
main thread ($a20):
76e9fbfe +00a ntdll.dll NtOpenFile
76ab5865 +091 kernel32.dll GetVolumeInformationW
76a73e19 +083 kernel32.dll GetVolumeInformationA
00504157 +0bf FBackup.exe DiskUtils 326 +8 GetVolumeInfo
00503fe9 +0b5 FBackup.exe DiskUtils 291 +11 GetExternalDriveBySerialNo
00831202 +03e FBackup.exe BckDestClass 1183 +2 TBackupDest.GetUSBFolder
0082eff1 +241 FBackup.exe BckDestClass 546 +26 TBackupDest.Load
0080e908 +a80 FBackup.exe BackupClass 1610 +270 TBackup.Load
007f7d13 +657 FBackup.exe BackupGlobals 691 +181 OnAppStartUp
0085346d +4b9 FBackup.exe Backup4all 272 +170 initialization
76ea7e04 +076 ntdll.dll RtlUnicodeStringToAnsiString
76ab3821 +010 kernel32.dll BaseThreadInitThunk
76e7a9bb +04b ntdll.dll LdrInitializeThunk
modules:
00400000 FBackup.exe 4.0.0.124 C:\Program Files\Softland\FBackup 4
01f40000 ssleay32.dll C:\Program Files\Softland\FBackup 4
028c0000 STARBURN.DLL 10.0.0.1584 C:\Program Files\Softland\FBackup 4
04270000 LIBEAY32.dll C:\Program Files\Softland\FBackup 4
04ff0000 OutlookExpressSources.dll 1.0.0.1 C:\Users\rolf\AppData\Roaming\Softland\FBackup 4\Plugins
10000000 AES.DLL C:\Program Files\Softland\FBackup 4
60900000 sqlite3.dll C:\Program Files\Softland\FBackup 4
6cbc0000 olepro32.dll 6.0.6000.16386 C:\windows\system32
70890000 snmpapi.dll 6.0.6000.16386 C:\windows\system32
72900000 inetmib1.dll 6.0.6000.16386 C:\windows\system32
729e0000 wsock32.dll 6.0.6000.16386 C:\windows\system32
72a50000 Credui.dll 6.0.6000.16386 C:\windows\system32
72e80000 winspool.drv 6.0.6000.16386 C:\windows\system32
73020000 vssapi.dll 6.0.6000.16386 C:\windows\system32
73280000 vsstrace.dll 6.0.6000.16386 C:\windows\system32
73b30000 ATL.DLL 3.5.2284.2 C:\windows\system32
73e50000 OLEACC.dll 4.2.5406.0 C:\windows\system32
73e90000 winmm.dll 6.0.6000.16386 C:\windows\system32
742d0000 COMCTL32.dll 6.10.6000.16386 C:\windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100
74540000 XmlLite.dll 1.1.1002.0 C:\windows\system32
745d0000 uxtheme.dll 6.0.6000.16386 C:\windows\system32
748a0000 NTMARTA.DLL 6.0.6000.16386 C:\windows\system32
74950000 rsaenh.dll 6.0.6000.16386 C:\windows\system32
74c30000 version.dll 6.0.6000.16386 C:\windows\system32
74d80000 dhcpcsvc6.DLL 6.0.6000.16512 C:\windows\system32
74da0000 WINNSI.DLL 6.0.6000.16386 C:\windows\system32
74db0000 dhcpcsvc.DLL 6.0.6000.16512 C:\windows\system32
74df0000 IPHLPAPI.DLL 6.0.6000.16386 C:\windows\system32
74f90000 mpr.dll 6.0.6000.16386 C:\windows\system32
75000000 SAMLIB.dll 6.0.6000.16386 C:\windows\system32
75020000 DNSAPI.dll 6.0.6000.16615 C:\windows\system32
75230000 NETAPI32.dll 6.0.6000.16764 C:\windows\system32
753a0000 AUTHZ.dll 6.0.6000.16386 C:\windows\system32
753c0000 Secur32.dll 6.0.6000.16870 C:\windows\system32
753e0000 USERENV.dll 6.0.6000.16386 C:\windows\system32
75520000 PSAPI.DLL 6.0.6000.16386 C:\windows\system32
75530000 SHELL32.dll 6.0.6000.16774 C:\windows\system32
76000000 iertutil.dll 8.0.6001.18813 C:\windows\system32
761f0000 USER32.dll 6.0.6000.16438 C:\windows\system32
76290000 OLEAUT32.dll 6.0.6000.16609 C:\windows\system32
76320000 LPK.DLL 6.0.6000.16870 C:\windows\system32
76330000 SETUPAPI.dll 6.0.6000.16609 C:\windows\system32
764c0000 comdlg32.dll 6.0.6000.16386 C:\windows\system32
76540000 GDI32.dll 6.0.6000.16766 C:\windows\system32
76590000 WLDAP32.dll 6.0.6000.16386 C:\windows\system32
765e0000 urlmon.dll 8.0.6001.18813 C:\windows\system32
76720000 USP10.dll 1.626.6000.16386 C:\windows\system32
767a0000 NSI.dll 6.0.6000.16386 C:\windows\system32
767b0000 ADVAPI32.dll 6.0.6000.16386 C:\windows\system32
76870000 msvcrt.dll 7.0.6000.16386 C:\windows\system32
76920000 ole32.dll 6.0.6000.16386 C:\windows\system32
76a70000 kernel32.dll 6.0.6000.16820 C:\windows\system32
76b50000 SHLWAPI.dll 6.0.6000.16386 C:\windows\system32
76bb0000 wininet.dll 8.0.6001.18813 C:\windows\system32
76ca0000 RPCRT4.dll 6.0.6000.16850 C:\windows\system32
76d70000 MSCTF.dll 6.0.6000.16386 C:\windows\system32
76e40000 ntdll.dll 6.0.6000.16386 C:\windows\system32
76f60000 Normaliz.dll 6.0.6000.16386 C:\windows\system32
76f70000 IMM32.DLL 6.0.6000.16386 C:\windows\system32
76f90000 ws2_32.dll 6.0.6000.16386 C:\windows\system32
processes:
0000 Idle 0
0004 System 0
01c0 smss.exe 0
0200 csrss.exe 0
0230 wininit.exe 0
0240 csrss.exe 1
0260 services.exe 0
0270 lsass.exe 0
0278 lsm.exe 0
02e4 winlogon.exe 1
0334 svchost.exe 0
036c svchost.exe 0
038c svchost.exe 0
03d0 svchost.exe 0
040c svchost.exe 0
042c svchost.exe 0
04a0 audiodg.exe 0
04c0 svchost.exe 0
04e4 SLsvc.exe 0
0538 svchost.exe 0
05cc svchost.exe 0
0698 spoolsv.exe 0
06b0 svchost.exe 0
079c AEADISRV.EXE 0
07d4 iviRegMgr.exe 0
07ec SyncServices.exe 0
033c pdfsvc.exe 0
0584 svchost.exe 0
0710 svchost.exe 0
0544 svchost.exe 0
0838 WUDFHost.exe 0
0af4 taskeng.exe 0
0d00 taskeng.exe 1 normal C:\windows\system32
0c94 Dwm.exe 1 high C:\windows\system32
0644 fbaSched.Exe 1 below normal C:\Program Files\Softland\FBackup 4
02cc taskeng.exe 1 normal C:\windows\system32
0ecc scheduler.exe 1 normal C:\Windows\SMINST
0f18 MSASCui.exe 1 normal C:\Program Files\Windows Defender
0c98 smax4pnp.exe 1 normal C:\Program Files\Analog Devices\Core
0f14 pdfsty.exe 1 normal C:\Program Files\PDF Complete
0e1c rundll32.exe 1 normal C:\Windows\System32
0fe8 MaxMenuMgr.exe 1 normal C:\Program Files\Maxtor\OneTouch Status
0ff0 rundll32.exe 1 normal C:\Windows\System32
00f0 sidebar.exe 1 normal C:\Program Files\Windows Sidebar
0108 E_FATI8JA.EXE 1 normal C:\Windows\System32\spool\drivers\w32x86\3
00ec DevDetect.exe 1 normal C:\Program Files\Common Files\ACD Systems\EN
00e4 PCSuite.exe 1 normal C:\Program Files\Nokia\Nokia PC Suite 7
0884 ctfmon.exe 1 normal C:\Users\rolf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
0ff4 ServiceLayer.exe 0
0478 conime.exe 1 normal
0b0c SearchIndexer.exe 0
0384 conime.exe 1 normal C:\windows\system32
12f8 explorer.exe 1 normal C:\windows
0870 igfxsrvc.exe 1 normal C:\Windows\system32
0354 FBackup.exe 1 normal C:\Program Files\Softland\FBackup 4
1700 FBackup.exe 1 normal C:\Program Files\Softland\FBackup 4
0eec Restore7.exe 1 normal C:\Windows\SMINST
04b4 taskeng.exe 0
0d44 NclUSBSrv.exe 0
173c NclRSSrv.exe 0
13a8 wuauclt.exe 1 normal C:\windows\system32
0aa8 MaxUtilities.exe 1 normal C:\Program Files\Maxtor\ManagerApp
hardware:
+ Computer
- ACPI x86-based PC
+ Disk drives
- Generic- Compact Flash USB Device
- Generic- MS/MS-Pro USB Device
- Generic- SD/MMC USB Device
- Generic- SM/xD-Picture USB Device
- Maxtor OneTouch Disk
- Maxtor OneTouch USB Device
- ST3250310AS ATA Device
- ST350063 0AS USB Device
+ Display adapters
- NVIDIA GeForce 8400 GS (driver 7.15.11.6235)
+ DVD/CD-ROM drives
- ATAPI DVD A DH16A1L ATA Device
+ Floppy drive controllers
- Standard floppy disk controller
+ Human Interface Devices
- Microsoft USB Wheel Mouse Optical
- USB Human Interface Device
+ IDE ATA/ATAPI controllers
- IDE Channel
- IDE Channel
- IDE Channel
- IDE Channel
- Intel(R) ICH9 2 port Serial ATA Storage Controller 1 - 2921 (driver 8.3.0.1011)
- Intel(R) ICH9 2 port Serial ATA Storage Controller 2 - 2926 (driver 8.3.0.1011)
+ Keyboards
- HID Keyboard Device
- Standard PS/2 Keyboard
+ Maxtor Personal Storage Security
- Maxtor OneTouch USB Device (driver 1.0.8.0)
- Maxtor OneTouch USB Device (driver 1.0.8.0)
+ Mice and other pointing devices
- Microsoft USB Wheel Mouse Optical
- PS/2 Compatible Mouse
+ Monitors
- Generic PnP Monitor
+ Network adapters
- Intel(R) 82566DM Gigabit Network Connection (driver 9.8.20.0)
+ Portable Devices
- Compact Flash
- MS/MS-Pro
- SD/MMC
- SM/xD-Picture
+ Ports (COM & LPT)
- Communications Port (COM1)
+ Printers
- EPSON Stylus Photo R800 (driver 6.52.0.0)
- hp business inkjet 1200
+ Processors
- Intel(R) Core(TM)2 Duo CPU E4600 @ 2.40GHz
- Intel(R) Core(TM)2 Duo CPU E4600 @ 2.40GHz
+ Security Devices
- Trusted Platform Module 1.2
+ Sound, video and game controllers
- SoundMAX Integrated Digital HD Audio (driver 6.10.1.5490)
+ Storage controllers
- Microsoft iSCSI Initiator
+ Storage volume shadow copies
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
+ System devices
- ACPI Fixed Feature Button
- ACPI Power Button
- Advanced programmable interrupt controller
- Direct memory access controller
- High Definition Audio Controller
- High precision event timer
- Intel(R) 82801 PCI Bridge - 244E
- Intel(R) ICH9 Family PCI Express Root Port 1 - 2940 (driver 8.3.0.1014)
- Intel(R) ICH9 Family PCI Express Root Port 2 - 2942 (driver 8.3.0.1014)
- Intel(R) ICH9 LPC Interface Controller - 2918 (driver 8.3.0.1014)
- Intel(R) Management Engine Interface (driver 3.0.30.1086)
- Intel(R) Q33 Express Chipset Processor to I/O Controller - 29D0 (driver 8.3.1.1003)
- Microsoft ACPI-Compliant System
- Microsoft System Management BIOS Driver
- Microsoft Windows Management Interface for ACPI
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Numeric data processor
- PCI bus
- Plug and Play Software Device Enumerator
- Programmable interrupt controller
- System board
- System CMOS/real time clock
- System speaker
- System timer
- Terminal Server Device Redirector
- Terminal Server Keyboard Driver
- Terminal Server Mouse Driver
- UMBus Enumerator
- UMBus Enumerator
- UMBus Root Bus Enumerator
- Volume Manager
+ Universal Serial Bus controllers
- Intel(R) ICH9 Family USB Universal Host Controller - 2934 (driver 8.3.0.1011)
- Intel(R) ICH9 Family USB Universal Host Controller - 2935 (driver 8.3.0.1011)
- Intel(R) ICH9 Family USB Universal Host Controller - 2936 (driver 8.3.0.1011)
- Intel(R) ICH9 Family USB Universal Host Controller - 2937 (driver 8.3.0.1011)
- Intel(R) ICH9 Family USB Universal Host Controller - 2938 (driver 8.3.0.1011)
- Intel(R) ICH9 Family USB Universal Host Controller - 2939 (driver 8.3.0.1011)
- Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293A (driver 8.3.0.1011)
- Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293C (driver 8.3.0.1011)
- Unknown Device
- USB Mass Storage Device
- USB Mass Storage Device
- USB Mass Storage Device
- USB Mass Storage Device
- USB Printing Support
- USB Printing Support
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
disassembling:
[...]
00504147 lea eax, [ebp-$118]
0050414d push eax
0050414e mov eax, [ebp-$18]
00504151 call -$fe9f2 ($405764) ; System.@LStrToPChar
00504156 push eax
00504157 > call -$fbf50 ($40820c) ; Windows.GetVolumeInformation
0050415c cmp eax, 1
0050415f sbb eax, eax
00504161 inc eax
00504162 mov [ebp-$d], al
00504165 334 cmp byte ptr [ebp-$d], 0
[...]
Thank you!
Best regards,
Enari