Maybe this is stopping the upgrade.
I suggest you do this:
Run hijackthis. Hit None of the above, Click Do a System Scan Only. Put a Check in the box on the left side on these:
O16 - DPF: {7CEEAB76-D59E-11D3-8394-00C04F7BDF10} (Application Class) -
https://www.tradestation.com/tscom/ClientPlugIn/tsTemp.cab
Close
ALL windows and browsers
except HijackThis and click
"Fix checked"
Empty Recycle Bin
Reboot and try it again
OK, working on this now. I will try the reinstall of the Tradestation software after reboot. I sure do appreciate all of your help. But then I must call it a night, as I have an early morning.
Well, I am still getting the DEP errors, Windows must Close errors and DrWatson Postmortem Debugger errors that freeze everything up until I go into Task Manager and stop the drwtn32.exe or dwwin.exe processes from running. Then I can at least get on the internet until I try and run another process and it happens all over again. This is my DrWatson Log File if anyone is still checking this out. this is not the entire log and I must assume that the log is updated by data being appended to the end of the file and not the beginning. It is a huge file that cannot be entirely copied at once. So I am only offering the last several "Dumps" for lack of a better word, and the header info at the beginning of the file. Header info comes first.
Microsoft ® DrWtsn32
Copyright © 1985-2001 Microsoft Corp. All rights reserved.
Application exception occurred:
App: C:\Program Files\Internet Explorer\iexplore.exe ()
When: 5/14/2005 @ 07:04:12.328
Exception number: c0000005 (access violation)
*—-> System Information <—-*
Computer Name:
User Name:
Terminal Session Id: 0
Number of Processors: 1
Processor Type: x86 Family 15 Model 15 Stepping 0
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Uniprocessor Free
Registered Organization:
Registered Owner:
Header Info and first Data Set
*—-> Task List <—-*
0 System Process
4 System
580 smss.exe
656 csrss.exe
680 winlogon.exe
736 services.exe
748 lsass.exe
904 svchost.exe
960 svchost.exe
1052 svchost.exe
1104 svchost.exe
1236 svchost.exe
1508 spoolsv.exe
1624 Explorer.EXE
1680 SOUNDMAN.EXE
1704 RUNDLL32.EXE
1728 PDVDServ.exe
1736 ACMonitor_X83.exe
1744 AcBtnMgr_X83.exe
1752 printray.exe
1820 em_exec.exe
244 nvsvc32.exe
344 wdfmgr.exe
1436 alg.exe
1548 wscntfy.exe
424 svchost.exe
1828 wpabaln.exe
1600 iexplore.exe
404 drwtsn32.exe
*—-> Module List <—-*
(0000000000400000 - 0000000000419000: C:\Program Files\Internet Explorer\iexplore.exe
(0000000000d70000 - 0000000000df8000: C:\WINDOWS\system32\shdoclc.dll
(0000000000e00000 - 00000000010c5000: C:\WINDOWS\system32\xpsp2res.dll
(00000000015f0000 - 00000000015fb000: C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll
(0000000002530000 - 0000000002547000: C:\WINDOWS\system32\odbcint.dll
(0000000002a30000 - 0000000002bbd000: C:\WINDOWS\system32\macromed\flash\flash.ocx
(0000000010000000 - 0000000010007000: C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll
(0000000020000000 - 0000000020012000: C:\WINDOWS\system32\browselc.dll
(000000005ad70000 - 000000005ada8000: C:\WINDOWS\system32\uxtheme.dll
(000000005b860000 - 000000005b8b4000: C:\WINDOWS\system32\NETAPI32.dll
(000000005d090000 - 000000005d127000: C:\WINDOWS\system32\comctl32.dll
(000000005ff20000 - 000000005ff46000: C:\WINDOWS\system32\MSRATING.dll
(000000005ff50000 - 000000005ff61000: C:\WINDOWS\system32\msratelc.dll
(00000000662b0000 - 0000000066308000: C:\WINDOWS\system32\hnetcfg.dll
(0000000066e50000 - 0000000066e90000: C:\WINDOWS\system32\iepeers.dll
(000000006d430000 - 000000006d43a000: C:\WINDOWS\system32\ddrawex.dll
(0000000071a50000 - 0000000071a8f000: C:\WINDOWS\system32\mswsock.dll
(0000000071a90000 - 0000000071a98000: C:\WINDOWS\System32\wshtcpip.dll
(0000000071aa0000 - 0000000071aa8000: C:\WINDOWS\system32\WS2HELP.dll
(0000000071ab0000 - 0000000071ac7000: C:\WINDOWS\system32\WS2_32.dll
(0000000071ad0000 - 0000000071ad9000: C:\WINDOWS\system32\wsock32.dll
(0000000071b20000 - 0000000071b32000: C:\WINDOWS\system32\MPR.dll
(0000000071bf0000 - 0000000071c03000: C:\WINDOWS\System32\SAMLIB.dll
(0000000071c10000 - 0000000071c1e000: C:\WINDOWS\System32\ntlanman.dll
(0000000071c80000 - 0000000071c87000: C:\WINDOWS\System32\NETRAP.dll
(0000000071c90000 - 0000000071cd0000: C:\WINDOWS\System32\NETUI1.dll
(0000000071cd0000 - 0000000071ce7000: C:\WINDOWS\System32\NETUI0.dll
(0000000071d40000 - 0000000071d5c000: C:\WINDOWS\system32\actxprxy.dll
(00000000722b0000 - 00000000722b5000: C:\WINDOWS\system32\sensapi.dll
(0000000072d10000 - 0000000072d18000: C:\WINDOWS\system32\msacm32.drv
(0000000072d20000 - 0000000072d29000: C:\WINDOWS\system32\wdmaud.drv
(0000000073000000 - 0000000073026000: C:\WINDOWS\system32\WINSPOOL.DRV
(0000000073300000 - 0000000073367000: C:\WINDOWS\system32\vbscript.dll
(0000000073760000 - 00000000737a9000: C:\WINDOWS\system32\DDRAW.dll
(0000000073bc0000 - 0000000073bc6000: C:\WINDOWS\system32\DCIMAN32.dll
(0000000073dd0000 - 0000000073ece000: C:\WINDOWS\system32\MFC42.DLL
(0000000074320000 - 000000007435d000: C:\WINDOWS\system32\ODBC32.dll
(00000000746c0000 - 00000000746e7000: C:\WINDOWS\system32\msls31.dll
(00000000746f0000 - 000000007471a000: C:\WINDOWS\system32\msimtf.dll
(0000000074720000 - 000000007476b000: C:\WINDOWS\system32\MSCTF.dll
(00000000754d0000 - 0000000075550000: C:\WINDOWS\system32\CRYPTUI.dll
(0000000075970000 - 0000000075a67000: C:\WINDOWS\system32\MSGINA.dll
(0000000075c50000 - 0000000075cbe000: C:\WINDOWS\system32\jscript.dll
(0000000075cf0000 - 0000000075d81000: C:\WINDOWS\system32\mlang.dll
(0000000075e90000 - 0000000075f40000: C:\WINDOWS\system32\SXS.DLL
(0000000075f60000 - 0000000075f67000: C:\WINDOWS\System32\drprov.dll
(0000000075f70000 - 0000000075f79000: C:\WINDOWS\System32\davclnt.dll
(0000000075f80000 - 000000007607c000: C:\WINDOWS\system32\BROWSEUI.dll
(0000000076080000 - 00000000760e5000: C:\WINDOWS\system32\MSVCP60.dll
(0000000076200000 - 0000000076271000: C:\WINDOWS\system32\mshtmled.dll
(0000000076360000 - 0000000076370000: C:\WINDOWS\system32\WINSTA.dll
(0000000076390000 - 00000000763ad000: C:\WINDOWS\system32\IMM32.DLL
(00000000763b0000 - 00000000763f9000: C:\WINDOWS\system32\comdlg32.dll
(0000000076600000 - 000000007661d000: C:\WINDOWS\System32\CSCDLL.dll
(00000000769c0000 - 0000000076a73000: C:\WINDOWS\system32\USERENV.dll
(0000000076b40000 - 0000000076b6d000: C:\WINDOWS\system32\WINMM.dll
(0000000076c30000 - 0000000076c5e000: C:\WINDOWS\system32\WINTRUST.dll
(0000000076c90000 - 0000000076cb8000: C:\WINDOWS\system32\IMAGEHLP.dll
(0000000076e80000 - 0000000076e8e000: C:\WINDOWS\system32\rtutils.dll
(0000000076e90000 - 0000000076ea2000: C:\WINDOWS\system32\rasman.dll
(0000000076eb0000 - 0000000076edf000: C:\WINDOWS\system32\TAPI32.dll
(0000000076ee0000 - 0000000076f1c000: C:\WINDOWS\system32\RASAPI32.DLL
(0000000076f20000 - 0000000076f47000: C:\WINDOWS\system32\DNSAPI.dll
(0000000076f60000 - 0000000076f8c000: C:\WINDOWS\system32\WLDAP32.dll
(0000000076fc0000 - 0000000076fc6000: C:\WINDOWS\system32\rasadhlp.dll
(0000000076fd0000 - 000000007704f000: C:\WINDOWS\system32\CLBCATQ.DLL
(0000000077050000 - 0000000077115000: C:\WINDOWS\system32\COMRes.dll
(0000000077120000 - 00000000771ac000: C:\WINDOWS\system32\OLEAUT32.dll
(00000000771b0000 - 0000000077256000: C:\WINDOWS\system32\WININET.dll
(0000000077260000 - 00000000772fe000: C:\WINDOWS\system32\urlmon.dll
(00000000773d0000 - 00000000774d2000: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
(00000000774e0000 - 000000007761d000: C:\WINDOWS\system32\ole32.dll
(0000000077760000 - 00000000778cc000: C:\WINDOWS\system32\SHDOCVW.dll
(0000000077920000 - 0000000077a13000: C:\WINDOWS\system32\SETUPAPI.dll
(0000000077a20000 - 0000000077a74000: C:\WINDOWS\System32\cscui.dll
(0000000077a80000 - 0000000077b14000: C:\WINDOWS\system32\CRYPT32.dll
(0000000077b20000 - 0000000077b32000: C:\WINDOWS\system32\MSASN1.dll
(0000000077b40000 - 0000000077b62000: C:\WINDOWS\system32\appHelp.dll
(0000000077bd0000 - 0000000077bd7000: C:\WINDOWS\system32\midimap.dll
(0000000077be0000 - 0000000077bf5000: C:\WINDOWS\system32\MSACM32.dll
(0000000077c00000 - 0000000077c08000: C:\WINDOWS\system32\VERSION.dll
(0000000077c10000 - 0000000077c68000: C:\WINDOWS\system32\msvcrt.dll
(0000000077d40000 - 0000000077dd0000: C:\WINDOWS\system32\USER32.dll
(0000000077dd0000 - 0000000077e6b000: C:\WINDOWS\system32\ADVAPI32.dll
(0000000077e70000 - 0000000077f01000: C:\WINDOWS\system32\RPCRT4.dll
(0000000077f10000 - 0000000077f56000: C:\WINDOWS\system32\GDI32.dll
(0000000077f60000 - 0000000077fd6000: C:\WINDOWS\system32\SHLWAPI.dll
(0000000077fe0000 - 0000000077ff1000: C:\WINDOWS\system32\Secur32.dll
(000000007c800000 - 000000007c8f4000: C:\WINDOWS\system32\kernel32.dll
(000000007c900000 - 000000007c9b0000: C:\WINDOWS\system32\ntdll.dll
(000000007c9c0000 - 000000007d1d4000: C:\WINDOWS\system32\SHELL32.dll
(000000007d4a0000 - 000000007d785000: C:\WINDOWS\system32\mshtml.dll
Last Several Dump Sessions of Log:
*—-> State Dump for Thread Id 0xf0 <—-*
eax=77e76bf0 ebx=00000000 ecx=00000000 edx=00000008 esi=000dc518 edi=000dc5bc
eip=7c90eb94 esp=023bfe1c ebp=023bff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*—-> Stack Back Trace <—-*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
023bff80 77e76c22 023bffa8 77e76a3b 000dc518 ntdll!KiFastSystemCallRet
023bff88 77e76a3b 000dc518 008d0178 00000000 RPCRT4!I_RpcBCacheFree+0x5ea
023bffa8 77e76c0a 0009df00 023bffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
023bffb4 7c80b50b 00155f20 008d0178 00000000 RPCRT4!I_RpcBCacheFree+0x5d2
023bffec 00000000 77e76bf0 00155f20 00000000 kernel32!GetModuleFileNameA+0x1b4
*—-> Raw Stack Dump <—-*
00000000023bfe1c 99 e3 90 7c 03 67 e7 77 - 4c 07 00 00 70 ff 3b 02 …|.g.wL…p.;.
00000000023bfe2c 00 00 00 00 18 33 18 00 - 4c ff 3b 02 7c 1e 55 81 …..3..L.;.|.U.
00000000023bfe3c 00 00 00 00 fc 3c 88 c0 - 88 89 58 89 e3 05 00 00 …..<….X…..
00000000023bfe4c 64 6b 90 b1 aa ec 51 80 - e3 05 00 00 88 89 58 89 dk….Q…….X.
00000000023bfe5c 00 e0 fd 7f 90 6b 90 b1 - f8 1f 60 c0 6c 6b 90 b1 …..k….`.lk..
00000000023bfe6c 8c e9 51 80 00 e0 fd 7f - 01 00 00 00 00 00 00 00 ..Q………….
00000000023bfe7c f0 fe 3f c0 00 00 00 00 - 00 00 00 00 00 f0 fd 7f ..?………….
00000000023bfe8c 28 6c 90 b1 df f0 51 80 - 90 6b 90 b1 00 00 00 00 (l….Q..k……
00000000023bfe9c 00 00 00 00 00 00 00 00 - f0 e1 ce 89 90 87 58 89 …………..X.
00000000023bfeac 01 88 58 89 00 00 00 00 - f0 fe 3f c0 00 00 00 00 ..X…….?…..
00000000023bfebc f4 6b 90 b1 00 00 10 00 - 2f 22 00 00 5c 88 58 89 .k……/"..\.X.
00000000023bfecc ff ff 22 02 90 87 58 89 - 00 00 00 00 00 92 01 00 .."…X………
00000000023bfedc 00 00 23 02 40 6b 90 b1 - a8 97 9e 89 ff ff ff ff ..#.@k……….
00000000023bfeec 10 50 53 80 00 e0 fd 7f - ff ff ff ff 90 75 5a 80 .PS……….uZ.
00000000023bfefc 08 c8 53 80 ff ff ff ff - b8 6c 90 b1 bc 6c 90 b1 ..S……l…l..
00000000023bff0c 00 80 00 00 14 6d 90 b1 - bc c1 ac 89 24 6c 90 b1 …..m……$l..
00000000023bff1c d9 9a 4f 80 e1 9a 4f 80 - 8c c1 ac 89 20 c0 ac 89 ..O…O….. …
00000000023bff2c 54 c0 ac 89 80 ff 3b 02 - 99 66 e7 77 4c ff 3b 02 T…..;..f.wL.;.
00000000023bff3c a9 66 e7 77 ed 10 90 7c - 58 1b 0c 00 20 5f 15 00 .f.w…|X… _..
00000000023bff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M…..]……
*—-> State Dump for Thread Id 0xf4 <—-*
eax=77e76bf0 ebx=00000000 ecx=00000000 edx=00000008 esi=000e21c0 edi=000e2264
eip=7c90eb94 esp=0249fe1c ebp=0249ff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*—-> Stack Back Trace <—-*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0249ff80 77e76c22 0249ffa8 77e76a3b 000e21c0 ntdll!KiFastSystemCallRet
0249ff88 77e76a3b 000e21c0 008d0178 00000000 RPCRT4!I_RpcBCacheFree+0x5ea
0249ffa8 77e76c0a 0009df00 0249ffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
0249ffb4 7c80b50b 00185160 008d0178 00000000 RPCRT4!I_RpcBCacheFree+0x5d2
0249ffec 00000000 77e76bf0 00185160 00000000 kernel32!GetModuleFileNameA+0x1b4
*—-> Raw Stack Dump <—-*
000000000249fe1c 99 e3 90 7c 03 67 e7 77 - 9c 07 00 00 70 ff 49 02 …|.g.w….p.I.
000000000249fe2c 00 00 00 00 18 89 11 00 - 4c ff 49 02 00 00 00 00 ……..L.I…..
000000000249fe3c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
000000000249fe4c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
000000000249fe5c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
000000000249fe6c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
000000000249fe7c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
000000000249fe8c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
000000000249fe9c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
000000000249feac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
000000000249febc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
000000000249fecc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
000000000249fedc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
000000000249feec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
000000000249fefc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
000000000249ff0c 00 00 00 00 00 00 00 00 - 34 59 5e 89 24 6c 8e b1 ……..4Y^.$l..
000000000249ff1c d9 9a 4f 80 e1 9a 4f 80 - 04 59 5e 89 98 57 5e 89 ..O…O..Y^..W^.
000000000249ff2c cc 57 5e 89 80 ff 49 02 - 99 66 e7 77 4c ff 49 02 .W^…I..f.wL.I.
000000000249ff3c a9 66 e7 77 ed 10 90 7c - 88 1d 0c 00 60 51 18 00 .f.w…|….`Q..
000000000249ff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M…..]……
*—-> State Dump for Thread Id 0xd8 <—-*
eax=77e76bf0 ebx=00000000 ecx=00000000 edx=00000000 esi=000e6a40 edi=000e6ae4
eip=7c90eb94 esp=024dfe1c ebp=024dff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*—-> Stack Back Trace <—-*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
024dff80 77e76c22 024dffa8 77e76a3b 000e6a40 ntdll!KiFastSystemCallRet
024dff88 77e76a3b 000e6a40 00000000 00000000 RPCRT4!I_RpcBCacheFree+0x5ea
024dffa8 77e76c0a 0009df00 024dffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
024dffb4 7c80b50b 00134b00 00000000 00000000 RPCRT4!I_RpcBCacheFree+0x5d2
024dffec 00000000 77e76bf0 00134b00 00000000 kernel32!GetModuleFileNameA+0x1b4
*—-> Raw Stack Dump <—-*
00000000024dfe1c 99 e3 90 7c 03 67 e7 77 - 48 07 00 00 70 ff 4d 02 …|.g.wH…p.M.
00000000024dfe2c 00 00 00 00 f0 d5 11 00 - 4c ff 4d 02 00 00 00 00 ……..L.M…..
00000000024dfe3c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000024dfe4c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000024dfe5c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000024dfe6c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000024dfe7c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000024dfe8c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000024dfe9c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000024dfeac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000024dfebc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000024dfecc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000024dfedc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000024dfeec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000024dfefc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000024dff0c 00 00 00 00 00 00 00 00 - bc 77 a0 89 24 ac 73 b1 ………w..$.s.
00000000024dff1c d9 9a 4f 80 e1 9a 4f 80 - 8c 77 a0 89 20 76 a0 89 ..O…O..w.. v..
00000000024dff2c 54 76 a0 89 80 ff 4d 02 - 99 66 e7 77 4c ff 4d 02 Tv….M..f.wL.M.
00000000024dff3c a9 66 e7 77 ed 10 90 7c - f0 cf 12 00 00 4b 13 00 .f.w…|…..K..
00000000024dff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M…..]……
*—-> State Dump for Thread Id 0x4ec <—-*
eax=00000000 ebx=77deb193 ecx=00004d69 edx=01004020 esi=0013e5f8 edi=001677fc
eip=7c90eb94 esp=018cfe00 ebp=018cff30 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*—-> Stack Back Trace <—-*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
018cff30 776f8217 001677e8 018cff6c 776f7b33 ntdll!KiFastSystemCallRet
018cff3c 776f7b33 01bf8948 001677e8 00000000 shsvcs+0x18217
018cff6c 010011cc 00000001 001880a8 00000000 shsvcs+0x17b33
018cffa0 77deb48b 00000001 001880a8 0007e898 svchost+0x11cc
018cffb4 7c80b50b 001880a0 00000000 0007e898 ADVAPI32!CryptVerifySignatureW+0x29
018cffec 00000000 77deb479 001880a0 00000000 kernel32!GetModuleFileNameA+0x1b4
*—-> Raw Stack Dump <—-*
00000000018cfe00 84 e3 90 7c 81 81 6f 77 - 04 0d 00 00 20 fe 8c 01 …|..ow…. …
00000000018cfe10 00 00 00 00 2c fe 8c 01 - fc 77 16 00 f8 e5 13 00 ….,….w……
00000000018cfe20 88 2e 12 00 30 4e 6e 77 - d1 78 69 77 00 00 00 00 ….0Nnw.xiw….
00000000018cfe30 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000018cfe40 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000018cfe50 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000018cfe60 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000018cfe70 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000018cfe80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000018cfe90 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000018cfea0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000018cfeb0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000018cfec0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000018cfed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000018cfee0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000018cfef0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000018cff00 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000018cff10 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000018cff20 00 00 00 00 00 00 00 00 - 00 00 00 00 c7 3d 00 00 ………….=..
00000000018cff30 3c ff 8c 01 17 82 6f 77 - e8 77 16 00 6c ff 8c 01 <…..ow.w..l…
*—-> State Dump for Thread Id 0x4dc <—-*
eax=00000000 ebx=0190fb24 ecx=00000000 edx=00000000 esi=00000000 edi=7ffde000
eip=7c90eb94 esp=0190fafc ebp=0190fb98 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*—-> Stack Back Trace <—-*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0190fb98 77d495f9 00000002 0190fbc0 00000000 ntdll!KiFastSystemCallRet
0190fbf4 77d496a8 00000001 0190fc38 ffffffff USER32!GetLastInputInfo+0x105
0190fc10 776e7b72 00000001 0190fc38 00000000 USER32!MsgWaitForMultipleObjects+0x1f
0190ffa4 776f6218 018cfbc4 00000000 0190ffec shsvcs!FUSCompatibilityEntryW+0x1bff
0190ffb4 7c80b50b 001859f0 018cfbc4 00000000 shsvcs+0x16218
0190ffec 00000000 776f6207 001859f0 00000000 kernel32!GetModuleFileNameA+0x1b4
*—-> Raw Stack Dump <—-*
000000000190fafc ab e9 90 7c f2 94 80 7c - 02 00 00 00 24 fb 90 01 …|…|….$…
000000000190fb0c 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
000000000190fb1c 02 00 00 00 00 00 00 00 - ec 0c 00 00 0c 0d 00 00 …………….
000000000190fb2c 07 00 00 00 00 00 00 00 - b6 78 6e 77 cd ab ba dc ………xnw….
000000000190fb3c 00 00 00 00 84 fb 90 01 - 14 00 00 00 01 00 00 00 …………….
000000000190fb4c 00 00 00 00 00 00 00 00 - 10 00 00 00 5a 88 d4 77 …………Z..w
000000000190fb5c 70 fb 90 01 2a 88 d4 77 - 00 e0 fd 7f 00 40 f9 7f p…*..w…..@..
000000000190fb6c 50 bc 52 00 00 00 00 00 - 24 fb 90 01 00 00 00 00 P.R…..$…….
000000000190fb7c 02 00 00 00 18 fb 90 01 - 00 00 00 00 dc ff 90 01 …………….
000000000190fb8c f3 99 83 7c 90 95 80 7c - 00 00 00 00 f4 fb 90 01 …|…|……..
000000000190fb9c f9 95 d4 77 02 00 00 00 - c0 fb 90 01 00 00 00 00 …w…………
000000000190fbac ff ff ff ff 00 00 00 00 - 01 00 00 00 f0 59 18 00 ………….Y..
000000000190fbbc 00 00 00 00 ec 0c 00 00 - 0c 0d 00 00 07 00 00 00 …………….
000000000190fbcc 00 00 00 00 64 bc 52 00 - ea 89 d4 77 01 00 00 00 ….d.R….w….
000000000190fbdc f0 59 18 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .Y…………..
000000000190fbec 00 40 f9 7f 0c 0d 00 00 - 10 fc 90 01 a8 96 d4 77 .@………….w
000000000190fbfc 01 00 00 00 38 fc 90 01 - ff ff ff ff ff 04 00 00 ….8………..
000000000190fc0c c0 fb 90 01 a4 ff 90 01 - 72 7b 6e 77 01 00 00 00 ……..r{nw….
000000000190fc1c 38 fc 90 01 00 00 00 00 - ff ff ff ff ff 04 00 00 8……………
000000000190fc2c c4 fb 8c 01 f0 59 18 00 - f0 59 18 00 ec 0c 00 00 …..Y…Y……
*—-> State Dump for Thread Id 0x668 <—-*
eax=7773802f ebx=0198fe1c ecx=00090000 edx=0144f250 esi=00000000 edi=7ffde000
eip=7c90eb94 esp=0198fdf4 ebp=0198fe90 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*—-> Stack Back Trace <—-*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0198fe90 77d495f9 00000001 0198feb8 00000000 ntdll!KiFastSystemCallRet
0198feec 77d496a8 00000000 00000000 0001d4c0 USER32!GetLastInputInfo+0x105
0198ff08 77737b53 00000000 00000000 00000000 USER32!MsgWaitForMultipleObjects+0x1f
0198ffa8 7773804d 0144f214 0198ffec 7c80b50b es+0x27b53
0198ffb4 7c80b50b 000930c0 000df384 0144f214 es+0x2804d
0198ffec 00000000 7773802f 000930c0 00000000 kernel32!GetModuleFileNameA+0x1b4
*—-> Raw Stack Dump <—-*
000000000198fdf4 ab e9 90 7c f2 94 80 7c - 01 00 00 00 1c fe 98 01 …|…|……..
000000000198fe04 01 00 00 00 00 00 00 00 - 50 fe 98 01 00 00 00 00 ……..P…….
000000000198fe14 01 00 00 00 00 00 00 00 - 78 14 00 00 e8 06 09 00 ……..x…….
000000000198fe24 6d 05 91 7c c0 30 09 00 - a0 ee 11 00 a0 ee 11 00 m..|.0……….
000000000198fe34 00 00 00 00 70 cf 17 00 - 14 00 00 00 01 00 00 00 ….p………..
000000000198fe44 00 00 00 00 00 00 00 00 - 10 00 00 00 00 74 79 b8 ………….ty.
000000000198fe54 ff ff ff ff 6c fe 98 01 - 00 e0 fd 7f 00 30 f9 7f ….l……..0..
000000000198fe64 48 3e 18 00 50 fe 98 01 - 1c fe 98 01 30 12 42 75 H>..P…….0.Bu
000000000198fe74 01 00 00 00 10 fe 98 01 - 40 b8 71 77 98 ff 98 01 ……..@.qw….
000000000198fe84 f3 99 83 7c 90 95 80 7c - 00 00 00 00 ec fe 98 01 …|…|……..
000000000198fe94 f9 95 d4 77 01 00 00 00 - b8 fe 98 01 00 00 00 00 …w…………
000000000198fea4 c0 d4 01 00 00 00 00 00 - c0 30 09 00 00 00 00 00 ………0……
000000000198feb4 a0 ee 11 00 78 14 00 00 - 00 00 00 00 57 0b 01 01 ….x…….W…
000000000198fec4 21 00 01 00 02 00 00 00 - 28 fe 98 01 98 ff 98 01 !…….(…….
000000000198fed4 98 ff 98 01 18 ee 90 7c - 00 00 00 00 00 00 00 00 …….|……..
000000000198fee4 00 30 f9 7f 78 14 00 00 - 08 ff 98 01 a8 96 d4 77 .0..x……….w
000000000198fef4 00 00 00 00 00 00 00 00 - c0 d4 01 00 ff 04 00 00 …………….
000000000198ff04 b8 fe 98 01 a8 ff 98 01 - 53 7b 73 77 00 00 00 00 ……..S{sw….
000000000198ff14 00 00 00 00 00 00 00 00 - c0 d4 01 00 ff 04 00 00 …………….
000000000198ff24 84 f3 0d 00 00 00 00 00 - c0 30 09 00 00 00 00 00 ………0……
*—-> State Dump for Thread Id 0x764 <—-*
eax=77e76bf0 ebx=00000000 ecx=00000000 edx=00000008 esi=000aaf98 edi=000ab03c
eip=7c90eb94 esp=036cfe1c ebp=036cff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*—-> Stack Back Trace <—-*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
036cff80 77e76c22 036cffa8 77e76a3b 000aaf98 ntdll!KiFastSystemCallRet
036cff88 77e76a3b 000aaf98 00000000 00000000 RPCRT4!I_RpcBCacheFree+0x5ea
036cffa8 77e76c0a 0009df00 036cffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
036cffb4 7c80b50b 0017d488 00000000 00000000 RPCRT4!I_RpcBCacheFree+0x5d2
036cffec 00000000 77e76bf0 0017d488 00000000 kernel32!GetModuleFileNameA+0x1b4
*—-> Raw Stack Dump <—-*
00000000036cfe1c 99 e3 90 7c 03 67 e7 77 - c8 01 00 00 70 ff 6c 03 …|.g.w….p.l.
00000000036cfe2c 00 00 00 00 78 1b 18 00 - 4c ff 6c 03 fc 93 3c 81 ….x…L.l…<.
00000000036cfe3c 00 00 00 00 fc 3c 88 c0 - e0 68 2a 89 b3 01 00 00 …..<…h*…..
00000000036cfe4c 64 bb e2 b1 aa ec 51 80 - b3 01 00 00 e0 68 2a 89 d…..Q……h*.
00000000036cfe5c 00 d0 fa 7f 90 bb e2 b1 - f8 1f 60 c0 6c bb e2 b1 ……….`.l…
00000000036cfe6c 8c e9 51 80 00 d0 fa 7f - 01 00 00 00 00 00 00 00 ..Q………….
00000000036cfe7c 68 fd 3f c0 00 00 00 00 - 00 00 00 00 00 e0 fa 7f h.?………….
00000000036cfe8c 28 bc e2 b1 df f0 51 80 - 90 bb e2 b1 00 00 00 00 (…..Q………
00000000036cfe9c 00 00 00 00 00 00 00 00 - 30 37 24 89 e8 66 2a 89 ……..07$..f*.
00000000036cfeac 01 67 2a 89 00 00 00 00 - 68 fd 3f c0 00 00 00 00 .g*…..h.?…..
00000000036cfebc 00 40 a8 c0 00 00 04 00 - 1f 13 00 00 b4 67 2a 89 .@………..g*.
00000000036cfecc ff ff 31 01 e8 66 2a 89 - 00 00 00 00 a0 00 00 09 ..1..f*………
00000000036cfedc 00 00 32 01 40 bb e2 b1 - e8 bb e2 b1 ff ff ff ff ..2.@………..
00000000036cfeec 10 50 53 80 00 d0 fa 7f - ff ff ff ff 90 75 5a 80 .PS……….uZ.
00000000036cfefc 08 c8 53 80 ff ff ff ff - b8 bc e2 b1 bc bc e2 b1 ..S………….
00000000036cff0c 00 80 00 00 14 bd e2 b1 - 8c b8 2c 89 24 bc e2 b1 ……….,.$…
00000000036cff1c d9 9a 4f 80 e1 9a 4f 80 - 5c b8 2c 89 f0 b6 2c 89 ..O…O.\.,…,.
00000000036cff2c 24 b7 2c 89 80 ff 6c 03 - 99 66 e7 77 4c ff 6c 03 $.,…l..f.wL.l.
00000000036cff3c a9 66 e7 77 ed 10 90 7c - 00 a9 0b 00 88 d4 17 00 .f.w…|……..
00000000036cff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M…..]……
*—-> State Dump for Thread Id 0x8f4 <—-*
eax=7ff91000 ebx=00020162 ecx=02f2f4d0 edx=774e2328 esi=0244ff54 edi=00000000
eip=7c90eb94 esp=0244ff14 ebp=0244ff30 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*—-> Stack Back Trace <—-*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0244ff30 775308d8 0244ff54 00000000 00000000 ntdll!KiFastSystemCallRet
0244ff70 77518a3d 00007530 7c802550 00186c98 ole32!CoFreeUnusedLibrariesEx+0x214
0244ff8c 77518970 0244ffb4 774fd83b 77606c28 ole32!CoGetObject+0x2275
0244ff94 774fd83b 77606c28 0308f038 00186c98 ole32!CoGetObject+0x21a8
0244ffb4 7c80b50b 00186c98 0308f038 00000000 ole32!IsValidInterface+0x422
0244ffec 00000000 774fd888 00186c98 00000000 kernel32!GetModuleFileNameA+0x1b4
*—-> Raw Stack Dump <—-*
000000000244ff14 be 91 d4 77 f1 91 d4 77 - 54 ff 44 02 00 00 00 00 …w…wT.D…..
000000000244ff24 00 00 00 00 00 00 00 00 - c6 91 d4 77 70 ff 44 02 ………..wp.D.
000000000244ff34 d8 08 53 77 54 ff 44 02 - 00 00 00 00 00 00 00 00 ..SwT.D………
000000000244ff44 00 00 00 00 00 00 00 00 - 28 6c 60 77 00 00 00 00 ……..(l`w….
000000000244ff54 62 01 02 00 00 04 00 00 - be ba 00 00 a4 0b f0 02 b……………
000000000244ff64 9d 5c 02 00 40 04 00 00 - 30 03 00 00 8c ff 44 02 .\..@…0…..D.
000000000244ff74 3d 8a 51 77 30 75 00 00 - 50 25 80 7c 98 6c 18 00 =.Qw0u..P%.|.l..
000000000244ff84 7c 15 00 00 60 f5 18 00 - 94 ff 44 02 70 89 51 77 |…`…..D.p.Qw
000000000244ff94 b4 ff 44 02 3b d8 4f 77 - 28 6c 60 77 38 f0 08 03 ..D.;.Ow(l`w8…
000000000244ffa4 98 6c 18 00 00 00 4e 77 - a3 d8 4f 77 00 00 00 00 .l….Nw..Ow….
000000000244ffb4 ec ff 44 02 0b b5 80 7c - 98 6c 18 00 38 f0 08 03 ..D….|.l..8…
000000000244ffc4 00 00 00 00 98 6c 18 00 - 00 10 f9 7f 00 c6 e3 89 …..l……….
000000000244ffd4 c0 ff 44 02 10 9b cd 89 - ff ff ff ff f3 99 83 7c ..D…………|
000000000244ffe4 18 b5 80 7c 00 00 00 00 - 00 00 00 00 00 00 00 00 …|…………
000000000244fff4 88 d8 4f 77 98 6c 18 00 - 00 00 00 00 41 63 74 78 ..Ow.l……Actx
0000000002450004 20 00 00 00 01 00 00 00 - 44 19 00 00 7c 00 00 00 …….D…|…
0000000002450014 00 00 00 00 20 00 00 00 - 00 00 00 00 14 00 00 00 …. ………..
0000000002450024 01 00 00 00 03 00 00 00 - 34 00 00 00 bc 00 00 00 ……..4…….
0000000002450034 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
0000000002450044 00 00 00 00 00 00 00 00 - 02 00 00 00 00 00 00 00 …………….
*—-> State Dump for Thread Id 0x9b0 <—-*
eax=74f0742e ebx=0286fed4 ecx=7c910738 edx=7c90ee18 esi=00000000 edi=7ffde000
eip=7c90eb94 esp=0286feac ebp=0286ff48 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*—-> Stack Back Trace <—-*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\SSDPAPI.dll -
ChildEBP RetAddr Args to Child
0286ff48 7c809c86 00000002 0286ff94 00000000 ntdll!KiFastSystemCallRet
0286ff64 74f04b62 00000002 0286ff94 00000000 kernel32!WaitForMultipleObjects+0x18
0286ffa4 74f0743f 0244f2ac 0244f2f4 0286ffec SSDPAPI!FindServicesClose+0x1232
0286ffb4 7c80b50b 02f36a70 0244f2ac 0244f2f4 SSDPAPI+0x743f
0286ffec 00000000 74f0742e 02f36a70 00000000 kernel32!GetModuleFileNameA+0x1b4
*—-> Raw Stack Dump <—-*
000000000286feac ab e9 90 7c f2 94 80 7c - 02 00 00 00 d4 fe 86 02 …|…|……..
000000000286febc 01 00 00 00 00 00 00 00 - 00 00 00 00 70 6a f3 02 …………pj..
000000000286fecc 6e 9c 80 7c 00 00 00 00 - 64 15 00 00 60 15 00 00 n..|….d…`…
000000000286fedc a0 9f 54 80 54 01 00 fc - e8 eb 3d b1 1d 07 54 80 ..T.T…..=…T.
000000000286feec b0 62 b2 89 a0 e6 a6 89 - 14 00 00 00 01 00 00 00 .b…………..
000000000286fefc 00 00 00 00 00 00 00 00 - 10 00 00 00 7b 97 80 7c …………{..|
000000000286ff0c 68 ff 86 02 3c 68 60 77 - 00 e0 fd 7f 00 70 f7 7f h… State Dump for Thread Id 0x9d4 <—-*
eax=000000c0 ebx=00000000 ecx=7c910738 edx=7c90ee18 esi=00000000 edi=00000001
eip=7c90eb94 esp=028efcec ebp=028effb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*—-> Stack Back Trace <—-*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
028effb4 7c80b50b 00000000 00000000 7c910732 ntdll!KiFastSystemCallRet
028effec 00000000 7c929fae 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4
*—-> Raw Stack Dump <—-*
00000000028efcec ab e9 90 7c d5 a0 92 7c - 16 00 00 00 30 fd 8e 02 …|…|….0…
00000000028efcfc 01 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000028efd0c 32 07 91 7c 00 00 00 00 - 14 fd 75 00 08 e5 97 7c 2..|……u….|
00000000028efd1c 48 16 00 00 d4 09 00 00 - 16 00 00 00 16 00 00 00 H……………
00000000028efd2c 15 00 00 00 44 16 00 00 - 40 16 00 00 24 02 00 00 ….D…@…$…
00000000028efd3c bc 16 00 00 c8 16 00 00 - dc 16 00 00 e8 16 00 00 …………….
00000000028efd4c f4 16 00 00 14 17 00 00 - 1c 17 00 00 24 17 00 00 …………$…
00000000028efd5c 30 17 00 00 38 17 00 00 - 44 17 00 00 50 17 00 00 0…8…D…P…
00000000028efd6c 5c 17 00 00 64 17 00 00 - 70 17 00 00 7c 17 00 00 \…d…p…|…
00000000028efd7c 88 17 00 00 90 17 00 00 - d4 07 00 00 b8 17 00 00 …………….
00000000028efd8c c4 17 00 00 d0 17 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000028efd9c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000028efdac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000028efdbc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000028efdcc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000028efddc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000028efdec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000028efdfc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000028efe0c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
00000000028efe1c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
*—-> State Dump for Thread Id 0xeb4 <—-*
eax=74f02555 ebx=0016afe0 ecx=00000002 edx=00000030 esi=0255fbc8 edi=0255fb9c
eip=7c90eb94 esp=0255fb14 ebp=0255fb60 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*—-> Stack Back Trace <—-*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0255fb60 77e7a716 0018a968 0255fb80 77e7a747 ntdll!KiFastSystemCallRet
0255fb6c 77e7a747 0255fb9c 74f01830 0255ff78 RPCRT4!I_RpcSendReceive+0x23
0255fb80 77ef3675 0255fbc8 0018a97c 00000000 RPCRT4!NdrSendReceive+0x28
0255ff5c 74f0500d 74f01830 74f015fc 0255ff78 RPCRT4!NdrClientCall2+0x1a5
0255ff70 74f02586 000e3e18 0255ff98 00000000 SSDPAPI!FindServices+0x1e9
0255ffb4 7c80b50b 000e3e18 00000000 00000000 SSDPAPI!DeregisterNotification+0x5de
0255ffec 00000000 74f02555 000e3e18 00000000 kernel32!GetModuleFileNameA+0x1b4
*—-> Raw Stack Dump <—-*
000000000255fb14 ed e3 90 7c 68 c9 e7 77 - 10 16 00 00 30 a9 18 00 …|h..w….0…
000000000255fb24 30 a9 18 00 9c fb 55 02 - c8 fb 55 02 01 00 00 00 0…..U…U…..
000000000255fb34 2d 39 ea 77 28 73 f3 02 - 00 00 00 00 00 00 00 00 -9.w(s……….
000000000255fb44 1e cf e7 77 18 3e 0e 00 - 68 a9 18 00 18 3e 0e 00 …w.>..h….>..
000000000255fb54 80 fb 55 02 dc 8e e7 77 - 00 00 00 00 6c fb 55 02 ..U….w….l.U.
000000000255fb64 16 a7 e7 77 68 a9 18 00 - 80 fb 55 02 47 a7 e7 77 …wh…..U.G..w
000000000255fb74 9c fb 55 02 30 18 f0 74 - 78 ff 55 02 5c ff 55 02 ..U.0..tx.U.\.U.
000000000255fb84 75 36 ef 77 c8 fb 55 02 - 7c a9 18 00 00 00 00 00 u6.w..U.|…….
000000000255fb94 00 00 00 00 18 3e 0e 00 - e0 af 16 00 10 00 00 00 …..>……….
000000000255fba4 68 a9 18 00 14 00 00 00 - 09 00 00 00 74 9e f4 02 h………..t…
000000000255fbb4 38 14 f0 74 ac fb 55 02 - 00 00 00 00 94 fc 55 02 8..t..U…….U.
000000000255fbc4 00 00 00 00 9c fb 55 02 - 7c a9 18 00 00 00 00 00 ……U.|…….
000000000255fbd4 00 00 00 00 f8 fb 55 02 - 24 00 00 00 50 81 19 00 ……U.$…P…
000000000255fbe4 02 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 …………….
000000000255fbf4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 …………….
000000000255fc04 00 00 00 00 24 fc 55 02 - 00 e0 fd 7f be 52 f0 74 ….$.U……R.t
000000000255fc14 ce 52 f0 74 78 ff 55 02 - 01 00 00 00 00 00 00 00 .R.tx.U………
000000000255fc24 d0 3a 12 00 30 18 f0 74 - 00 00 00 00 00 00 00 00 .:..0..t……..
000000000255fc34 00 00 00 00 30 00 55 02 - 02 00 00 00 00 00 00 00 ….0.U………
000000000255fc44 87 8f 91 7c 00 60 f9 7f - 00 00 00 00 00 00 00 00 …|.`……….
I don't know what to tell you about tradestation other then contacting them and asking their support peolpe for help.
Thanks much for looking into this situation. I feel pretty good about my system being clean, but I think I must have messed up some registry entries. I am going to copy important files and reformat the hard drive. Ouch :-(
Have you checked with that company for support?
Glad we could be of assistance.
This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.
Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.
Coyote's Installed programs for prevention:
http://forums.tomcoyote.org/index.php?showtopic=31418
