KERNEL32!SetCurrentDirectory ("C:\WINDOWS")
KERNEL32!WinExec ("c:\sample.exe",0x00000000)
KERNEL32!InternalExec ("c:\sample.exe",0x00000000,0x00000000)
KERNEL32!EnterCriticalSection (0x00000000)
**PAGE FAULT: process 0x00000000 - cs:eip 0x0028:0xC00084E2 accessing page 0x00070005
PageFault tbl process 0x00000100 - 0x00000005 entries, 0x00000000-0x00000000. fhandle=0x7200301F.
|offset 0x00400000, seek 0x00000000, size 0x00000200, flags=0x00000004
|offset 0x00401000, seek 0xFFFFFFFF, size 0x00001000, flags=0x00000000
|offset 0x00402000, seek 0xFFFFFFFF, size 0x00001000, flags=0x00000000
|offset 0x00403000, seek 0xFFFFFFFF, size 0x00001000, flags=0x00000000
|offset 0x00404000, seek 0x00000200, size 0x00000C00, flags=0x00000008
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C8034F3 accessing page 0x00000404
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003450 accessing page 0x00000400
KERNEL32!LoadLibraryA ("KERNEL32.dll")
KERNEL32!GetModuleHandleA ("KERNEL32.dll")
KERNEL32!GetProcAddress (0x7C800000,"LoadLibraryA")
KERNEL32!GetProcAddress (0x7C800000,"GetProcAddress")
KERNEL32!HeapAlloc (0x00000000,0x00000008,0x0000031C)
KERNEL32!CreateThread (0x00000000,0x00000000,0x00404ABE,0x7C8010C3,0x00000000,0x04FFFE16)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FFD0
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072004
KERNEL32!LeaveCriticalSection (0x00000000)
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x00404ACC accessing page 0x00000401
KERNEL32!LeaveCriticalSection (0x00000000)
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x00404ACC accessing page 0x00000403
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x00404ACC accessing page 0x00000402
KERNEL32!LoadLibraryA ("kernel32.dll")
KERNEL32!GetModuleHandleA ("kernel32.dll")
KERNEL32!GetProcAddress (0x7C800000,"FindClose")
KERNEL32!GetProcAddress (0x7C800000,"FindFirstFileA")
KERNEL32!GetProcAddress (0x7C800000,"FindNextFileA")
KERNEL32!GetProcAddress (0x7C800000,"GetDriveTypeA")
KERNEL32!GetProcAddress (0x7C800000,"GetFileSize")
KERNEL32!GetProcAddress (0x7C800000,"GetLogicalDriveStringsA")
KERNEL32!GetProcAddress (0x7C800000,"GetModuleFileNameA")
KERNEL32!GetProcAddress (0x7C800000,"GlobalAlloc")
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C802EF2 accessing page 0x0007C80A
KERNEL32!GetProcAddress (0x7C800000,"GlobalFree")
KERNEL32!GetProcAddress (0x7C800000,"ExitProcess")
KERNEL32!GetProcAddress (0x7C800000,"LocalFree")
KERNEL32!GetProcAddress (0x7C800000,"MapViewOfFile")
KERNEL32!GetProcAddress (0x7C800000,"Sleep")
KERNEL32!GetProcAddress (0x7C800000,"UnmapViewOfFile")
KERNEL32!GetProcAddress (0x7C800000,"WriteFile")
KERNEL32!GetProcAddress (0x7C800000,"lstrcatA")
KERNEL32!GetProcAddress (0x7C800000,"lstrcpyA")
KERNEL32!GetProcAddress (0x7C800000,"lstrlenA")
KERNEL32!GetProcAddress (0x7C800000,"CreateThread")
KERNEL32!GetProcAddress (0x7C800000,"CreateFileMappingA")
KERNEL32!GetProcAddress (0x7C800000,"CreateFileA")
KERNEL32!GetProcAddress (0x7C800000,"LocalAlloc")
KERNEL32!GetProcAddress (0x7C800000,"CloseHandle")
KERNEL32!LoadLibraryA ("user32.dll")
KERNEL32!GetModuleHandleA ("user32.dll")
KERNEL32!GetProcAddress (0x77D30000,"MessageBoxA")
KERNEL32!GetProcAddress (0x77D30000,"wsprintfA")
KERNEL32!LoadLibraryA ("advapi32.dll")
KERNEL32!GetModuleHandleA ("advapi32.dll")
KERNEL32!GetProcAddress (0x77DC0000,"RegCreateKeyA")
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C802EF2 accessing page 0x00077DC2
KERNEL32!GetProcAddress (0x77DC0000,"RegQueryValueExA")
KERNEL32!GetProcAddress (0x77DC0000,"RegSetValueExA")
KERNEL32!GetProcAddress (0x77DC0000,"RegCloseKey")
KERNEL32!LoadLibraryA ("shlwapi.dll")
KERNEL32!GetModuleHandleA ("shlwapi.dll")
KERNEL32!strcpy (0x4FFD0AE0,"C:\WINDOWS\SYSTEM32")
KERNEL32!lstrcat ("C:\WINDOWS\SYSTEM32","\")
KERNEL32!lstrcat ("C:\WINDOWS\SYSTEM32\","shlwapi.dll")
KERNEL32!_lopen ("C:\WINDOWS\SYSTEM32\shlwapi.dll",0x00000000)
KERNEL32!GetFileSize (0x00000020,0x00000000)
KERNEL32!_lclose (0x00000020)
KERNEL32!CloseHandle (0x00000020)
KERNEL32!InternalExec ("C:\WINDOWS\SYSTEM32\shlwapi.dll",0x00000000,0x00000000)
KERNEL32!EnterCriticalSection (0x00000000)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC00084E2 accessing page 0x00070006
PageFault tbl process 0x00000000 - 0x00000005 entries, 0x00000000-0x00000000. fhandle=0x720027B7.
|offset 0x77F60000, seek 0x00000000, size 0x00000400, flags=0x00000004
|offset 0x77F61000, seek 0x00000600, size 0x00001000, flags=0x00000000
|offset 0x77F62000, seek 0x00001600, size 0x00000200, flags=0x00000000
|offset 0x77F63000, seek 0x00001800, size 0x00000200, flags=0x00000000
|offset 0x77F64000, seek 0x00001A00, size 0x00000400, flags=0x00000008
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C8034F3 accessing page 0x00077F63
KERNEL32!LoadLibraryA ("advapi32.dll")
KERNEL32!GetModuleHandleA ("advapi32.dll")
KERNEL32!GetProcAddress (0x77DC0000,"RegOpenKeyA")
KERNEL32!GetProcAddress (0x77DC0000,"RegSetValueExA")
KERNEL32!GetProcAddress (0x77DC0000,"RegCloseKey")
KERNEL32!GetProcAddress (0x77DC0000,"RegQueryValueExA")
KERNEL32!GetProcAddress (0x77DC0000,"RegDeleteKeyA")
KERNEL32!LoadLibraryA ("kernel32.dll")
KERNEL32!GetModuleHandleA ("kernel32.dll")
KERNEL32!GetProcAddress (0x7C800000,"GetFileAttributesA")
KERNEL32!HeapAlloc (0x00000000,0x00000008,0x0000031C)
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80D8AF accessing page 0x00073001
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C802FEA accessing page 0x00077F60
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C803023 accessing page 0x00077F64
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C803416 accessing page 0x00077F61
KERNEL32!GetProcAddress (0x77F60000,"CPlApplet")
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!GetProcAddress (0x77F60000,"StrStrIA")
KERNEL32!GetProcAddress (0x77F60000,"StrRChrIA")
KERNEL32!GetProcAddress (0x77F60000,"StrRChrA")
KERNEL32!LoadLibraryA ("ole32.dll")
KERNEL32!GetModuleHandleA ("ole32.dll")
KERNEL32!strcpy (0x4FFD0AE0,"C:\WINDOWS\SYSTEM32")
KERNEL32!lstrcat ("C:\WINDOWS\SYSTEM32","\")
KERNEL32!lstrcat ("C:\WINDOWS\SYSTEM32\","ole32.dll")
KERNEL32!_lopen ("C:\WINDOWS\SYSTEM32\ole32.dll",0x00000000)
KERNEL32!GetFileSize (0x00000020,0x00000000)
KERNEL32!_lclose (0x00000020)
KERNEL32!CloseHandle (0x00000020)
KERNEL32!InternalExec ("C:\WINDOWS\SYSTEM32\ole32.dll",0x00000000,0x00000000)
KERNEL32!EnterCriticalSection (0x00000000)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC00084E2 accessing page 0x00070007
PageFault tbl process 0x00000000 - 0x0000000D entries, 0x00000000-0x00000000. fhandle=0x720033F0.
|offset 0x774D0000, seek 0x00000000, size 0x00000400, flags=0x00000004
|offset 0x774D1000, seek 0x00000600, size 0x00001000, flags=0x00000000
|offset 0x774D2000, seek 0x00001600, size 0x00001000, flags=0x00000000
|offset 0x774D3000, seek 0x00002600, size 0x00001000, flags=0x00000000
|offset 0x774D4000, seek 0x00003600, size 0x00000200, flags=0x00000000
|offset 0x774D5000, seek 0x00003800, size 0x00001000, flags=0x00000000
|offset 0x774D6000, seek 0x00004800, size 0x00001000, flags=0x00000000
|offset 0x774D7000, seek 0x00005800, size 0x00001000, flags=0x00000000
|offset 0x774D8000, seek 0xFFFFFFFF, size 0x00001000, flags=0x00000000
|offset 0x774D9000, seek 0xFFFFFFFF, size 0x00001000, flags=0x00000000
|offset 0x774DA000, seek 0xFFFFFFFF, size 0x00001000, flags=0x00000000
|offset 0x774DB000, seek 0x00006800, size 0x00000200, flags=0x00000000
|offset 0x774DC000, seek 0x00006A00, size 0x00000400, flags=0x00000008
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C8034F3 accessing page 0x000774DB
KERNEL32!LoadLibraryA ("kernel32.dll")
KERNEL32!GetModuleHandleA ("kernel32.dll")
KERNEL32!GetProcAddress (0x7C800000,"WriteFile")
KERNEL32!GetProcAddress (0x7C800000,"CreateFileA")
KERNEL32!GetProcAddress (0x7C800000,"SetFilePointer")
KERNEL32!GetProcAddress (0x7C800000,"SetEndOfFile")
KERNEL32!GetProcAddress (0x7C800000,"CloseHandle")
KERNEL32!GetProcAddress (0x7C800000,"ReadFile")
KERNEL32!LoadLibraryA ("user32.dll")
KERNEL32!GetModuleHandleA ("user32.dll")
KERNEL32!GetProcAddress (0x77D30000,"wsprintfA")
KERNEL32!HeapAlloc (0x00000000,0x00000008,0x0000031C)
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C802FEA accessing page 0x000774D0
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C803023 accessing page 0x000774DC
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C803416 accessing page 0x000774D4
KERNEL32!GetProcAddress (0x774D0000,"CPlApplet")
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!GetProcAddress (0x774D0000,"CreateStreamOnHGlobal")
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C802EF2 accessing page 0x000774D1
KERNEL32!LoadLibraryA ("wininet.dll")
KERNEL32!GetModuleHandleA ("wininet.dll")
KERNEL32!strcpy (0x4FFD0AE0,"C:\WINDOWS\SYSTEM32")
KERNEL32!lstrcat ("C:\WINDOWS\SYSTEM32","\")
KERNEL32!lstrcat ("C:\WINDOWS\SYSTEM32\","wininet.dll")
KERNEL32!_lopen ("C:\WINDOWS\SYSTEM32\wininet.dll",0x00000000)
KERNEL32!GetFileSize (0x00000020,0x00000000)
KERNEL32!_lclose (0x00000020)
KERNEL32!CloseHandle (0x00000020)
KERNEL32!InternalExec ("C:\WINDOWS\SYSTEM32\wininet.dll",0x00000000,0x00000000)
KERNEL32!EnterCriticalSection (0x00000000)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072005
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC00084E2 accessing page 0x00070008
PageFault tbl process 0x00000000 - 0x00000007 entries, 0x00000000-0x00000000. fhandle=0x72004817.
|offset 0x771A0000, seek 0x00000000, size 0x00000400, flags=0x00000004
|offset 0x771A1000, seek 0x00000600, size 0x00001000, flags=0x00000000
|offset 0x771A2000, seek 0x00001600, size 0x00000600, flags=0x00000000
|offset 0x771A3000, seek 0x00001C00, size 0x00001000, flags=0x00000000
|offset 0x771A4000, seek 0x00002C00, size 0x00000200, flags=0x00000000
|offset 0x771A5000, seek 0x00002E00, size 0x00000200, flags=0x00000000
|offset 0x771A6000, seek 0x00003000, size 0x00000800, flags=0x00000008
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C8034F3 accessing page 0x000771A5
KERNEL32!LoadLibraryA ("user32.dll")
KERNEL32!GetModuleHandleA ("user32.dll")
KERNEL32!GetProcAddress (0x77D30000,"wsprintfA")
KERNEL32!LoadLibraryA ("kernel32.dll")
KERNEL32!GetModuleHandleA ("kernel32.dll")
KERNEL32!GetProcAddress (0x7C800000,"ExitThread")
KERNEL32!HeapAlloc (0x00000000,0x00000008,0x0000031C)
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C802FEA accessing page 0x000771A0
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C803023 accessing page 0x000771A6
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C803416 accessing page 0x000771A2
KERNEL32!GetProcAddress (0x771A0000,"CPlApplet")
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!GetProcAddress (0x771A0000,"InternetCloseHandle")
KERNEL32!GetProcAddress (0x771A0000,"InternetConnectA")
KERNEL32!GetProcAddress (0x771A0000,"InternetCrackUrlA")
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C802EF2 accessing page 0x000771A1
KERNEL32!GetProcAddress (0x771A0000,"InternetOpenA")
KERNEL32!GetProcAddress (0x771A0000,"HttpSendRequestA")
KERNEL32!GetProcAddress (0x771A0000,"HttpOpenRequestA")
KERNEL32!LoadLibraryA ("shell32.dll")
KERNEL32!GetModuleHandleA ("shell32.dll")
KERNEL32!strcpy (0x4FFD0AE0,"C:\WINDOWS\SYSTEM32")
KERNEL32!lstrcat ("C:\WINDOWS\SYSTEM32","\")
KERNEL32!lstrcat ("C:\WINDOWS\SYSTEM32\","shell32.dll")
KERNEL32!_lopen ("C:\WINDOWS\SYSTEM32\shell32.dll",0x00000000)
KERNEL32!GetFileSize (0x00000020,0x00000000)
KERNEL32!_lclose (0x00000020)
KERNEL32!CloseHandle (0x00000020)
KERNEL32!InternalExec ("C:\WINDOWS\SYSTEM32\shell32.dll",0x00000000,0x00000000)
KERNEL32!EnterCriticalSection (0x00000000)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC00084E2 accessing page 0x00070009
PageFault tbl process 0x00000000 - 0x00000006 entries, 0x00000000-0x00000000. fhandle=0x720048A0.
|offset 0x7C9C0000, seek 0x00000000, size 0x00000400, flags=0x00000004
|offset 0x7C9C1000, seek 0x00000600, size 0x00001000, flags=0x00000000
|offset 0x7C9C2000, seek 0x00001600, size 0x00000400, flags=0x00000000
|offset 0x7C9C3000, seek 0x00001A00, size 0x00000200, flags=0x00000000
|offset 0x7C9C4000, seek 0x00001C00, size 0x00000200, flags=0x00000000
|offset 0x7C9C5000, seek 0x00001E00, size 0x00000400, flags=0x00000008
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C8034F3 accessing page 0x0007C9C4
KERNEL32!LoadLibraryA ("kernel32.dll")
KERNEL32!GetModuleHandleA ("kernel32.dll")
KERNEL32!GetProcAddress (0x7C800000,"CloseHandle")
KERNEL32!GetProcAddress (0x7C800000,"CreateFileA")
KERNEL32!GetProcAddress (0x7C800000,"HeapAlloc")
KERNEL32!GetProcAddress (0x7C800000,"DeleteFileA")
KERNEL32!GetProcAddress (0x7C800000,"CreateProcessA")
KERNEL32!LoadLibraryA ("user32.dll")
KERNEL32!GetModuleHandleA ("user32.dll")
KERNEL32!GetProcAddress (0x77D30000,"wsprintfA")
KERNEL32!HeapAlloc (0x00000000,0x00000008,0x0000031C)
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C802FEA accessing page 0x0007C9C0
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C803023 accessing page 0x0007C9C5
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C803416 accessing page 0x0007C9C2
KERNEL32!GetProcAddress (0x7C9C0000,"CPlApplet")
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!GetProcAddress (0x7C9C0000,"ShellExecuteA")
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C802EF2 accessing page 0x0007C9C1
KERNEL32!LoadLibraryA ("wsock32.dll")
KERNEL32!GetModuleHandleA ("wsock32.dll")
KERNEL32!strcpy (0x4FFD0AE0,"C:\WINDOWS\SYSTEM32")
KERNEL32!lstrcat ("C:\WINDOWS\SYSTEM32","\")
KERNEL32!lstrcat ("C:\WINDOWS\SYSTEM32\","wsock32.dll")
KERNEL32!_lopen ("C:\WINDOWS\SYSTEM32\wsock32.dll",0x00000000)
KERNEL32!GetFileSize (0x00000020,0x00000000)
KERNEL32!_lclose (0x00000020)
KERNEL32!CloseHandle (0x00000020)
KERNEL32!InternalExec ("C:\WINDOWS\SYSTEM32\wsock32.dll",0x00000000,0x00000000)
KERNEL32!EnterCriticalSection (0x00000000)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC00084E2 accessing page 0x0007000A
PageFault tbl process 0x00000000 - 0x00000008 entries, 0x00000000-0x00000000. fhandle=0x72004EFB.
|offset 0x733C0000, seek 0x00000000, size 0x00000400, flags=0x00000004
|offset 0x733C1000, seek 0x00000800, size 0x00001000, flags=0x00000000
|offset 0x733C2000, seek 0x00001800, size 0x00001000, flags=0x00000000
|offset 0x733C3000, seek 0x00002800, size 0x00000C00, flags=0x00000000
|offset 0x733C4000, seek 0x00003400, size 0x00000400, flags=0x00000000
|offset 0x733C5000, seek 0x00003800, size 0x00000400, flags=0x00000000
|offset 0x733C6000, seek 0x00003C00, size 0x00001000, flags=0x00000000
|offset 0x733C7000, seek 0x00004C00, size 0x00000C00, flags=0x00000008
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C8034F3 accessing page 0x000733C5
KERNEL32!LoadLibraryA ("ipstack.dll")
KERNEL32!GetModuleHandleA ("ipstack.dll")
KERNEL32!strcpy (0x4FFD08A0,"C:\WINDOWS\SYSTEM32")
KERNEL32!lstrcat ("C:\WINDOWS\SYSTEM32","\")
KERNEL32!lstrcat ("C:\WINDOWS\SYSTEM32\","ipstack.dll")
KERNEL32!_lopen ("C:\WINDOWS\SYSTEM32\ipstack.dll",0x00000000)
KERNEL32!GetFileSize (0x00000020,0x00000000)
KERNEL32!_lclose (0x00000020)
KERNEL32!CloseHandle (0x00000020)
KERNEL32!InternalExec ("C:\WINDOWS\SYSTEM32\ipstack.dll",0x00000000,0x00000000)
KERNEL32!EnterCriticalSection (0x00000000)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC00084E2 accessing page 0x0007000B
PageFault tbl process 0x00000000 - 0x0000000B entries, 0x00000000-0x00000000. fhandle=0x7200504C.
|offset 0x73350000, seek 0x00000000, size 0x00000400, flags=0x00000004
|offset 0x73351000, seek 0x00000600, size 0x00001000, flags=0x00000000
|offset 0x73352000, seek 0x00001600, size 0x00001000, flags=0x00000000
|offset 0x73353000, seek 0x00002600, size 0x00000A00, flags=0x00000000
|offset 0x73354000, seek 0x00003000, size 0x00001000, flags=0x00000000
|offset 0x73355000, seek 0x00004000, size 0x00001000, flags=0x00000000
|offset 0x73356000, seek 0x00005000, size 0x00001000, flags=0x00000000
|offset 0x73357000, seek 0x00006000, size 0x00001000, flags=0x00000000
|offset 0x73358000, seek 0x00007000, size 0x00000A00, flags=0x00000000
|offset 0x73359000, seek 0x00007A00, size 0x00000200, flags=0x00000000
|offset 0x7335A000, seek 0x00007C00, size 0x00000200, flags=0x00000008
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C8034F3 accessing page 0x00073359
KERNEL32!LoadLibraryA ("kernel32.dll")
KERNEL32!GetModuleHandleA ("kernel32.dll")
KERNEL32!GetProcAddress (0x7C800000,"WriteFile")
KERNEL32!GetProcAddress (0x7C800000,"CreateFileA")
KERNEL32!GetProcAddress (0x7C800000,"CloseHandle")
KERNEL32!GetProcAddress (0x7C800000,"GetFileAttributesA")
KERNEL32!GetProcAddress (0x7C800000,"ReadFile")
KERNEL32!GetProcAddress (0x7C800000,"HeapAlloc")
KERNEL32!GetProcAddress (0x7C800000,"HeapFree")
KERNEL32!GetProcAddress (0x7C800000,"EnterCriticalSection")
KERNEL32!GetProcAddress (0x7C800000,"LeaveCriticalSection")
KERNEL32!GetProcAddress (0x7C800000,"ExitThread")
KERNEL32!GetProcAddress (0x7C800000,"GetFileSize")
KERNEL32!LoadLibraryA ("user32.dll")
KERNEL32!GetModuleHandleA ("user32.dll")
KERNEL32!GetProcAddress (0x77D30000,"wsprintfA")
KERNEL32!HeapAlloc (0x00000000,0x00000008,0x0000031C)
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C802FEA accessing page 0x00073350
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C803023 accessing page 0x0007335A
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C803416 accessing page 0x00073352
KERNEL32!GetProcAddress (0x73350000,"CPlApplet")
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!GetProcAddress (0x73350000,"ip_reverse_dns")
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C802EF2 accessing page 0x00073353
KERNEL32!GetProcAddress (0x73350000,"ip_close")
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C802EF2 accessing page 0x00073351
KERNEL32!GetProcAddress (0x73350000,"ip_connect")
KERNEL32!GetProcAddress (0x73350000,"ip_transfer_data")
KERNEL32!GetProcAddress (0x73350000,"ip_receive_data")
KERNEL32!GetProcAddress (0x73350000,"ip_gethostbyname")
KERNEL32!GetProcAddress (0x73350000,"ip_gethostname")
KERNEL32!GetProcAddress (0x73350000,"ip_retrieve_socket_data")
KERNEL32!GetProcAddress (0x73350000,"ip_release_socket")
KERNEL32!GetProcAddress (0x73350000,"ip_allocate_socket")
KERNEL32!GetProcAddress (0x73350000,"ip_bind_port")
KERNEL32!GetProcAddress (0x73350000,"ip_listen_port")
KERNEL32!GetProcAddress (0x73350000,"ip_getservbyname")
KERNEL32!GetProcAddress (0x73350000,"ip_query_protocol")
KERNEL32!LoadLibraryA ("user32.dll")
KERNEL32!GetModuleHandleA ("user32.dll")
KERNEL32!GetProcAddress (0x77D30000,"wsprintfA")
KERNEL32!LoadLibraryA ("kernel32.dll")
KERNEL32!GetModuleHandleA ("kernel32.dll")
KERNEL32!GetProcAddress (0x7C800000,"Sleep")
KERNEL32!HeapAlloc (0x00000000,0x00000008,0x0000031C)
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80D8AF accessing page 0x00073002
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C802FEA accessing page 0x000733C0
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C803023 accessing page 0x000733C6
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80303A accessing page 0x000733C7
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C803416 accessing page 0x000733C2
KERNEL32!GetProcAddress (0x733C0000,"CPlApplet")
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!GetProcAddress (0x733C0000,"gethostbyname")
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C802EF2 accessing page 0x000733C1
KERNEL32!GetProcAddress (0x733C0000,"inet_addr")
KERNEL32!GetProcAddress (0x733C0000,"WSAStartup")
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x733C1014 accessing page 0x000733C4
WSOCK32!WSAStartup (0x00000101,0x4FFD0A4A)
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x774D4028 accessing page 0x000774D5
OLE32!CreateStreamOnHGlobal (0x00000000,0x00000001,0x004032B4)
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x774D1500 accessing page 0x000774D6
KERNEL32!CreateFileA ("c:\temp\ole320",0x00000000,0x00000000,0x00000000,0x00000002,0x00000000,0x00000000)
KERNEL32!GetFileSize (0x00000020,0x00000000)
OLE32!IStream::Write (0x72005433,0x00403000,0x00000004,0x00000000)
KERNEL32!WriteFile (0x00000020,0x00403000,0x00000004,0x00000000,0x00000000)
KERNEL32!HeapAlloc (0x00000000,0x00000000,0x00001010)
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80D8AF accessing page 0x00073003
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x77DC2CD4 accessing page 0x00077DC1
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x77DC1014 accessing page 0x00077DC4
ADVAPI32!RegCreateKeyA (0x80000001,"Software\ghghckmkjh",0x4FFD0A3C)
PageFault tbl process 0x00000000 - 0x00000006 entries, 0x00000000-0x00000000. fhandle=0x72005794.
|offset 0x7000C000, seek 0x00000000, size 0x00001000, flags=0x00000000
|offset 0x7000D000, seek 0x00001000, size 0x00001000, flags=0x00000000
|offset 0x7000E000, seek 0x00002000, size 0x00001000, flags=0x00000000
|offset 0x7000F000, seek 0x00003000, size 0x00001000, flags=0x00000000
|offset 0x70010000, seek 0x00004000, size 0x00001000, flags=0x00000000
|offset 0x70011000, seek 0x00005000, size 0x00001000, flags=0x00000008
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0004D6B accessing page 0x00070011
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0004D6B accessing page 0x00070010
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0004D6B accessing page 0x0007000F
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0004D6B accessing page 0x0007000E
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0004D6B accessing page 0x0007000D
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0004D6B accessing page 0x0007000C
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072006
ADVAPI32!RegQueryValueExA (0x720058BD,"ghghckmkjh",0x00000000,0x4FFD0A38,0x4FFD0A30,0x4FFD0A34)
ADVAPI32!RegCloseKey (0x720058BD)
KERNEL32!GlobalAlloc (0x00000040,0x00004E20)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x0007200B
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x00072007
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x00072008
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x00072009
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x0007200A
KERNEL32!GlobalAlloc (0x00000040,0x00002000)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x0007200D
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x0007200C
KERNEL32!GetLogicalDriveStringsA (0x00001FFF,0x7200B360)
KERNEL32!GetDriveTypeA ("A:\")
KERNEL32!lstrlenA ("A:\")
KERNEL32!GetDriveTypeA ("C:\")
KERNEL32!GlobalAlloc (0x00000040,0x00010000)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x0007201D
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x0007200E
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x0007200F
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x00072010
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x00072011
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x00072012
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x00072013
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x00072014
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x00072015
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x00072016
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x00072017
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x00072018
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x00072019
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x0007201A
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x0007201B
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C80A0E1 accessing page 0x0007201C
KERNEL32!lstrcpyA (0x7200D380,"C:\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\")
KERNEL32!lstrcat ("C:\","*.*")
KERNEL32!FindFirstFileA ("C:\*.*",0x730032AC)
KERNEL32!lstrcat ("C:\","IO.SYS")
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x77F61EDD accessing page 0x00077F62
SHLWAPI!StrStrIA ("C:\IO.SYS",".wab")
SHLWAPI!StrStrIA ("C:\IO.SYS",".txt")
SHLWAPI!StrStrIA ("C:\IO.SYS",".msg")
SHLWAPI!StrStrIA ("C:\IO.SYS",".htm")
SHLWAPI!StrStrIA ("C:\IO.SYS",".shtm")
SHLWAPI!StrStrIA ("C:\IO.SYS",".stm")
SHLWAPI!StrStrIA ("C:\IO.SYS",".xml")
SHLWAPI!StrStrIA ("C:\IO.SYS",".dbx")
SHLWAPI!StrStrIA ("C:\IO.SYS",".mbx")
SHLWAPI!StrStrIA ("C:\IO.SYS",".mdx")
SHLWAPI!StrStrIA ("C:\IO.SYS",".eml")
SHLWAPI!StrStrIA ("C:\IO.SYS",".nch")
SHLWAPI!StrStrIA ("C:\IO.SYS",".mmf")
SHLWAPI!StrStrIA ("C:\IO.SYS",".ods")
SHLWAPI!StrStrIA ("C:\IO.SYS",".cfg")
SHLWAPI!StrStrIA ("C:\IO.SYS",".asp")
SHLWAPI!StrStrIA ("C:\IO.SYS",".php")
SHLWAPI!StrStrIA ("C:\IO.SYS",".pl")
SHLWAPI!StrStrIA ("C:\IO.SYS",".wsh")
SHLWAPI!StrStrIA ("C:\IO.SYS",".adb")
SHLWAPI!StrStrIA ("C:\IO.SYS",".tbb")
SHLWAPI!StrStrIA ("C:\IO.SYS",".sht")
SHLWAPI!StrStrIA ("C:\IO.SYS",".xls")
SHLWAPI!StrStrIA ("C:\IO.SYS",".oft")
SHLWAPI!StrStrIA ("C:\IO.SYS",".uin")
SHLWAPI!StrStrIA ("C:\IO.SYS",".cgi")
SHLWAPI!StrStrIA ("C:\IO.SYS",".mht")
SHLWAPI!StrStrIA ("C:\IO.SYS",".dhtm")
SHLWAPI!StrStrIA ("C:\IO.SYS",".jsp")
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1087,0x730032AC)
KERNEL32!lstrcat ("C:\","MSDOS.SYS")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".wab")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".txt")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".msg")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".htm")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".shtm")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".stm")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".xml")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".dbx")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".mbx")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".mdx")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".eml")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".nch")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".mmf")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".ods")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".cfg")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".asp")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".php")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".pl")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".wsh")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".adb")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".tbb")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".sht")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".xls")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".oft")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".uin")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".cgi")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".mht")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".dhtm")
SHLWAPI!StrStrIA ("C:\MSDOS.SYS",".jsp")
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1087,0x730032AC)
KERNEL32!lstrcat ("C:\","AUTOEXEC.BAT")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".wab")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".txt")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".msg")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".htm")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".shtm")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".stm")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".xml")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".dbx")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".mbx")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".mdx")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".eml")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".nch")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".mmf")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".ods")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".cfg")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".asp")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".php")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".pl")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".wsh")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".adb")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".tbb")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".sht")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".xls")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".oft")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".uin")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".cgi")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".mht")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".dhtm")
SHLWAPI!StrStrIA ("C:\AUTOEXEC.BAT",".jsp")
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1087,0x730032AC)
KERNEL32!lstrcat ("C:\","TEST.HTM")
SHLWAPI!StrStrIA ("C:\TEST.HTM",".wab")
SHLWAPI!StrStrIA ("C:\TEST.HTM",".txt")
SHLWAPI!StrStrIA ("C:\TEST.HTM",".msg")
SHLWAPI!StrStrIA ("C:\TEST.HTM",".htm")
KERNEL32!CreateFileA ("C:\TEST.HTM",0x80000000,0x00000001,0x00000000,0x00000003,0x00000000,0x00000000)
KERNEL32!GetFileSize (0x00000021,0x00000000)
KERNEL32!GetFileSize (0x00000021,0x00000000)
KERNEL32!CreateFileMappingA (0x00000021,0x00000000,0x00000002,0x00000000,0x00000000,0x00000000)
KERNEL32!GetFileSize (0x00000021,0x00000000)
KERNEL32!MapViewOfFile (0x00000022,0x00000004,0x00000000,0x00000000,0x00000000)
PageFault tbl process 0x00000100 - 0x00000001 entries, 0x00000000-0x00000000. fhandle=0x72003CAF.
|offset 0x70012000, seek 0x00000000, size 0x00001000, flags=0x00000008
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x00401407 accessing page 0x00070012
KERNEL32!lstrlenA ("hanne.jensen@bergen.net")
SHLWAPI!StrRChrA ("bergen.net",0x00000000,’.’)
KERNEL32!lstrlenA (".net")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x72006128,"hanne.jensen@bergen.net")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x72006128,0x00000000,0x4FFD07A4)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FFB1
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x500010E8)
KERNEL32!lstrlenA ("charlotte.bjorno@no.abb.com")
SHLWAPI!StrRChrA ("no.abb.com",0x00000000,’.’)
KERNEL32!lstrlenA (".com")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x7201D398,"charlotte.bjorno@no.abb.com")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x7201D398,0x00000000,0x4FFD07A4)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FF92
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x0007201E
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x5000115C)
KERNEL32!lstrlenA ("gunnar@microsoft.com")
SHLWAPI!StrRChrA ("microsoft.com",0x00000000,’.’)
KERNEL32!lstrlenA (".com")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x7201E408,"gunnar@microsoft.com")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x7201E408,0x00000000,0x4FFD07A4)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FF72
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x500011D0)
KERNEL32!UnmapViewOfFile (0x70012000)
KERNEL32!CloseHandle (0x00000022)
KERNEL32!CloseHandle (0x00000021)
KERNEL32!CloseHandle (0x00000021)
KERNEL32!Sleep (0x00000002)
SHLWAPI!StrRChrA ("gunnar@microsoft.com",0x00000000,’@’)
WSOCK32!inet_addr ("microsoft.com")
WSOCK32!gethostbyname ("microsoft.com")
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x733C1138 accessing page 0x000733C3
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7335373B accessing page 0x00073358
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x73352780 accessing page 0x00073354
SHLWAPI!StrStrIA ("gunnar@microsoft.com","@.")
SHLWAPI!StrStrIA ("gunnar@microsoft.com",".@")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","..")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","rating@")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","f-secur")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","mts@lebanon-online.com.lb")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","news")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","update")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","anyone@")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","bugs@")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","contract@")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","feste")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","gold-certs@")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","help@")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","info@")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","nobody@")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","noone@")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","kasp")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","admin")
SHLWAPI!StrStrIA ("gunnar@microsoft.com","icrosoft")
KERNEL32!GlobalFree (0x7201E408)
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x7C8010C7 accessing page 0x0004FF73
KERNEL32!_ExitThread ()
SHLWAPI!StrRChrA ("charlotte.bjorno@no.abb.com",0x00000000,’@’)
WSOCK32!inet_addr ("no.abb.com")
WSOCK32!gethostbyname ("no.abb.com")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","@.")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com",".@")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","..")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","rating@")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","f-secur")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","mts@lebanon-online.com.lb")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","news")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","update")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","anyone@")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","bugs@")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","contract@")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","feste")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","gold-certs@")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","help@")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","info@")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","nobody@")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","noone@")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","kasp")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","admin")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","icrosoft")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","support")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","ntivi")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","unix")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","bsd")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","linux")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","listserv")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","certific")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","sopho")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","@foo")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","@iana")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","free-av")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","@messagelab")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","winzip")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","google")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","winrar")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","samples")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","abuse")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","panda")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","cafee")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","spam")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","pgp")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","@avp.")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","noreply")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","local")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","root@")
SHLWAPI!StrStrIA ("charlotte.bjorno@no.abb.com","postmaster@")
KERNEL32!lstrlenA ("charlotte.bjorno@no.abb.com")
KERNEL32!GlobalAlloc (0x00000040,0x00000008)
KERNEL32!lstrlenA ("charlotte.bjorno@no.abb.com")
OLE32!IStream::Write (0x72005433,0x7201D398,0x0000001B,0x00000000)
KERNEL32!WriteFile (0x00000020,0x7201D398,0x0000001B,0x00000000,0x00000000)
OLE32!IStream::Write (0x72005433,0x00403094,0x00000002,0x00000000)
KERNEL32!WriteFile (0x00000020,0x00403094,0x00000002,0x00000000,0x00000000)
KERNEL32!GlobalFree (0x7201D398)
KERNEL32!_ExitThread ()
SHLWAPI!StrRChrA ("hanne.jensen@bergen.net",0x00000000,’@’)
WSOCK32!inet_addr ("bergen.net")
WSOCK32!gethostbyname ("bergen.net")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","@.")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net",".@")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","..")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","rating@")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","f-secur")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","mts@lebanon-online.com.lb")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","news")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","update")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","anyone@")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","bugs@")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","contract@")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","feste")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","gold-certs@")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","help@")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","info@")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","nobody@")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","noone@")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","kasp")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","admin")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","icrosoft")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","support")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","ntivi")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","unix")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","bsd")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","linux")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","listserv")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","certific")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","sopho")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","@foo")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","@iana")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","free-av")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","@messagelab")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","winzip")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","google")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","winrar")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","samples")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","abuse")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","panda")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","cafee")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","spam")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","pgp")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","@avp.")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","noreply")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","local")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","root@")
SHLWAPI!StrStrIA ("hanne.jensen@bergen.net","postmaster@")
KERNEL32!lstrlenA ("hanne.jensen@bergen.net")
KERNEL32!GlobalAlloc (0x00000040,0x00000008)
KERNEL32!lstrlenA ("hanne.jensen@bergen.net")
OLE32!IStream::Write (0x72005433,0x72006128,0x00000017,0x00000000)
KERNEL32!WriteFile (0x00000020,0x72006128,0x00000017,0x00000000,0x00000000)
OLE32!IStream::Write (0x72005433,0x00403094,0x00000002,0x00000000)
KERNEL32!WriteFile (0x00000020,0x00403094,0x00000002,0x00000000,0x00000000)
KERNEL32!GlobalFree (0x72006128)
KERNEL32!_ExitThread ()
KERNEL32!FindNextFileA (0xFFFF1087,0x730032AC)
KERNEL32!lstrcat ("C:\","COMMAND.COM")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".wab")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".txt")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".msg")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".htm")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".shtm")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".stm")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".xml")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".dbx")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".mbx")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".mdx")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".eml")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".nch")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".mmf")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".ods")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".cfg")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".asp")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".php")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".pl")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".wsh")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".adb")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".tbb")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".sht")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".xls")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".oft")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".uin")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".cgi")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".mht")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".dhtm")
SHLWAPI!StrStrIA ("C:\COMMAND.COM",".jsp")
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1087,0x730032AC)
KERNEL32!lstrcat ("C:\","TEMP")
KERNEL32!lstrcat ("C:\TEMP","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\TEMP\")
KERNEL32!lstrcat ("C:\TEMP\","*.*")
KERNEL32!FindFirstFileA ("C:\TEMP\*.*",0x730033F2)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x0007201F
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x730033F2)
KERNEL32!lstrcat ("C:\TEMP\","OLE320")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".wab")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".txt")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".msg")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".htm")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".shtm")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".stm")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".xml")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".dbx")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".mbx")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".mdx")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".eml")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".nch")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".mmf")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".ods")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".cfg")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".asp")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".php")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".pl")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".wsh")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".adb")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".tbb")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".sht")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".xls")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".oft")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".uin")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".cgi")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".mht")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".dhtm")
SHLWAPI!StrStrIA ("C:\TEMP\OLE320",".jsp")
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x730033F2)
KERNEL32!FindClose (0xFFFF10B1)
KERNEL32!LocalFree (0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1087,0x730032AC)
KERNEL32!lstrcat ("C:\","MIRC")
KERNEL32!lstrcat ("C:\MIRC","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\MIRC\")
KERNEL32!lstrcat ("C:\MIRC\","*.*")
KERNEL32!FindFirstFileA ("C:\MIRC\*.*",0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x730033F2)
KERNEL32!lstrcat ("C:\MIRC\","MIRC.INI")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".wab")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".txt")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".msg")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".htm")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".shtm")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".stm")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".xml")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".dbx")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".mbx")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".mdx")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".eml")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".nch")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".mmf")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".ods")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".cfg")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".asp")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".php")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".pl")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".wsh")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".adb")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".tbb")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".sht")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".xls")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".oft")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".uin")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".cgi")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".mht")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".dhtm")
SHLWAPI!StrStrIA ("C:\MIRC\MIRC.INI",".jsp")
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x730033F2)
KERNEL32!FindClose (0xFFFF10B1)
KERNEL32!LocalFree (0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1087,0x730032AC)
KERNEL32!lstrcat ("C:\","RECYCLED")
KERNEL32!lstrcat ("C:\RECYCLED","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\RECYCLED\")
KERNEL32!lstrcat ("C:\RECYCLED\","*.*")
KERNEL32!FindFirstFileA ("C:\RECYCLED\*.*",0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x730033F2)
KERNEL32!FindClose (0xFFFF10B1)
KERNEL32!LocalFree (0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1087,0x730032AC)
KERNEL32!lstrcat ("C:\","MYSHAR~1")
KERNEL32!lstrcat ("C:\MYSHAR~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\MYSHAR~1\")
KERNEL32!lstrcat ("C:\MYSHAR~1\","*.*")
KERNEL32!FindFirstFileA ("C:\MYSHAR~1\*.*",0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x730033F2)
KERNEL32!FindClose (0xFFFF10B1)
KERNEL32!LocalFree (0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1087,0x730032AC)
KERNEL32!lstrcat ("C:\","MYDOCU~1")
KERNEL32!lstrcat ("C:\MYDOCU~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\MYDOCU~1\")
KERNEL32!lstrcat ("C:\MYDOCU~1\","*.*")
KERNEL32!FindFirstFileA ("C:\MYDOCU~1\*.*",0x730033F2)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072020
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x730033F2)
KERNEL32!lstrcat ("C:\MYDOCU~1\","MYSHAR~1")
KERNEL32!lstrcat ("C:\MYDOCU~1\MYSHAR~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\MYDOCU~1\MYSHAR~1\")
KERNEL32!lstrcat ("C:\MYDOCU~1\MYSHAR~1\","*.*")
KERNEL32!FindFirstFileA ("C:\MYDOCU~1\MYSHAR~1\*.*",0x73003538)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x73003538)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x73003538)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x73003538)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x730033F2)
KERNEL32!FindClose (0xFFFF10B1)
KERNEL32!LocalFree (0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1087,0x730032AC)
KERNEL32!lstrcat ("C:\","PROGRA~1")
KERNEL32!lstrcat ("C:\PROGRA~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\*.*",0x73003538)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","KAZAA")
KERNEL32!lstrcat ("C:\PROGRA~1\KAZAA","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\KAZAA\")
KERNEL32!lstrcat ("C:\PROGRA~1\KAZAA\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\KAZAA\*.*",0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x730033F2)
KERNEL32!lstrcat ("C:\PROGRA~1\KAZAA\","MYSHAR~1")
KERNEL32!lstrcat ("C:\PROGRA~1\KAZAA\MYSHAR~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\KAZAA\MYSHAR~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\KAZAA\MYSHAR~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\KAZAA\MYSHAR~1\*.*",0x7300367E)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072021
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\KAZAA\MYSHAR~1\","BRITNEY.EXE")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".wab")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".txt")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".msg")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".htm")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".shtm")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".stm")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".xml")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".dbx")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".mbx")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".mdx")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".eml")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".nch")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".mmf")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".ods")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".cfg")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".asp")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".php")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".pl")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".wsh")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".adb")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".tbb")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".sht")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".xls")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".oft")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".uin")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".cgi")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".mht")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".dhtm")
SHLWAPI!StrStrIA ("C:\PROGRA~1\KAZAA\MYSHAR~1\BRITNEY.EXE",".jsp")
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x7300367E)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x730033F2)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","KAZAAL~1")
KERNEL32!lstrcat ("C:\PROGRA~1\KAZAAL~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\KAZAAL~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\KAZAAL~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\KAZAAL~1\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\KAZAAL~1\","MYSHAR~1")
KERNEL32!lstrcat ("C:\PROGRA~1\KAZAAL~1\MYSHAR~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\KAZAAL~1\MYSHAR~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\KAZAAL~1\MYSHAR~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\KAZAAL~1\MYSHAR~1\*.*",0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730033F2)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","MORPHEUS")
KERNEL32!lstrcat ("C:\PROGRA~1\MORPHEUS","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\MORPHEUS\")
KERNEL32!lstrcat ("C:\PROGRA~1\MORPHEUS\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\MORPHEUS\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\MORPHEUS\","MYSHAR~1")
KERNEL32!lstrcat ("C:\PROGRA~1\MORPHEUS\MYSHAR~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\MORPHEUS\MYSHAR~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\MORPHEUS\MYSHAR~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\MORPHEUS\MYSHAR~1\*.*",0x730033F2)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072022
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730033F2)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","OVERNET")
KERNEL32!lstrcat ("C:\PROGRA~1\OVERNET","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\OVERNET\")
KERNEL32!lstrcat ("C:\PROGRA~1\OVERNET\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\OVERNET\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","RAPIGA~1")
KERNEL32!lstrcat ("C:\PROGRA~1\RAPIGA~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\RAPIGA~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\RAPIGA~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\RAPIGA~1\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\RAPIGA~1\","SHARE")
KERNEL32!lstrcat ("C:\PROGRA~1\RAPIGA~1\SHARE","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\RAPIGA~1\SHARE\")
KERNEL32!lstrcat ("C:\PROGRA~1\RAPIGA~1\SHARE\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\RAPIGA~1\SHARE\*.*",0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730033F2)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","SOULSEEK")
KERNEL32!lstrcat ("C:\PROGRA~1\SOULSEEK","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\SOULSEEK\")
KERNEL32!lstrcat ("C:\PROGRA~1\SOULSEEK\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\SOULSEEK\*.*",0x7300367E)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072023
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\SOULSEEK\","SHARED.CFG")
SHLWAPI!StrStrIA ("C:\PROGRA~1\SOULSEEK\SHARED.CFG",".wab")
SHLWAPI!StrStrIA ("C:\PROGRA~1\SOULSEEK\SHARED.CFG",".txt")
SHLWAPI!StrStrIA ("C:\PROGRA~1\SOULSEEK\SHARED.CFG",".msg")
SHLWAPI!StrStrIA ("C:\PROGRA~1\SOULSEEK\SHARED.CFG",".htm")
SHLWAPI!StrStrIA ("C:\PROGRA~1\SOULSEEK\SHARED.CFG",".shtm")
SHLWAPI!StrStrIA ("C:\PROGRA~1\SOULSEEK\SHARED.CFG",".stm")
SHLWAPI!StrStrIA ("C:\PROGRA~1\SOULSEEK\SHARED.CFG",".xml")
SHLWAPI!StrStrIA ("C:\PROGRA~1\SOULSEEK\SHARED.CFG",".dbx")
SHLWAPI!StrStrIA ("C:\PROGRA~1\SOULSEEK\SHARED.CFG",".mbx")
SHLWAPI!StrStrIA ("C:\PROGRA~1\SOULSEEK\SHARED.CFG",".mdx")
SHLWAPI!StrStrIA ("C:\PROGRA~1\SOULSEEK\SHARED.CFG",".eml")
SHLWAPI!StrStrIA ("C:\PROGRA~1\SOULSEEK\SHARED.CFG",".nch")
SHLWAPI!StrStrIA ("C:\PROGRA~1\SOULSEEK\SHARED.CFG",".mmf")
SHLWAPI!StrStrIA ("C:\PROGRA~1\SOULSEEK\SHARED.CFG",".ods")
SHLWAPI!StrStrIA ("C:\PROGRA~1\SOULSEEK\SHARED.CFG",".cfg")
KERNEL32!CreateFileA ("C:\PROGRA~1\SOULSEEK\SHARED.CFG",0x80000000,0x00000001,0x00000000,0x00000003,0x00000000,0x00000000)
KERNEL32!GetFileSize (0x00000021,0x00000000)
KERNEL32!GetFileSize (0x00000021,0x00000000)
KERNEL32!CreateFileMappingA (0x00000021,0x00000000,0x00000002,0x00000000,0x00000000,0x00000000)
KERNEL32!GetFileSize (0x00000021,0x00000000)
KERNEL32!MapViewOfFile (0x00000022,0x00000004,0x00000000,0x00000000,0x00000000)
PageFault tbl process 0x00000100 - 0x00000001 entries, 0x00000000-0x00000000. fhandle=0x72003CAF.
|offset 0x70012000, seek 0x00000000, size 0x00001000, flags=0x00000008
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x00401407 accessing page 0x00070012
KERNEL32!UnmapViewOfFile (0x70012000)
KERNEL32!CloseHandle (0x00000022)
KERNEL32!CloseHandle (0x00000021)
KERNEL32!CloseHandle (0x00000021)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\SOULSEEK\","MYSHAR~1")
KERNEL32!lstrcat ("C:\PROGRA~1\SOULSEEK\MYSHAR~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\SOULSEEK\MYSHAR~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\SOULSEEK\MYSHAR~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\SOULSEEK\MYSHAR~1\*.*",0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730033F2)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","MIRC")
KERNEL32!lstrcat ("C:\PROGRA~1\MIRC","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\MIRC\")
KERNEL32!lstrcat ("C:\PROGRA~1\MIRC\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\MIRC\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","ICQ")
KERNEL32!lstrcat ("C:\PROGRA~1\ICQ","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\ICQ\")
KERNEL32!lstrcat ("C:\PROGRA~1\ICQ\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\ICQ\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\ICQ\","SHARED~1")
KERNEL32!lstrcat ("C:\PROGRA~1\ICQ\SHARED~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\ICQ\SHARED~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\ICQ\SHARED~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\ICQ\SHARED~1\*.*",0x730033F2)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072024
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730033F2)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","GNUCLEUS")
KERNEL32!lstrcat ("C:\PROGRA~1\GNUCLEUS","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\GNUCLEUS\")
KERNEL32!lstrcat ("C:\PROGRA~1\GNUCLEUS\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\GNUCLEUS\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\GNUCLEUS\","DOWNLO~1")
KERNEL32!lstrcat ("C:\PROGRA~1\GNUCLEUS\DOWNLO~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\GNUCLEUS\DOWNLO~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\GNUCLEUS\DOWNLO~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\GNUCLEUS\DOWNLO~1\*.*",0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730033F2)
KERNEL32!lstrcat ("C:\PROGRA~1\GNUCLEUS\DOWNLO~1\","INCOMING")
KERNEL32!lstrcat ("C:\PROGRA~1\GNUCLEUS\DOWNLO~1\INCOMING","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\GNUCLEUS\DOWNLO~1\INCOMING\")
KERNEL32!lstrcat ("C:\PROGRA~1\GNUCLEUS\DOWNLO~1\INCOMING\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\GNUCLEUS\DOWNLO~1\INCOMING\*.*",0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF112F,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF112F,0x730037C4)
KERNEL32!FindClose (0xFFFF112F)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730033F2)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","GROKSTER")
KERNEL32!lstrcat ("C:\PROGRA~1\GROKSTER","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\GROKSTER\")
KERNEL32!lstrcat ("C:\PROGRA~1\GROKSTER\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\GROKSTER\*.*",0x7300367E)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072025
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\GROKSTER\","MYGROK~1")
KERNEL32!lstrcat ("C:\PROGRA~1\GROKSTER\MYGROK~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\GROKSTER\MYGROK~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\GROKSTER\MYGROK~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\GROKSTER\MYGROK~1\*.*",0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","MUSIRC")
KERNEL32!lstrcat ("C:\PROGRA~1\MUSIRC","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\MUSIRC\")
KERNEL32!lstrcat ("C:\PROGRA~1\MUSIRC\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\MUSIRC\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\MUSIRC\","DOWNLO~1")
KERNEL32!lstrcat ("C:\PROGRA~1\MUSIRC\DOWNLO~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\MUSIRC\DOWNLO~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\MUSIRC\DOWNLO~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\MUSIRC\DOWNLO~1\*.*",0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","SHAREAZA")
KERNEL32!lstrcat ("C:\PROGRA~1\SHAREAZA","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\SHAREAZA\")
KERNEL32!lstrcat ("C:\PROGRA~1\SHAREAZA\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\SHAREAZA\*.*",0x7300367E)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072026
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\SHAREAZA\","DOWNLO~1")
KERNEL32!lstrcat ("C:\PROGRA~1\SHAREAZA\DOWNLO~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\SHAREAZA\DOWNLO~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\SHAREAZA\DOWNLO~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\SHAREAZA\DOWNLO~1\*.*",0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","XOLOX")
KERNEL32!lstrcat ("C:\PROGRA~1\XOLOX","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\XOLOX\")
KERNEL32!lstrcat ("C:\PROGRA~1\XOLOX\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\XOLOX\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\XOLOX\","DOWNLO~1")
KERNEL32!lstrcat ("C:\PROGRA~1\XOLOX\DOWNLO~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\XOLOX\DOWNLO~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\XOLOX\DOWNLO~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\XOLOX\DOWNLO~1\*.*",0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","BEARSH~1")
KERNEL32!lstrcat ("C:\PROGRA~1\BEARSH~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\BEARSH~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\BEARSH~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\BEARSH~1\*.*",0x7300367E)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072027
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\BEARSH~1\","SHARED")
KERNEL32!lstrcat ("C:\PROGRA~1\BEARSH~1\SHARED","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\BEARSH~1\SHARED\")
KERNEL32!lstrcat ("C:\PROGRA~1\BEARSH~1\SHARED\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\BEARSH~1\SHARED\*.*",0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","EDONKE~1")
KERNEL32!lstrcat ("C:\PROGRA~1\EDONKE~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\EDONKE~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\EDONKE~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\EDONKE~1\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\EDONKE~1\","INCOMING")
KERNEL32!lstrcat ("C:\PROGRA~1\EDONKE~1\INCOMING","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\EDONKE~1\INCOMING\")
KERNEL32!lstrcat ("C:\PROGRA~1\EDONKE~1\INCOMING\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\EDONKE~1\INCOMING\*.*",0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","EMULE")
KERNEL32!lstrcat ("C:\PROGRA~1\EMULE","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\EMULE\")
KERNEL32!lstrcat ("C:\PROGRA~1\EMULE\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\EMULE\*.*",0x7300367E)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072028
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\EMULE\","INCOMING")
KERNEL32!lstrcat ("C:\PROGRA~1\EMULE\INCOMING","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\EMULE\INCOMING\")
KERNEL32!lstrcat ("C:\PROGRA~1\EMULE\INCOMING\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\EMULE\INCOMING\*.*",0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","LIMEWIRE")
KERNEL32!lstrcat ("C:\PROGRA~1\LIMEWIRE","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\LIMEWIRE\")
KERNEL32!lstrcat ("C:\PROGRA~1\LIMEWIRE\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\LIMEWIRE\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\LIMEWIRE\","SHARED")
KERNEL32!lstrcat ("C:\PROGRA~1\LIMEWIRE\SHARED","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\LIMEWIRE\SHARED\")
KERNEL32!lstrcat ("C:\PROGRA~1\LIMEWIRE\SHARED\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\LIMEWIRE\SHARED\*.*",0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","APPLEJ~1")
KERNEL32!lstrcat ("C:\PROGRA~1\APPLEJ~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\APPLEJ~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\APPLEJ~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\APPLEJ~1\*.*",0x7300367E)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072029
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\APPLEJ~1\","INCOMING")
KERNEL32!lstrcat ("C:\PROGRA~1\APPLEJ~1\INCOMING","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\APPLEJ~1\INCOMING\")
KERNEL32!lstrcat ("C:\PROGRA~1\APPLEJ~1\INCOMING\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\APPLEJ~1\INCOMING\*.*",0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","NEWTELLA")
KERNEL32!lstrcat ("C:\PROGRA~1\NEWTELLA","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\NEWTELLA\")
KERNEL32!lstrcat ("C:\PROGRA~1\NEWTELLA\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\NEWTELLA\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","KMD")
KERNEL32!lstrcat ("C:\PROGRA~1\KMD","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\KMD\")
KERNEL32!lstrcat ("C:\PROGRA~1\KMD\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\KMD\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\KMD\","MYSHAR~1")
KERNEL32!lstrcat ("C:\PROGRA~1\KMD\MYSHAR~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\KMD\MYSHAR~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\KMD\MYSHAR~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\KMD\MYSHAR~1\*.*",0x730037C4)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x0007202A
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","TESLA")
KERNEL32!lstrcat ("C:\PROGRA~1\TESLA","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\TESLA\")
KERNEL32!lstrcat ("C:\PROGRA~1\TESLA\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\TESLA\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\TESLA\","FILES")
KERNEL32!lstrcat ("C:\PROGRA~1\TESLA\FILES","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\TESLA\FILES\")
KERNEL32!lstrcat ("C:\PROGRA~1\TESLA\FILES\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\TESLA\FILES\*.*",0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","WINMX")
KERNEL32!lstrcat ("C:\PROGRA~1\WINMX","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\WINMX\")
KERNEL32!lstrcat ("C:\PROGRA~1\WINMX\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\WINMX\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\WINMX\","SHARED")
KERNEL32!lstrcat ("C:\PROGRA~1\WINMX\SHARED","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\WINMX\SHARED\")
KERNEL32!lstrcat ("C:\PROGRA~1\WINMX\SHARED\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\WINMX\SHARED\*.*",0x730037C4)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x0007202B
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\WINMX\","MYSHAR~1")
KERNEL32!lstrcat ("C:\PROGRA~1\WINMX\MYSHAR~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\WINMX\MYSHAR~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\WINMX\MYSHAR~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\WINMX\MYSHAR~1\*.*",0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","COMMON~1")
KERNEL32!lstrcat ("C:\PROGRA~1\COMMON~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\COMMON~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\COMMON~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\COMMON~1\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\COMMON~1\","SYSTEM")
KERNEL32!lstrcat ("C:\PROGRA~1\COMMON~1\SYSTEM","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\COMMON~1\SYSTEM\")
KERNEL32!lstrcat ("C:\PROGRA~1\COMMON~1\SYSTEM\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\COMMON~1\SYSTEM\*.*",0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\PROGRA~1\COMMON~1\","Micros~1")
KERNEL32!lstrcat ("C:\PROGRA~1\COMMON~1\Micros~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\COMMON~1\Micros~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\COMMON~1\Micros~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\COMMON~1\Micros~1\*.*",0x730037C4)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x0007202C
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\PROGRA~1\","MESSEN~1")
KERNEL32!lstrcat ("C:\PROGRA~1\MESSEN~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\PROGRA~1\MESSEN~1\")
KERNEL32!lstrcat ("C:\PROGRA~1\MESSEN~1\","*.*")
KERNEL32!FindFirstFileA ("C:\PROGRA~1\MESSEN~1\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!FindClose (0xFFFF10B1)
KERNEL32!LocalFree (0x73003538)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1087,0x730032AC)
KERNEL32!lstrcat ("C:\","DRIVES")
KERNEL32!lstrcat ("C:\DRIVES","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\DRIVES\")
KERNEL32!lstrcat ("C:\DRIVES\","*.*")
KERNEL32!FindFirstFileA ("C:\DRIVES\*.*",0x73003538)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\DRIVES\","AUTOEXEC.BAT")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".wab")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".txt")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".msg")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".htm")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".shtm")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".stm")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".xml")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".dbx")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".mbx")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".mdx")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".eml")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".nch")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".mmf")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".ods")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".cfg")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".asp")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".php")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".pl")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".wsh")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".adb")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".tbb")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".sht")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".xls")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".oft")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".uin")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".cgi")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".mht")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".dhtm")
SHLWAPI!StrStrIA ("C:\DRIVES\AUTOEXEC.BAT",".jsp")
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\DRIVES\","WINDOWS")
KERNEL32!lstrcat ("C:\DRIVES\WINDOWS","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\DRIVES\WINDOWS\")
KERNEL32!lstrcat ("C:\DRIVES\WINDOWS\","*.*")
KERNEL32!FindFirstFileA ("C:\DRIVES\WINDOWS\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\DRIVES\WINDOWS\","WIN.INI")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".wab")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".txt")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".msg")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".htm")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".shtm")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".stm")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".xml")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".dbx")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".mbx")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".mdx")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".eml")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".nch")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".mmf")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".ods")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".cfg")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".asp")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".php")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".pl")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".wsh")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".adb")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".tbb")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".sht")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".xls")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".oft")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".uin")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".cgi")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".mht")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".dhtm")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\WIN.INI",".jsp")
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\DRIVES\WINDOWS\","NOTEPAD.EXE")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".wab")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".txt")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".msg")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".htm")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".shtm")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".stm")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".xml")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".dbx")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".mbx")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".mdx")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".eml")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".nch")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".mmf")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".ods")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".cfg")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".asp")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".php")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".pl")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".wsh")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".adb")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".tbb")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".sht")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".xls")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".oft")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".uin")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".cgi")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".mht")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".dhtm")
SHLWAPI!StrStrIA ("C:\DRIVES\WINDOWS\NOTEPAD.EXE",".jsp")
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\DRIVES\WINDOWS\","StartM~1")
KERNEL32!lstrcat ("C:\DRIVES\WINDOWS\StartM~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\DRIVES\WINDOWS\StartM~1\")
KERNEL32!lstrcat ("C:\DRIVES\WINDOWS\StartM~1\","*.*")
KERNEL32!FindFirstFileA ("C:\DRIVES\WINDOWS\StartM~1\*.*",0x730037C4)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x0007202D
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!lstrcat ("C:\DRIVES\WINDOWS\StartM~1\","Programs")
KERNEL32!lstrcat ("C:\DRIVES\WINDOWS\StartM~1\Programs","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\DRIVES\WINDOWS\StartM~1\Programs\")
KERNEL32!lstrcat ("C:\DRIVES\WINDOWS\StartM~1\Programs\","*.*")
KERNEL32!FindFirstFileA ("C:\DRIVES\WINDOWS\StartM~1\Programs\*.*",0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF112F,0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF112F,0x730033F2)
KERNEL32!lstrcat ("C:\DRIVES\WINDOWS\StartM~1\Programs\","Startup")
KERNEL32!lstrcat ("C:\DRIVES\WINDOWS\StartM~1\Programs\Startup","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\DRIVES\WINDOWS\StartM~1\Programs\Startup\")
KERNEL32!lstrcat ("C:\DRIVES\WINDOWS\StartM~1\Programs\Startup\","*.*")
KERNEL32!FindFirstFileA ("C:\DRIVES\WINDOWS\StartM~1\Programs\Startup\*.*",0x7300390A)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1159,0x7300390A)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1159,0x7300390A)
KERNEL32!FindClose (0xFFFF1159)
KERNEL32!LocalFree (0x7300390A)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF112F,0x730033F2)
KERNEL32!FindClose (0xFFFF112F)
KERNEL32!LocalFree (0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\DRIVES\","DOCUME~1")
KERNEL32!lstrcat ("C:\DRIVES\DOCUME~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\DRIVES\DOCUME~1\")
KERNEL32!lstrcat ("C:\DRIVES\DOCUME~1\","*.*")
KERNEL32!FindFirstFileA ("C:\DRIVES\DOCUME~1\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!lstrcat ("C:\DRIVES\DOCUME~1\","ALLUSERS")
KERNEL32!lstrcat ("C:\DRIVES\DOCUME~1\ALLUSERS","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\DRIVES\DOCUME~1\ALLUSERS\")
KERNEL32!lstrcat ("C:\DRIVES\DOCUME~1\ALLUSERS\","*.*")
KERNEL32!FindFirstFileA ("C:\DRIVES\DOCUME~1\ALLUSERS\*.*",0x730037C4)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x0007202E
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!lstrcat ("C:\DRIVES\DOCUME~1\ALLUSERS\","STARTM~1")
KERNEL32!lstrcat ("C:\DRIVES\DOCUME~1\ALLUSERS\STARTM~1","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\DRIVES\DOCUME~1\ALLUSERS\STARTM~1\")
KERNEL32!lstrcat ("C:\DRIVES\DOCUME~1\ALLUSERS\STARTM~1\","*.*")
KERNEL32!FindFirstFileA ("C:\DRIVES\DOCUME~1\ALLUSERS\STARTM~1\*.*",0x7300390A)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF112F,0x7300390A)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF112F,0x7300390A)
KERNEL32!lstrcat ("C:\DRIVES\DOCUME~1\ALLUSERS\STARTM~1\","PROGRAMS")
KERNEL32!lstrcat ("C:\DRIVES\DOCUME~1\ALLUSERS\STARTM~1\PROGRAMS","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\DRIVES\DOCUME~1\ALLUSERS\STARTM~1\PROGRAMS\")
KERNEL32!lstrcat ("C:\DRIVES\DOCUME~1\ALLUSERS\STARTM~1\PROGRAMS\","*.*")
KERNEL32!FindFirstFileA ("C:\DRIVES\DOCUME~1\ALLUSERS\STARTM~1\PROGRAMS\*.*",0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1159,0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1159,0x730033F2)
KERNEL32!lstrcat ("C:\DRIVES\DOCUME~1\ALLUSERS\STARTM~1\PROGRAMS\","STARTUP")
KERNEL32!lstrcat ("C:\DRIVES\DOCUME~1\ALLUSERS\STARTM~1\PROGRAMS\STARTUP","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\DRIVES\DOCUME~1\ALLUSERS\STARTM~1\PROGRAMS\STARTUP\")
KERNEL32!lstrcat ("C:\DRIVES\DOCUME~1\ALLUSERS\STARTM~1\PROGRAMS\STARTUP\","*.*")
KERNEL32!FindFirstFileA ("C:\DRIVES\DOCUME~1\ALLUSERS\STARTM~1\PROGRAMS\STARTUP\*.*",0x73003A50)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1183,0x73003A50)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1183,0x73003A50)
KERNEL32!FindClose (0xFFFF1183)
KERNEL32!LocalFree (0x73003A50)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1159,0x730033F2)
KERNEL32!FindClose (0xFFFF1159)
KERNEL32!LocalFree (0x730033F2)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF112F,0x7300390A)
KERNEL32!FindClose (0xFFFF112F)
KERNEL32!LocalFree (0x7300390A)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1105,0x730037C4)
KERNEL32!FindClose (0xFFFF1105)
KERNEL32!LocalFree (0x730037C4)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\DRIVES\","RECYCLED")
KERNEL32!lstrcat ("C:\DRIVES\RECYCLED","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\DRIVES\RECYCLED\")
KERNEL32!lstrcat ("C:\DRIVES\RECYCLED\","*.*")
KERNEL32!FindFirstFileA ("C:\DRIVES\RECYCLED\*.*",0x7300367E)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x0007202F
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!FindClose (0xFFFF10B1)
KERNEL32!LocalFree (0x73003538)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF1087,0x730032AC)
KERNEL32!lstrcat ("C:\","WINDOWS")
KERNEL32!lstrcat ("C:\WINDOWS","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\WINDOWS\")
KERNEL32!lstrcat ("C:\WINDOWS\","*.*")
KERNEL32!FindFirstFileA ("C:\WINDOWS\*.*",0x73003538)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\WINDOWS\","HELP")
KERNEL32!lstrcat ("C:\WINDOWS\HELP","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\WINDOWS\HELP\")
KERNEL32!lstrcat ("C:\WINDOWS\HELP\","*.*")
KERNEL32!FindFirstFileA ("C:\WINDOWS\HELP\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\WINDOWS\","INF")
KERNEL32!lstrcat ("C:\WINDOWS\INF","\")
KERNEL32!LocalAlloc (0x00000040,0x0000013E)
KERNEL32!lstrlenA ("C:\WINDOWS\INF\")
KERNEL32!lstrcat ("C:\WINDOWS\INF\","*.*")
KERNEL32!FindFirstFileA ("C:\WINDOWS\INF\*.*",0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10DB,0x7300367E)
KERNEL32!FindClose (0xFFFF10DB)
KERNEL32!LocalFree (0x7300367E)
KERNEL32!Sleep (0x00000002)
KERNEL32!FindNextFileA (0xFFFF10B1,0x73003538)
KERNEL32!lstrcat ("C:\WINDOWS\","lowcase.eml")
SHLWAPI!StrStrIA ("C:\WINDOWS\lowcase.eml",".wab")
SHLWAPI!StrStrIA ("C:\WINDOWS\lowcase.eml",".txt")
SHLWAPI!StrStrIA ("C:\WINDOWS\lowcase.eml",".msg")
SHLWAPI!StrStrIA ("C:\WINDOWS\lowcase.eml",".htm")
SHLWAPI!StrStrIA ("C:\WINDOWS\lowcase.eml",".shtm")
SHLWAPI!StrStrIA ("C:\WINDOWS\lowcase.eml",".stm")
SHLWAPI!StrStrIA ("C:\WINDOWS\lowcase.eml",".xml")
SHLWAPI!StrStrIA ("C:\WINDOWS\lowcase.eml",".dbx")
SHLWAPI!StrStrIA ("C:\WINDOWS\lowcase.eml",".mbx")
SHLWAPI!StrStrIA ("C:\WINDOWS\lowcase.eml",".mdx")
SHLWAPI!StrStrIA ("C:\WINDOWS\lowcase.eml",".eml")
KERNEL32!CreateFileA ("C:\WINDOWS\lowcase.eml",0x80000000,0x00000001,0x00000000,0x00000003,0x00000000,0x00000000)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072030
KERNEL32!GetFileSize (0x00000021,0x00000000)
KERNEL32!GetFileSize (0x00000021,0x00000000)
KERNEL32!CreateFileMappingA (0x00000021,0x00000000,0x00000002,0x00000000,0x00000000,0x00000000)
KERNEL32!GetFileSize (0x00000021,0x00000000)
KERNEL32!MapViewOfFile (0x00000022,0x00000004,0x00000000,0x00000000,0x00000000)
PageFault tbl process 0x00000100 - 0x00000001 entries, 0x00000000-0x00000000. fhandle=0x72003CAF.
|offset 0x70012000, seek 0x00000000, size 0x00001000, flags=0x00000008
**PAGE FAULT: process 0x00000100 - cs:eip 0x002B:0x00401407 accessing page 0x00070012
KERNEL32!lstrlenA ("charlotte.bjorno@no.abb.com")
SHLWAPI!StrRChrA ("no.abb.com",0x00000000,’.’)
KERNEL32!lstrlenA (".com")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x7201D398,"charlotte.bjorno@no.abb.com")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x7201D398,0x00000000,0x4FFD0788)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FF53
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x50001244)
KERNEL32!lstrlenA ("charlotte.bjorno@no.abb.com")
SHLWAPI!StrRChrA ("no.abb.com",0x00000000,’.’)
KERNEL32!lstrlenA (".com")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x7201E408,"charlotte.bjorno@no.abb.com")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x7201E408,0x00000000,0x4FFD0788)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FF34
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x500012B8)
KERNEL32!lstrlenA ("kan@eunet.no")
SHLWAPI!StrRChrA ("eunet.no",0x00000000,’.’)
KERNEL32!lstrlenA (".no")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x72006128,"kan@eunet.no")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x72006128,0x00000000,0x4FFD0788)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FF15
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072031
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x5000132C)
KERNEL32!lstrlenA ("charlotte.bjorno@no.abb.com")
SHLWAPI!StrRChrA ("no.abb.com",0x00000000,’.’)
KERNEL32!lstrlenA (".com")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x7202FE70,"charlotte.bjorno@no.abb.com")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x7202FE70,0x00000000,0x4FFD0788)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FEF5
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x500013A0)
KERNEL32!lstrlenA ("charlotte.bjorno@no.abb.com")
SHLWAPI!StrRChrA ("no.abb.com",0x00000000,’.’)
KERNEL32!lstrlenA (".com")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x72031B48,"charlotte.bjorno@no.abb.com")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x72031B48,0x00000000,0x4FFD0788)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FED6
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072032
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x50001414)
KERNEL32!lstrlenA ("lisedalen@c2i.net")
SHLWAPI!StrRChrA ("c2i.net",0x00000000,’.’)
KERNEL32!lstrlenA (".net")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x72032388,"lisedalen@c2i.net")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x72032388,0x00000000,0x4FFD0788)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FEB7
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x50001488)
KERNEL32!lstrlenA ("lise.dalen.mcmahon@md.dep.no")
SHLWAPI!StrRChrA ("md.dep.no",0x00000000,’.’)
KERNEL32!lstrlenA (".no")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x72032BD0,"lise.dalen.mcmahon@md.dep.no")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x72032BD0,0x00000000,0x4FFD0788)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FE98
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072033
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x500014FC)
KERNEL32!lstrlenA ("charlotte.bjorno@no.abb.com")
SHLWAPI!StrRChrA ("no.abb.com",0x00000000,’.’)
KERNEL32!lstrlenA (".com")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x72033410,"charlotte.bjorno@no.abb.com")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x72033410,0x00000000,0x4FFD0788)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FE78
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x50001570)
KERNEL32!lstrlenA ("rer@hual.no")
SHLWAPI!StrRChrA ("hual.no",0x00000000,’.’)
KERNEL32!lstrlenA (".no")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x72033C58,"rer@hual.no")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x72033C58,0x00000000,0x4FFD0788)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FE59
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072034
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x500015E4)
KERNEL32!lstrlenA ("berit.soe@c2i.net")
SHLWAPI!StrRChrA ("c2i.net",0x00000000,’.’)
KERNEL32!lstrlenA (".net")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x72034498,"berit.soe@c2i.net")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x72034498,0x00000000,0x4FFD0788)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FE3A
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x50001658)
KERNEL32!lstrlenA ("karin.vestnes@fredolsen.no")
SHLWAPI!StrRChrA ("fredolsen.no",0x00000000,’.’)
KERNEL32!lstrlenA (".no")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x72034CE0,"karin.vestnes@fredolsen.no")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x72034CE0,0x00000000,0x4FFD0788)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FE1B
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072035
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x500016CC)
KERNEL32!lstrlenA ("hanne.johnsen@colorline.no")
SHLWAPI!StrRChrA ("colorline.no",0x00000000,’.’)
KERNEL32!lstrlenA (".no")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x72035520,"hanne.johnsen@colorline.no")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x72035520,0x00000000,0x4FFD0788)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FDFB
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x50001740)
KERNEL32!lstrlenA ("linda@zolong.com")
SHLWAPI!StrRChrA ("zolong.com",0x00000000,’.’)
KERNEL32!lstrlenA (".com")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x72035D68,"linda@zolong.com")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x72035D68,0x00000000,0x4FFD0788)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FDDC
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072036
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x500017B4)
KERNEL32!lstrlenA ("RITS@nycomed.com")
SHLWAPI!StrRChrA ("nycomed.com",0x00000000,’.’)
KERNEL32!lstrlenA (".com")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x720365A8,"RITS@nycomed.com")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x720365A8,0x00000000,0x4FFD0788)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FDBD
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x50001828)
KERNEL32!lstrlenA ("ritasvee@online.no")
SHLWAPI!StrRChrA ("online.no",0x00000000,’.’)
KERNEL32!lstrlenA (".no")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x72036DF0,"ritasvee@online.no")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x72036DF0,0x00000000,0x4FFD0788)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FD9E
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072037
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x5000189C)
KERNEL32!lstrlenA ("kan@norman.no")
SHLWAPI!StrRChrA ("norman.no",0x00000000,’.’)
KERNEL32!lstrlenA (".no")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
KERNEL32!lstrcpyA (0x72037630,"kan@norman.no")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x72037630,0x00000000,0x4FFD0788)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FD7E
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x50001910)
KERNEL32!lstrlenA ("kan@eunet.no")
SHLWAPI!StrRChrA ("eunet.no",0x00000000,’.’)
KERNEL32!lstrlenA (".no")
KERNEL32!GlobalAlloc (0x00000040,0x000001F4)
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003220 accessing page 0x00072038
KERNEL32!lstrcpyA (0x72037E78,"kan@eunet.no")
KERNEL32!CreateThread (0x00000000,0x00000000,0x00401314,0x72037E78,0x00000000,0x4FFD0788)
KERNEL32!EnterCriticalSection (0x00000000)
KERNEL32!GetCurrentProcessId ()
**PAGE FAULT: process 0x00000100 - cs:eip 0x0028:0xC0003943 accessing page 0x0004FD5F
KERNEL32!LeaveCriticalSection (0x00000000)
KERNEL32!CloseHandle (0x50001984)
KERNEL32!lstrlenA ("VRS@avantor.no")
SHLWAPI!StrRChrA ("kan@eunet.no",0x00000000,’@’)
WSOCK32!inet_addr ("eunet.no")
WSOCK32!gethostbyname ("eunet.no")
SHLWAPI!StrStrIA ("kan@eunet.no","@.")
SHLWAPI!StrStrIA ("kan@eunet.no",".@")
SHLWAPI!StrStrIA ("kan@eunet.no","..")
SHLWAPI!StrStrIA ("kan@eunet.no","rating@")
SHLWAPI!StrStrIA ("kan@eunet.no","f-secur")
SHLWAPI!StrStrIA ("kan@eunet.no","mts@lebanon-online.com.lb")
SHLWAPI!StrStrIA ("kan@eunet.no","news")
SHLWAPI!StrStrIA ("kan@eunet.no","update")
SHLWAPI!StrStrIA ("kan@eunet.no","anyone@")
SHLWAPI!StrStrIA ("kan@eunet.no","bugs@")
SHLWAPI!StrStrIA ("kan@eunet.no","contract@")
SHLWAPI!StrStrIA ("kan@eunet.no","feste")
SHLWAPI!StrStrIA ("kan@eunet.no","gold-certs@")
SHLWAPI!StrStrIA ("kan@eunet.no","help@")
SHLWAPI!StrStrIA ("kan@eunet.no","info@")
SHLWAPI!StrStrIA ("kan@eunet.no","nobody@")
SHLWAPI!StrStrIA ("kan@eunet.no","noone@")
SHLWAPI!StrStrIA ("kan@eunet.no","kasp")
SHLWAPI!StrStrIA ("kan@eunet.no","admin")
SHLWAPI!StrStrIA ("kan@eunet.no","icrosoft")
SHLWAPI!StrStrIA ("kan@eunet.no","support")
SHLWAPI!StrStrIA ("kan@eunet.no","ntivi")
SHLWAPI!StrStrIA ("kan@eunet.no","unix")
SHLWAPI!StrStrIA ("kan@eunet.no","bsd")
SHLWAPI!StrStrIA ("kan@eunet.no","linux")
SHLWAPI!StrStrIA ("kan@eunet.no","listserv")
SHLWAPI!StrStrIA ("kan@eunet.no","certific")
SHLWAPI!StrStrIA ("kan@eunet.no","sopho")
SHLWAPI!StrStrIA ("kan@eunet.no","@foo")
SHLWAPI!StrStrIA ("kan@eunet.no","@iana")
SHLWAPI!StrStrIA ("kan@eunet.no","free-av")
SHLWAPI!StrStrIA ("kan@eunet.no","@messagelab")
SHLWAPI!StrStrIA ("kan@eunet.no","winzip")
SHLWAPI!StrStrIA ("kan@eunet.no","google")
SHLWAPI!StrStrIA ("kan@eunet.no","winrar")
SHLWAPI!StrStrIA ("kan@eunet.no","samples")
SHLWAPI!StrStrIA ("kan@eunet.no","abuse")
SHLWAPI!StrStrIA ("kan@eunet.no","panda")
SHLWAPI!StrStrIA ("kan@eunet.no","cafee")
SHLWAPI!StrStrIA ("kan@eunet.no","spam")
SHLWAPI!StrStrIA ("kan@eunet.no","pgp")
SHLWAPI!StrStrIA ("kan@eunet.no","@avp.")
SHLWAPI!StrStrIA ("kan@eunet.no","noreply")
SHLWAPI!StrStrIA ("kan@eunet.no","local")
SHLWAPI!StrStrIA ("kan@eunet.no","root@")
SHLWAPI!StrStrIA ("kan@eunet.no","postmaster@")
KERNEL32!lstrlenA ("kan@eunet.no")
KERNEL32!GlobalAlloc (0x00000040,0x00000008)
KERNEL32!lstrlenA ("kan@eunet.no")
OLE32!IStream::Write (0x72005433,0x72037E78,0x0000000C,0x00000000)
KERNEL32!WriteFile (0x00000020,0x72037E78,0x0000000C,0x00000000,0x00000000)
OLE32!IStream::Write (0x72005433,0x00403094,0x00000002,0x00000000)
KERNEL32!WriteFile (0x00000020,0x00403094,0x00000002,0x00000000,0x00000000)
KERNEL32!GlobalFree (0x72037E78)
KERNEL32!_ExitThread ()
SHLWAPI!StrRChrA ("kan@norman.no",0x00000000,’@’)
WSOCK32!inet_addr ("norman.no")
WSOCK32!gethostbyname ("norman.no")
SHLWAPI!StrStrIA ("kan@norman.no","@.")
SHLWAPI!StrStrIA ("kan@norman.no",".@")
SHLWAPI!StrStrIA ("kan@norman.no","..")
SHLWAPI!StrStrIA ("kan@norman.no","rating@")
SHLWAPI!StrStrIA ("kan@norman.no","f-secur")
SHLWAPI!StrStrIA ("kan@norman.no","mts@lebanon-online.com.lb")
SHLWAPI!StrStrIA ("kan@norman.no","news")
SHLWAPI!StrStrIA ("kan@norman.no","update")
SHLWAPI!StrStrIA ("kan@norman.no","anyone@")
SHLWAPI!StrStrIA ("kan@norman.no","bugs@")
SHLWAPI!StrRChrA ("ritasvee@online.no",0x00000000,’@’)
WSOCK32!inet_addr ("online.no")
WSOCK32!gethostbyname ("online.no")
SHLWAPI!StrStrIA ("ritasvee@online.no","@.")
SHLWAPI!StrStrIA ("ritasvee@online.no",".@")
SHLWAPI!StrStrIA ("ritasvee@online.no","..")
SHLWAPI!StrStrIA ("ritasvee@online.no","rating@")
SHLWAPI!StrStrIA ("ritasvee@online.no","f-secur")
SHLWAPI!StrStrIA ("ritasvee@online.no","mts@lebanon-online.com.lb")
SHLWAPI!StrStrIA ("ritasvee@online.no","news")
SHLWAPI!StrStrIA ("ritasvee@online.no","update")
SHLWAPI!StrStrIA ("ritasvee@online.no","anyone@")
SHLWAPI!StrStrIA ("ritasvee@online.no","bugs@")
SHLWAPI!StrStrIA ("ritasvee@online.no","contract@")
SHLWAPI!StrStrIA ("ritasvee@online.no","feste")
SHLWAPI!StrStrIA ("ritasvee@online.no","gold-certs@")
SHLWAPI!StrStrIA ("ritasvee@online.no","help@")
SHLWAPI!StrStrIA ("ritasvee@online.no","info@")
SHLWAPI!StrStrIA ("ritasvee@online.no","nobody@")
SHLWAPI!StrStrIA ("ritasvee@online.no","noone@")
SHLWAPI!StrStrIA ("ritasvee@online.no","kasp")
SHLWAPI!StrStrIA ("ritasvee@online.no","admin")
SHLWAPI!StrStrIA ("ritasvee@online.no","icrosoft")
SHLWAPI!StrStrIA ("ritasvee@online.no","support")
SHLWAPI!StrStrIA ("ritasvee@online.no","ntivi")
SHLWAPI!StrStrIA ("ritasvee@online.no","unix")
SHLWAPI!StrStrIA ("ritasvee@online.no","bsd")
SHLWAPI!StrStrIA ("ritasvee@online.no","linux")
SHLWAPI!StrStrIA ("ritasvee@online.no","listserv")
SHLWAPI!StrStrIA ("ritasvee@online.no","certific")
SHLWAPI!StrStrIA ("ritasvee@online.no","sopho")
SHLWAPI!StrStrIA ("ritasvee@online.no","@foo")
SHLWAPI!StrStrIA ("ritasvee@online.no","@iana")
SHLWAPI!StrStrIA ("ritasvee@online.no","free-av")
SHLWAPI!StrStrIA ("ritasvee@online.no","@messagelab")
SHLWAPI!StrStrIA ("ritasvee@online.no","winzip")
SHLWAPI!StrStrIA ("ritasvee@online.no","google")
SHLWAPI!StrStrIA ("ritasvee@online.no","winrar")
SHLWAPI!StrStrIA ("ritasvee@online.no","samples")
SHLWAPI!StrStrIA ("ritasvee@online.no","abuse")
SHLWAPI!StrStrIA ("ritasvee@online.no","panda")
SHLWAPI!StrStrIA ("ritasvee@online.no","cafee")
SHLWAPI!StrStrIA ("ritasvee@online.no","spam")
SHLWAPI!StrStrIA ("ritasvee@online.no","pgp")
SHLWAPI!StrStrIA ("ritasvee@online.no","@avp.")
SHLWAPI!StrStrIA ("ritasvee@online.no","noreply")
SHLWAPI!StrStrIA ("ritasvee@online.no","local")
SHLWAPI!StrStrIA ("ritasvee@online.no","root@")
SHLWAPI!StrStrIA ("ritasvee@online.no","postmaster@")
KERNEL32!lstrlenA ("ritasvee@online.no")
KERNEL32!GlobalAlloc (0x00000040,0x00000008)
KERNEL32!lstrlenA ("ritasvee@online.no")
OLE32!IStream::Write (0x72005433,0x72036DF0,0x00000012,0x00000000)
KERNEL32!WriteFile (0x00000020,0x72036DF0,0x00000012,0x00000000,0x00000000)
OLE32!IStream::Write (0x72005433,0x00403094,0x00000002,0x00000000)
KERNEL32!WriteFile (0x00000020,0x00403094,0x00000002,0x00000000,0x00000000)
KERNEL32!GlobalFree (0x72036DF0)
KERNEL32!_ExitThread ()
SHLWAPI!StrRChrA ("RITS@nycomed.com",0x00000000,’@’)
WSOCK32!inet_addr ("nycomed.com")
WSOCK32!gethostbyname ("nycomed.com")
SHLWAPI!StrStrIA ("RITS@nycomed.com","@.")
SHLWAPI!StrStrIA ("RITS@nycomed.com",".@")
SHLWAPI!StrStrIA ("RITS@nycomed.com","..")
SHLWAPI!StrStrIA ("RITS@nycomed.com","rating@")
SHLWAPI!StrStrIA ("RITS@nycomed.com","f-secur")
SHLWAPI!StrStrIA ("RITS@nycomed.com","mts@lebanon-online.com.lb")
SHLWAPI!StrStrIA ("RITS@nycomed.com","news")
SHLWAPI!StrStrIA ("RITS@nycomed.com","update")
SHLWAPI!StrStrIA ("RITS@nycomed.com","anyone@")
SHLWAPI!StrStrIA ("RITS@nycomed.com","bugs@")
SHLWAPI!StrStrIA ("RITS@nycomed.com","contract@")
SHLWAPI!StrStrIA ("RITS@nycomed.com","feste")
SHLWAPI!StrStrIA ("RITS@nycomed.com","gold-certs@")
SHLWAPI!StrStrIA ("RITS@nycomed.com","help@")
SHLWAPI!StrStrIA ("RITS@nycomed.com","info@")
SHLWAPI!StrStrIA ("RITS@nycomed.com","nobody@")
SHLWAPI!StrStrIA ("RITS@nycomed.com","noone@")
SHLWAPI!StrStrIA ("RITS@nycomed.com","kasp")
SHLWAPI!StrStrIA ("RITS@nycomed.com","admin")
SHLWAPI!StrStrIA ("RITS@nycomed.com","icrosoft")
SHLWAPI!StrStrIA ("RITS@nycomed.com","support")
SHLWAPI!StrStrIA ("RITS@nycomed.com","ntivi")
SHLWAPI!StrStrIA ("RITS@nycomed.com","unix")
SHLWAPI!StrStrIA ("RITS@nycomed.com","bsd")
SHLWAPI!StrStrIA ("RITS@nycomed.com","linux")
SHLWAPI!StrStrIA ("RITS@nycomed.com","listserv")
SHLWAPI!StrStrIA ("RITS@nycomed.com","certific")
SHLWAPI!StrStrIA ("RITS@nycomed.com","sopho")
SHLWAPI!StrStrIA ("RITS@nycomed.com","@foo")
SHLWAPI!StrStrIA ("RITS@nycomed.com","@iana")
SHLWAPI!StrStrIA ("RITS@nycomed.com","free-av")
SHLWAPI!StrStrIA ("RITS@nycomed.com","@messagelab")
SHLWAPI!StrStrIA ("RITS@nycomed.com","winzip")
SHLWAPI!StrStrIA ("RITS@nycomed.com","google")
SHLWAPI!StrStrIA ("RITS@nycomed.com","winrar")
SHLWAPI!StrStrIA ("RITS@nycomed.com","samples")
SHLWAPI!StrStrIA ("RITS@nycomed.com","abuse")
SHLWAPI!StrStrIA ("RITS@nycomed.com","panda")
SHLWAPI!StrStrIA ("RITS@nycomed.com","cafee")
SHLWAPI!StrStrIA ("RITS@nycomed.com","spam")
SHLWAPI!StrStrIA ("RITS@nycomed.com","pgp")
SHLWAPI!StrStrIA ("RITS@nycomed.com","@avp.")
SHLWAPI!StrStrIA ("RITS@nycomed.com","noreply")
SHLWAPI!StrStrIA ("RITS@nycomed.com","local")
SHLWAPI!StrStrIA ("RITS@nycomed.com","root@")
SHLWAPI!StrStrIA ("RITS@nycomed.com","postmaster@")
KERNEL32!lstrlenA ("RITS@nycomed.com")
KERNEL32!GlobalAlloc (0x00000040,0x00000008)
KERNEL32!lstrlenA ("RITS@nycomed.com")
OLE32!IStream::Write (0x72005433,0x720365A8,0x00000010,0x00000000)
KERNEL32!WriteFile (0x00000020,0x720365A8,0x00000010,0x00000000,0x00000000)
OLE32!IStream::Write (0x72005433,0x00403094,0x00000002,0x00000000)
KERNEL32!WriteFile (0x00000020,0x00403094,0x00000002,0x00000000,0x00000000)
KERNEL32!GlobalFree (0x720365A8)
KERNEL32!_ExitThread ()
SHLWAPI!StrRChrA ("linda@zolong.com",0x00000000,’@’)
WSOCK32!inet_addr ("zolong.com")
WSOCK32!gethostbyname ("zolong.com")
SHLWAPI!StrStrIA ("linda@zolong.com","@.")
SHLWAPI!StrStrIA ("linda@zolong.com",".@")
SHLWAPI!StrStrIA ("linda@zolong.com","..")
SHLWAPI!StrStrIA ("linda@zolong.com","rating@")
SHLWAPI!StrStrIA ("linda@zolong.com","f-secur")
SHLWAPI!StrStrIA ("linda@zolong.com","mts@lebanon-online.com.lb")
SHLWAPI!StrStrIA ("linda@zolong.com","news")
SHLWAPI!StrStrIA ("linda@zolong.com","update")
SHLWAPI!StrStrIA ("linda@zolong.com","anyone@")
SHLWAPI!StrStrIA ("linda@zolong.com","bugs@")
SHLWAPI!StrStrIA ("linda@zolong.com","contract@")
SHLWAPI!StrStrIA ("linda@zolong.com","feste")
SHLWAPI!StrStrIA ("linda@zolong.com","gold-certs@")
SHLWAPI!StrStrIA ("linda@zolong.com","help@")
SHLWAPI!StrStrIA ("linda@zolong.com","info@")
SHLWAPI!StrStrIA ("linda@zolong.com","nobody@")
SHLWAPI!StrStrIA ("linda@zolong.com","noone@")
SHLWAPI!StrStrIA ("linda@zolong.com","kasp")
SHLWAPI!StrStrIA ("linda@zolong.com","admin")
SHLWAPI!StrStrIA ("linda@zolong.com","icrosoft")
SHLWAPI!StrStrIA ("linda@zolong.com","support")
SHLWAPI!StrStrIA ("linda@zolong.com","ntivi")
SHLWAPI!StrStrIA ("linda@zolong.com","unix")
SHLWAPI!StrStrIA ("linda@zolong.com","bsd")
SHLWAPI!StrStrIA ("linda@zolong.com","linux")
SHLWAPI!StrStrIA ("linda@zolong.com","listserv")
SHLWAPI!StrStrIA ("linda@zolong.com","certific")
SHLWAPI!StrStrIA ("linda@zolong.com","sopho")
SHLWAPI!StrStrIA ("linda@zolong.com","@foo")
SHLWAPI!StrStrIA ("linda@zolong.com","@iana")
SHLWAPI!StrStrIA ("linda@zolong.com","free-av")
SHLWAPI!StrStrIA ("linda@zolong.com","@messagelab")
SHLWAPI!StrStrIA ("linda@zolong.com","winzip")
SHLWAPI!StrStrIA ("linda@zolong.com","google")
SHLWAPI!StrStrIA ("linda@zolong.com","winrar")
SHLWAPI!StrStrIA ("linda@zolong.com","samples")
SHLWAPI!StrStrIA ("linda@zolong.com","abuse")
SHLWAPI!StrStrIA ("linda@zolong.com","panda")
SHLWAPI!StrStrIA ("linda@zolong.com","cafee")
SHLWAPI!StrStrIA ("linda@zolong.com","spam")
S