Windows 7 Forums
Join Forum | Login | Today's Posts | Tutorials | Vista Forum | Windows 8 Forum


Windows 7: Right Click on desktop causing Explorer.exe crash!!!

Page 4 of 24 « First 23 4 5614 Last »
04 Nov 2009   #31

Win7x64
1,382 posts
 
 
Quote   Quote: Originally Posted by TomasWin7 View Post

one thing we have in common is that I do have O&O Defrag installed (the 64-Bit version)

That's interesting that he mentioned that
Both also have code injected into Magnetite's Explorer process, so that might be the reasoning behind the "test what happens when you remove 'em" advice he was offered, which is incidentally sound as the crash is another heap corruption issue (hard to tell what component corrupted the heap):

00000000`04320000 00000000`0436b000 oodshrs Mon Nov 03 21:15:55 2008 (490ECF5B)
00000000`64f00000 00000000`64f16000 ashShA64 Tue Sep 15 21:01:02 2009 (4AAF73EE)
00000001`80000000 00000001`800e1000 oodsh Mon Nov 03 21:17:27 2008 (490ECFB7)

The ntdll.dll reference is unimportant. Virtually every app crash shows up as "faulting module ntdll.dll" because that's the interface between the app and the OS (sorta), and it's the component which "catches" the underlying problem and reports it (sorta!).
My System SpecsSystem Spec

05 Nov 2009   #32

Windows 7 64-bit Home Premium SP1
90 posts
Calgary, Alberta, Canada
 
 
Okay, I kept Avast installed, disabled all the "red" ShellExView entries (or all of the non-MS ones), and installed everything else as normal (all my other usual programs). So far, I have not received any issues. Don't hold me to that though. Should set a restore point like I did before doing anything.

So if I'm right, this could be an issue with O&O Defrag Professional 64-bit. At least for me, possibly for some of you as well. I have version 11, BTW.
My System SpecsSystem Spec
05 Nov 2009   #33

Win 7 Pro 64 Bit
94 posts
NoVa
 
 
If you are having the right-click explorer crash/restart issue, please add to this thread:

Right-clicking in OS shell causes Explorer crash and restart

...and let MS know. Thanks.
My System SpecsSystem Spec
.


05 Nov 2009   #34

Win Seven
1 posts
 
 
Don't know if it can help, but i never had this issue with the RC release...
I'm expriencing this issue on my 2 macs (macbook pro and iMac) running Windows 7 trought Boot Camp.

Can it be due to an update ? Did someone try without doing windows updates ?
My System SpecsSystem Spec
05 Nov 2009   #35

Windows 7 - Vista
870 posts
New Jersey, USA
 
 
Quote   Quote: Originally Posted by BashirSabeel View Post
Faulting application name: Explorer.EXE, version: 6.1.7600.16404, time stamp: 0x4a765771
Faulting module name: ntdll.dll, version: 6.1.7600.16385, time stamp: 0x4a5be02b
Exception code: 0xc0000374
Faulting application path: C:\Windows\Explorer.EXE
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll

`

I noticed in at least 2 posts that the Explorer.exe module contained a different version number and timestamp -

Explorer.exe = 0x4a765771 = Sun Aug 02 20:20:17 2009

ntdll.dll = 0x4a5be02b = Mon Jul 13 18:32:27 2009

The timestamp on ntdll is the one that I usually see in BSOD kernel dump files for Windows 7 RTM. Do all that are having this problem with Explorer have the August 2, 2009, timestamp on your Explorer.exe module?

Look in \windows folder.

The only other module that I found in the dump below that had a different version # and time stamp on it -
Code:
000007fe`fce10000 000007fe`fce1f000   msasn1   msasn1.dll Sat Aug 29 00:40:40 2009 (4A98DB78)
msasn1.dll can be easily explained by kb974571 - but I have yet to find anything on a Windows Update for Explorer.exe. Does anyone know of one?

Regards. . .

jcgriff2

.



Explorer.exe in a version listing - it shows none --
Code:
 
user32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
kernel32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
ntdll fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
psapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
normaliz fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
explorer fver =  pver =
ieframe fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385
NLSData0009 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
davclnt fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
ntlanman fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
NaturalLanguage6 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385


Unable to find symbols - explorer.exe & comctl32.dll -
Code:
 
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\PalmDesert7\AppData\Local\Temp\SAL58.tmp\explorer.exe.2704.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: SingleUserTS Personal
Machine Name:
Debug session time: Fri Oct 30 22:24:27.000 2009 (GMT-8)
System Uptime: not available
Process Uptime: 0 days 0:08:01.000
................................................................
................................................................
....................................
Loading unloaded module list
...............
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(a90.127c): Unknown exception - code c0000374 (first/second chance not available)
ntdll!NtWaitForSingleObject+0xa:
00000000`76e5fefa c3              ret
0:039> !analyze -v
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************
Unable to load image C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6\comctl32.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for comctl32.dll
*** WARNING: Unable to verify timestamp for explorer.exe
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: kernel32!pNlsUserInfo                         ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: kernel32!pNlsUserInfo                         ***
***                                                                   ***
*************************************************************************
FAULTING_IP: 
ntdll!RtlReportCriticalFailure+62
00000000`76ed6cd2 eb00            jmp     ntdll!RtlReportCriticalFailure+0x64 (00000000`76ed6cd4)
EXCEPTION_RECORD:  ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 0000000076ed6cd2 (ntdll!RtlReportCriticalFailure+0x0000000000000062)
  ExceptionCode: c0000374
 ExceptionFlags: 00000001
NumberParameters: 1
  Parameter[0]: 0000000076f4c3f0
DEFAULT_BUCKET_ID:  STATUS_HEAP_CORRUPTION
PROCESS_NAME:  explorer.exe
ERROR_CODE: (NTSTATUS) 0xc0000374 - A heap has been corrupted.
EXCEPTION_CODE: (NTSTATUS) 0xc0000374 - A heap has been corrupted.
EXCEPTION_PARAMETER1:  0000000076f4c3f0
NTGLOBALFLAG:  0
APPLICATION_VERIFIER_FLAGS:  0
LAST_CONTROL_TRANSFER:  from 0000000000000000 to 0000000076e7d1cd
FAULTING_THREAD:  ffffffffffffffff
PRIMARY_PROBLEM_CLASS:  STATUS_HEAP_CORRUPTION
BUGCHECK_STR:  APPLICATION_FAULT_STATUS_HEAP_CORRUPTION
STACK_TEXT:  
00000000`76e7d1cd ntdll! ?? ::FNODOBFM::`string'+0x123b4
00000000`76d12c7a kernel32!HeapFree+0xa
000007fe`fb980f2d comctl32!DSA_DeleteAllItems+0x25
000007fe`fe430c38 shell32!DSA_DeleteAllItems+0x38
000007fe`fe50bb52 shell32!CBrowserProgressAggregator::~CBrowserProgressAggregator+0x84
000007fe`fe50bac4 shell32!CBrowserProgressAggregator::`scalar deleting destructor'+0x14
000007fe`fe3fc0ba shell32!CExtractIconBase::Release+0x22
000007fe`f773e088 EXPLORERFRAME!CShellBrowser::_OnDestroy+0x194
000007fe`f773df17 EXPLORERFRAME!CShellBrowser::WndProcBS+0x291
000007fe`f773d25e EXPLORERFRAME!IEFrameWndProc+0xbf
00000000`76c0c3c1 user32!UserCallWinProcCheckWow+0x1ad
00000000`76c0a01b user32!DispatchClientMessage+0xc3
00000000`76c0a061 user32!_fnDWORD+0x2d
00000000`76e5fdf5 ntdll!KiUserCallbackDispatcherContinue+0x0
00000000`76bff5ba user32!ZwUserDestroyWindow+0xa
000007fe`f773ca3b EXPLORERFRAME!CShellBrowser::_OnConfirmedClose+0x1e3
000007fe`f773c8ab EXPLORERFRAME!CShellBrowser::OnClose+0xea
000007fe`f773c7c2 EXPLORERFRAME!CBrowserHost::OnClose+0x26
000007fe`f773c783 EXPLORERFRAME!CExplorerFrame::_OnClose+0x84
000007fe`f773e166 EXPLORERFRAME!CExplorerFrame::v_WndProc+0x106
000007fe`f7701368 EXPLORERFRAME!CImpWndProc::s_WndProc+0x91
00000000`76c0c3c1 user32!UserCallWinProcCheckWow+0x1ad
00000000`76c0a01b user32!DispatchClientMessage+0xc3
00000000`76c0a061 user32!_fnDWORD+0x2d
00000000`76e5fdf5 ntdll!KiUserCallbackDispatcherContinue+0x0
00000000`76c0a08a user32!ZwUserMessageCall+0xa
00000000`76c0a389 user32!RealDefWindowProcWorker+0xa4
00000000`76c0a332 user32!RealDefWindowProcW+0x5a
000007fe`fb51795a uxtheme!DoMsgDefault+0x2a
000007fe`fb53637a uxtheme!OnDwpSysCommand+0x50
000007fe`fb51168e uxtheme!_ThemeDefWindowProc+0x209
000007fe`fb511445 uxtheme!ThemeDefWindowProcW+0x11
 
FOLLOWUP_IP: 
shell32!CBrowserProgressAggregator::~CBrowserProgressAggregator+84
000007fe`fe50bb52 488d4f18        lea     rcx,[rdi+18h]
SYMBOL_STACK_INDEX:  4
SYMBOL_NAME:  shell32!CBrowserProgressAggregator::~CBrowserProgressAggregator+84
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: shell32
IMAGE_NAME:  shell32.dll
DEBUG_FLR_IMAGE_TIMESTAMP:  4a5be054
STACK_COMMAND:  !heap ; dds 76f4c458 ; kb
FAILURE_BUCKET_ID:  STATUS_HEAP_CORRUPTION_c0000374_shell32.dll!CBrowserProgressAggregator::_CBrowserProgressAggregator
BUCKET_ID:  X64_APPLICATION_FAULT_STATUS_HEAP_CORRUPTION_shell32!CBrowserProgressAggregator::_CBrowserProgressAggregator+84
WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne...htm?Retriage=1
Followup: MachineOwner
---------
0:039> lmvm shell32
start             end                 module name
000007fe`fe390000 000007fe`ff116000   shell32    (pdb symbols)          c:\symbols\shell32.pdb\AF4500C51769484AA0375055B9DBA56E2\shell32.pdb
   Loaded symbol image file: shell32.dll
   Mapped memory image file: c:\symbols\shell32.dll\4A5BE054d86000\shell32.dll
   Image path: C:\Windows\System32\shell32.dll
   Image name: shell32.dll
   Timestamp:        Mon Jul 13 18:33:08 2009 (4A5BE054)
   CheckSum:         00D89E53
   ImageSize:        00D86000
   File version:     6.1.7600.16385
   Product version:  6.1.7600.16385
   File flags:       0 (Mask 3F)
   File OS:          40004 NT Win32
   File type:        2.0 Dll
   File date:        00000000.00000000
   Translations:     0409.04b0
   CompanyName:      Microsoft Corporation
   ProductName:      Microsoft® Windows® Operating System
   InternalName:     SHELL32
   OriginalFilename: SHELL32.DLL
   ProductVersion:   6.1.7600.16385
   FileVersion:      6.1.7600.16385 (win7_rtm.090713-1255)
   FileDescription:  Windows Shell Common Dll
   LegalCopyright:   © Microsoft Corporation. All rights reserved.
0:039> lmnt
start             end                 module name
00000000`6f060000 00000000`6f2e3000   NLSLexicons0009 NLSLexicons0009.dll Mon Jul 13 18:31:42 2009 (4A5BDFFE)
00000000`6f2f0000 00000000`6f3d3000   FXSRESM  FXSRESM.dll  Mon Jul 13 18:28:06 2009 (4A5BDF26)
00000000`74b30000 00000000`74b36000   ksuser   ksuser.dll   Mon Jul 13 18:31:21 2009 (4A5BDFE9)
00000000`76bf0000 00000000`76cea000   user32   user32.dll   Mon Jul 13 18:34:00 2009 (4A5BE088)
00000000`76cf0000 00000000`76e0f000   kernel32 kernel32.dll Mon Jul 13 18:31:11 2009 (4A5BDFDF)
00000000`76e10000 00000000`76fbb000   ntdll    ntdll.dll    Mon Jul 13 18:32:27 2009 (4A5BE02B)
00000000`76fd0000 00000000`76fd7000   psapi    psapi.dll    Mon Jul 13 16:26:21 2009 (4A5BC29D)
00000000`76fe0000 00000000`76fe3000   normaliz normaliz.dll Mon Jul 13 18:32:18 2009 (4A5BE022)
00000000`ffb80000 00000000`ffe3f000   explorer explorer.exe Sun Aug 02 20:20:17 2009 (4A765771)
000007fe`ee3a0000 000007fe`eef6e000   ieframe  ieframe.dll  Mon Jul 13 18:28:31 2009 (4A5BDF3F)
000007fe`efb50000 000007fe`f014f000   NLSData0009 NLSData0009.dll Mon Jul 13 18:31:02 2009 (4A5BDFD6)
000007fe`f1940000 000007fe`f195b000   davclnt  davclnt.dll  Mon Jul 13 18:26:25 2009 (4A5BDEC1)
000007fe`f1960000 000007fe`f1982000   ntlanman ntlanman.dll Mon Jul 13 18:32:43 2009 (4A5BE03B)
000007fe`f2920000 000007fe`f2a68000   NaturalLanguage6 NaturalLanguage6.dll Mon Jul 13 18:30:52 2009 (4A5BDFCC)
000007fe`f2be0000 000007fe`f2bea000   davhlpr  davhlpr.dll  Mon Jul 13 18:26:26 2009 (4A5BDEC2)
000007fe`f2e90000 000007fe`f2e9a000   drprov   drprov.dll   Mon Jul 13 18:27:40 2009 (4A5BDF0C)
000007fe`f3510000 000007fe`f3541000   provsvc  provsvc.dll  Mon Jul 13 18:32:20 2009 (4A5BE024)
000007fe`f3550000 000007fe`f35c2000   ieproxy  ieproxy.dll  Mon Jul 13 18:28:33 2009 (4A5BDF41)
000007fe`f47f0000 000007fe`f492c000   werconcpl werconcpl.dll Mon Jul 13 18:33:54 2009 (4A5BE082)
000007fe`f4a20000 000007fe`f4af5000   SearchFolder SearchFolder.dll Mon Jul 13 18:33:17 2009 (4A5BE05D)
000007fe`f4b00000 000007fe`f4d71000   wpdshext wpdshext.dll Mon Jul 13 18:36:55 2009 (4A5BE137)
000007fe`f4f80000 000007fe`f509f000   wscui    wscui.cpl    Mon Jul 13 18:34:24 2009 (4A5BE0A0)
000007fe`f50a0000 000007fe`f513d000   FXSAPI   FXSAPI.dll   Mon Jul 13 18:27:57 2009 (4A5BDF1D)
000007fe`f5140000 000007fe`f536b000   SyncCenter SyncCenter.dll Mon Jul 13 18:33:40 2009 (4A5BE074)
000007fe`f5370000 000007fe`f552d000   pnidui   pnidui.dll   Mon Jul 13 18:32:53 2009 (4A5BE045)
000007fe`f5a60000 000007fe`f5adb000   StructuredQuery StructuredQuery.dll Mon Jul 13 18:33:30 2009 (4A5BE06A)
000007fe`f5ae0000 000007fe`f5bb7000   FXSST    FXSST.dll    Mon Jul 13 18:28:09 2009 (4A5BDF29)
000007fe`f5bc0000 000007fe`f5c15000   hgcpl    hgcpl.dll    Mon Jul 13 18:27:49 2009 (4A5BDF15)
000007fe`f60a0000 000007fe`f6120000   imapi2   imapi2.dll   Mon Jul 13 18:28:27 2009 (4A5BDF3B)
000007fe`f6120000 000007fe`f61e2000   Actioncenter Actioncenter.dll Mon Jul 13 18:25:00 2009 (4A5BDE6C)
000007fe`f61f0000 000007fe`f647b000   netshell netshell.dll Mon Jul 13 18:30:58 2009 (4A5BDFD2)
000007fe`f64b0000 000007fe`f6504000   oleacc   oleacc.dll   Mon Jul 13 18:32:11 2009 (4A5BE01B)
000007fe`f6510000 000007fe`f65c5000   bthprops bthprops.cpl Mon Jul 13 18:25:48 2009 (4A5BDE9C)
000007fe`f65d0000 000007fe`f662e000   WWanAPI  WWanAPI.dll  Mon Jul 13 18:34:32 2009 (4A5BE0A8)
000007fe`f6630000 000007fe`f67cc000   NetworkExplorer NetworkExplorer.dll Mon Jul 13 18:31:01 2009 (4A5BDFD5)
000007fe`f67f0000 000007fe`f6b06000   msi      msi.dll      Mon Jul 13 18:31:09 2009 (4A5BDFDD)
000007fe`f6bf0000 000007fe`f6cad000   PortableDeviceApi PortableDeviceApi.dll Mon Jul 13 18:33:11 2009 (4A5BE057)
000007fe`f6cb0000 000007fe`f6f53000   gameux   gameux.dll   Mon Jul 13 18:27:25 2009 (4A5BDEFD)
000007fe`f6f60000 000007fe`f6f6c000   linkinfo linkinfo.dll Mon Jul 13 18:28:43 2009 (4A5BDF4B)
000007fe`f6f70000 000007fe`f6fb5000   QAGENT   QAGENT.DLL   Mon Jul 13 18:32:21 2009 (4A5BE025)
000007fe`f6fc0000 000007fe`f7034000   DXP      DXP.dll      Mon Jul 13 18:28:13 2009 (4A5BDF2D)
000007fe`f7060000 000007fe`f714e000   actxprxy actxprxy.dll Mon Jul 13 18:25:06 2009 (4A5BDE72)
000007fe`f7150000 000007fe`f71a8000   srchadmin srchadmin.dll Mon Jul 13 18:33:47 2009 (4A5BE07B)
000007fe`f71b0000 000007fe`f7219000   prnfldr  prnfldr.dll  Mon Jul 13 18:33:30 2009 (4A5BE06A)
000007fe`f72b0000 000007fe`f736a000   batmeter batmeter.dll Mon Jul 13 18:25:07 2009 (4A5BDE73)
000007fe`f7370000 000007fe`f7479000   cryptui  cryptui.dll  Mon Jul 13 18:30:00 2009 (4A5BDF98)
000007fe`f74b0000 000007fe`f74e9000   PortableDeviceTypes PortableDeviceTypes.dll Mon Jul 13 18:33:16 2009 (4A5BE05C)
000007fe`f74f0000 000007fe`f7511000   UIAnimation UIAnimation.dll Mon Jul 13 18:33:38 2009 (4A5BE072)
000007fe`f7520000 000007fe`f76f8000   authui   authui.dll   Mon Jul 13 18:25:27 2009 (4A5BDE87)
000007fe`f7700000 000007fe`f78ca000   EXPLORERFRAME EXPLORERFRAME.dll Mon Jul 13 18:29:38 2009 (4A5BDF82)
000007fe`f7d10000 000007fe`f7d1f000   cscapi   cscapi.dll   Mon Jul 13 18:30:03 2009 (4A5BDF9B)
000007fe`f7d30000 000007fe`f7d50000   wlanapi  wlanapi.dll  Mon Jul 13 18:35:08 2009 (4A5BE0CC)
000007fe`f7d50000 000007fe`f7dcf000   tiptsf   tiptsf.dll   Mon Jul 13 18:33:42 2009 (4A5BE076)
000007fe`f7dd0000 000007fe`f7e96000   msftedit msftedit.dll Mon Jul 13 18:30:50 2009 (4A5BDFCA)
000007fe`f7f00000 000007fe`f7f7c000   wer      wer.dll      Mon Jul 13 18:33:53 2009 (4A5BE081)
000007fe`f8060000 000007fe`f8078000   mpr      mpr.dll      Mon Jul 13 18:29:24 2009 (4A5BDF74)
000007fe`f8090000 000007fe`f80ad000   mssprxy  mssprxy.dll  Mon Jul 13 18:30:18 2009 (4A5BDFAA)
000007fe`f82a0000 000007fe`f82ac000   npmproxy npmproxy.dll Mon Jul 13 18:32:19 2009 (4A5BE023)
000007fe`f82d0000 000007fe`f8312000   stobject stobject.dll Mon Jul 13 18:33:32 2009 (4A5BE06C)
000007fe`f8340000 000007fe`f8352000   wscapi   wscapi.dll   Mon Jul 13 18:34:18 2009 (4A5BE09A)
000007fe`f8840000 000007fe`f88b0000   winspool winspool.drv Mon Jul 13 18:34:55 2009 (4A5BE0BF)
000007fe`f8c30000 000007fe`f8ca4000   netprofm netprofm.dll Mon Jul 13 18:30:56 2009 (4A5BDFD0)
000007fe`f8d20000 000007fe`f8d3f000   QUTIL    QUTIL.DLL    Mon Jul 13 18:32:35 2009 (4A5BE033)
000007fe`f8d50000 000007fe`f8d70000   wpdshserviceobj wpdshserviceobj.dll Mon Jul 13 18:36:56 2009 (4A5BE138)
000007fe`f9580000 000007fe`f9770000   msxml6   msxml6.dll   Mon Jul 13 18:30:48 2009 (4A5BDFC8)
000007fe`f9c40000 000007fe`f9d60000   taskschd taskschd.dll Mon Jul 13 18:33:48 2009 (4A5BE07C)
000007fe`fa610000 000007fe`fa619000   midimap  midimap.dll  Mon Jul 13 18:30:38 2009 (4A5BDFBE)
000007fe`fa620000 000007fe`fa638000   msacm32_7fefa620000 msacm32.dll  Mon Jul 13 18:29:51 2009 (4A5BDF8F)
000007fe`fa640000 000007fe`fa64a000   msacm32  msacm32.drv  Mon Jul 13 18:29:52 2009 (4A5BDF90)
000007fe`fa650000 000007fe`fa69f000   AudioSes AudioSes.dll Mon Jul 13 18:25:09 2009 (4A5BDE75)
000007fe`fa900000 000007fe`fa914000   samcli   samcli.dll   Mon Jul 13 18:32:31 2009 (4A5BE02F)
000007fe`fa920000 000007fe`fa935000   wkscli   wkscli.dll   Mon Jul 13 18:35:05 2009 (4A5BE0C9)
000007fe`fa940000 000007fe`fa94c000   netutils netutils.dll Mon Jul 13 18:31:00 2009 (4A5BDFD4)
000007fe`fa970000 000007fe`fa986000   Syncreg  Syncreg.dll  Mon Jul 13 18:33:45 2009 (4A5BE079)
000007fe`fa9b0000 000007fe`fa9d7000   EhStorAPI EhStorAPI.dll Mon Jul 13 18:27:17 2009 (4A5BDEF5)
000007fe`fa9e0000 000007fe`fa9ff000   thumbcache thumbcache.dll Mon Jul 13 18:33:34 2009 (4A5BE06E)
000007fe`faa90000 000007fe`fabba000   WindowsCodecs WindowsCodecs.dll Mon Jul 13 18:34:29 2009 (4A5BE0A5)
000007fe`fabc0000 000007fe`fabfb000   wdmaud   wdmaud.drv   Mon Jul 13 18:33:55 2009 (4A5BE083)
000007fe`fac00000 000007fe`fac3b000   winmm    winmm.dll    Mon Jul 13 18:34:40 2009 (4A5BE0B0)
000007fe`fac40000 000007fe`fac75000   xmllite  xmllite.dll  Mon Jul 13 18:34:16 2009 (4A5BE098)
000007fe`fac80000 000007fe`fac98000   dwmapi   dwmapi.dll   Mon Jul 13 18:28:07 2009 (4A5BDF27)
000007fe`faca0000 000007fe`facb1000   dhcpcsvc6 dhcpcsvc6.DLL Mon Jul 13 18:26:31 2009 (4A5BDEC7)
000007fe`facc0000 000007fe`facd8000   dhcpcsvc dhcpcsvc.dll Mon Jul 13 18:26:30 2009 (4A5BDEC6)
000007fe`fae00000 000007fe`fae0b000   winnsi   winnsi.dll   Mon Jul 13 18:34:41 2009 (4A5BE0B1)
000007fe`fae50000 000007fe`fae77000   IPHLPAPI IPHLPAPI.DLL Mon Jul 13 18:28:55 2009 (4A5BDF57)
000007fe`faee0000 000007fe`faef1000   wtsapi32 wtsapi32.dll Mon Jul 13 18:34:20 2009 (4A5BE09C)
000007fe`faf30000 000007fe`faf3b000   slc      slc.dll      Mon Jul 13 18:33:23 2009 (4A5BE063)
000007fe`faf40000 000007fe`fafa7000   es       es.dll       Mon Jul 13 18:29:30 2009 (4A5BDF7A)
000007fe`fafb0000 000007fe`fafbc000   dsrole   dsrole.dll   Mon Jul 13 18:27:57 2009 (4A5BDF1D)
000007fe`fafc0000 000007fe`fafd9000   atl      atl.dll      Mon Jul 13 18:25:04 2009 (4A5BDE70)
000007fe`fb030000 000007fe`fb045000   nlaapi   nlaapi.dll   Mon Jul 13 18:30:49 2009 (4A5BDFC9)
000007fe`fb120000 000007fe`fb14d000   ntmarta  ntmarta.dll  Mon Jul 13 18:32:45 2009 (4A5BE03D)
000007fe`fb150000 000007fe`fb15b000   hid      hid.dll      Mon Jul 13 18:27:53 2009 (4A5BDF19)
000007fe`fb160000 000007fe`fb16d000   wwapi    wwapi.dll    Mon Jul 13 18:34:41 2009 (4A5BE0B1)
000007fe`fb170000 000007fe`fb1ab000   msls31   msls31.dll   Mon Jul 13 18:31:24 2009 (4A5BDFEC)
000007fe`fb1b0000 000007fe`fb1d4000   shacct   shacct.dll   Mon Jul 13 18:33:06 2009 (4A5BE052)
000007fe`fb1e0000 000007fe`fb263000   timedate timedate.cpl Mon Jul 13 18:33:36 2009 (4A5BE070)
000007fe`fb270000 000007fe`fb2ab000   SndVolSSO SndVolSSO.DLL Mon Jul 13 18:33:49 2009 (4A5BE07D)
000007fe`fb2b0000 000007fe`fb2e3000   shdocvw  shdocvw.dll  Mon Jul 13 18:33:07 2009 (4A5BE053)
000007fe`fb2f0000 000007fe`fb505000   GdiPlus  GdiPlus.dll  Mon Jul 13 18:24:55 2009 (4A5BDE67)
000007fe`fb510000 000007fe`fb566000   uxtheme  uxtheme.dll  Mon Jul 13 18:34:11 2009 (4A5BE093)
000007fe`fb570000 000007fe`fb5bb000   MMDevAPI MMDevAPI.dll Mon Jul 13 18:29:12 2009 (4A5BDF68)
000007fe`fb5c0000 000007fe`fb5c9000   avrt     avrt.dll     Mon Jul 13 18:25:42 2009 (4A5BDE96)
000007fe`fb5d0000 000007fe`fb5d7000   wlanutil wlanutil.dll Mon Jul 13 18:35:22 2009 (4A5BE0DA)
000007fe`fb5f0000 000007fe`fb71c000   propsys  propsys.dll  Mon Jul 13 18:32:18 2009 (4A5BE022)
000007fe`fb720000 000007fe`fb74c000   powrprof powrprof.dll Mon Jul 13 18:33:22 2009 (4A5BE062)
000007fe`fb800000 000007fe`fb81d000   samlib   samlib.dll   Mon Jul 13 18:32:32 2009 (4A5BE030)
000007fe`fb840000 000007fe`fb84b000   ehSSO    ehSSO.dll    Mon Jul 13 18:27:16 2009 (4A5BDEF4)
000007fe`fb850000 000007fe`fba44000   comctl32 comctl32.dll Mon Jul 13 18:24:55 2009 (4A5BDE67)
000007fe`fba50000 000007fe`fbad0000   ntshrui  ntshrui.dll  Mon Jul 13 18:32:47 2009 (4A5BE03F)
000007fe`fbad0000 000007fe`fbb05000   EhStorShell EhStorShell.dll Mon Jul 13 18:27:22 2009 (4A5BDEFA)
000007fe`fbb10000 000007fe`fbc02000   dui70    dui70.dll    Mon Jul 13 18:28:05 2009 (4A5BDF25)
000007fe`fbc10000 000007fe`fbc53000   duser    duser.dll    Mon Jul 13 18:28:06 2009 (4A5BDF26)
000007fe`fbc60000 000007fe`fbc6b000   hcproviders hcproviders.dll Mon Jul 13 18:27:38 2009 (4A5BDF0A)
000007fe`fbc70000 000007fe`fbcbc000   framedynos framedynos.dll Mon Jul 13 18:27:36 2009 (4A5BDF08)
000007fe`fbcc0000 000007fe`fbce8000   wscinterop wscinterop.dll Mon Jul 13 18:34:19 2009 (4A5BE09B)
000007fe`fbcf0000 000007fe`fbd00000   AltTab   AltTab.dll   Mon Jul 13 18:25:19 2009 (4A5BDE7F)
000007fe`fbd00000 000007fe`fbd08000   IconCodecService IconCodecService.dll Mon Jul 13 18:28:17 2009 (4A5BDF31)
000007fe`fbd10000 000007fe`fbd19000   msiltcfg msiltcfg.dll Mon Jul 13 18:31:17 2009 (4A5BDFE5)
000007fe`fbd20000 000007fe`fbd39000   wercplsupport wercplsupport.dll Mon Jul 13 18:33:55 2009 (4A5BE083)
000007fe`fbee0000 000007fe`fbeec000   version  version.dll  Mon Jul 13 18:33:54 2009 (4A5BE082)
000007fe`fc0b0000 000007fe`fc0ce000   userenv  userenv.dll  Mon Jul 13 18:34:03 2009 (4A5BE08B)
000007fe`fc0d0000 000007fe`fc0e2000   devrtl   devrtl.dll   Mon Jul 13 18:26:58 2009 (4A5BDEE2)
000007fe`fc2c0000 000007fe`fc307000   rsaenh   rsaenh.dll   Mon Jul 13 18:32:41 2009 (4A5BE039)
000007fe`fc3e0000 000007fe`fc43b000   dnsapi   dnsapi.dll   Mon Jul 13 18:27:09 2009 (4A5BDEED)
000007fe`fc550000 000007fe`fc58d000   winsta   winsta.dll   Mon Jul 13 18:34:59 2009 (4A5BE0C3)
000007fe`fc6f0000 000007fe`fc6f9000   credssp  credssp.dll  Mon Jul 13 18:29:49 2009 (4A5BDF8D)
000007fe`fc820000 000007fe`fc837000   cryptsp  cryptsp.dll  Mon Jul 13 18:29:58 2009 (4A5BDF96)
000007fe`fc850000 000007fe`fc8bd000   wevtapi  wevtapi.dll  Mon Jul 13 18:33:59 2009 (4A5BE087)
000007fe`fc8c0000 000007fe`fc8e3000   srvcli   srvcli.dll   Mon Jul 13 18:34:06 2009 (4A5BE08E)
000007fe`fca40000 000007fe`fca4b000   secur32  secur32.dll  Mon Jul 13 18:33:26 2009 (4A5BE066)
000007fe`fcc10000 000007fe`fcc35000   sspicli  sspicli.dll  Mon Jul 13 18:34:13 2009 (4A5BE095)
000007fe`fcc40000 000007fe`fcc97000   apphelp  apphelp.dll  Mon Jul 13 18:26:04 2009 (4A5BDEAC)
000007fe`fcca0000 000007fe`fccaf000   CRYPTBASE CRYPTBASE.dll Mon Jul 13 18:29:53 2009 (4A5BDF91)
000007fe`fccb0000 000007fe`fcd42000   sxs      sxs.dll      Mon Jul 13 18:33:35 2009 (4A5BE06F)
000007fe`fcd50000 000007fe`fcd64000   RpcRtRemote RpcRtRemote.dll Mon Jul 13 18:32:38 2009 (4A5BE036)
000007fe`fcd70000 000007fe`fcd7f000   profapi  profapi.dll  Mon Jul 13 18:32:15 2009 (4A5BE01F)
000007fe`fce10000 000007fe`fce1f000   msasn1   msasn1.dll   Sat Aug 29 00:40:40 2009 (4A98DB78)
000007fe`fce20000 000007fe`fce56000   cfgmgr32 cfgmgr32.dll Mon Jul 13 18:26:02 2009 (4A5BDEAA)
000007fe`fce60000 000007fe`fce99000   wintrust wintrust.dll Mon Jul 13 18:35:03 2009 (4A5BE0C7)
000007fe`fcea0000 000007fe`fcf0b000   KERNELBASE KERNELBASE.dll Mon Jul 13 18:31:12 2009 (4A5BDFE0)
000007fe`fcf10000 000007fe`fcf2a000   devobj   devobj.dll   Mon Jul 13 18:26:57 2009 (4A5BDEE1)
000007fe`fcfd0000 000007fe`fd136000   crypt32  crypt32.dll  Mon Jul 13 18:29:52 2009 (4A5BDF90)
000007fe`fd140000 000007fe`fd1df000   msvcrt   msvcrt.dll   Mon Jul 13 18:30:38 2009 (4A5BDFBE)
000007fe`fd1e0000 000007fe`fd1ee000   lpk      lpk.dll      Mon Jul 13 18:29:03 2009 (4A5BDF5F)
000007fe`fd1f0000 000007fe`fd3c7000   setupapi setupapi.dll Mon Jul 13 18:33:06 2009 (4A5BE052)
000007fe`fd3d0000 000007fe`fd3d8000   nsi      nsi.dll      Mon Jul 13 18:32:25 2009 (4A5BE029)
000007fe`fd3e0000 000007fe`fd50e000   rpcrt4   rpcrt4.dll   Mon Jul 13 18:32:37 2009 (4A5BE035)
000007fe`fd510000 000007fe`fd53e000   imm32    imm32.dll    Mon Jul 13 18:28:32 2009 (4A5BDF40)
000007fe`fd540000 000007fe`fd66a000   wininet  wininet.dll  Mon Jul 13 18:34:35 2009 (4A5BE0AB)
000007fe`fd670000 000007fe`fd747000   oleaut32 oleaut32.dll Mon Jul 13 18:32:14 2009 (4A5BE01E)
000007fe`fd750000 000007fe`fd7b7000   gdi32    gdi32.dll    Mon Jul 13 18:27:29 2009 (4A5BDF01)
000007fe`fd7c0000 000007fe`fd80d000   ws2_32   ws2_32.dll   Mon Jul 13 18:34:13 2009 (4A5BE095)
000007fe`fd810000 000007fe`fd8eb000   advapi32 advapi32.dll Mon Jul 13 18:24:59 2009 (4A5BDE6B)
000007fe`fd8f0000 000007fe`fdaf1000   ole32    ole32.dll    Mon Jul 13 18:32:10 2009 (4A5BE01A)
000007fe`fdb00000 000007fe`fdbca000   usp10    usp10.dll    Mon Jul 13 18:34:04 2009 (4A5BE08C)
000007fe`fdbd0000 000007fe`fdc41000   shlwapi  shlwapi.dll  Mon Jul 13 18:33:13 2009 (4A5BE059)
000007fe`fdc50000 000007fe`fdce9000   clbcatq  clbcatq.dll  Mon Jul 13 18:26:18 2009 (4A5BDEBA)
000007fe`fdd90000 000007fe`fdde0000   Wldap32  Wldap32.dll  Mon Jul 13 18:35:25 2009 (4A5BE0DD)
000007fe`fdde0000 000007fe`fddff000   sechost  sechost.dll  Mon Jul 13 18:33:18 2009 (4A5BE05E)
000007fe`fdea0000 000007fe`fdfa9000   msctf    msctf.dll    Mon Jul 13 18:30:18 2009 (4A5BDFAA)
000007fe`fdfb0000 000007fe`fe128000   urlmon   urlmon.dll   Mon Jul 13 18:33:53 2009 (4A5BE081)
000007fe`fe130000 000007fe`fe388000   iertutil iertutil.dll Mon Jul 13 18:28:35 2009 (4A5BDF43)
000007fe`fe390000 000007fe`ff116000   shell32  shell32.dll  Mon Jul 13 18:33:08 2009 (4A5BE054)
Unloaded modules:
000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL
   Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)
   Checksum:  0000FF7D
00000000`72bf0000 00000000`72bf3000   sfc.dll 
   Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)
   Checksum:  00010B4F
000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL
   Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)
   Checksum:  0000FF7D
00000000`72bf0000 00000000`72bf3000   sfc.dll 
   Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)
   Checksum:  00010B4F
000007fe`f9780000 000007fe`f97e4000   webio.dll
   Timestamp: Mon Jul 13 18:33:49 2009 (4A5BE07D)
   Checksum:  0006F5FB
000007fe`f97f0000 000007fe`f985e000   WINHTTP.dll
   Timestamp: Mon Jul 13 18:34:34 2009 (4A5BE0AA)
   Checksum:  00071137
000007fe`fa800000 000007fe`fa81f000   thumbcache.dll
   Timestamp: Mon Jul 13 18:33:34 2009 (4A5BE06E)
   Checksum:  00020620
000007fe`f6570000 000007fe`f65c4000   OLEACC.dll
   Timestamp: Mon Jul 13 18:32:11 2009 (4A5BE01B)
   Checksum:  00057A8E
000007fe`ef580000 000007fe`f014e000   IEFRAME.dll
   Timestamp: Mon Jul 13 18:28:31 2009 (4A5BDF3F)
   Checksum:  00BD3A6B
000007fe`f2070000 000007fe`f20ab000   MLANG.dll
   Timestamp: Mon Jul 13 18:29:05 2009 (4A5BDF61)
   Checksum:  00038FA3
000007fe`f6ba0000 000007fe`f6bea000   webcheck.dll
   Timestamp: Mon Jul 13 18:34:14 2009 (4A5BE096)
   Checksum:  00048A35
000007fe`fad30000 000007fe`fad83000   fwpuclnt.dll
   Timestamp: Mon Jul 13 18:27:54 2009 (4A5BDF1A)
   Checksum:  0005E0D4
000007fe`f94f0000 000007fe`f9528000   ncsi.dll
   Timestamp: Mon Jul 13 18:31:02 2009 (4A5BDFD6)
   Checksum:  000359DF
000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL
   Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)
   Checksum:  0000FF7D
00000000`72bf0000 00000000`72bf3000   sfc.dll 
   Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)
   Checksum:  00010B4F
0:039> lmntsm
start             end                 module name
000007fe`f6120000 000007fe`f61e2000   Actioncenter Actioncenter.dll Mon Jul 13 18:25:00 2009 (4A5BDE6C)
000007fe`f7060000 000007fe`f714e000   actxprxy actxprxy.dll Mon Jul 13 18:25:06 2009 (4A5BDE72)
000007fe`fd810000 000007fe`fd8eb000   advapi32 advapi32.dll Mon Jul 13 18:24:59 2009 (4A5BDE6B)
000007fe`fbcf0000 000007fe`fbd00000   AltTab   AltTab.dll   Mon Jul 13 18:25:19 2009 (4A5BDE7F)
000007fe`fcc40000 000007fe`fcc97000   apphelp  apphelp.dll  Mon Jul 13 18:26:04 2009 (4A5BDEAC)
000007fe`fafc0000 000007fe`fafd9000   atl      atl.dll      Mon Jul 13 18:25:04 2009 (4A5BDE70)
000007fe`fa650000 000007fe`fa69f000   AudioSes AudioSes.dll Mon Jul 13 18:25:09 2009 (4A5BDE75)
000007fe`f7520000 000007fe`f76f8000   authui   authui.dll   Mon Jul 13 18:25:27 2009 (4A5BDE87)
000007fe`fb5c0000 000007fe`fb5c9000   avrt     avrt.dll     Mon Jul 13 18:25:42 2009 (4A5BDE96)
000007fe`f72b0000 000007fe`f736a000   batmeter batmeter.dll Mon Jul 13 18:25:07 2009 (4A5BDE73)
000007fe`f6510000 000007fe`f65c5000   bthprops bthprops.cpl Mon Jul 13 18:25:48 2009 (4A5BDE9C)
000007fe`fce20000 000007fe`fce56000   cfgmgr32 cfgmgr32.dll Mon Jul 13 18:26:02 2009 (4A5BDEAA)
000007fe`fdc50000 000007fe`fdce9000   clbcatq  clbcatq.dll  Mon Jul 13 18:26:18 2009 (4A5BDEBA)
000007fe`fb850000 000007fe`fba44000   comctl32 comctl32.dll Mon Jul 13 18:24:55 2009 (4A5BDE67)
000007fe`fc6f0000 000007fe`fc6f9000   credssp  credssp.dll  Mon Jul 13 18:29:49 2009 (4A5BDF8D)
000007fe`fcfd0000 000007fe`fd136000   crypt32  crypt32.dll  Mon Jul 13 18:29:52 2009 (4A5BDF90)
000007fe`fcca0000 000007fe`fccaf000   CRYPTBASE CRYPTBASE.dll Mon Jul 13 18:29:53 2009 (4A5BDF91)
000007fe`fc820000 000007fe`fc837000   cryptsp  cryptsp.dll  Mon Jul 13 18:29:58 2009 (4A5BDF96)
000007fe`f7370000 000007fe`f7479000   cryptui  cryptui.dll  Mon Jul 13 18:30:00 2009 (4A5BDF98)
000007fe`f7d10000 000007fe`f7d1f000   cscapi   cscapi.dll   Mon Jul 13 18:30:03 2009 (4A5BDF9B)
000007fe`f1940000 000007fe`f195b000   davclnt  davclnt.dll  Mon Jul 13 18:26:25 2009 (4A5BDEC1)
000007fe`f2be0000 000007fe`f2bea000   davhlpr  davhlpr.dll  Mon Jul 13 18:26:26 2009 (4A5BDEC2)
000007fe`fcf10000 000007fe`fcf2a000   devobj   devobj.dll   Mon Jul 13 18:26:57 2009 (4A5BDEE1)
000007fe`fc0d0000 000007fe`fc0e2000   devrtl   devrtl.dll   Mon Jul 13 18:26:58 2009 (4A5BDEE2)
000007fe`facc0000 000007fe`facd8000   dhcpcsvc dhcpcsvc.dll Mon Jul 13 18:26:30 2009 (4A5BDEC6)
000007fe`faca0000 000007fe`facb1000   dhcpcsvc6 dhcpcsvc6.DLL Mon Jul 13 18:26:31 2009 (4A5BDEC7)
000007fe`fc3e0000 000007fe`fc43b000   dnsapi   dnsapi.dll   Mon Jul 13 18:27:09 2009 (4A5BDEED)
000007fe`f2e90000 000007fe`f2e9a000   drprov   drprov.dll   Mon Jul 13 18:27:40 2009 (4A5BDF0C)
000007fe`fafb0000 000007fe`fafbc000   dsrole   dsrole.dll   Mon Jul 13 18:27:57 2009 (4A5BDF1D)
000007fe`fbb10000 000007fe`fbc02000   dui70    dui70.dll    Mon Jul 13 18:28:05 2009 (4A5BDF25)
000007fe`fbc10000 000007fe`fbc53000   duser    duser.dll    Mon Jul 13 18:28:06 2009 (4A5BDF26)
000007fe`fac80000 000007fe`fac98000   dwmapi   dwmapi.dll   Mon Jul 13 18:28:07 2009 (4A5BDF27)
000007fe`f6fc0000 000007fe`f7034000   DXP      DXP.dll      Mon Jul 13 18:28:13 2009 (4A5BDF2D)
000007fe`fb840000 000007fe`fb84b000   ehSSO    ehSSO.dll    Mon Jul 13 18:27:16 2009 (4A5BDEF4)
000007fe`fa9b0000 000007fe`fa9d7000   EhStorAPI EhStorAPI.dll Mon Jul 13 18:27:17 2009 (4A5BDEF5)
000007fe`fbad0000 000007fe`fbb05000   EhStorShell EhStorShell.dll Mon Jul 13 18:27:22 2009 (4A5BDEFA)
000007fe`faf40000 000007fe`fafa7000   es       es.dll       Mon Jul 13 18:29:30 2009 (4A5BDF7A)
00000000`ffb80000 00000000`ffe3f000   explorer explorer.exe Sun Aug 02 20:20:17 2009 (4A765771)
000007fe`f7700000 000007fe`f78ca000   EXPLORERFRAME EXPLORERFRAME.dll Mon Jul 13 18:29:38 2009 (4A5BDF82)
000007fe`fbc70000 000007fe`fbcbc000   framedynos framedynos.dll Mon Jul 13 18:27:36 2009 (4A5BDF08)
000007fe`f50a0000 000007fe`f513d000   FXSAPI   FXSAPI.dll   Mon Jul 13 18:27:57 2009 (4A5BDF1D)
00000000`6f2f0000 00000000`6f3d3000   FXSRESM  FXSRESM.dll  Mon Jul 13 18:28:06 2009 (4A5BDF26)
000007fe`f5ae0000 000007fe`f5bb7000   FXSST    FXSST.dll    Mon Jul 13 18:28:09 2009 (4A5BDF29)
000007fe`f6cb0000 000007fe`f6f53000   gameux   gameux.dll   Mon Jul 13 18:27:25 2009 (4A5BDEFD)
000007fe`fd750000 000007fe`fd7b7000   gdi32    gdi32.dll    Mon Jul 13 18:27:29 2009 (4A5BDF01)
000007fe`fb2f0000 000007fe`fb505000   GdiPlus  GdiPlus.dll  Mon Jul 13 18:24:55 2009 (4A5BDE67)
000007fe`fbc60000 000007fe`fbc6b000   hcproviders hcproviders.dll Mon Jul 13 18:27:38 2009 (4A5BDF0A)
000007fe`f5bc0000 000007fe`f5c15000   hgcpl    hgcpl.dll    Mon Jul 13 18:27:49 2009 (4A5BDF15)
000007fe`fb150000 000007fe`fb15b000   hid      hid.dll      Mon Jul 13 18:27:53 2009 (4A5BDF19)
000007fe`fbd00000 000007fe`fbd08000   IconCodecService IconCodecService.dll Mon Jul 13 18:28:17 2009 (4A5BDF31)
000007fe`ee3a0000 000007fe`eef6e000   ieframe  ieframe.dll  Mon Jul 13 18:28:31 2009 (4A5BDF3F)
000007fe`f3550000 000007fe`f35c2000   ieproxy  ieproxy.dll  Mon Jul 13 18:28:33 2009 (4A5BDF41)
000007fe`fe130000 000007fe`fe388000   iertutil iertutil.dll Mon Jul 13 18:28:35 2009 (4A5BDF43)
000007fe`f60a0000 000007fe`f6120000   imapi2   imapi2.dll   Mon Jul 13 18:28:27 2009 (4A5BDF3B)
000007fe`fd510000 000007fe`fd53e000   imm32    imm32.dll    Mon Jul 13 18:28:32 2009 (4A5BDF40)
000007fe`fae50000 000007fe`fae77000   IPHLPAPI IPHLPAPI.DLL Mon Jul 13 18:28:55 2009 (4A5BDF57)
00000000`76cf0000 00000000`76e0f000   kernel32 kernel32.dll Mon Jul 13 18:31:11 2009 (4A5BDFDF)
000007fe`fcea0000 000007fe`fcf0b000   KERNELBASE KERNELBASE.dll Mon Jul 13 18:31:12 2009 (4A5BDFE0)
00000000`74b30000 00000000`74b36000   ksuser   ksuser.dll   Mon Jul 13 18:31:21 2009 (4A5BDFE9)
000007fe`f6f60000 000007fe`f6f6c000   linkinfo linkinfo.dll Mon Jul 13 18:28:43 2009 (4A5BDF4B)
000007fe`fd1e0000 000007fe`fd1ee000   lpk      lpk.dll      Mon Jul 13 18:29:03 2009 (4A5BDF5F)
000007fe`fa610000 000007fe`fa619000   midimap  midimap.dll  Mon Jul 13 18:30:38 2009 (4A5BDFBE)
000007fe`fb570000 000007fe`fb5bb000   MMDevAPI MMDevAPI.dll Mon Jul 13 18:29:12 2009 (4A5BDF68)
000007fe`f8060000 000007fe`f8078000   mpr      mpr.dll      Mon Jul 13 18:29:24 2009 (4A5BDF74)
000007fe`fa640000 000007fe`fa64a000   msacm32  msacm32.drv  Mon Jul 13 18:29:52 2009 (4A5BDF90)
000007fe`fa620000 000007fe`fa638000   msacm32_7fefa620000 msacm32.dll  Mon Jul 13 18:29:51 2009 (4A5BDF8F)
000007fe`fce10000 000007fe`fce1f000   msasn1   msasn1.dll   Sat Aug 29 00:40:40 2009 (4A98DB78)
000007fe`fdea0000 000007fe`fdfa9000   msctf    msctf.dll    Mon Jul 13 18:30:18 2009 (4A5BDFAA)
000007fe`f7dd0000 000007fe`f7e96000   msftedit msftedit.dll Mon Jul 13 18:30:50 2009 (4A5BDFCA)
000007fe`f67f0000 000007fe`f6b06000   msi      msi.dll      Mon Jul 13 18:31:09 2009 (4A5BDFDD)
000007fe`fbd10000 000007fe`fbd19000   msiltcfg msiltcfg.dll Mon Jul 13 18:31:17 2009 (4A5BDFE5)
000007fe`fb170000 000007fe`fb1ab000   msls31   msls31.dll   Mon Jul 13 18:31:24 2009 (4A5BDFEC)
000007fe`f8090000 000007fe`f80ad000   mssprxy  mssprxy.dll  Mon Jul 13 18:30:18 2009 (4A5BDFAA)
000007fe`fd140000 000007fe`fd1df000   msvcrt   msvcrt.dll   Mon Jul 13 18:30:38 2009 (4A5BDFBE)
000007fe`f9580000 000007fe`f9770000   msxml6   msxml6.dll   Mon Jul 13 18:30:48 2009 (4A5BDFC8)
000007fe`f2920000 000007fe`f2a68000   NaturalLanguage6 NaturalLanguage6.dll Mon Jul 13 18:30:52 2009 (4A5BDFCC)
000007fe`f8c30000 000007fe`f8ca4000   netprofm netprofm.dll Mon Jul 13 18:30:56 2009 (4A5BDFD0)
000007fe`f61f0000 000007fe`f647b000   netshell netshell.dll Mon Jul 13 18:30:58 2009 (4A5BDFD2)
000007fe`fa940000 000007fe`fa94c000   netutils netutils.dll Mon Jul 13 18:31:00 2009 (4A5BDFD4)
000007fe`f6630000 000007fe`f67cc000   NetworkExplorer NetworkExplorer.dll Mon Jul 13 18:31:01 2009 (4A5BDFD5)
000007fe`fb030000 000007fe`fb045000   nlaapi   nlaapi.dll   Mon Jul 13 18:30:49 2009 (4A5BDFC9)
000007fe`efb50000 000007fe`f014f000   NLSData0009 NLSData0009.dll Mon Jul 13 18:31:02 2009 (4A5BDFD6)
00000000`6f060000 00000000`6f2e3000   NLSLexicons0009 NLSLexicons0009.dll Mon Jul 13 18:31:42 2009 (4A5BDFFE)
00000000`76fe0000 00000000`76fe3000   normaliz normaliz.dll Mon Jul 13 18:32:18 2009 (4A5BE022)
000007fe`f82a0000 000007fe`f82ac000   npmproxy npmproxy.dll Mon Jul 13 18:32:19 2009 (4A5BE023)
000007fe`fd3d0000 000007fe`fd3d8000   nsi      nsi.dll      Mon Jul 13 18:32:25 2009 (4A5BE029)
00000000`76e10000 00000000`76fbb000   ntdll    ntdll.dll    Mon Jul 13 18:32:27 2009 (4A5BE02B)
000007fe`f1960000 000007fe`f1982000   ntlanman ntlanman.dll Mon Jul 13 18:32:43 2009 (4A5BE03B)
000007fe`fb120000 000007fe`fb14d000   ntmarta  ntmarta.dll  Mon Jul 13 18:32:45 2009 (4A5BE03D)
000007fe`fba50000 000007fe`fbad0000   ntshrui  ntshrui.dll  Mon Jul 13 18:32:47 2009 (4A5BE03F)
000007fe`fd8f0000 000007fe`fdaf1000   ole32    ole32.dll    Mon Jul 13 18:32:10 2009 (4A5BE01A)
000007fe`f64b0000 000007fe`f6504000   oleacc   oleacc.dll   Mon Jul 13 18:32:11 2009 (4A5BE01B)
000007fe`fd670000 000007fe`fd747000   oleaut32 oleaut32.dll Mon Jul 13 18:32:14 2009 (4A5BE01E)
000007fe`f5370000 000007fe`f552d000   pnidui   pnidui.dll   Mon Jul 13 18:32:53 2009 (4A5BE045)
000007fe`f6bf0000 000007fe`f6cad000   PortableDeviceApi PortableDeviceApi.dll Mon Jul 13 18:33:11 2009 (4A5BE057)
000007fe`f74b0000 000007fe`f74e9000   PortableDeviceTypes PortableDeviceTypes.dll Mon Jul 13 18:33:16 2009 (4A5BE05C)
000007fe`fb720000 000007fe`fb74c000   powrprof powrprof.dll Mon Jul 13 18:33:22 2009 (4A5BE062)
000007fe`f71b0000 000007fe`f7219000   prnfldr  prnfldr.dll  Mon Jul 13 18:33:30 2009 (4A5BE06A)
000007fe`fcd70000 000007fe`fcd7f000   profapi  profapi.dll  Mon Jul 13 18:32:15 2009 (4A5BE01F)
000007fe`fb5f0000 000007fe`fb71c000   propsys  propsys.dll  Mon Jul 13 18:32:18 2009 (4A5BE022)
000007fe`f3510000 000007fe`f3541000   provsvc  provsvc.dll  Mon Jul 13 18:32:20 2009 (4A5BE024)
00000000`76fd0000 00000000`76fd7000   psapi    psapi.dll    Mon Jul 13 16:26:21 2009 (4A5BC29D)
000007fe`f6f70000 000007fe`f6fb5000   QAGENT   QAGENT.DLL   Mon Jul 13 18:32:21 2009 (4A5BE025)
000007fe`f8d20000 000007fe`f8d3f000   QUTIL    QUTIL.DLL    Mon Jul 13 18:32:35 2009 (4A5BE033)
000007fe`fd3e0000 000007fe`fd50e000   rpcrt4   rpcrt4.dll   Mon Jul 13 18:32:37 2009 (4A5BE035)
000007fe`fcd50000 000007fe`fcd64000   RpcRtRemote RpcRtRemote.dll Mon Jul 13 18:32:38 2009 (4A5BE036)
000007fe`fc2c0000 000007fe`fc307000   rsaenh   rsaenh.dll   Mon Jul 13 18:32:41 2009 (4A5BE039)
000007fe`fa900000 000007fe`fa914000   samcli   samcli.dll   Mon Jul 13 18:32:31 2009 (4A5BE02F)
000007fe`fb800000 000007fe`fb81d000   samlib   samlib.dll   Mon Jul 13 18:32:32 2009 (4A5BE030)
000007fe`f4a20000 000007fe`f4af5000   SearchFolder SearchFolder.dll Mon Jul 13 18:33:17 2009 (4A5BE05D)
000007fe`fdde0000 000007fe`fddff000   sechost  sechost.dll  Mon Jul 13 18:33:18 2009 (4A5BE05E)
000007fe`fca40000 000007fe`fca4b000   secur32  secur32.dll  Mon Jul 13 18:33:26 2009 (4A5BE066)
000007fe`fd1f0000 000007fe`fd3c7000   setupapi setupapi.dll Mon Jul 13 18:33:06 2009 (4A5BE052)
000007fe`fb1b0000 000007fe`fb1d4000   shacct   shacct.dll   Mon Jul 13 18:33:06 2009 (4A5BE052)
000007fe`fb2b0000 000007fe`fb2e3000   shdocvw  shdocvw.dll  Mon Jul 13 18:33:07 2009 (4A5BE053)
000007fe`fe390000 000007fe`ff116000   shell32  shell32.dll  Mon Jul 13 18:33:08 2009 (4A5BE054)
000007fe`fdbd0000 000007fe`fdc41000   shlwapi  shlwapi.dll  Mon Jul 13 18:33:13 2009 (4A5BE059)
000007fe`faf30000 000007fe`faf3b000   slc      slc.dll      Mon Jul 13 18:33:23 2009 (4A5BE063)
000007fe`fb270000 000007fe`fb2ab000   SndVolSSO SndVolSSO.DLL Mon Jul 13 18:33:49 2009 (4A5BE07D)
000007fe`f7150000 000007fe`f71a8000   srchadmin srchadmin.dll Mon Jul 13 18:33:47 2009 (4A5BE07B)
000007fe`fc8c0000 000007fe`fc8e3000   srvcli   srvcli.dll   Mon Jul 13 18:34:06 2009 (4A5BE08E)
000007fe`fcc10000 000007fe`fcc35000   sspicli  sspicli.dll  Mon Jul 13 18:34:13 2009 (4A5BE095)
000007fe`f82d0000 000007fe`f8312000   stobject stobject.dll Mon Jul 13 18:33:32 2009 (4A5BE06C)
000007fe`f5a60000 000007fe`f5adb000   StructuredQuery StructuredQuery.dll Mon Jul 13 18:33:30 2009 (4A5BE06A)
000007fe`fccb0000 000007fe`fcd42000   sxs      sxs.dll      Mon Jul 13 18:33:35 2009 (4A5BE06F)
000007fe`f5140000 000007fe`f536b000   SyncCenter SyncCenter.dll Mon Jul 13 18:33:40 2009 (4A5BE074)
000007fe`fa970000 000007fe`fa986000   Syncreg  Syncreg.dll  Mon Jul 13 18:33:45 2009 (4A5BE079)
000007fe`f9c40000 000007fe`f9d60000   taskschd taskschd.dll Mon Jul 13 18:33:48 2009 (4A5BE07C)
000007fe`fa9e0000 000007fe`fa9ff000   thumbcache thumbcache.dll Mon Jul 13 18:33:34 2009 (4A5BE06E)
000007fe`fb1e0000 000007fe`fb263000   timedate timedate.cpl Mon Jul 13 18:33:36 2009 (4A5BE070)
000007fe`f7d50000 000007fe`f7dcf000   tiptsf   tiptsf.dll   Mon Jul 13 18:33:42 2009 (4A5BE076)
000007fe`f74f0000 000007fe`f7511000   UIAnimation UIAnimation.dll Mon Jul 13 18:33:38 2009 (4A5BE072)
000007fe`fdfb0000 000007fe`fe128000   urlmon   urlmon.dll   Mon Jul 13 18:33:53 2009 (4A5BE081)
00000000`76bf0000 00000000`76cea000   user32   user32.dll   Mon Jul 13 18:34:00 2009 (4A5BE088)
000007fe`fc0b0000 000007fe`fc0ce000   userenv  userenv.dll  Mon Jul 13 18:34:03 2009 (4A5BE08B)
000007fe`fdb00000 000007fe`fdbca000   usp10    usp10.dll    Mon Jul 13 18:34:04 2009 (4A5BE08C)
000007fe`fb510000 000007fe`fb566000   uxtheme  uxtheme.dll  Mon Jul 13 18:34:11 2009 (4A5BE093)
000007fe`fbee0000 000007fe`fbeec000   version  version.dll  Mon Jul 13 18:33:54 2009 (4A5BE082)
000007fe`fabc0000 000007fe`fabfb000   wdmaud   wdmaud.drv   Mon Jul 13 18:33:55 2009 (4A5BE083)
000007fe`f7f00000 000007fe`f7f7c000   wer      wer.dll      Mon Jul 13 18:33:53 2009 (4A5BE081)
000007fe`f47f0000 000007fe`f492c000   werconcpl werconcpl.dll Mon Jul 13 18:33:54 2009 (4A5BE082)
000007fe`fbd20000 000007fe`fbd39000   wercplsupport wercplsupport.dll Mon Jul 13 18:33:55 2009 (4A5BE083)
000007fe`fc850000 000007fe`fc8bd000   wevtapi  wevtapi.dll  Mon Jul 13 18:33:59 2009 (4A5BE087)
000007fe`faa90000 000007fe`fabba000   WindowsCodecs WindowsCodecs.dll Mon Jul 13 18:34:29 2009 (4A5BE0A5)
000007fe`fd540000 000007fe`fd66a000   wininet  wininet.dll  Mon Jul 13 18:34:35 2009 (4A5BE0AB)
000007fe`fac00000 000007fe`fac3b000   winmm    winmm.dll    Mon Jul 13 18:34:40 2009 (4A5BE0B0)
000007fe`fae00000 000007fe`fae0b000   winnsi   winnsi.dll   Mon Jul 13 18:34:41 2009 (4A5BE0B1)
000007fe`f8840000 000007fe`f88b0000   winspool winspool.drv Mon Jul 13 18:34:55 2009 (4A5BE0BF)
000007fe`fc550000 000007fe`fc58d000   winsta   winsta.dll   Mon Jul 13 18:34:59 2009 (4A5BE0C3)
000007fe`fce60000 000007fe`fce99000   wintrust wintrust.dll Mon Jul 13 18:35:03 2009 (4A5BE0C7)
000007fe`fa920000 000007fe`fa935000   wkscli   wkscli.dll   Mon Jul 13 18:35:05 2009 (4A5BE0C9)
000007fe`f7d30000 000007fe`f7d50000   wlanapi  wlanapi.dll  Mon Jul 13 18:35:08 2009 (4A5BE0CC)
000007fe`fb5d0000 000007fe`fb5d7000   wlanutil wlanutil.dll Mon Jul 13 18:35:22 2009 (4A5BE0DA)
000007fe`fdd90000 000007fe`fdde0000   Wldap32  Wldap32.dll  Mon Jul 13 18:35:25 2009 (4A5BE0DD)
000007fe`f4b00000 000007fe`f4d71000   wpdshext wpdshext.dll Mon Jul 13 18:36:55 2009 (4A5BE137)
000007fe`f8d50000 000007fe`f8d70000   wpdshserviceobj wpdshserviceobj.dll Mon Jul 13 18:36:56 2009 (4A5BE138)
000007fe`fd7c0000 000007fe`fd80d000   ws2_32   ws2_32.dll   Mon Jul 13 18:34:13 2009 (4A5BE095)
000007fe`f8340000 000007fe`f8352000   wscapi   wscapi.dll   Mon Jul 13 18:34:18 2009 (4A5BE09A)
000007fe`fbcc0000 000007fe`fbce8000   wscinterop wscinterop.dll Mon Jul 13 18:34:19 2009 (4A5BE09B)
000007fe`f4f80000 000007fe`f509f000   wscui    wscui.cpl    Mon Jul 13 18:34:24 2009 (4A5BE0A0)
000007fe`faee0000 000007fe`faef1000   wtsapi32 wtsapi32.dll Mon Jul 13 18:34:20 2009 (4A5BE09C)
000007fe`f65d0000 000007fe`f662e000   WWanAPI  WWanAPI.dll  Mon Jul 13 18:34:32 2009 (4A5BE0A8)
000007fe`fb160000 000007fe`fb16d000   wwapi    wwapi.dll    Mon Jul 13 18:34:41 2009 (4A5BE0B1)
000007fe`fac40000 000007fe`fac75000   xmllite  xmllite.dll  Mon Jul 13 18:34:16 2009 (4A5BE098)
Unloaded modules:
000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL
   Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)
   Checksum:  0000FF7D
00000000`72bf0000 00000000`72bf3000   sfc.dll 
   Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)
   Checksum:  00010B4F
000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL
   Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)
   Checksum:  0000FF7D
00000000`72bf0000 00000000`72bf3000   sfc.dll 
   Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)
   Checksum:  00010B4F
000007fe`f9780000 000007fe`f97e4000   webio.dll
   Timestamp: Mon Jul 13 18:33:49 2009 (4A5BE07D)
   Checksum:  0006F5FB
000007fe`f97f0000 000007fe`f985e000   WINHTTP.dll
   Timestamp: Mon Jul 13 18:34:34 2009 (4A5BE0AA)
   Checksum:  00071137
000007fe`fa800000 000007fe`fa81f000   thumbcache.dll
   Timestamp: Mon Jul 13 18:33:34 2009 (4A5BE06E)
   Checksum:  00020620
000007fe`f6570000 000007fe`f65c4000   OLEACC.dll
   Timestamp: Mon Jul 13 18:32:11 2009 (4A5BE01B)
   Checksum:  00057A8E
000007fe`ef580000 000007fe`f014e000   IEFRAME.dll
   Timestamp: Mon Jul 13 18:28:31 2009 (4A5BDF3F)
   Checksum:  00BD3A6B
000007fe`f2070000 000007fe`f20ab000   MLANG.dll
   Timestamp: Mon Jul 13 18:29:05 2009 (4A5BDF61)
   Checksum:  00038FA3
000007fe`f6ba0000 000007fe`f6bea000   webcheck.dll
   Timestamp: Mon Jul 13 18:34:14 2009 (4A5BE096)
   Checksum:  00048A35
000007fe`fad30000 000007fe`fad83000   fwpuclnt.dll
   Timestamp: Mon Jul 13 18:27:54 2009 (4A5BDF1A)
   Checksum:  0005E0D4
000007fe`f94f0000 000007fe`f9528000   ncsi.dll
   Timestamp: Mon Jul 13 18:31:02 2009 (4A5BDFD6)
   Checksum:  000359DF
000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL
   Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)
   Checksum:  0000FF7D
00000000`72bf0000 00000000`72bf3000   sfc.dll 
   Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)
   Checksum:  00010B4F
windbg> .hh 
0:039> !for_each_module .echo @#ModuleName fver = @#FileVersion pver = @#ProductVersion 
NLSLexicons0009 fver =  pver =
FXSRESM fver =  pver =
ksuser fver =  pver =
user32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
kernel32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
ntdll fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
psapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
normaliz fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
explorer fver =  pver =
ieframe fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385
NLSData0009 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
davclnt fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
ntlanman fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
NaturalLanguage6 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
davhlpr fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
drprov fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
provsvc fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
ieproxy fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385
werconcpl fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
SearchFolder fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wpdshext fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wscui fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
FXSAPI fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
SyncCenter fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
pnidui fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
StructuredQuery fver = 7.00.7600.16385 (win7_rtm.090713-1255) pver = 7.00.7600.16385
FXSST fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
hgcpl fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
imapi2 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
Actioncenter fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
netshell fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
oleacc fver =  pver =
bthprops fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
WWanAPI fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
NetworkExplorer fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msi fver = 5.0.7600.16385 pver = 5.0.7600.16385
PortableDeviceApi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
gameux fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
linkinfo fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
QAGENT fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
DXP fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
actxprxy fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
srchadmin fver = 7.00.7600.16385 (win7_rtm.090713-1255) pver = 7.00.7600.16385
prnfldr fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
batmeter fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
cryptui fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
PortableDeviceTypes fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
UIAnimation fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
authui fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
EXPLORERFRAME fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
cscapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wlanapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
tiptsf fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msftedit fver =  pver =
wer fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
mpr fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
mssprxy fver = 7.00.7600.16385 (win7_rtm.090713-1255) pver = 7.00.7600.16385
npmproxy fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
stobject fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wscapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
winspool fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
netprofm fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
QUTIL fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wpdshserviceobj fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msxml6 fver =  pver =
taskschd fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
midimap fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msacm32_7fefa620000 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msacm32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
AudioSes fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
samcli fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wkscli fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
netutils fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
Syncreg fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
EhStorAPI fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
thumbcache fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
WindowsCodecs fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wdmaud fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
winmm fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
xmllite fver =  pver =
dwmapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
dhcpcsvc6 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
dhcpcsvc fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
winnsi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
IPHLPAPI fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wtsapi32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
slc fver =  pver =
es fver = 2001.12.8530.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
dsrole fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
atl fver = 3.05.2284 pver = 6.05.2284
nlaapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
ntmarta fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
hid fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wwapi fver = 08.01.02.00 (win7_rtm.090713-1255) pver = 08.01.02.00
msls31 fver =  pver =
shacct fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
timedate fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
SndVolSSO fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
shdocvw fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
GdiPlus fver =  pver =
uxtheme fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
MMDevAPI fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
avrt fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wlanutil fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
propsys fver = 7.00.7600.16385 (win7_rtm.090713-1255) pver = 7.00.7600.16385
powrprof fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
samlib fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
ehSSO fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
comctl32 fver =  pver =
ntshrui fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
EhStorShell fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
dui70 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
duser fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
hcproviders fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
framedynos fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wscinterop fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
AltTab fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
IconCodecService fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msiltcfg fver = 5.0.7600.16385 (win7_rtm.090713-1255) pver = 5.0.7600.16385
wercplsupport fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
version fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
userenv fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
devrtl fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
rsaenh fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
dnsapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
winsta fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
credssp fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
cryptsp fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wevtapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
srvcli fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
secur32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
sspicli fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
apphelp fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
CRYPTBASE fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
sxs fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
RpcRtRemote fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
profapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msasn1 fver =  pver =
cfgmgr32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wintrust fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
KERNELBASE fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
devobj fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
crypt32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msvcrt fver = 7.0.7600.16385 (win7_rtm.090713-1255) pver = 7.0.7600.16385
lpk fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
setupapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
nsi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
rpcrt4 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
imm32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wininet fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385
oleaut32 fver =  pver =
gdi32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
ws2_32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
advapi32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
ole32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
usp10 fver = 1.0626.7600.16385 (win7_rtm.090713-1255) pver = 1.0626.7600.16385
shlwapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
clbcatq fver = 2001.12.8530.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
Wldap32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
sechost fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msctf fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
urlmon fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385
iertutil fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385
shell32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
My System SpecsSystem Spec
05 Nov 2009   #36

Win7x64
1,382 posts
 
 
Quote   Quote: Originally Posted by jcgriff2 View Post

I noticed in at least 2 posts that the Explorer.exe module contained a different version number and timestamp -

Explorer.exe = 0x4a765771 = Sun Aug 02 20:20:17 2009

ntdll.dll = 0x4a5be02b = Mon Jul 13 18:32:27 2009
Hey JC

Yeah, Dazeon's (same) Explorer.exe build had me a little concerned at the time:

http://www.sevenforums.com/crashes-d...tml#post289860

But sphericalpuma has it too, and by then the MS symbol server had symbols for it:

http://www.sevenforums.com/crashes-d...esponding.html

For what it's worth, it's sphericalpuma's crashes that make me suspect a potential problem in MS code somewhere, if only because in his case we ended up enabling full pageheap and the code which tripped the guard page was MS. It's entirely possible that pageheap would show the same stack in many of these other cases too, but not all of them.
My System SpecsSystem Spec
05 Nov 2009   #37

Win7 64bit
24 posts
 
 
for the sake of this thread I have uninstalled O&O Defrag 64 for the moment to see if it solves the issue.

Keep in mind that I could reproduce the issue off a clean install of Windows 7 with just the updates. I'll keep you posted in the next day or two if I have any crashes with O&O uninstalled.
My System SpecsSystem Spec
05 Nov 2009   #38

Windows 7 64-bit Home Premium SP1
90 posts
Calgary, Alberta, Canada
 
 
Found another thread around here with someone having a similar Windows Explorer problem. I also did a registry edit as well. Just thought I would share this as it's something I did in addition to not installing O&O Defrag.

Quote:
1. Navigate to:
HKLM->Software->Microsoft->Windows->Windows Error Reporting

2. Create a REG_SZ called CorporateWERServer with the value of NotReally (or something fake, call it anything really).

3. Create a REG_DWORD called ForceQueue with the value of 1.
Don't forget to make a backup. Again, this may not work, but it's just something I was reading when someone was experiencing the "right click=crash" issue.
My System SpecsSystem Spec
05 Nov 2009   #39

Win7 64bit
24 posts
 
 
3+ hours and not a single crash yet (on an install which I have lots of other shell enhancements installed)

I would typically have had one by now.

The only thing I did was uninstall O&O Defrag 64-Bit



(Im not counting my chickens yet)
My System SpecsSystem Spec
05 Nov 2009   #40

Win7 64bit
24 posts
 
 
Update:

Not only did Explorer.exe crash just now, it brought down my whole O/S..(just a complete blank blue screen((NOT BSOD)) when I clicked "Restart Explorer"

There goes it being just O&O Defrag!

back to the drawing board!
My System SpecsSystem Spec
Reply
Page 4 of 24 « First 23 4 5614 Last »

 Right Click on desktop causing Explorer.exe crash!!! problems?



« random BSODs at startup | BSOD after exiting a game »
Thread Tools



Similar help and support threads for: Right Click on desktop causing Explorer.exe crash!!!
Thread Forum
Solved ieframe.dll Causing Explorer.exe to crash loop [Solved] Browsers & Mail
Right click causes explorer crash fix BSOD Help and Support
explorer.exe crash when I right click eveytime !! BSOD Help and Support
X-FI drivers possibly causing explorer.exe crash? Drivers
Explorer Crash-right click-debug file BSOD Help and Support


All times are GMT -5. The time now is 06:55 PM.

Contact Us - Windows 8 Support - Windows Vista Support - Legal - Privacy and cookies - Top

Seven Forums Android App Seven Forums IOS App Follow us on Facebook

Windows 7 Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows 7" and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32