Right Click on desktop causing Explorer.exe crash!!!

Page 4 of 24 FirstFirst ... 2345614 ... LastLast

  1. Posts : 1,377
    Win7x64
       #31

    TomasWin7 said:

    one thing we have in common is that I do have O&O Defrag installed (the 64-Bit version)

    That's interesting that he mentioned that
    Both also have code injected into Magnetite's Explorer process, so that might be the reasoning behind the "test what happens when you remove 'em" advice he was offered, which is incidentally sound as the crash is another heap corruption issue (hard to tell what component corrupted the heap):

    00000000`04320000 00000000`0436b000 oodshrs Mon Nov 03 21:15:55 2008 (490ECF5B)
    00000000`64f00000 00000000`64f16000 ashShA64 Tue Sep 15 21:01:02 2009 (4AAF73EE)
    00000001`80000000 00000001`800e1000 oodsh Mon Nov 03 21:17:27 2008 (490ECFB7)


    The ntdll.dll reference is unimportant. Virtually every app crash shows up as "faulting module ntdll.dll" because that's the interface between the app and the OS (sorta), and it's the component which "catches" the underlying problem and reports it (sorta!).
      My Computer


  2. Posts : 93
    Windows 10 Pro 64-bit
       #32

    Okay, I kept Avast installed, disabled all the "red" ShellExView entries (or all of the non-MS ones), and installed everything else as normal (all my other usual programs). So far, I have not received any issues. Don't hold me to that though. Should set a restore point like I did before doing anything.

    So if I'm right, this could be an issue with O&O Defrag Professional 64-bit. At least for me, possibly for some of you as well. I have version 11, BTW.
      My Computer


  3. Posts : 90
    Win 7 Pro 64 Bit
       #33

    If you are having the right-click explorer crash/restart issue, please add to this thread:

    Right-clicking in OS shell causes Explorer crash and restart

    ...and let MS know. Thanks.
      My Computer


  4. Posts : 1
    Win Seven
       #34

    Don't know if it can help, but i never had this issue with the RC release...
    I'm expriencing this issue on my 2 macs (macbook pro and iMac) running Win7 trought Boot Camp.

    Can it be due to an update ? Did someone try without doing windows updates ?
      My Computer


  5. Posts : 845
    Windows 7 - Vista
       #35

    BashirSabeel said:
    Faulting application name: Explorer.EXE, version: 6.1.7600.16404, time stamp: 0x4a765771
    Faulting module name: ntdll.dll, version: 6.1.7600.16385, time stamp: 0x4a5be02b
    Exception code: 0xc0000374
    Faulting application path: C:\Windows\Explorer.EXE
    Faulting module path: C:\Windows\SYSTEM32\ntdll.dll

    `

    I noticed in at least 2 posts that the Explorer.exe module contained a different version number and timestamp -

    Explorer.exe = 0x4a765771 = Sun Aug 02 20:20:17 2009

    ntdll.dll = 0x4a5be02b = Mon Jul 13 18:32:27 2009

    The timestamp on ntdll is the one that I usually see in BSOD kernel dump files for Windows 7 RTM. Do all that are having this problem with Explorer have the August 2, 2009, timestamp on your Explorer.exe module?

    Look in \windows folder.

    The only other module that I found in the dump below that had a different version # and time stamp on it -
    Code:
    000007fe`fce10000 000007fe`fce1f000   msasn1   msasn1.dll   Sat Aug 29 00:40:40 2009 (4A98DB78) 
    msasn1.dll can be easily explained by kb974571 - but I have yet to find anything on a Windows Update for Explorer.exe. Does anyone know of one?

    Regards. . .

    jcgriff2

    .



    Explorer.exe in a version listing - it shows none --
    Code:
     
    user32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    kernel32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    ntdll fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    psapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    normaliz fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    explorer fver =  pver =
    ieframe fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385
    NLSData0009 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    davclnt fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    ntlanman fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    NaturalLanguage6 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385


    Unable to find symbols - explorer.exe & comctl32.dll -
    Code:
     
    Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
    Copyright (c) Microsoft Corporation. All rights reserved.
     
    Loading Dump File [C:\Users\PalmDesert7\AppData\Local\Temp\SAL58.tmp\explorer.exe.2704.dmp]
    User Mini Dump File: Only registers, stack and portions of memory are available
    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Version 7600 MP (4 procs) Free x64
    Product: WinNt, suite: SingleUserTS Personal
    Machine Name:
    Debug session time: Fri Oct 30 22:24:27.000 2009 (GMT-8)
    System Uptime: not available
    Process Uptime: 0 days 0:08:01.000
    ................................................................
    ................................................................
    ....................................
    Loading unloaded module list
    ...............
    This dump file has an exception of interest stored in it.
    The stored exception information can be accessed via .ecxr.
    (a90.127c): Unknown exception - code c0000374 (first/second chance not available)
    ntdll!NtWaitForSingleObject+0xa:
    00000000`76e5fefa c3              ret
    0:039> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Exception Analysis                                   *
    *                                                                             *
    *******************************************************************************
    Unable to load image C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6\comctl32.dll, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for comctl32.dll
    *** WARNING: Unable to verify timestamp for explorer.exe
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Your debugger is not using the correct symbols                 ***
    ***                                                                   ***
    ***    In order for this command to work properly, your symbol path   ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: kernel32!pNlsUserInfo                         ***
    ***                                                                   ***
    *************************************************************************
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Your debugger is not using the correct symbols                 ***
    ***                                                                   ***
    ***    In order for this command to work properly, your symbol path   ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: kernel32!pNlsUserInfo                         ***
    ***                                                                   ***
    *************************************************************************
    FAULTING_IP: 
    ntdll!RtlReportCriticalFailure+62
    00000000`76ed6cd2 eb00            jmp     ntdll!RtlReportCriticalFailure+0x64 (00000000`76ed6cd4)
    EXCEPTION_RECORD:  ffffffffffffffff -- (.exr 0xffffffffffffffff)
    ExceptionAddress: 0000000076ed6cd2 (ntdll!RtlReportCriticalFailure+0x0000000000000062)
      ExceptionCode: c0000374
     ExceptionFlags: 00000001
    NumberParameters: 1
      Parameter[0]: 0000000076f4c3f0
    DEFAULT_BUCKET_ID:  STATUS_HEAP_CORRUPTION
    PROCESS_NAME:  explorer.exe
    ERROR_CODE: (NTSTATUS) 0xc0000374 - A heap has been corrupted.
    EXCEPTION_CODE: (NTSTATUS) 0xc0000374 - A heap has been corrupted.
    EXCEPTION_PARAMETER1:  0000000076f4c3f0
    NTGLOBALFLAG:  0
    APPLICATION_VERIFIER_FLAGS:  0
    LAST_CONTROL_TRANSFER:  from 0000000000000000 to 0000000076e7d1cd
    FAULTING_THREAD:  ffffffffffffffff
    PRIMARY_PROBLEM_CLASS:  STATUS_HEAP_CORRUPTION
    BUGCHECK_STR:  APPLICATION_FAULT_STATUS_HEAP_CORRUPTION
    STACK_TEXT:  
    00000000`76e7d1cd ntdll! ?? ::FNODOBFM::`string'+0x123b4
    00000000`76d12c7a kernel32!HeapFree+0xa
    000007fe`fb980f2d comctl32!DSA_DeleteAllItems+0x25
    000007fe`fe430c38 shell32!DSA_DeleteAllItems+0x38
    000007fe`fe50bb52 shell32!CBrowserProgressAggregator::~CBrowserProgressAggregator+0x84
    000007fe`fe50bac4 shell32!CBrowserProgressAggregator::`scalar deleting destructor'+0x14
    000007fe`fe3fc0ba shell32!CExtractIconBase::Release+0x22
    000007fe`f773e088 EXPLORERFRAME!CShellBrowser::_OnDestroy+0x194
    000007fe`f773df17 EXPLORERFRAME!CShellBrowser::WndProcBS+0x291
    000007fe`f773d25e EXPLORERFRAME!IEFrameWndProc+0xbf
    00000000`76c0c3c1 user32!UserCallWinProcCheckWow+0x1ad
    00000000`76c0a01b user32!DispatchClientMessage+0xc3
    00000000`76c0a061 user32!_fnDWORD+0x2d
    00000000`76e5fdf5 ntdll!KiUserCallbackDispatcherContinue+0x0
    00000000`76bff5ba user32!ZwUserDestroyWindow+0xa
    000007fe`f773ca3b EXPLORERFRAME!CShellBrowser::_OnConfirmedClose+0x1e3
    000007fe`f773c8ab EXPLORERFRAME!CShellBrowser::OnClose+0xea
    000007fe`f773c7c2 EXPLORERFRAME!CBrowserHost::OnClose+0x26
    000007fe`f773c783 EXPLORERFRAME!CExplorerFrame::_OnClose+0x84
    000007fe`f773e166 EXPLORERFRAME!CExplorerFrame::v_WndProc+0x106
    000007fe`f7701368 EXPLORERFRAME!CImpWndProc::s_WndProc+0x91
    00000000`76c0c3c1 user32!UserCallWinProcCheckWow+0x1ad
    00000000`76c0a01b user32!DispatchClientMessage+0xc3
    00000000`76c0a061 user32!_fnDWORD+0x2d
    00000000`76e5fdf5 ntdll!KiUserCallbackDispatcherContinue+0x0
    00000000`76c0a08a user32!ZwUserMessageCall+0xa
    00000000`76c0a389 user32!RealDefWindowProcWorker+0xa4
    00000000`76c0a332 user32!RealDefWindowProcW+0x5a
    000007fe`fb51795a uxtheme!DoMsgDefault+0x2a
    000007fe`fb53637a uxtheme!OnDwpSysCommand+0x50
    000007fe`fb51168e uxtheme!_ThemeDefWindowProc+0x209
    000007fe`fb511445 uxtheme!ThemeDefWindowProcW+0x11
     
    FOLLOWUP_IP: 
    shell32!CBrowserProgressAggregator::~CBrowserProgressAggregator+84
    000007fe`fe50bb52 488d4f18        lea     rcx,[rdi+18h]
    SYMBOL_STACK_INDEX:  4
    SYMBOL_NAME:  shell32!CBrowserProgressAggregator::~CBrowserProgressAggregator+84
    FOLLOWUP_NAME:  MachineOwner
    MODULE_NAME: shell32
    IMAGE_NAME:  shell32.dll
    DEBUG_FLR_IMAGE_TIMESTAMP:  4a5be054
    STACK_COMMAND:  !heap ; dds 76f4c458 ; kb
    FAILURE_BUCKET_ID:  STATUS_HEAP_CORRUPTION_c0000374_shell32.dll!CBrowserProgressAggregator::_CBrowserProgressAggregator
    BUCKET_ID:  X64_APPLICATION_FAULT_STATUS_HEAP_CORRUPTION_shell32!CBrowserProgressAggregator::_CBrowserProgressAggregator+84
    WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne...htm?Retriage=1
    Followup: MachineOwner
    ---------
    0:039> lmvm shell32
    start             end                 module name
    000007fe`fe390000 000007fe`ff116000   shell32    (pdb symbols)          c:\symbols\shell32.pdb\AF4500C51769484AA0375055B9DBA56E2\shell32.pdb
       Loaded symbol image file: shell32.dll
       Mapped memory image file: c:\symbols\shell32.dll\4A5BE054d86000\shell32.dll
       Image path: C:\Windows\System32\shell32.dll
       Image name: shell32.dll
       Timestamp:        Mon Jul 13 18:33:08 2009 (4A5BE054)
       CheckSum:         00D89E53
       ImageSize:        00D86000
       File version:     6.1.7600.16385
       Product version:  6.1.7600.16385
       File flags:       0 (Mask 3F)
       File OS:          40004 NT Win32
       File type:        2.0 Dll
       File date:        00000000.00000000
       Translations:     0409.04b0
       CompanyName:      Microsoft Corporation
       ProductName:      Microsoft® Windows® Operating System
       InternalName:     SHELL32
       OriginalFilename: SHELL32.DLL
       ProductVersion:   6.1.7600.16385
       FileVersion:      6.1.7600.16385 (win7_rtm.090713-1255)
       FileDescription:  Windows Shell Common Dll
       LegalCopyright:   © Microsoft Corporation. All rights reserved.
    0:039> lmnt
    start             end                 module name
    00000000`6f060000 00000000`6f2e3000   NLSLexicons0009 NLSLexicons0009.dll Mon Jul 13 18:31:42 2009 (4A5BDFFE)
    00000000`6f2f0000 00000000`6f3d3000   FXSRESM  FXSRESM.dll  Mon Jul 13 18:28:06 2009 (4A5BDF26)
    00000000`74b30000 00000000`74b36000   ksuser   ksuser.dll   Mon Jul 13 18:31:21 2009 (4A5BDFE9)
    00000000`76bf0000 00000000`76cea000   user32   user32.dll   Mon Jul 13 18:34:00 2009 (4A5BE088)
    00000000`76cf0000 00000000`76e0f000   kernel32 kernel32.dll Mon Jul 13 18:31:11 2009 (4A5BDFDF)
    00000000`76e10000 00000000`76fbb000   ntdll    ntdll.dll    Mon Jul 13 18:32:27 2009 (4A5BE02B)
    00000000`76fd0000 00000000`76fd7000   psapi    psapi.dll    Mon Jul 13 16:26:21 2009 (4A5BC29D)
    00000000`76fe0000 00000000`76fe3000   normaliz normaliz.dll Mon Jul 13 18:32:18 2009 (4A5BE022)
    00000000`ffb80000 00000000`ffe3f000   explorer explorer.exe Sun Aug 02 20:20:17 2009 (4A765771)
    000007fe`ee3a0000 000007fe`eef6e000   ieframe  ieframe.dll  Mon Jul 13 18:28:31 2009 (4A5BDF3F)
    000007fe`efb50000 000007fe`f014f000   NLSData0009 NLSData0009.dll Mon Jul 13 18:31:02 2009 (4A5BDFD6)
    000007fe`f1940000 000007fe`f195b000   davclnt  davclnt.dll  Mon Jul 13 18:26:25 2009 (4A5BDEC1)
    000007fe`f1960000 000007fe`f1982000   ntlanman ntlanman.dll Mon Jul 13 18:32:43 2009 (4A5BE03B)
    000007fe`f2920000 000007fe`f2a68000   NaturalLanguage6 NaturalLanguage6.dll Mon Jul 13 18:30:52 2009 (4A5BDFCC)
    000007fe`f2be0000 000007fe`f2bea000   davhlpr  davhlpr.dll  Mon Jul 13 18:26:26 2009 (4A5BDEC2)
    000007fe`f2e90000 000007fe`f2e9a000   drprov   drprov.dll   Mon Jul 13 18:27:40 2009 (4A5BDF0C)
    000007fe`f3510000 000007fe`f3541000   provsvc  provsvc.dll  Mon Jul 13 18:32:20 2009 (4A5BE024)
    000007fe`f3550000 000007fe`f35c2000   ieproxy  ieproxy.dll  Mon Jul 13 18:28:33 2009 (4A5BDF41)
    000007fe`f47f0000 000007fe`f492c000   werconcpl werconcpl.dll Mon Jul 13 18:33:54 2009 (4A5BE082)
    000007fe`f4a20000 000007fe`f4af5000   SearchFolder SearchFolder.dll Mon Jul 13 18:33:17 2009 (4A5BE05D)
    000007fe`f4b00000 000007fe`f4d71000   wpdshext wpdshext.dll Mon Jul 13 18:36:55 2009 (4A5BE137)
    000007fe`f4f80000 000007fe`f509f000   wscui    wscui.cpl    Mon Jul 13 18:34:24 2009 (4A5BE0A0)
    000007fe`f50a0000 000007fe`f513d000   FXSAPI   FXSAPI.dll   Mon Jul 13 18:27:57 2009 (4A5BDF1D)
    000007fe`f5140000 000007fe`f536b000   SyncCenter SyncCenter.dll Mon Jul 13 18:33:40 2009 (4A5BE074)
    000007fe`f5370000 000007fe`f552d000   pnidui   pnidui.dll   Mon Jul 13 18:32:53 2009 (4A5BE045)
    000007fe`f5a60000 000007fe`f5adb000   StructuredQuery StructuredQuery.dll Mon Jul 13 18:33:30 2009 (4A5BE06A)
    000007fe`f5ae0000 000007fe`f5bb7000   FXSST    FXSST.dll    Mon Jul 13 18:28:09 2009 (4A5BDF29)
    000007fe`f5bc0000 000007fe`f5c15000   hgcpl    hgcpl.dll    Mon Jul 13 18:27:49 2009 (4A5BDF15)
    000007fe`f60a0000 000007fe`f6120000   imapi2   imapi2.dll   Mon Jul 13 18:28:27 2009 (4A5BDF3B)
    000007fe`f6120000 000007fe`f61e2000   Actioncenter Actioncenter.dll Mon Jul 13 18:25:00 2009 (4A5BDE6C)
    000007fe`f61f0000 000007fe`f647b000   netshell netshell.dll Mon Jul 13 18:30:58 2009 (4A5BDFD2)
    000007fe`f64b0000 000007fe`f6504000   oleacc   oleacc.dll   Mon Jul 13 18:32:11 2009 (4A5BE01B)
    000007fe`f6510000 000007fe`f65c5000   bthprops bthprops.cpl Mon Jul 13 18:25:48 2009 (4A5BDE9C)
    000007fe`f65d0000 000007fe`f662e000   WWanAPI  WWanAPI.dll  Mon Jul 13 18:34:32 2009 (4A5BE0A8)
    000007fe`f6630000 000007fe`f67cc000   NetworkExplorer NetworkExplorer.dll Mon Jul 13 18:31:01 2009 (4A5BDFD5)
    000007fe`f67f0000 000007fe`f6b06000   msi      msi.dll      Mon Jul 13 18:31:09 2009 (4A5BDFDD)
    000007fe`f6bf0000 000007fe`f6cad000   PortableDeviceApi PortableDeviceApi.dll Mon Jul 13 18:33:11 2009 (4A5BE057)
    000007fe`f6cb0000 000007fe`f6f53000   gameux   gameux.dll   Mon Jul 13 18:27:25 2009 (4A5BDEFD)
    000007fe`f6f60000 000007fe`f6f6c000   linkinfo linkinfo.dll Mon Jul 13 18:28:43 2009 (4A5BDF4B)
    000007fe`f6f70000 000007fe`f6fb5000   QAGENT   QAGENT.DLL   Mon Jul 13 18:32:21 2009 (4A5BE025)
    000007fe`f6fc0000 000007fe`f7034000   DXP      DXP.dll      Mon Jul 13 18:28:13 2009 (4A5BDF2D)
    000007fe`f7060000 000007fe`f714e000   actxprxy actxprxy.dll Mon Jul 13 18:25:06 2009 (4A5BDE72)
    000007fe`f7150000 000007fe`f71a8000   srchadmin srchadmin.dll Mon Jul 13 18:33:47 2009 (4A5BE07B)
    000007fe`f71b0000 000007fe`f7219000   prnfldr  prnfldr.dll  Mon Jul 13 18:33:30 2009 (4A5BE06A)
    000007fe`f72b0000 000007fe`f736a000   batmeter batmeter.dll Mon Jul 13 18:25:07 2009 (4A5BDE73)
    000007fe`f7370000 000007fe`f7479000   cryptui  cryptui.dll  Mon Jul 13 18:30:00 2009 (4A5BDF98)
    000007fe`f74b0000 000007fe`f74e9000   PortableDeviceTypes PortableDeviceTypes.dll Mon Jul 13 18:33:16 2009 (4A5BE05C)
    000007fe`f74f0000 000007fe`f7511000   UIAnimation UIAnimation.dll Mon Jul 13 18:33:38 2009 (4A5BE072)
    000007fe`f7520000 000007fe`f76f8000   authui   authui.dll   Mon Jul 13 18:25:27 2009 (4A5BDE87)
    000007fe`f7700000 000007fe`f78ca000   EXPLORERFRAME EXPLORERFRAME.dll Mon Jul 13 18:29:38 2009 (4A5BDF82)
    000007fe`f7d10000 000007fe`f7d1f000   cscapi   cscapi.dll   Mon Jul 13 18:30:03 2009 (4A5BDF9B)
    000007fe`f7d30000 000007fe`f7d50000   wlanapi  wlanapi.dll  Mon Jul 13 18:35:08 2009 (4A5BE0CC)
    000007fe`f7d50000 000007fe`f7dcf000   tiptsf   tiptsf.dll   Mon Jul 13 18:33:42 2009 (4A5BE076)
    000007fe`f7dd0000 000007fe`f7e96000   msftedit msftedit.dll Mon Jul 13 18:30:50 2009 (4A5BDFCA)
    000007fe`f7f00000 000007fe`f7f7c000   wer      wer.dll      Mon Jul 13 18:33:53 2009 (4A5BE081)
    000007fe`f8060000 000007fe`f8078000   mpr      mpr.dll      Mon Jul 13 18:29:24 2009 (4A5BDF74)
    000007fe`f8090000 000007fe`f80ad000   mssprxy  mssprxy.dll  Mon Jul 13 18:30:18 2009 (4A5BDFAA)
    000007fe`f82a0000 000007fe`f82ac000   npmproxy npmproxy.dll Mon Jul 13 18:32:19 2009 (4A5BE023)
    000007fe`f82d0000 000007fe`f8312000   stobject stobject.dll Mon Jul 13 18:33:32 2009 (4A5BE06C)
    000007fe`f8340000 000007fe`f8352000   wscapi   wscapi.dll   Mon Jul 13 18:34:18 2009 (4A5BE09A)
    000007fe`f8840000 000007fe`f88b0000   winspool winspool.drv Mon Jul 13 18:34:55 2009 (4A5BE0BF)
    000007fe`f8c30000 000007fe`f8ca4000   netprofm netprofm.dll Mon Jul 13 18:30:56 2009 (4A5BDFD0)
    000007fe`f8d20000 000007fe`f8d3f000   QUTIL    QUTIL.DLL    Mon Jul 13 18:32:35 2009 (4A5BE033)
    000007fe`f8d50000 000007fe`f8d70000   wpdshserviceobj wpdshserviceobj.dll Mon Jul 13 18:36:56 2009 (4A5BE138)
    000007fe`f9580000 000007fe`f9770000   msxml6   msxml6.dll   Mon Jul 13 18:30:48 2009 (4A5BDFC8)
    000007fe`f9c40000 000007fe`f9d60000   taskschd taskschd.dll Mon Jul 13 18:33:48 2009 (4A5BE07C)
    000007fe`fa610000 000007fe`fa619000   midimap  midimap.dll  Mon Jul 13 18:30:38 2009 (4A5BDFBE)
    000007fe`fa620000 000007fe`fa638000   msacm32_7fefa620000 msacm32.dll  Mon Jul 13 18:29:51 2009 (4A5BDF8F)
    000007fe`fa640000 000007fe`fa64a000   msacm32  msacm32.drv  Mon Jul 13 18:29:52 2009 (4A5BDF90)
    000007fe`fa650000 000007fe`fa69f000   AudioSes AudioSes.dll Mon Jul 13 18:25:09 2009 (4A5BDE75)
    000007fe`fa900000 000007fe`fa914000   samcli   samcli.dll   Mon Jul 13 18:32:31 2009 (4A5BE02F)
    000007fe`fa920000 000007fe`fa935000   wkscli   wkscli.dll   Mon Jul 13 18:35:05 2009 (4A5BE0C9)
    000007fe`fa940000 000007fe`fa94c000   netutils netutils.dll Mon Jul 13 18:31:00 2009 (4A5BDFD4)
    000007fe`fa970000 000007fe`fa986000   Syncreg  Syncreg.dll  Mon Jul 13 18:33:45 2009 (4A5BE079)
    000007fe`fa9b0000 000007fe`fa9d7000   EhStorAPI EhStorAPI.dll Mon Jul 13 18:27:17 2009 (4A5BDEF5)
    000007fe`fa9e0000 000007fe`fa9ff000   thumbcache thumbcache.dll Mon Jul 13 18:33:34 2009 (4A5BE06E)
    000007fe`faa90000 000007fe`fabba000   WindowsCodecs WindowsCodecs.dll Mon Jul 13 18:34:29 2009 (4A5BE0A5)
    000007fe`fabc0000 000007fe`fabfb000   wdmaud   wdmaud.drv   Mon Jul 13 18:33:55 2009 (4A5BE083)
    000007fe`fac00000 000007fe`fac3b000   winmm    winmm.dll    Mon Jul 13 18:34:40 2009 (4A5BE0B0)
    000007fe`fac40000 000007fe`fac75000   xmllite  xmllite.dll  Mon Jul 13 18:34:16 2009 (4A5BE098)
    000007fe`fac80000 000007fe`fac98000   dwmapi   dwmapi.dll   Mon Jul 13 18:28:07 2009 (4A5BDF27)
    000007fe`faca0000 000007fe`facb1000   dhcpcsvc6 dhcpcsvc6.DLL Mon Jul 13 18:26:31 2009 (4A5BDEC7)
    000007fe`facc0000 000007fe`facd8000   dhcpcsvc dhcpcsvc.dll Mon Jul 13 18:26:30 2009 (4A5BDEC6)
    000007fe`fae00000 000007fe`fae0b000   winnsi   winnsi.dll   Mon Jul 13 18:34:41 2009 (4A5BE0B1)
    000007fe`fae50000 000007fe`fae77000   IPHLPAPI IPHLPAPI.DLL Mon Jul 13 18:28:55 2009 (4A5BDF57)
    000007fe`faee0000 000007fe`faef1000   wtsapi32 wtsapi32.dll Mon Jul 13 18:34:20 2009 (4A5BE09C)
    000007fe`faf30000 000007fe`faf3b000   slc      slc.dll      Mon Jul 13 18:33:23 2009 (4A5BE063)
    000007fe`faf40000 000007fe`fafa7000   es       es.dll       Mon Jul 13 18:29:30 2009 (4A5BDF7A)
    000007fe`fafb0000 000007fe`fafbc000   dsrole   dsrole.dll   Mon Jul 13 18:27:57 2009 (4A5BDF1D)
    000007fe`fafc0000 000007fe`fafd9000   atl      atl.dll      Mon Jul 13 18:25:04 2009 (4A5BDE70)
    000007fe`fb030000 000007fe`fb045000   nlaapi   nlaapi.dll   Mon Jul 13 18:30:49 2009 (4A5BDFC9)
    000007fe`fb120000 000007fe`fb14d000   ntmarta  ntmarta.dll  Mon Jul 13 18:32:45 2009 (4A5BE03D)
    000007fe`fb150000 000007fe`fb15b000   hid      hid.dll      Mon Jul 13 18:27:53 2009 (4A5BDF19)
    000007fe`fb160000 000007fe`fb16d000   wwapi    wwapi.dll    Mon Jul 13 18:34:41 2009 (4A5BE0B1)
    000007fe`fb170000 000007fe`fb1ab000   msls31   msls31.dll   Mon Jul 13 18:31:24 2009 (4A5BDFEC)
    000007fe`fb1b0000 000007fe`fb1d4000   shacct   shacct.dll   Mon Jul 13 18:33:06 2009 (4A5BE052)
    000007fe`fb1e0000 000007fe`fb263000   timedate timedate.cpl Mon Jul 13 18:33:36 2009 (4A5BE070)
    000007fe`fb270000 000007fe`fb2ab000   SndVolSSO SndVolSSO.DLL Mon Jul 13 18:33:49 2009 (4A5BE07D)
    000007fe`fb2b0000 000007fe`fb2e3000   shdocvw  shdocvw.dll  Mon Jul 13 18:33:07 2009 (4A5BE053)
    000007fe`fb2f0000 000007fe`fb505000   GdiPlus  GdiPlus.dll  Mon Jul 13 18:24:55 2009 (4A5BDE67)
    000007fe`fb510000 000007fe`fb566000   uxtheme  uxtheme.dll  Mon Jul 13 18:34:11 2009 (4A5BE093)
    000007fe`fb570000 000007fe`fb5bb000   MMDevAPI MMDevAPI.dll Mon Jul 13 18:29:12 2009 (4A5BDF68)
    000007fe`fb5c0000 000007fe`fb5c9000   avrt     avrt.dll     Mon Jul 13 18:25:42 2009 (4A5BDE96)
    000007fe`fb5d0000 000007fe`fb5d7000   wlanutil wlanutil.dll Mon Jul 13 18:35:22 2009 (4A5BE0DA)
    000007fe`fb5f0000 000007fe`fb71c000   propsys  propsys.dll  Mon Jul 13 18:32:18 2009 (4A5BE022)
    000007fe`fb720000 000007fe`fb74c000   powrprof powrprof.dll Mon Jul 13 18:33:22 2009 (4A5BE062)
    000007fe`fb800000 000007fe`fb81d000   samlib   samlib.dll   Mon Jul 13 18:32:32 2009 (4A5BE030)
    000007fe`fb840000 000007fe`fb84b000   ehSSO    ehSSO.dll    Mon Jul 13 18:27:16 2009 (4A5BDEF4)
    000007fe`fb850000 000007fe`fba44000   comctl32 comctl32.dll Mon Jul 13 18:24:55 2009 (4A5BDE67)
    000007fe`fba50000 000007fe`fbad0000   ntshrui  ntshrui.dll  Mon Jul 13 18:32:47 2009 (4A5BE03F)
    000007fe`fbad0000 000007fe`fbb05000   EhStorShell EhStorShell.dll Mon Jul 13 18:27:22 2009 (4A5BDEFA)
    000007fe`fbb10000 000007fe`fbc02000   dui70    dui70.dll    Mon Jul 13 18:28:05 2009 (4A5BDF25)
    000007fe`fbc10000 000007fe`fbc53000   duser    duser.dll    Mon Jul 13 18:28:06 2009 (4A5BDF26)
    000007fe`fbc60000 000007fe`fbc6b000   hcproviders hcproviders.dll Mon Jul 13 18:27:38 2009 (4A5BDF0A)
    000007fe`fbc70000 000007fe`fbcbc000   framedynos framedynos.dll Mon Jul 13 18:27:36 2009 (4A5BDF08)
    000007fe`fbcc0000 000007fe`fbce8000   wscinterop wscinterop.dll Mon Jul 13 18:34:19 2009 (4A5BE09B)
    000007fe`fbcf0000 000007fe`fbd00000   AltTab   AltTab.dll   Mon Jul 13 18:25:19 2009 (4A5BDE7F)
    000007fe`fbd00000 000007fe`fbd08000   IconCodecService IconCodecService.dll Mon Jul 13 18:28:17 2009 (4A5BDF31)
    000007fe`fbd10000 000007fe`fbd19000   msiltcfg msiltcfg.dll Mon Jul 13 18:31:17 2009 (4A5BDFE5)
    000007fe`fbd20000 000007fe`fbd39000   wercplsupport wercplsupport.dll Mon Jul 13 18:33:55 2009 (4A5BE083)
    000007fe`fbee0000 000007fe`fbeec000   version  version.dll  Mon Jul 13 18:33:54 2009 (4A5BE082)
    000007fe`fc0b0000 000007fe`fc0ce000   userenv  userenv.dll  Mon Jul 13 18:34:03 2009 (4A5BE08B)
    000007fe`fc0d0000 000007fe`fc0e2000   devrtl   devrtl.dll   Mon Jul 13 18:26:58 2009 (4A5BDEE2)
    000007fe`fc2c0000 000007fe`fc307000   rsaenh   rsaenh.dll   Mon Jul 13 18:32:41 2009 (4A5BE039)
    000007fe`fc3e0000 000007fe`fc43b000   dnsapi   dnsapi.dll   Mon Jul 13 18:27:09 2009 (4A5BDEED)
    000007fe`fc550000 000007fe`fc58d000   winsta   winsta.dll   Mon Jul 13 18:34:59 2009 (4A5BE0C3)
    000007fe`fc6f0000 000007fe`fc6f9000   credssp  credssp.dll  Mon Jul 13 18:29:49 2009 (4A5BDF8D)
    000007fe`fc820000 000007fe`fc837000   cryptsp  cryptsp.dll  Mon Jul 13 18:29:58 2009 (4A5BDF96)
    000007fe`fc850000 000007fe`fc8bd000   wevtapi  wevtapi.dll  Mon Jul 13 18:33:59 2009 (4A5BE087)
    000007fe`fc8c0000 000007fe`fc8e3000   srvcli   srvcli.dll   Mon Jul 13 18:34:06 2009 (4A5BE08E)
    000007fe`fca40000 000007fe`fca4b000   secur32  secur32.dll  Mon Jul 13 18:33:26 2009 (4A5BE066)
    000007fe`fcc10000 000007fe`fcc35000   sspicli  sspicli.dll  Mon Jul 13 18:34:13 2009 (4A5BE095)
    000007fe`fcc40000 000007fe`fcc97000   apphelp  apphelp.dll  Mon Jul 13 18:26:04 2009 (4A5BDEAC)
    000007fe`fcca0000 000007fe`fccaf000   CRYPTBASE CRYPTBASE.dll Mon Jul 13 18:29:53 2009 (4A5BDF91)
    000007fe`fccb0000 000007fe`fcd42000   sxs      sxs.dll      Mon Jul 13 18:33:35 2009 (4A5BE06F)
    000007fe`fcd50000 000007fe`fcd64000   RpcRtRemote RpcRtRemote.dll Mon Jul 13 18:32:38 2009 (4A5BE036)
    000007fe`fcd70000 000007fe`fcd7f000   profapi  profapi.dll  Mon Jul 13 18:32:15 2009 (4A5BE01F)
    000007fe`fce10000 000007fe`fce1f000   msasn1   msasn1.dll   Sat Aug 29 00:40:40 2009 (4A98DB78)
    000007fe`fce20000 000007fe`fce56000   cfgmgr32 cfgmgr32.dll Mon Jul 13 18:26:02 2009 (4A5BDEAA)
    000007fe`fce60000 000007fe`fce99000   wintrust wintrust.dll Mon Jul 13 18:35:03 2009 (4A5BE0C7)
    000007fe`fcea0000 000007fe`fcf0b000   KERNELBASE KERNELBASE.dll Mon Jul 13 18:31:12 2009 (4A5BDFE0)
    000007fe`fcf10000 000007fe`fcf2a000   devobj   devobj.dll   Mon Jul 13 18:26:57 2009 (4A5BDEE1)
    000007fe`fcfd0000 000007fe`fd136000   crypt32  crypt32.dll  Mon Jul 13 18:29:52 2009 (4A5BDF90)
    000007fe`fd140000 000007fe`fd1df000   msvcrt   msvcrt.dll   Mon Jul 13 18:30:38 2009 (4A5BDFBE)
    000007fe`fd1e0000 000007fe`fd1ee000   lpk      lpk.dll      Mon Jul 13 18:29:03 2009 (4A5BDF5F)
    000007fe`fd1f0000 000007fe`fd3c7000   setupapi setupapi.dll Mon Jul 13 18:33:06 2009 (4A5BE052)
    000007fe`fd3d0000 000007fe`fd3d8000   nsi      nsi.dll      Mon Jul 13 18:32:25 2009 (4A5BE029)
    000007fe`fd3e0000 000007fe`fd50e000   rpcrt4   rpcrt4.dll   Mon Jul 13 18:32:37 2009 (4A5BE035)
    000007fe`fd510000 000007fe`fd53e000   imm32    imm32.dll    Mon Jul 13 18:28:32 2009 (4A5BDF40)
    000007fe`fd540000 000007fe`fd66a000   wininet  wininet.dll  Mon Jul 13 18:34:35 2009 (4A5BE0AB)
    000007fe`fd670000 000007fe`fd747000   oleaut32 oleaut32.dll Mon Jul 13 18:32:14 2009 (4A5BE01E)
    000007fe`fd750000 000007fe`fd7b7000   gdi32    gdi32.dll    Mon Jul 13 18:27:29 2009 (4A5BDF01)
    000007fe`fd7c0000 000007fe`fd80d000   ws2_32   ws2_32.dll   Mon Jul 13 18:34:13 2009 (4A5BE095)
    000007fe`fd810000 000007fe`fd8eb000   advapi32 advapi32.dll Mon Jul 13 18:24:59 2009 (4A5BDE6B)
    000007fe`fd8f0000 000007fe`fdaf1000   ole32    ole32.dll    Mon Jul 13 18:32:10 2009 (4A5BE01A)
    000007fe`fdb00000 000007fe`fdbca000   usp10    usp10.dll    Mon Jul 13 18:34:04 2009 (4A5BE08C)
    000007fe`fdbd0000 000007fe`fdc41000   shlwapi  shlwapi.dll  Mon Jul 13 18:33:13 2009 (4A5BE059)
    000007fe`fdc50000 000007fe`fdce9000   clbcatq  clbcatq.dll  Mon Jul 13 18:26:18 2009 (4A5BDEBA)
    000007fe`fdd90000 000007fe`fdde0000   Wldap32  Wldap32.dll  Mon Jul 13 18:35:25 2009 (4A5BE0DD)
    000007fe`fdde0000 000007fe`fddff000   sechost  sechost.dll  Mon Jul 13 18:33:18 2009 (4A5BE05E)
    000007fe`fdea0000 000007fe`fdfa9000   msctf    msctf.dll    Mon Jul 13 18:30:18 2009 (4A5BDFAA)
    000007fe`fdfb0000 000007fe`fe128000   urlmon   urlmon.dll   Mon Jul 13 18:33:53 2009 (4A5BE081)
    000007fe`fe130000 000007fe`fe388000   iertutil iertutil.dll Mon Jul 13 18:28:35 2009 (4A5BDF43)
    000007fe`fe390000 000007fe`ff116000   shell32  shell32.dll  Mon Jul 13 18:33:08 2009 (4A5BE054)
    Unloaded modules:
    000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL
       Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)
       Checksum:  0000FF7D
    00000000`72bf0000 00000000`72bf3000   sfc.dll 
       Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)
       Checksum:  00010B4F
    000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL
       Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)
       Checksum:  0000FF7D
    00000000`72bf0000 00000000`72bf3000   sfc.dll 
       Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)
       Checksum:  00010B4F
    000007fe`f9780000 000007fe`f97e4000   webio.dll
       Timestamp: Mon Jul 13 18:33:49 2009 (4A5BE07D)
       Checksum:  0006F5FB
    000007fe`f97f0000 000007fe`f985e000   WINHTTP.dll
       Timestamp: Mon Jul 13 18:34:34 2009 (4A5BE0AA)
       Checksum:  00071137
    000007fe`fa800000 000007fe`fa81f000   thumbcache.dll
       Timestamp: Mon Jul 13 18:33:34 2009 (4A5BE06E)
       Checksum:  00020620
    000007fe`f6570000 000007fe`f65c4000   OLEACC.dll
       Timestamp: Mon Jul 13 18:32:11 2009 (4A5BE01B)
       Checksum:  00057A8E
    000007fe`ef580000 000007fe`f014e000   IEFRAME.dll
       Timestamp: Mon Jul 13 18:28:31 2009 (4A5BDF3F)
       Checksum:  00BD3A6B
    000007fe`f2070000 000007fe`f20ab000   MLANG.dll
       Timestamp: Mon Jul 13 18:29:05 2009 (4A5BDF61)
       Checksum:  00038FA3
    000007fe`f6ba0000 000007fe`f6bea000   webcheck.dll
       Timestamp: Mon Jul 13 18:34:14 2009 (4A5BE096)
       Checksum:  00048A35
    000007fe`fad30000 000007fe`fad83000   fwpuclnt.dll
       Timestamp: Mon Jul 13 18:27:54 2009 (4A5BDF1A)
       Checksum:  0005E0D4
    000007fe`f94f0000 000007fe`f9528000   ncsi.dll
       Timestamp: Mon Jul 13 18:31:02 2009 (4A5BDFD6)
       Checksum:  000359DF
    000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL
       Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)
       Checksum:  0000FF7D
    00000000`72bf0000 00000000`72bf3000   sfc.dll 
       Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)
       Checksum:  00010B4F
    0:039> lmntsm
    start             end                 module name
    000007fe`f6120000 000007fe`f61e2000   Actioncenter Actioncenter.dll Mon Jul 13 18:25:00 2009 (4A5BDE6C)
    000007fe`f7060000 000007fe`f714e000   actxprxy actxprxy.dll Mon Jul 13 18:25:06 2009 (4A5BDE72)
    000007fe`fd810000 000007fe`fd8eb000   advapi32 advapi32.dll Mon Jul 13 18:24:59 2009 (4A5BDE6B)
    000007fe`fbcf0000 000007fe`fbd00000   AltTab   AltTab.dll   Mon Jul 13 18:25:19 2009 (4A5BDE7F)
    000007fe`fcc40000 000007fe`fcc97000   apphelp  apphelp.dll  Mon Jul 13 18:26:04 2009 (4A5BDEAC)
    000007fe`fafc0000 000007fe`fafd9000   atl      atl.dll      Mon Jul 13 18:25:04 2009 (4A5BDE70)
    000007fe`fa650000 000007fe`fa69f000   AudioSes AudioSes.dll Mon Jul 13 18:25:09 2009 (4A5BDE75)
    000007fe`f7520000 000007fe`f76f8000   authui   authui.dll   Mon Jul 13 18:25:27 2009 (4A5BDE87)
    000007fe`fb5c0000 000007fe`fb5c9000   avrt     avrt.dll     Mon Jul 13 18:25:42 2009 (4A5BDE96)
    000007fe`f72b0000 000007fe`f736a000   batmeter batmeter.dll Mon Jul 13 18:25:07 2009 (4A5BDE73)
    000007fe`f6510000 000007fe`f65c5000   bthprops bthprops.cpl Mon Jul 13 18:25:48 2009 (4A5BDE9C)
    000007fe`fce20000 000007fe`fce56000   cfgmgr32 cfgmgr32.dll Mon Jul 13 18:26:02 2009 (4A5BDEAA)
    000007fe`fdc50000 000007fe`fdce9000   clbcatq  clbcatq.dll  Mon Jul 13 18:26:18 2009 (4A5BDEBA)
    000007fe`fb850000 000007fe`fba44000   comctl32 comctl32.dll Mon Jul 13 18:24:55 2009 (4A5BDE67)
    000007fe`fc6f0000 000007fe`fc6f9000   credssp  credssp.dll  Mon Jul 13 18:29:49 2009 (4A5BDF8D)
    000007fe`fcfd0000 000007fe`fd136000   crypt32  crypt32.dll  Mon Jul 13 18:29:52 2009 (4A5BDF90)
    000007fe`fcca0000 000007fe`fccaf000   CRYPTBASE CRYPTBASE.dll Mon Jul 13 18:29:53 2009 (4A5BDF91)
    000007fe`fc820000 000007fe`fc837000   cryptsp  cryptsp.dll  Mon Jul 13 18:29:58 2009 (4A5BDF96)
    000007fe`f7370000 000007fe`f7479000   cryptui  cryptui.dll  Mon Jul 13 18:30:00 2009 (4A5BDF98)
    000007fe`f7d10000 000007fe`f7d1f000   cscapi   cscapi.dll   Mon Jul 13 18:30:03 2009 (4A5BDF9B)
    000007fe`f1940000 000007fe`f195b000   davclnt  davclnt.dll  Mon Jul 13 18:26:25 2009 (4A5BDEC1)
    000007fe`f2be0000 000007fe`f2bea000   davhlpr  davhlpr.dll  Mon Jul 13 18:26:26 2009 (4A5BDEC2)
    000007fe`fcf10000 000007fe`fcf2a000   devobj   devobj.dll   Mon Jul 13 18:26:57 2009 (4A5BDEE1)
    000007fe`fc0d0000 000007fe`fc0e2000   devrtl   devrtl.dll   Mon Jul 13 18:26:58 2009 (4A5BDEE2)
    000007fe`facc0000 000007fe`facd8000   dhcpcsvc dhcpcsvc.dll Mon Jul 13 18:26:30 2009 (4A5BDEC6)
    000007fe`faca0000 000007fe`facb1000   dhcpcsvc6 dhcpcsvc6.DLL Mon Jul 13 18:26:31 2009 (4A5BDEC7)
    000007fe`fc3e0000 000007fe`fc43b000   dnsapi   dnsapi.dll   Mon Jul 13 18:27:09 2009 (4A5BDEED)
    000007fe`f2e90000 000007fe`f2e9a000   drprov   drprov.dll   Mon Jul 13 18:27:40 2009 (4A5BDF0C)
    000007fe`fafb0000 000007fe`fafbc000   dsrole   dsrole.dll   Mon Jul 13 18:27:57 2009 (4A5BDF1D)
    000007fe`fbb10000 000007fe`fbc02000   dui70    dui70.dll    Mon Jul 13 18:28:05 2009 (4A5BDF25)
    000007fe`fbc10000 000007fe`fbc53000   duser    duser.dll    Mon Jul 13 18:28:06 2009 (4A5BDF26)
    000007fe`fac80000 000007fe`fac98000   dwmapi   dwmapi.dll   Mon Jul 13 18:28:07 2009 (4A5BDF27)
    000007fe`f6fc0000 000007fe`f7034000   DXP      DXP.dll      Mon Jul 13 18:28:13 2009 (4A5BDF2D)
    000007fe`fb840000 000007fe`fb84b000   ehSSO    ehSSO.dll    Mon Jul 13 18:27:16 2009 (4A5BDEF4)
    000007fe`fa9b0000 000007fe`fa9d7000   EhStorAPI EhStorAPI.dll Mon Jul 13 18:27:17 2009 (4A5BDEF5)
    000007fe`fbad0000 000007fe`fbb05000   EhStorShell EhStorShell.dll Mon Jul 13 18:27:22 2009 (4A5BDEFA)
    000007fe`faf40000 000007fe`fafa7000   es       es.dll       Mon Jul 13 18:29:30 2009 (4A5BDF7A)
    00000000`ffb80000 00000000`ffe3f000   explorer explorer.exe Sun Aug 02 20:20:17 2009 (4A765771)
    000007fe`f7700000 000007fe`f78ca000   EXPLORERFRAME EXPLORERFRAME.dll Mon Jul 13 18:29:38 2009 (4A5BDF82)
    000007fe`fbc70000 000007fe`fbcbc000   framedynos framedynos.dll Mon Jul 13 18:27:36 2009 (4A5BDF08)
    000007fe`f50a0000 000007fe`f513d000   FXSAPI   FXSAPI.dll   Mon Jul 13 18:27:57 2009 (4A5BDF1D)
    00000000`6f2f0000 00000000`6f3d3000   FXSRESM  FXSRESM.dll  Mon Jul 13 18:28:06 2009 (4A5BDF26)
    000007fe`f5ae0000 000007fe`f5bb7000   FXSST    FXSST.dll    Mon Jul 13 18:28:09 2009 (4A5BDF29)
    000007fe`f6cb0000 000007fe`f6f53000   gameux   gameux.dll   Mon Jul 13 18:27:25 2009 (4A5BDEFD)
    000007fe`fd750000 000007fe`fd7b7000   gdi32    gdi32.dll    Mon Jul 13 18:27:29 2009 (4A5BDF01)
    000007fe`fb2f0000 000007fe`fb505000   GdiPlus  GdiPlus.dll  Mon Jul 13 18:24:55 2009 (4A5BDE67)
    000007fe`fbc60000 000007fe`fbc6b000   hcproviders hcproviders.dll Mon Jul 13 18:27:38 2009 (4A5BDF0A)
    000007fe`f5bc0000 000007fe`f5c15000   hgcpl    hgcpl.dll    Mon Jul 13 18:27:49 2009 (4A5BDF15)
    000007fe`fb150000 000007fe`fb15b000   hid      hid.dll      Mon Jul 13 18:27:53 2009 (4A5BDF19)
    000007fe`fbd00000 000007fe`fbd08000   IconCodecService IconCodecService.dll Mon Jul 13 18:28:17 2009 (4A5BDF31)
    000007fe`ee3a0000 000007fe`eef6e000   ieframe  ieframe.dll  Mon Jul 13 18:28:31 2009 (4A5BDF3F)
    000007fe`f3550000 000007fe`f35c2000   ieproxy  ieproxy.dll  Mon Jul 13 18:28:33 2009 (4A5BDF41)
    000007fe`fe130000 000007fe`fe388000   iertutil iertutil.dll Mon Jul 13 18:28:35 2009 (4A5BDF43)
    000007fe`f60a0000 000007fe`f6120000   imapi2   imapi2.dll   Mon Jul 13 18:28:27 2009 (4A5BDF3B)
    000007fe`fd510000 000007fe`fd53e000   imm32    imm32.dll    Mon Jul 13 18:28:32 2009 (4A5BDF40)
    000007fe`fae50000 000007fe`fae77000   IPHLPAPI IPHLPAPI.DLL Mon Jul 13 18:28:55 2009 (4A5BDF57)
    00000000`76cf0000 00000000`76e0f000   kernel32 kernel32.dll Mon Jul 13 18:31:11 2009 (4A5BDFDF)
    000007fe`fcea0000 000007fe`fcf0b000   KERNELBASE KERNELBASE.dll Mon Jul 13 18:31:12 2009 (4A5BDFE0)
    00000000`74b30000 00000000`74b36000   ksuser   ksuser.dll   Mon Jul 13 18:31:21 2009 (4A5BDFE9)
    000007fe`f6f60000 000007fe`f6f6c000   linkinfo linkinfo.dll Mon Jul 13 18:28:43 2009 (4A5BDF4B)
    000007fe`fd1e0000 000007fe`fd1ee000   lpk      lpk.dll      Mon Jul 13 18:29:03 2009 (4A5BDF5F)
    000007fe`fa610000 000007fe`fa619000   midimap  midimap.dll  Mon Jul 13 18:30:38 2009 (4A5BDFBE)
    000007fe`fb570000 000007fe`fb5bb000   MMDevAPI MMDevAPI.dll Mon Jul 13 18:29:12 2009 (4A5BDF68)
    000007fe`f8060000 000007fe`f8078000   mpr      mpr.dll      Mon Jul 13 18:29:24 2009 (4A5BDF74)
    000007fe`fa640000 000007fe`fa64a000   msacm32  msacm32.drv  Mon Jul 13 18:29:52 2009 (4A5BDF90)
    000007fe`fa620000 000007fe`fa638000   msacm32_7fefa620000 msacm32.dll  Mon Jul 13 18:29:51 2009 (4A5BDF8F)
    000007fe`fce10000 000007fe`fce1f000   msasn1   msasn1.dll   Sat Aug 29 00:40:40 2009 (4A98DB78)
    000007fe`fdea0000 000007fe`fdfa9000   msctf    msctf.dll    Mon Jul 13 18:30:18 2009 (4A5BDFAA)
    000007fe`f7dd0000 000007fe`f7e96000   msftedit msftedit.dll Mon Jul 13 18:30:50 2009 (4A5BDFCA)
    000007fe`f67f0000 000007fe`f6b06000   msi      msi.dll      Mon Jul 13 18:31:09 2009 (4A5BDFDD)
    000007fe`fbd10000 000007fe`fbd19000   msiltcfg msiltcfg.dll Mon Jul 13 18:31:17 2009 (4A5BDFE5)
    000007fe`fb170000 000007fe`fb1ab000   msls31   msls31.dll   Mon Jul 13 18:31:24 2009 (4A5BDFEC)
    000007fe`f8090000 000007fe`f80ad000   mssprxy  mssprxy.dll  Mon Jul 13 18:30:18 2009 (4A5BDFAA)
    000007fe`fd140000 000007fe`fd1df000   msvcrt   msvcrt.dll   Mon Jul 13 18:30:38 2009 (4A5BDFBE)
    000007fe`f9580000 000007fe`f9770000   msxml6   msxml6.dll   Mon Jul 13 18:30:48 2009 (4A5BDFC8)
    000007fe`f2920000 000007fe`f2a68000   NaturalLanguage6 NaturalLanguage6.dll Mon Jul 13 18:30:52 2009 (4A5BDFCC)
    000007fe`f8c30000 000007fe`f8ca4000   netprofm netprofm.dll Mon Jul 13 18:30:56 2009 (4A5BDFD0)
    000007fe`f61f0000 000007fe`f647b000   netshell netshell.dll Mon Jul 13 18:30:58 2009 (4A5BDFD2)
    000007fe`fa940000 000007fe`fa94c000   netutils netutils.dll Mon Jul 13 18:31:00 2009 (4A5BDFD4)
    000007fe`f6630000 000007fe`f67cc000   NetworkExplorer NetworkExplorer.dll Mon Jul 13 18:31:01 2009 (4A5BDFD5)
    000007fe`fb030000 000007fe`fb045000   nlaapi   nlaapi.dll   Mon Jul 13 18:30:49 2009 (4A5BDFC9)
    000007fe`efb50000 000007fe`f014f000   NLSData0009 NLSData0009.dll Mon Jul 13 18:31:02 2009 (4A5BDFD6)
    00000000`6f060000 00000000`6f2e3000   NLSLexicons0009 NLSLexicons0009.dll Mon Jul 13 18:31:42 2009 (4A5BDFFE)
    00000000`76fe0000 00000000`76fe3000   normaliz normaliz.dll Mon Jul 13 18:32:18 2009 (4A5BE022)
    000007fe`f82a0000 000007fe`f82ac000   npmproxy npmproxy.dll Mon Jul 13 18:32:19 2009 (4A5BE023)
    000007fe`fd3d0000 000007fe`fd3d8000   nsi      nsi.dll      Mon Jul 13 18:32:25 2009 (4A5BE029)
    00000000`76e10000 00000000`76fbb000   ntdll    ntdll.dll    Mon Jul 13 18:32:27 2009 (4A5BE02B)
    000007fe`f1960000 000007fe`f1982000   ntlanman ntlanman.dll Mon Jul 13 18:32:43 2009 (4A5BE03B)
    000007fe`fb120000 000007fe`fb14d000   ntmarta  ntmarta.dll  Mon Jul 13 18:32:45 2009 (4A5BE03D)
    000007fe`fba50000 000007fe`fbad0000   ntshrui  ntshrui.dll  Mon Jul 13 18:32:47 2009 (4A5BE03F)
    000007fe`fd8f0000 000007fe`fdaf1000   ole32    ole32.dll    Mon Jul 13 18:32:10 2009 (4A5BE01A)
    000007fe`f64b0000 000007fe`f6504000   oleacc   oleacc.dll   Mon Jul 13 18:32:11 2009 (4A5BE01B)
    000007fe`fd670000 000007fe`fd747000   oleaut32 oleaut32.dll Mon Jul 13 18:32:14 2009 (4A5BE01E)
    000007fe`f5370000 000007fe`f552d000   pnidui   pnidui.dll   Mon Jul 13 18:32:53 2009 (4A5BE045)
    000007fe`f6bf0000 000007fe`f6cad000   PortableDeviceApi PortableDeviceApi.dll Mon Jul 13 18:33:11 2009 (4A5BE057)
    000007fe`f74b0000 000007fe`f74e9000   PortableDeviceTypes PortableDeviceTypes.dll Mon Jul 13 18:33:16 2009 (4A5BE05C)
    000007fe`fb720000 000007fe`fb74c000   powrprof powrprof.dll Mon Jul 13 18:33:22 2009 (4A5BE062)
    000007fe`f71b0000 000007fe`f7219000   prnfldr  prnfldr.dll  Mon Jul 13 18:33:30 2009 (4A5BE06A)
    000007fe`fcd70000 000007fe`fcd7f000   profapi  profapi.dll  Mon Jul 13 18:32:15 2009 (4A5BE01F)
    000007fe`fb5f0000 000007fe`fb71c000   propsys  propsys.dll  Mon Jul 13 18:32:18 2009 (4A5BE022)
    000007fe`f3510000 000007fe`f3541000   provsvc  provsvc.dll  Mon Jul 13 18:32:20 2009 (4A5BE024)
    00000000`76fd0000 00000000`76fd7000   psapi    psapi.dll    Mon Jul 13 16:26:21 2009 (4A5BC29D)
    000007fe`f6f70000 000007fe`f6fb5000   QAGENT   QAGENT.DLL   Mon Jul 13 18:32:21 2009 (4A5BE025)
    000007fe`f8d20000 000007fe`f8d3f000   QUTIL    QUTIL.DLL    Mon Jul 13 18:32:35 2009 (4A5BE033)
    000007fe`fd3e0000 000007fe`fd50e000   rpcrt4   rpcrt4.dll   Mon Jul 13 18:32:37 2009 (4A5BE035)
    000007fe`fcd50000 000007fe`fcd64000   RpcRtRemote RpcRtRemote.dll Mon Jul 13 18:32:38 2009 (4A5BE036)
    000007fe`fc2c0000 000007fe`fc307000   rsaenh   rsaenh.dll   Mon Jul 13 18:32:41 2009 (4A5BE039)
    000007fe`fa900000 000007fe`fa914000   samcli   samcli.dll   Mon Jul 13 18:32:31 2009 (4A5BE02F)
    000007fe`fb800000 000007fe`fb81d000   samlib   samlib.dll   Mon Jul 13 18:32:32 2009 (4A5BE030)
    000007fe`f4a20000 000007fe`f4af5000   SearchFolder SearchFolder.dll Mon Jul 13 18:33:17 2009 (4A5BE05D)
    000007fe`fdde0000 000007fe`fddff000   sechost  sechost.dll  Mon Jul 13 18:33:18 2009 (4A5BE05E)
    000007fe`fca40000 000007fe`fca4b000   secur32  secur32.dll  Mon Jul 13 18:33:26 2009 (4A5BE066)
    000007fe`fd1f0000 000007fe`fd3c7000   setupapi setupapi.dll Mon Jul 13 18:33:06 2009 (4A5BE052)
    000007fe`fb1b0000 000007fe`fb1d4000   shacct   shacct.dll   Mon Jul 13 18:33:06 2009 (4A5BE052)
    000007fe`fb2b0000 000007fe`fb2e3000   shdocvw  shdocvw.dll  Mon Jul 13 18:33:07 2009 (4A5BE053)
    000007fe`fe390000 000007fe`ff116000   shell32  shell32.dll  Mon Jul 13 18:33:08 2009 (4A5BE054)
    000007fe`fdbd0000 000007fe`fdc41000   shlwapi  shlwapi.dll  Mon Jul 13 18:33:13 2009 (4A5BE059)
    000007fe`faf30000 000007fe`faf3b000   slc      slc.dll      Mon Jul 13 18:33:23 2009 (4A5BE063)
    000007fe`fb270000 000007fe`fb2ab000   SndVolSSO SndVolSSO.DLL Mon Jul 13 18:33:49 2009 (4A5BE07D)
    000007fe`f7150000 000007fe`f71a8000   srchadmin srchadmin.dll Mon Jul 13 18:33:47 2009 (4A5BE07B)
    000007fe`fc8c0000 000007fe`fc8e3000   srvcli   srvcli.dll   Mon Jul 13 18:34:06 2009 (4A5BE08E)
    000007fe`fcc10000 000007fe`fcc35000   sspicli  sspicli.dll  Mon Jul 13 18:34:13 2009 (4A5BE095)
    000007fe`f82d0000 000007fe`f8312000   stobject stobject.dll Mon Jul 13 18:33:32 2009 (4A5BE06C)
    000007fe`f5a60000 000007fe`f5adb000   StructuredQuery StructuredQuery.dll Mon Jul 13 18:33:30 2009 (4A5BE06A)
    000007fe`fccb0000 000007fe`fcd42000   sxs      sxs.dll      Mon Jul 13 18:33:35 2009 (4A5BE06F)
    000007fe`f5140000 000007fe`f536b000   SyncCenter SyncCenter.dll Mon Jul 13 18:33:40 2009 (4A5BE074)
    000007fe`fa970000 000007fe`fa986000   Syncreg  Syncreg.dll  Mon Jul 13 18:33:45 2009 (4A5BE079)
    000007fe`f9c40000 000007fe`f9d60000   taskschd taskschd.dll Mon Jul 13 18:33:48 2009 (4A5BE07C)
    000007fe`fa9e0000 000007fe`fa9ff000   thumbcache thumbcache.dll Mon Jul 13 18:33:34 2009 (4A5BE06E)
    000007fe`fb1e0000 000007fe`fb263000   timedate timedate.cpl Mon Jul 13 18:33:36 2009 (4A5BE070)
    000007fe`f7d50000 000007fe`f7dcf000   tiptsf   tiptsf.dll   Mon Jul 13 18:33:42 2009 (4A5BE076)
    000007fe`f74f0000 000007fe`f7511000   UIAnimation UIAnimation.dll Mon Jul 13 18:33:38 2009 (4A5BE072)
    000007fe`fdfb0000 000007fe`fe128000   urlmon   urlmon.dll   Mon Jul 13 18:33:53 2009 (4A5BE081)
    00000000`76bf0000 00000000`76cea000   user32   user32.dll   Mon Jul 13 18:34:00 2009 (4A5BE088)
    000007fe`fc0b0000 000007fe`fc0ce000   userenv  userenv.dll  Mon Jul 13 18:34:03 2009 (4A5BE08B)
    000007fe`fdb00000 000007fe`fdbca000   usp10    usp10.dll    Mon Jul 13 18:34:04 2009 (4A5BE08C)
    000007fe`fb510000 000007fe`fb566000   uxtheme  uxtheme.dll  Mon Jul 13 18:34:11 2009 (4A5BE093)
    000007fe`fbee0000 000007fe`fbeec000   version  version.dll  Mon Jul 13 18:33:54 2009 (4A5BE082)
    000007fe`fabc0000 000007fe`fabfb000   wdmaud   wdmaud.drv   Mon Jul 13 18:33:55 2009 (4A5BE083)
    000007fe`f7f00000 000007fe`f7f7c000   wer      wer.dll      Mon Jul 13 18:33:53 2009 (4A5BE081)
    000007fe`f47f0000 000007fe`f492c000   werconcpl werconcpl.dll Mon Jul 13 18:33:54 2009 (4A5BE082)
    000007fe`fbd20000 000007fe`fbd39000   wercplsupport wercplsupport.dll Mon Jul 13 18:33:55 2009 (4A5BE083)
    000007fe`fc850000 000007fe`fc8bd000   wevtapi  wevtapi.dll  Mon Jul 13 18:33:59 2009 (4A5BE087)
    000007fe`faa90000 000007fe`fabba000   WindowsCodecs WindowsCodecs.dll Mon Jul 13 18:34:29 2009 (4A5BE0A5)
    000007fe`fd540000 000007fe`fd66a000   wininet  wininet.dll  Mon Jul 13 18:34:35 2009 (4A5BE0AB)
    000007fe`fac00000 000007fe`fac3b000   winmm    winmm.dll    Mon Jul 13 18:34:40 2009 (4A5BE0B0)
    000007fe`fae00000 000007fe`fae0b000   winnsi   winnsi.dll   Mon Jul 13 18:34:41 2009 (4A5BE0B1)
    000007fe`f8840000 000007fe`f88b0000   winspool winspool.drv Mon Jul 13 18:34:55 2009 (4A5BE0BF)
    000007fe`fc550000 000007fe`fc58d000   winsta   winsta.dll   Mon Jul 13 18:34:59 2009 (4A5BE0C3)
    000007fe`fce60000 000007fe`fce99000   wintrust wintrust.dll Mon Jul 13 18:35:03 2009 (4A5BE0C7)
    000007fe`fa920000 000007fe`fa935000   wkscli   wkscli.dll   Mon Jul 13 18:35:05 2009 (4A5BE0C9)
    000007fe`f7d30000 000007fe`f7d50000   wlanapi  wlanapi.dll  Mon Jul 13 18:35:08 2009 (4A5BE0CC)
    000007fe`fb5d0000 000007fe`fb5d7000   wlanutil wlanutil.dll Mon Jul 13 18:35:22 2009 (4A5BE0DA)
    000007fe`fdd90000 000007fe`fdde0000   Wldap32  Wldap32.dll  Mon Jul 13 18:35:25 2009 (4A5BE0DD)
    000007fe`f4b00000 000007fe`f4d71000   wpdshext wpdshext.dll Mon Jul 13 18:36:55 2009 (4A5BE137)
    000007fe`f8d50000 000007fe`f8d70000   wpdshserviceobj wpdshserviceobj.dll Mon Jul 13 18:36:56 2009 (4A5BE138)
    000007fe`fd7c0000 000007fe`fd80d000   ws2_32   ws2_32.dll   Mon Jul 13 18:34:13 2009 (4A5BE095)
    000007fe`f8340000 000007fe`f8352000   wscapi   wscapi.dll   Mon Jul 13 18:34:18 2009 (4A5BE09A)
    000007fe`fbcc0000 000007fe`fbce8000   wscinterop wscinterop.dll Mon Jul 13 18:34:19 2009 (4A5BE09B)
    000007fe`f4f80000 000007fe`f509f000   wscui    wscui.cpl    Mon Jul 13 18:34:24 2009 (4A5BE0A0)
    000007fe`faee0000 000007fe`faef1000   wtsapi32 wtsapi32.dll Mon Jul 13 18:34:20 2009 (4A5BE09C)
    000007fe`f65d0000 000007fe`f662e000   WWanAPI  WWanAPI.dll  Mon Jul 13 18:34:32 2009 (4A5BE0A8)
    000007fe`fb160000 000007fe`fb16d000   wwapi    wwapi.dll    Mon Jul 13 18:34:41 2009 (4A5BE0B1)
    000007fe`fac40000 000007fe`fac75000   xmllite  xmllite.dll  Mon Jul 13 18:34:16 2009 (4A5BE098)
    Unloaded modules:
    000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL
       Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)
       Checksum:  0000FF7D
    00000000`72bf0000 00000000`72bf3000   sfc.dll 
       Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)
       Checksum:  00010B4F
    000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL
       Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)
       Checksum:  0000FF7D
    00000000`72bf0000 00000000`72bf3000   sfc.dll 
       Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)
       Checksum:  00010B4F
    000007fe`f9780000 000007fe`f97e4000   webio.dll
       Timestamp: Mon Jul 13 18:33:49 2009 (4A5BE07D)
       Checksum:  0006F5FB
    000007fe`f97f0000 000007fe`f985e000   WINHTTP.dll
       Timestamp: Mon Jul 13 18:34:34 2009 (4A5BE0AA)
       Checksum:  00071137
    000007fe`fa800000 000007fe`fa81f000   thumbcache.dll
       Timestamp: Mon Jul 13 18:33:34 2009 (4A5BE06E)
       Checksum:  00020620
    000007fe`f6570000 000007fe`f65c4000   OLEACC.dll
       Timestamp: Mon Jul 13 18:32:11 2009 (4A5BE01B)
       Checksum:  00057A8E
    000007fe`ef580000 000007fe`f014e000   IEFRAME.dll
       Timestamp: Mon Jul 13 18:28:31 2009 (4A5BDF3F)
       Checksum:  00BD3A6B
    000007fe`f2070000 000007fe`f20ab000   MLANG.dll
       Timestamp: Mon Jul 13 18:29:05 2009 (4A5BDF61)
       Checksum:  00038FA3
    000007fe`f6ba0000 000007fe`f6bea000   webcheck.dll
       Timestamp: Mon Jul 13 18:34:14 2009 (4A5BE096)
       Checksum:  00048A35
    000007fe`fad30000 000007fe`fad83000   fwpuclnt.dll
       Timestamp: Mon Jul 13 18:27:54 2009 (4A5BDF1A)
       Checksum:  0005E0D4
    000007fe`f94f0000 000007fe`f9528000   ncsi.dll
       Timestamp: Mon Jul 13 18:31:02 2009 (4A5BDFD6)
       Checksum:  000359DF
    000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL
       Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)
       Checksum:  0000FF7D
    00000000`72bf0000 00000000`72bf3000   sfc.dll 
       Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)
       Checksum:  00010B4F
    windbg> .hh 
    0:039> !for_each_module .echo @#ModuleName fver = @#FileVersion pver = @#ProductVersion 
    NLSLexicons0009 fver =  pver =
    FXSRESM fver =  pver =
    ksuser fver =  pver =
    user32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    kernel32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    ntdll fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    psapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    normaliz fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    explorer fver =  pver =
    ieframe fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385
    NLSData0009 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    davclnt fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    ntlanman fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    NaturalLanguage6 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    davhlpr fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    drprov fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    provsvc fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    ieproxy fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385
    werconcpl fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    SearchFolder fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    wpdshext fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    wscui fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    FXSAPI fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    SyncCenter fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    pnidui fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    StructuredQuery fver = 7.00.7600.16385 (win7_rtm.090713-1255) pver = 7.00.7600.16385
    FXSST fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    hgcpl fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    imapi2 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    Actioncenter fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    netshell fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    oleacc fver =  pver =
    bthprops fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    WWanAPI fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    NetworkExplorer fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    msi fver = 5.0.7600.16385 pver = 5.0.7600.16385
    PortableDeviceApi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    gameux fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    linkinfo fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    QAGENT fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    DXP fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    actxprxy fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    srchadmin fver = 7.00.7600.16385 (win7_rtm.090713-1255) pver = 7.00.7600.16385
    prnfldr fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    batmeter fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    cryptui fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    PortableDeviceTypes fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    UIAnimation fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    authui fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    EXPLORERFRAME fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    cscapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    wlanapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    tiptsf fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    msftedit fver =  pver =
    wer fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    mpr fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    mssprxy fver = 7.00.7600.16385 (win7_rtm.090713-1255) pver = 7.00.7600.16385
    npmproxy fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    stobject fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    wscapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    winspool fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    netprofm fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    QUTIL fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    wpdshserviceobj fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    msxml6 fver =  pver =
    taskschd fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    midimap fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    msacm32_7fefa620000 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    msacm32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    AudioSes fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    samcli fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    wkscli fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    netutils fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    Syncreg fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    EhStorAPI fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    thumbcache fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    WindowsCodecs fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    wdmaud fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    winmm fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    xmllite fver =  pver =
    dwmapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    dhcpcsvc6 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    dhcpcsvc fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    winnsi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    IPHLPAPI fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    wtsapi32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    slc fver =  pver =
    es fver = 2001.12.8530.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    dsrole fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    atl fver = 3.05.2284 pver = 6.05.2284
    nlaapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    ntmarta fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    hid fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    wwapi fver = 08.01.02.00 (win7_rtm.090713-1255) pver = 08.01.02.00
    msls31 fver =  pver =
    shacct fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    timedate fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    SndVolSSO fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    shdocvw fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    GdiPlus fver =  pver =
    uxtheme fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    MMDevAPI fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    avrt fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    wlanutil fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    propsys fver = 7.00.7600.16385 (win7_rtm.090713-1255) pver = 7.00.7600.16385
    powrprof fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    samlib fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    ehSSO fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    comctl32 fver =  pver =
    ntshrui fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    EhStorShell fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    dui70 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    duser fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    hcproviders fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    framedynos fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    wscinterop fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    AltTab fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    IconCodecService fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    msiltcfg fver = 5.0.7600.16385 (win7_rtm.090713-1255) pver = 5.0.7600.16385
    wercplsupport fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    version fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    userenv fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    devrtl fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    rsaenh fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    dnsapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    winsta fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    credssp fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    cryptsp fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    wevtapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    srvcli fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    secur32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    sspicli fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    apphelp fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    CRYPTBASE fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    sxs fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    RpcRtRemote fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    profapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    msasn1 fver =  pver =
    cfgmgr32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    wintrust fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    KERNELBASE fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    devobj fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    crypt32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    msvcrt fver = 7.0.7600.16385 (win7_rtm.090713-1255) pver = 7.0.7600.16385
    lpk fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    setupapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    nsi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    rpcrt4 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    imm32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    wininet fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385
    oleaut32 fver =  pver =
    gdi32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    ws2_32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    advapi32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    ole32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    usp10 fver = 1.0626.7600.16385 (win7_rtm.090713-1255) pver = 1.0626.7600.16385
    shlwapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    clbcatq fver = 2001.12.8530.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    Wldap32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    sechost fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    msctf fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
    urlmon fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385
    iertutil fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385
    shell32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
      My Computer


  6. Posts : 1,377
    Win7x64
       #36

    jcgriff2 said:

    I noticed in at least 2 posts that the Explorer.exe module contained a different version number and timestamp -

    Explorer.exe = 0x4a765771 = Sun Aug 02 20:20:17 2009

    ntdll.dll = 0x4a5be02b = Mon Jul 13 18:32:27 2009
    Hey JC :)

    Yeah, Dazeon's (same) Explorer.exe build had me a little concerned at the time:

    https://www.sevenforums.com/crashes-d...tml#post289860

    But sphericalpuma has it too, and by then the MS symbol server had symbols for it:

    https://www.sevenforums.com/crashes-d...esponding.html

    For what it's worth, it's sphericalpuma's crashes that make me suspect a potential problem in MS code somewhere, if only because in his case we ended up enabling full pageheap and the code which tripped the guard page was MS. It's entirely possible that pageheap would show the same stack in many of these other cases too, but not all of them.
      My Computer


  7. Posts : 24
    Win7 64bit
    Thread Starter
       #37

    for the sake of this thread I have uninstalled O&O Defrag 64 for the moment to see if it solves the issue.

    Keep in mind that I could reproduce the issue off a clean install of Windows 7 with just the updates. I'll keep you posted in the next day or two if I have any crashes with O&O uninstalled.
      My Computer


  8. Posts : 93
    Windows 10 Pro 64-bit
       #38

    Found another thread around here with someone having a similar Windows Explorer problem. I also did a registry edit as well. Just thought I would share this as it's something I did in addition to not installing O&O Defrag.

    1. Navigate to:
    HKLM->Software->Microsoft->Windows->Windows Error Reporting

    2. Create a REG_SZ called CorporateWERServer with the value of NotReally (or something fake, call it anything really).

    3. Create a REG_DWORD called ForceQueue with the value of 1.
    Don't forget to make a backup. Again, this may not work, but it's just something I was reading when someone was experiencing the "right click=crash" issue.
      My Computer


  9. Posts : 24
    Win7 64bit
    Thread Starter
       #39

    3+ hours and not a single crash yet (on an install which I have lots of other shell enhancements installed)

    I would typically have had one by now.

    The only thing I did was uninstall O&O Defrag 64-Bit



    (Im not counting my chickens yet)
      My Computer


  10. Posts : 24
    Win7 64bit
    Thread Starter
       #40

    Update:

    Not only did Explorer.exe crash just now, it brought down my whole O/S..(just a complete blank blue screen((NOT BSOD)) when I clicked "Restart Explorer"

    There goes it being just O&O Defrag!

    back to the drawing board!
      My Computer


 
Page 4 of 24 FirstFirst ... 2345614 ... LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 08:34.
Find Us