Firefox dmp

Jonathan_King · 07 Apr 2010

I've been playing around, and I created a dmp for Firefox. Note that I'm not having problems, I'm just trying to find out stuff.

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Jonathan\AppData\Local\Temp\firefox.DMP]
User Mini Dump File with Full Memory: Only application data is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Wed Apr  7 13:11:32.000 2010 (GMT-4)
System Uptime: 0 days 1:05:03.894
Process Uptime: 0 days 0:49:14.000
..........................................................WARNING: mswsock overlaps ntmarta
..WARNING: IPHLPAPI overlaps WSHTCPIP
..WARNING: t2embed overlaps winspool
..
.WARNING: dnsapi overlaps brwsrcmp
..WARNING: NapiNSP overlaps winrnr
..WARNING: WindowsCodecs overlaps js3250
.WARNING: apphelp overlaps version
....WARNING: cscapi overlaps dbghelp
...WARNING: rsaenh overlaps cryptsp
..WARNING: mscms overlaps EhStorShell
....WARNING: wship6 overlaps nlaapi
..WARNING: FWPUCLNT overlaps dnsapi
.....WARNING: explorerframe overlaps msxml6
.WARNING: duser overlaps WindowsCodecs
.WARNING: dui70 overlaps msxml6
WARNING: dui70 overlaps mscms
.WARNING: shdocvw overlaps msxml6
WARNING: shdocvw overlaps dui70
.........WARNING: mlang overlaps NPSWF32
.WARNING: MMDevAPI overlaps explorerframe
.WARNING: wdmaud overlaps MMDevAPI
...WARNING: AudioSes overlaps wdmaud
...WARNING: midimap overlaps msxml6
...
wow64cpu!CpupSyscallStub+0x9:
00000000`73112dd9 c3              ret

What can you tell me about that?

If a user posted a dmp of a frozen process, what can we do about it?

Here's my dmp: http://rapidshare.com/files/373129226/firefox.zip.html

**Capt.Jack Sparrow** · 08 Apr 2010

Hello JK,

First i'm not an expert in this but from the logs "WARNING: mswsock overlaps ntmarta..WARNING: IPHLPAPI overlaps WSHTCPIP..WARNING: t2embed overlaps winspool" what i can make out is it might be an issue with Windows Sockets API, Windows sockets settings may get corrupted.You might wanna reset it.

1. Open up the command prompt and type in

netsh winsock reset catalog (resets winsock entries)
netsh int ip reset reset.log hit (resets TCP/IP stack)
2. Reboot your PC

Then the basic things like disabling the add-ons etc.

Hope this helps,
Captain

jcgriff2 · 08 Apr 2010

Hi -

Some Windbg commands used to process kernel memory dumps can be used on user-mode dumps as well.

I ran these commands on your Firefox dump. Output is at end of post.

Code:

!analyze -v; kv; k; r; lmnt; lmntsm
 
!for_each_module .echo @#ModuleIndex : @#Base @#End @#ModuleName @#ImageName @#LoadedImageName
 
!for_each_module .echo @#ModuleName fver = @#FileVersion pver = @#ProductVersion

There is no bugcheck on this dump, just an NTSTATUS exception code - 0x80000003 = breakpoint, meaning that you "caused the process firefox.exe to "break".

Regards. . .

John

.

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [G:\Documents and Settings\PalmDesert\Local Settings\temp\SALB30.tmp\firefox.DMP]
User Mini Dump File with Full Memory: Only application data is available
WARNING: Whitespace at end of path element
Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Wed Apr  7 13:11:32.000 2010 (GMT-4)
System Uptime: 0 days 1:05:03.894
Process Uptime: 0 days 0:49:14.000
..........................................................WARNING: mswsock overlaps ntmarta
..WARNING: IPHLPAPI overlaps WSHTCPIP
..WARNING: t2embed overlaps winspool
..
.WARNING: dnsapi overlaps brwsrcmp
..WARNING: NapiNSP overlaps winrnr
..WARNING: WindowsCodecs overlaps js3250
.WARNING: apphelp overlaps version
....WARNING: cscapi overlaps dbghelp
...WARNING: rsaenh overlaps cryptsp
..WARNING: mscms overlaps EhStorShell
....WARNING: wship6 overlaps nlaapi
..WARNING: FWPUCLNT overlaps dnsapi
.....WARNING: explorerframe overlaps msxml6
.WARNING: duser overlaps WindowsCodecs
.WARNING: dui70 overlaps msxml6
WARNING: dui70 overlaps mscms
.WARNING: shdocvw overlaps msxml6
WARNING: shdocvw overlaps dui70
.........WARNING: mlang overlaps NPSWF32
.WARNING: MMDevAPI overlaps explorerframe
.WARNING: wdmaud overlaps MMDevAPI
...WARNING: AudioSes overlaps wdmaud
...WARNING: midimap overlaps msxml6
...
wow64cpu!CpupSyscallStub+0x9:
00000000`73112dd9 c3              ret
0:000> !analyze -v; kv; k; r; lmnt; lmntsm
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for smime3.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for nssutil3.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for plc4.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for nss3.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for plds4.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ssl3.dll - 
*** ERROR: Module load completed but symbols could not be loaded for firefox.exe
*** WARNING: Unable to verify checksum for softokn3.dll
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for softokn3.dll - 
*** WARNING: Unable to verify checksum for nssdbm3.dll
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for nssdbm3.dll - 
*** WARNING: Unable to verify checksum for freebl3.dll
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for freebl3.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for nssckbi.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for nspr4.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for xul.dll - 
*** WARNING: symbols timestamp is wrong 0x4a5bdf61 0x4a5bda21 for mlang.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdf61 0x4ae7bd0e for NPSWF32.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdf2e 0x4a5bd9fa for icm32.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdf8d 0x4a5bda35 for credssp.dll
*** WARNING: symbols timestamp is wrong 0x4a5be066 0x4a5bdb0c for secur32.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdf8f 0x4a5bda4e for msacm32.dll
*** WARNING: symbols timestamp is wrong 0x4a5bde75 0x4a5bd97e for AudioSes.dll
*** WARNING: symbols timestamp is wrong 0x4a5bde75 0x4a5bdb2a for wdmaud.drv
*** WARNING: symbols timestamp is wrong 0x4a5be083 0x4a5bda29 for MMDevAPI.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdf68 0x4a5bda55 for explorerframe.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdfc8 0x4a5bda84 for midimap.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdfc8 0x4a5bdb00 for shdocvw.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdfc8 0x4a5bda05 for dui70.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdf25 0x4a5bda67 for mscms.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdfa9 0x4a5bd9e3 for EhStorShell.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdf90 0x4a5bda4f for msacm32.drv
*** WARNING: symbols timestamp is wrong 0x4a5bdf26 0x4a5bda06 for duser.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdf26 0x4a5bdb3a for WindowsCodecs.dll
*** WARNING: symbols timestamp is wrong 0x4a5be0a5 0x4b50efa0 for js3250.dll
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for mozcrt19.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for sqlite3.dll - 
*** WARNING: symbols timestamp is wrong 0x4adc7ad2 0x4adc72ad for t2embed.dll
*** WARNING: symbols timestamp is wrong 0x4adc7ad2 0x4a5bdb4b for winspool.drv
*** WARNING: symbols timestamp is wrong 0x4a5be01f 0x4a5bbf41 for profapi.dll
*** WARNING: symbols timestamp is wrong 0x4a5be08b 0x4a5bdb31 for userenv.dll
*** WARNING: symbols timestamp is wrong 0x4a5be063 0x4a5bdb0d for slc.dll
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for slc.dll - 
*** WARNING: symbols timestamp is wrong 0x4a5be03f 0x4a5bdaeb for ntshrui.dll
*** WARNING: symbols timestamp is wrong 0x4a5be036 0x4a5bc6b3 for RpcRtRemote.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdfe6 0x4a5bdaa0 for msimg32.dll
*** WARNING: symbols timestamp is wrong 0x4a5be04e 0x4a5bdaf6 for pnrpnsp.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdfc6 0x4a5bda6d for NapiNSP.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdfc6 0x4a5bdb44 for winrnr.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdfc9 0x4a5bdb56 for wship6.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdf1a 0x4a5bda07 for FWPUCLNT.DLL
*** WARNING: symbols timestamp is wrong 0x4a5bdf1a 0x4a5bd9d9 for dnsapi.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdeed 0x4b5102e6 for brwsrcmp.dll
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for xpcom.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for browserdirprovider.dll - 
*** WARNING: symbols timestamp is wrong 0x4a5bde96 0x4a5bd998 for avrt.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdfe9 0x4a5bdab3 for ksuser.dll
*** WARNING: symbols timestamp is wrong 0x4a5be02d 0x4a5bdad6 for rasadhlp.dll
*** WARNING: symbols timestamp is wrong 0x4a5be0b1 0x4a5bdb43 for winnsi.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdfc4 0x4a5bda77 for mswsock.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdfc4 0x4a5bdae9 for ntmarta.dll
*** WARNING: symbols timestamp is wrong 0x4a5be022 0x4a5bdacb for propsys.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdf57 0x4a5bda1b for IPHLPAPI.DLL
*** WARNING: symbols timestamp is wrong 0x4a5bdf57 0x4a5bdb5a for WSHTCPIP.DLL
*** WARNING: symbols timestamp is wrong 0x4a5bdf27 0x4a5bda07 for dwmapi.dll
*** WARNING: symbols timestamp is wrong 0x4a5be0b0 0x4a5bdb42 for winmm.dll
*** WARNING: symbols timestamp is wrong 0x4a5be039 0x4a5bdae0 for rsaenh.dll
*** WARNING: symbols timestamp is wrong 0x4a5be039 0x4a5bda3d for cryptsp.dll
*** WARNING: symbols timestamp is wrong 0x4a5be0c1 0x4a5bdb63 for wsock32.dll
*** WARNING: symbols timestamp is wrong 0x4a5be093 0x4a5bdb3c for uxtheme.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdec4 0x4a5bbfd1 for cscapi.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdeac 0x4a5bd9b6 for apphelp.dll
*** WARNING: symbols timestamp is wrong 0x4a5bdeac 0x4a5bdb2b for version.dll
*** WARNING: symbols timestamp is wrong 0x4a5be08e 0x4a5bdb37 for srvcli.dll
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: kernel32!pNlsUserInfo                         ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: kernel32!pNlsUserInfo                         ***
***                                                                   ***
*************************************************************************
FAULTING_IP: 
+24b952f00a7df74
00000000`00000000 ??              ???
EXCEPTION_RECORD:  ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 0000000000000000
  ExceptionCode: 80000003 (Break instruction exception)
 ExceptionFlags: 00000000
NumberParameters: 0
FAULTING_THREAD:  0000000000000de0
DEFAULT_BUCKET_ID:  CORRUPT_MODULELIST
PROCESS_NAME:  firefox.exe
OVERLAPPED_MODULE: Address regions for 'msxml6' and 'midimap' overlap
ERROR_CODE: (NTSTATUS) 0x80000003 - {EXCEPTION}  Breakpoint  A breakpoint has been reached.
EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - One or more arguments are invalid
NTGLOBALFLAG:  0
APPLICATION_VERIFIER_FLAGS:  0
PRIMARY_PROBLEM_CLASS:  CORRUPT_MODULELIST
BUGCHECK_STR:  APPLICATION_FAULT_CORRUPT_MODULELIST_OVERLAPPED_MODULE
LAST_CONTROL_TRANSFER:  from 0000000073112d92 to 0000000073112dd9
STACK_TEXT:  
00000000`0015e438 00000000`73112d92 : 00000000`761d0e8f 00000000`73180023 00000000`02938008 00000000`003cf6c8 : wow64cpu!CpupSyscallStub+0x9
00000000`0015e440 00000000`7318d07e : 00000000`00000000 00000000`73111920 00000000`0015e6d0 00000000`77103ae1 : wow64cpu!Thunk0Arg+0x5
00000000`0015e500 00000000`7318c549 : 00000000`00000000 00000000`00000000 00000000`73184ac8 00000000`7ffe0030 : wow64!RunCpuSimulation+0xa
00000000`0015e550 00000000`771184c8 : 00000000`005a3080 00000000`00000000 00000000`77203670 00000000`771d57a0 : wow64!Wow64LdrpInitialize+0x429
00000000`0015eaa0 00000000`77117623 : 00000000`00000000 00000000`77119181 00000000`770d0000 00000000`00000000 : ntdll!LdrpInitializeProcess+0x17e2
00000000`0015efa0 00000000`7710308e : 00000000`0015f060 00000000`00000000 00000000`7efdf000 00000000`00000000 : ntdll! ?? ::FNODOBFM::`string'+0x2bea0
00000000`0015f010 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!LdrInitializeThunk+0xe
 
STACK_COMMAND:  ~0s; .ecxr ; kb
FOLLOWUP_IP: 
wow64cpu!CpupSyscallStub+9
00000000`73112dd9 c3              ret
SYMBOL_STACK_INDEX:  0
SYMBOL_NAME:  wow64cpu!CpupSyscallStub+9
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: wow64cpu
IMAGE_NAME:  wow64cpu.dll
DEBUG_FLR_IMAGE_TIMESTAMP:  4a5be125
FAILURE_BUCKET_ID:  CORRUPT_MODULELIST_80000003_wow64cpu.dll!CpupSyscallStub
BUCKET_ID:  X64_APPLICATION_FAULT_CORRUPT_MODULELIST_OVERLAPPED_MODULE_wow64cpu!CpupSyscallStub+9
WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne...htm?Retriage=1
Followup: MachineOwner
---------
Child-SP          RetAddr           : Args to Child                                                           : Call Site
00000000`0015e438 00000000`73112d92 : 00000000`761d0e8f 00000000`73180023 00000000`02938008 00000000`003cf6c8 : wow64cpu!CpupSyscallStub+0x9
00000000`0015e440 00000000`7318d07e : 00000000`00000000 00000000`73111920 00000000`0015e6d0 00000000`77103ae1 : wow64cpu!Thunk0Arg+0x5
00000000`0015e500 00000000`7318c549 : 00000000`00000000 00000000`00000000 00000000`73184ac8 00000000`7ffe0030 : wow64!RunCpuSimulation+0xa
00000000`0015e550 00000000`771184c8 : 00000000`005a3080 00000000`00000000 00000000`77203670 00000000`771d57a0 : wow64!Wow64LdrpInitialize+0x429
00000000`0015eaa0 00000000`77117623 : 00000000`00000000 00000000`77119181 00000000`770d0000 00000000`00000000 : ntdll!LdrpInitializeProcess+0x17e2
00000000`0015efa0 00000000`7710308e : 00000000`0015f060 00000000`00000000 00000000`7efdf000 00000000`00000000 : ntdll! ?? ::FNODOBFM::`string'+0x2bea0
00000000`0015f010 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!LdrInitializeThunk+0xe
Child-SP          RetAddr           Call Site
00000000`0015e438 00000000`73112d92 wow64cpu!CpupSyscallStub+0x9
00000000`0015e440 00000000`7318d07e wow64cpu!Thunk0Arg+0x5
00000000`0015e500 00000000`7318c549 wow64!RunCpuSimulation+0xa
00000000`0015e550 00000000`771184c8 wow64!Wow64LdrpInitialize+0x429
00000000`0015eaa0 00000000`77117623 ntdll!LdrpInitializeProcess+0x17e2
00000000`0015efa0 00000000`7710308e ntdll! ?? ::FNODOBFM::`string'+0x2bea0
00000000`0015f010 00000000`00000000 ntdll!LdrInitializeThunk+0xe
rax=000000000000000b rbx=0000000000000000 rcx=0000000000000000
rdx=000000000a2d9b46 rsi=00000000761d0112 rdi=0000000000000000
rip=0000000073112dd9 rsp=000000000015e438 rbp=000000000370b100
r8=000000000000002b  r9=00000000772cfa8a r10=0000000000000000
r11=0000000000000206 r12=000000007efdb000 r13=000000000015fd20
r14=000000000015e4b0 r15=0000000073112450
iopl=0         nv up ei pl zr na po nc
cs=0033  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
wow64cpu!CpupSyscallStub+0x9:
00000000`73112dd9 c3              ret
start             end                 module name
00000000`00020000 00000000`00038000   smime3   smime3.dll   Fri Jan 15 17:17:53 2010 (4B50E991)
00000000`000f0000 00000000`00104000   nssutil3 nssutil3.dll Fri Jan 15 17:16:13 2010 (4B50E92D)
00000000`00110000 00000000`00117000   plc4     plc4.dll     Fri Jan 15 16:35:54 2010 (4B50DFBA)
00000000`00160000 00000000`001fb000   nss3     nss3.dll     Fri Jan 15 17:17:34 2010 (4B50E97E)
00000000`00200000 00000000`00207000   plds4    plds4.dll    Fri Jan 15 16:35:51 2010 (4B50DFB7)
00000000`00210000 00000000`00230000   ssl3     ssl3.dll     Fri Jan 15 17:17:43 2010 (4B50E987)
00000000`010e0000 00000000`011c0000   firefox  firefox.exe  Fri Jan 15 19:06:08 2010 (4B5102F0)
00000000`03e80000 00000000`03ea6000   softokn3 softokn3.dll Fri Jan 15 17:16:30 2010 (4B50E93E)
00000000`03eb0000 00000000`03ec8000   nssdbm3  nssdbm3.dll  Fri Jan 15 17:16:34 2010 (4B50E942)
00000000`04920000 00000000`04961000   freebl3  freebl3.dll  Fri Jan 15 17:16:24 2010 (4B50E938)
00000000`049f0000 00000000`04a42000   nssckbi  nssckbi.dll  Fri Jan 15 17:18:05 2010 (4B50E99D)
00000000`10000000 00000000`10029000   nspr4    nspr4.dll    Fri Jan 15 16:35:50 2010 (4B50DFB6)
00000000`6fc90000 00000000`707bf000   xul      xul.dll      Fri Jan 15 19:01:18 2010 (4B5101CE)
00000000`72120000 00000000`72159000   schannel schannel.dll Mon Jul 13 21:10:03 2009 (4A5BDAEB)
00000000`72160000 00000000`7219b000   mlang    mlang.dll    Mon Jul 13 21:29:05 2009 (4A5BDF61)
00000000`72190000 00000000`72626000   NPSWF32  NPSWF32.dll  Tue Oct 27 23:39:58 2009 (4AE7BD0E)
00000000`72630000 00000000`72672000   icm32    icm32.dll    Mon Jul 13 21:28:14 2009 (4A5BDF2E)
00000000`72690000 00000000`72699000   credssp  credssp.dll  Mon Jul 13 21:29:49 2009 (4A5BDF8D)
00000000`726a0000 00000000`726ab000   secur32  secur32.dll  Mon Jul 13 21:33:26 2009 (4A5BE066)
00000000`726b0000 00000000`726c8000   msacm32_726b0000 msacm32.dll  Mon Jul 13 21:29:51 2009 (4A5BDF8F)
00000000`726d0000 00000000`7271f000   AudioSes AudioSes.dll Mon Jul 13 21:25:09 2009 (4A5BDE75)
00000000`72710000 00000000`7274b000   wdmaud   wdmaud.drv   Mon Jul 13 21:33:55 2009 (4A5BE083)
00000000`72740000 00000000`7278b000   MMDevAPI MMDevAPI.dll Mon Jul 13 21:29:12 2009 (4A5BDF68)
00000000`72780000 00000000`7294a000   explorerframe explorerframe.dll Mon Jul 13 21:29:38 2009 (4A5BDF82)
00000000`728f0000 00000000`72ae0000   msxml6   msxml6.dll   Mon Jul 13 21:30:48 2009 (4A5BDFC8)
00000000`72a60000 00000000`72a69000   midimap  midimap.dll  Mon Jul 13 21:30:38 2009 (4A5BDFBE)
00000000`72a80000 00000000`72ab3000   shdocvw  shdocvw.dll  Mon Jul 13 21:33:07 2009 (4A5BE053)
00000000`72ab0000 00000000`72ba2000   dui70    dui70.dll    Mon Jul 13 21:28:05 2009 (4A5BDF25)
00000000`72b70000 00000000`72c0c000   mscms    mscms.dll    Mon Jul 13 21:30:17 2009 (4A5BDFA9)
00000000`72bf0000 00000000`72c25000   EhStorShell EhStorShell.dll Mon Jul 13 21:27:22 2009 (4A5BDEFA)
00000000`72c30000 00000000`72c3a000   msacm32  msacm32.drv  Mon Jul 13 21:29:52 2009 (4A5BDF90)
00000000`72c40000 00000000`72c83000   duser    duser.dll    Mon Jul 13 21:28:06 2009 (4A5BDF26)
00000000`72c70000 00000000`72d9a000   WindowsCodecs WindowsCodecs.dll Mon Jul 13 21:34:29 2009 (4A5BE0A5)
00000000`72d70000 00000000`72e6a000   js3250   js3250.dll   Fri Jan 15 17:43:44 2010 (4B50EFA0)
00000000`72e70000 00000000`72f20000   mozcrt19 mozcrt19.dll Fri Jan 15 16:33:50 2010 (4B50DF3E)
00000000`72f20000 00000000`72f93000   sqlite3  sqlite3.dll  Fri Jan 15 16:46:56 2010 (4B50E250)
00000000`72fa0000 00000000`72fc9000   t2embed  t2embed.dll  Mon Oct 19 10:42:26 2009 (4ADC7AD2)
00000000`72fc0000 00000000`73030000   winspool winspool.drv Mon Jul 13 21:34:55 2009 (4A5BE0BF)
00000000`730e0000 00000000`730ef000   profapi  profapi.dll  Mon Jul 13 21:32:15 2009 (4A5BE01F)
00000000`730f0000 00000000`7310e000   userenv  userenv.dll  Mon Jul 13 21:34:03 2009 (4A5BE08B)
00000000`73110000 00000000`73118000   wow64cpu wow64cpu.dll Mon Jul 13 21:36:37 2009 (4A5BE125)
00000000`73120000 00000000`7317c000   wow64win wow64win.dll Mon Jul 13 21:36:39 2009 (4A5BE127)
00000000`73180000 00000000`731bf000   wow64    wow64.dll    Tue Dec 22 03:31:31 2009 (4B3083E3)
00000000`732c0000 00000000`732cb000   slc      slc.dll      Mon Jul 13 21:33:23 2009 (4A5BE063)
00000000`732d0000 00000000`73350000   ntshrui  ntshrui.dll  Mon Jul 13 21:32:47 2009 (4A5BE03F)
00000000`73350000 00000000`73364000   RpcRtRemote RpcRtRemote.dll Mon Jul 13 21:32:38 2009 (4A5BE036)
00000000`73450000 00000000`73457000   msimg32  msimg32.dll  Mon Jul 13 21:31:18 2009 (4A5BDFE6)
00000000`73460000 00000000`73479000   pnrpnsp  pnrpnsp.dll  Mon Jul 13 21:33:02 2009 (4A5BE04E)
00000000`73480000 00000000`73495000   NapiNSP  NapiNSP.dll  Mon Jul 13 21:30:46 2009 (4A5BDFC6)
00000000`73490000 00000000`7349b000   winrnr   winrnr.dll   Mon Jul 13 21:34:43 2009 (4A5BE0B3)
00000000`734a0000 00000000`734b5000   nlaapi   nlaapi.dll   Mon Jul 13 21:30:49 2009 (4A5BDFC9)
00000000`734b0000 00000000`734b7000   wship6   wship6.dll   Mon Jul 13 21:34:41 2009 (4A5BE0B1)
00000000`734c0000 00000000`73513000   FWPUCLNT FWPUCLNT.DLL Mon Jul 13 21:27:54 2009 (4A5BDF1A)
00000000`73500000 00000000`7355b000   dnsapi   dnsapi.dll   Mon Jul 13 21:27:09 2009 (4A5BDEED)
00000000`73550000 00000000`73574000   brwsrcmp brwsrcmp.dll Fri Jan 15 19:05:58 2010 (4B5102E6)
00000000`73580000 00000000`73587000   xpcom    xpcom.dll    Fri Jan 15 19:02:52 2010 (4B51022C)
00000000`73590000 00000000`73598000   browserdirprovider browserdirprovider.dll Fri Jan 15 19:05:39 2010 (4B5102D3)
00000000`735a0000 00000000`735a9000   avrt     avrt.dll     Mon Jul 13 21:25:42 2009 (4A5BDE96)
00000000`735b0000 00000000`735b6000   ksuser   ksuser.dll   Mon Jul 13 21:31:21 2009 (4A5BDFE9)
00000000`735c0000 00000000`735c8000   rasadhlp rasadhlp.dll Mon Jul 13 21:32:29 2009 (4A5BE02D)
00000000`735d0000 00000000`735db000   winnsi   winnsi.dll   Mon Jul 13 21:34:41 2009 (4A5BE0B1)
00000000`735e0000 00000000`73634000   mswsock  mswsock.dll  Mon Jul 13 21:30:44 2009 (4A5BDFC4)
00000000`73620000 00000000`7364d000   ntmarta  ntmarta.dll  Mon Jul 13 21:32:45 2009 (4A5BE03D)
00000000`73650000 00000000`7377c000   propsys  propsys.dll  Mon Jul 13 21:32:18 2009 (4A5BE022)
00000000`73da0000 00000000`73dc7000   IPHLPAPI IPHLPAPI.DLL Mon Jul 13 21:28:55 2009 (4A5BDF57)
00000000`73dc0000 00000000`73dc7000   WSHTCPIP WSHTCPIP.DLL Mon Jul 13 21:34:47 2009 (4A5BE0B7)
00000000`73fc0000 00000000`73fd8000   dwmapi   dwmapi.dll   Mon Jul 13 21:28:07 2009 (4A5BDF27)
00000000`73fe0000 00000000`7401b000   winmm    winmm.dll    Mon Jul 13 21:34:40 2009 (4A5BE0B0)
00000000`74020000 00000000`74067000   rsaenh   rsaenh.dll   Mon Jul 13 21:32:41 2009 (4A5BE039)
00000000`74060000 00000000`74077000   cryptsp  cryptsp.dll  Mon Jul 13 21:29:58 2009 (4A5BDF96)
00000000`74080000 00000000`74089000   wsock32  wsock32.dll  Mon Jul 13 21:34:57 2009 (4A5BE0C1)
00000000`74090000 00000000`740e6000   uxtheme  uxtheme.dll  Mon Jul 13 21:34:11 2009 (4A5BE093)
00000000`74110000 00000000`742ae000   comctl32 comctl32.dll Mon Jul 13 21:03:50 2009 (4A5BD976)
00000000`742f0000 00000000`74415000   dbghelp  dbghelp.dll  Mon Jul 13 21:26:28 2009 (4A5BDEC4)
00000000`743e0000 00000000`743ef000   cscapi   cscapi.dll   Mon Jul 13 21:30:03 2009 (4A5BDF9B)
00000000`74470000 00000000`744c7000   apphelp  apphelp.dll  Mon Jul 13 21:26:04 2009 (4A5BDEAC)
00000000`744c0000 00000000`744cc000   version  version.dll  Mon Jul 13 21:33:54 2009 (4A5BE082)
00000000`744d0000 00000000`744f3000   srvcli   srvcli.dll   Mon Jul 13 21:34:06 2009 (4A5BE08E)
00000000`74e10000 00000000`74e1c000   CRYPTBASE CRYPTBASE.dll Mon Jul 13 19:12:01 2009 (4A5BBF41)
00000000`74e20000 00000000`74e80000   sspicli  sspicli.dll  Mon Jul 13 21:11:23 2009 (4A5BDB3B)
00000000`74ec0000 00000000`74ed2000   devobj   devobj.dll   Mon Jul 13 21:05:09 2009 (4A5BD9C5)
00000000`74ee0000 00000000`75b29000   shell32  shell32.dll  Mon Jul 13 21:10:25 2009 (4A5BDB01)
00000000`75b30000 00000000`75c20000   rpcrt4   rpcrt4.dll   Mon Jul 13 21:11:23 2009 (4A5BDB3B)
00000000`75c20000 00000000`75d55000   urlmon   urlmon.dll   Tue Feb 23 02:51:51 2010 (4B838917)
00000000`75d60000 00000000`75d63000   normaliz normaliz.dll Mon Jul 13 21:09:40 2009 (4A5BDAD4)
00000000`75d70000 00000000`75d97000   cfgmgr32 cfgmgr32.dll Mon Jul 13 21:04:38 2009 (4A5BD9A6)
00000000`75da0000 00000000`75ea0000   kernel32 kernel32.dll Mon Jul 13 21:14:06 2009 (4A5BDBDE)
00000000`75ed0000 00000000`75f15000   Wldap32  Wldap32.dll  Mon Jul 13 21:12:02 2009 (4A5BDB62)
00000000`75f20000 00000000`75f2c000   msasn1   msasn1.dll   Sat Aug 29 02:52:40 2009 (4A98D038)
00000000`75f90000 00000000`7612d000   setupapi setupapi.dll Mon Jul 13 21:10:22 2009 (4A5BDAFE)
00000000`76130000 00000000`761ab000   comdlg32 comdlg32.dll Mon Jul 13 21:06:45 2009 (4A5BDA25)
00000000`761b0000 00000000`762b0000   user32   user32.dll   Mon Jul 13 21:11:24 2009 (4A5BDB3C)
00000000`762b0000 00000000`7637c000   msctf    msctf.dll    Mon Jul 13 21:07:53 2009 (4A5BDA69)
00000000`76380000 00000000`76399000   sechost  sechost.dll  Mon Jul 13 21:10:28 2009 (4A5BDB04)
00000000`763a0000 00000000`763d5000   ws2_32   ws2_32.dll   Mon Jul 13 21:11:38 2009 (4A5BDB4A)
00000000`763e0000 00000000`76426000   KERNELBASE KERNELBASE.dll Mon Jul 13 21:14:07 2009 (4A5BDBDF)
00000000`76430000 00000000`764cd000   usp10    usp10.dll    Mon Jul 13 21:11:14 2009 (4A5BDB32)
00000000`764d0000 00000000`7662c000   ole32    ole32.dll    Mon Jul 13 21:09:27 2009 (4A5BDAC7)
00000000`76630000 00000000`76636000   nsi      nsi.dll      Mon Jul 13 21:09:45 2009 (4A5BDAD9)
00000000`76640000 00000000`766ec000   msvcrt   msvcrt.dll   Mon Jul 13 21:07:59 2009 (4A5BDA6F)
00000000`766f0000 00000000`76747000   shlwapi  shlwapi.dll  Mon Jul 13 21:10:29 2009 (4A5BDB05)
00000000`76750000 00000000`767b0000   imm32    imm32.dll    Mon Jul 13 21:11:21 2009 (4A5BDB39)
00000000`767b0000 00000000`768a4000   wininet  wininet.dll  Tue Feb 23 02:52:13 2010 (4B83892D)
00000000`768b0000 00000000`76933000   clbcatq  clbcatq.dll  Mon Jul 13 21:04:49 2009 (4A5BD9B1)
00000000`76940000 00000000`769d0000   gdi32    gdi32.dll    Mon Jul 13 21:11:20 2009 (4A5BDB38)
00000000`769d0000 00000000`76a70000   advapi32 advapi32.dll Mon Jul 13 21:03:58 2009 (4A5BD97E)
00000000`76a70000 00000000`76c69000   iertutil iertutil.dll Mon Jul 13 21:06:20 2009 (4A5BDA0C)
00000000`76c70000 00000000`76d8c000   crypt32  crypt32.dll  Mon Jul 13 21:07:05 2009 (4A5BDA39)
00000000`76e20000 00000000`76eaf000   oleaut32 oleaut32.dll Mon Jul 13 21:09:30 2009 (4A5BDACA)
00000000`770d0000 00000000`7727b000   ntdll    ntdll.dll    Mon Jul 13 21:32:27 2009 (4A5BE02B)
00000000`77280000 00000000`7728a000   lpk      lpk.dll      Mon Jul 13 21:11:23 2009 (4A5BDB3B)
00000000`772b0000 00000000`77430000   ntdll_772b0000 ntdll.dll    Mon Jul 13 21:11:23 2009 (4A5BDB3B)
start             end                 module name
00000000`769d0000 00000000`76a70000   advapi32 advapi32.dll Mon Jul 13 21:03:58 2009 (4A5BD97E)
00000000`74470000 00000000`744c7000   apphelp  apphelp.dll  Mon Jul 13 21:26:04 2009 (4A5BDEAC)
00000000`726d0000 00000000`7271f000   AudioSes AudioSes.dll Mon Jul 13 21:25:09 2009 (4A5BDE75)
00000000`735a0000 00000000`735a9000   avrt     avrt.dll     Mon Jul 13 21:25:42 2009 (4A5BDE96)
00000000`73590000 00000000`73598000   browserdirprovider browserdirprovider.dll Fri Jan 15 19:05:39 2010 (4B5102D3)
00000000`73550000 00000000`73574000   brwsrcmp brwsrcmp.dll Fri Jan 15 19:05:58 2010 (4B5102E6)
00000000`75d70000 00000000`75d97000   cfgmgr32 cfgmgr32.dll Mon Jul 13 21:04:38 2009 (4A5BD9A6)
00000000`768b0000 00000000`76933000   clbcatq  clbcatq.dll  Mon Jul 13 21:04:49 2009 (4A5BD9B1)
00000000`74110000 00000000`742ae000   comctl32 comctl32.dll Mon Jul 13 21:03:50 2009 (4A5BD976)
00000000`76130000 00000000`761ab000   comdlg32 comdlg32.dll Mon Jul 13 21:06:45 2009 (4A5BDA25)
00000000`72690000 00000000`72699000   credssp  credssp.dll  Mon Jul 13 21:29:49 2009 (4A5BDF8D)
00000000`76c70000 00000000`76d8c000   crypt32  crypt32.dll  Mon Jul 13 21:07:05 2009 (4A5BDA39)
00000000`74e10000 00000000`74e1c000   CRYPTBASE CRYPTBASE.dll Mon Jul 13 19:12:01 2009 (4A5BBF41)
00000000`74060000 00000000`74077000   cryptsp  cryptsp.dll  Mon Jul 13 21:29:58 2009 (4A5BDF96)
00000000`743e0000 00000000`743ef000   cscapi   cscapi.dll   Mon Jul 13 21:30:03 2009 (4A5BDF9B)
00000000`742f0000 00000000`74415000   dbghelp  dbghelp.dll  Mon Jul 13 21:26:28 2009 (4A5BDEC4)
00000000`74ec0000 00000000`74ed2000   devobj   devobj.dll   Mon Jul 13 21:05:09 2009 (4A5BD9C5)
00000000`73500000 00000000`7355b000   dnsapi   dnsapi.dll   Mon Jul 13 21:27:09 2009 (4A5BDEED)
00000000`72ab0000 00000000`72ba2000   dui70    dui70.dll    Mon Jul 13 21:28:05 2009 (4A5BDF25)
00000000`72c40000 00000000`72c83000   duser    duser.dll    Mon Jul 13 21:28:06 2009 (4A5BDF26)
00000000`73fc0000 00000000`73fd8000   dwmapi   dwmapi.dll   Mon Jul 13 21:28:07 2009 (4A5BDF27)
00000000`72bf0000 00000000`72c25000   EhStorShell EhStorShell.dll Mon Jul 13 21:27:22 2009 (4A5BDEFA)
00000000`72780000 00000000`7294a000   explorerframe explorerframe.dll Mon Jul 13 21:29:38 2009 (4A5BDF82)
00000000`010e0000 00000000`011c0000   firefox  firefox.exe  Fri Jan 15 19:06:08 2010 (4B5102F0)
00000000`04920000 00000000`04961000   freebl3  freebl3.dll  Fri Jan 15 17:16:24 2010 (4B50E938)
00000000`734c0000 00000000`73513000   FWPUCLNT FWPUCLNT.DLL Mon Jul 13 21:27:54 2009 (4A5BDF1A)
00000000`76940000 00000000`769d0000   gdi32    gdi32.dll    Mon Jul 13 21:11:20 2009 (4A5BDB38)
00000000`72630000 00000000`72672000   icm32    icm32.dll    Mon Jul 13 21:28:14 2009 (4A5BDF2E)
00000000`76a70000 00000000`76c69000   iertutil iertutil.dll Mon Jul 13 21:06:20 2009 (4A5BDA0C)
00000000`76750000 00000000`767b0000   imm32    imm32.dll    Mon Jul 13 21:11:21 2009 (4A5BDB39)
00000000`73da0000 00000000`73dc7000   IPHLPAPI IPHLPAPI.DLL Mon Jul 13 21:28:55 2009 (4A5BDF57)
00000000`72d70000 00000000`72e6a000   js3250   js3250.dll   Fri Jan 15 17:43:44 2010 (4B50EFA0)
00000000`75da0000 00000000`75ea0000   kernel32 kernel32.dll Mon Jul 13 21:14:06 2009 (4A5BDBDE)
00000000`763e0000 00000000`76426000   KERNELBASE KERNELBASE.dll Mon Jul 13 21:14:07 2009 (4A5BDBDF)
00000000`735b0000 00000000`735b6000   ksuser   ksuser.dll   Mon Jul 13 21:31:21 2009 (4A5BDFE9)
00000000`77280000 00000000`7728a000   lpk      lpk.dll      Mon Jul 13 21:11:23 2009 (4A5BDB3B)
00000000`72a60000 00000000`72a69000   midimap  midimap.dll  Mon Jul 13 21:30:38 2009 (4A5BDFBE)
00000000`72160000 00000000`7219b000   mlang    mlang.dll    Mon Jul 13 21:29:05 2009 (4A5BDF61)
00000000`72740000 00000000`7278b000   MMDevAPI MMDevAPI.dll Mon Jul 13 21:29:12 2009 (4A5BDF68)
00000000`72e70000 00000000`72f20000   mozcrt19 mozcrt19.dll Fri Jan 15 16:33:50 2010 (4B50DF3E)
00000000`72c30000 00000000`72c3a000   msacm32  msacm32.drv  Mon Jul 13 21:29:52 2009 (4A5BDF90)
00000000`726b0000 00000000`726c8000   msacm32_726b0000 msacm32.dll  Mon Jul 13 21:29:51 2009 (4A5BDF8F)
00000000`75f20000 00000000`75f2c000   msasn1   msasn1.dll   Sat Aug 29 02:52:40 2009 (4A98D038)
00000000`72b70000 00000000`72c0c000   mscms    mscms.dll    Mon Jul 13 21:30:17 2009 (4A5BDFA9)
00000000`762b0000 00000000`7637c000   msctf    msctf.dll    Mon Jul 13 21:07:53 2009 (4A5BDA69)
00000000`73450000 00000000`73457000   msimg32  msimg32.dll  Mon Jul 13 21:31:18 2009 (4A5BDFE6)
00000000`76640000 00000000`766ec000   msvcrt   msvcrt.dll   Mon Jul 13 21:07:59 2009 (4A5BDA6F)
00000000`735e0000 00000000`73634000   mswsock  mswsock.dll  Mon Jul 13 21:30:44 2009 (4A5BDFC4)
00000000`728f0000 00000000`72ae0000   msxml6   msxml6.dll   Mon Jul 13 21:30:48 2009 (4A5BDFC8)
00000000`73480000 00000000`73495000   NapiNSP  NapiNSP.dll  Mon Jul 13 21:30:46 2009 (4A5BDFC6)
00000000`734a0000 00000000`734b5000   nlaapi   nlaapi.dll   Mon Jul 13 21:30:49 2009 (4A5BDFC9)
00000000`75d60000 00000000`75d63000   normaliz normaliz.dll Mon Jul 13 21:09:40 2009 (4A5BDAD4)
00000000`72190000 00000000`72626000   NPSWF32  NPSWF32.dll  Tue Oct 27 23:39:58 2009 (4AE7BD0E)
00000000`76630000 00000000`76636000   nsi      nsi.dll      Mon Jul 13 21:09:45 2009 (4A5BDAD9)
00000000`10000000 00000000`10029000   nspr4    nspr4.dll    Fri Jan 15 16:35:50 2010 (4B50DFB6)
00000000`00160000 00000000`001fb000   nss3     nss3.dll     Fri Jan 15 17:17:34 2010 (4B50E97E)
00000000`049f0000 00000000`04a42000   nssckbi  nssckbi.dll  Fri Jan 15 17:18:05 2010 (4B50E99D)
00000000`03eb0000 00000000`03ec8000   nssdbm3  nssdbm3.dll  Fri Jan 15 17:16:34 2010 (4B50E942)
00000000`000f0000 00000000`00104000   nssutil3 nssutil3.dll Fri Jan 15 17:16:13 2010 (4B50E92D)
00000000`770d0000 00000000`7727b000   ntdll    ntdll.dll    Mon Jul 13 21:32:27 2009 (4A5BE02B)
00000000`772b0000 00000000`77430000   ntdll_772b0000 ntdll.dll    Mon Jul 13 21:11:23 2009 (4A5BDB3B)
00000000`73620000 00000000`7364d000   ntmarta  ntmarta.dll  Mon Jul 13 21:32:45 2009 (4A5BE03D)
00000000`732d0000 00000000`73350000   ntshrui  ntshrui.dll  Mon Jul 13 21:32:47 2009 (4A5BE03F)
00000000`764d0000 00000000`7662c000   ole32    ole32.dll    Mon Jul 13 21:09:27 2009 (4A5BDAC7)
00000000`76e20000 00000000`76eaf000   oleaut32 oleaut32.dll Mon Jul 13 21:09:30 2009 (4A5BDACA)
00000000`00110000 00000000`00117000   plc4     plc4.dll     Fri Jan 15 16:35:54 2010 (4B50DFBA)
00000000`00200000 00000000`00207000   plds4    plds4.dll    Fri Jan 15 16:35:51 2010 (4B50DFB7)
00000000`73460000 00000000`73479000   pnrpnsp  pnrpnsp.dll  Mon Jul 13 21:33:02 2009 (4A5BE04E)
00000000`730e0000 00000000`730ef000   profapi  profapi.dll  Mon Jul 13 21:32:15 2009 (4A5BE01F)
00000000`73650000 00000000`7377c000   propsys  propsys.dll  Mon Jul 13 21:32:18 2009 (4A5BE022)
00000000`735c0000 00000000`735c8000   rasadhlp rasadhlp.dll Mon Jul 13 21:32:29 2009 (4A5BE02D)
00000000`75b30000 00000000`75c20000   rpcrt4   rpcrt4.dll   Mon Jul 13 21:11:23 2009 (4A5BDB3B)
00000000`73350000 00000000`73364000   RpcRtRemote RpcRtRemote.dll Mon Jul 13 21:32:38 2009 (4A5BE036)
00000000`74020000 00000000`74067000   rsaenh   rsaenh.dll   Mon Jul 13 21:32:41 2009 (4A5BE039)
00000000`72120000 00000000`72159000   schannel schannel.dll Mon Jul 13 21:10:03 2009 (4A5BDAEB)
00000000`76380000 00000000`76399000   sechost  sechost.dll  Mon Jul 13 21:10:28 2009 (4A5BDB04)
00000000`726a0000 00000000`726ab000   secur32  secur32.dll  Mon Jul 13 21:33:26 2009 (4A5BE066)
00000000`75f90000 00000000`7612d000   setupapi setupapi.dll Mon Jul 13 21:10:22 2009 (4A5BDAFE)
00000000`72a80000 00000000`72ab3000   shdocvw  shdocvw.dll  Mon Jul 13 21:33:07 2009 (4A5BE053)
00000000`74ee0000 00000000`75b29000   shell32  shell32.dll  Mon Jul 13 21:10:25 2009 (4A5BDB01)
00000000`766f0000 00000000`76747000   shlwapi  shlwapi.dll  Mon Jul 13 21:10:29 2009 (4A5BDB05)
00000000`732c0000 00000000`732cb000   slc      slc.dll      Mon Jul 13 21:33:23 2009 (4A5BE063)
00000000`00020000 00000000`00038000   smime3   smime3.dll   Fri Jan 15 17:17:53 2010 (4B50E991)
00000000`03e80000 00000000`03ea6000   softokn3 softokn3.dll Fri Jan 15 17:16:30 2010 (4B50E93E)
00000000`72f20000 00000000`72f93000   sqlite3  sqlite3.dll  Fri Jan 15 16:46:56 2010 (4B50E250)
00000000`744d0000 00000000`744f3000   srvcli   srvcli.dll   Mon Jul 13 21:34:06 2009 (4A5BE08E)
00000000`00210000 00000000`00230000   ssl3     ssl3.dll     Fri Jan 15 17:17:43 2010 (4B50E987)
00000000`74e20000 00000000`74e80000   sspicli  sspicli.dll  Mon Jul 13 21:11:23 2009 (4A5BDB3B)
00000000`72fa0000 00000000`72fc9000   t2embed  t2embed.dll  Mon Oct 19 10:42:26 2009 (4ADC7AD2)
00000000`75c20000 00000000`75d55000   urlmon   urlmon.dll   Tue Feb 23 02:51:51 2010 (4B838917)
00000000`761b0000 00000000`762b0000   user32   user32.dll   Mon Jul 13 21:11:24 2009 (4A5BDB3C)
00000000`730f0000 00000000`7310e000   userenv  userenv.dll  Mon Jul 13 21:34:03 2009 (4A5BE08B)
00000000`76430000 00000000`764cd000   usp10    usp10.dll    Mon Jul 13 21:11:14 2009 (4A5BDB32)
00000000`74090000 00000000`740e6000   uxtheme  uxtheme.dll  Mon Jul 13 21:34:11 2009 (4A5BE093)
00000000`744c0000 00000000`744cc000   version  version.dll  Mon Jul 13 21:33:54 2009 (4A5BE082)
00000000`72710000 00000000`7274b000   wdmaud   wdmaud.drv   Mon Jul 13 21:33:55 2009 (4A5BE083)
00000000`72c70000 00000000`72d9a000   WindowsCodecs WindowsCodecs.dll Mon Jul 13 21:34:29 2009 (4A5BE0A5)
00000000`767b0000 00000000`768a4000   wininet  wininet.dll  Tue Feb 23 02:52:13 2010 (4B83892D)
00000000`73fe0000 00000000`7401b000   winmm    winmm.dll    Mon Jul 13 21:34:40 2009 (4A5BE0B0)
00000000`735d0000 00000000`735db000   winnsi   winnsi.dll   Mon Jul 13 21:34:41 2009 (4A5BE0B1)
00000000`73490000 00000000`7349b000   winrnr   winrnr.dll   Mon Jul 13 21:34:43 2009 (4A5BE0B3)
00000000`72fc0000 00000000`73030000   winspool winspool.drv Mon Jul 13 21:34:55 2009 (4A5BE0BF)
00000000`75ed0000 00000000`75f15000   Wldap32  Wldap32.dll  Mon Jul 13 21:12:02 2009 (4A5BDB62)
00000000`73180000 00000000`731bf000   wow64    wow64.dll    Tue Dec 22 03:31:31 2009 (4B3083E3)
00000000`73110000 00000000`73118000   wow64cpu wow64cpu.dll Mon Jul 13 21:36:37 2009 (4A5BE125)
00000000`73120000 00000000`7317c000   wow64win wow64win.dll Mon Jul 13 21:36:39 2009 (4A5BE127)
00000000`763a0000 00000000`763d5000   ws2_32   ws2_32.dll   Mon Jul 13 21:11:38 2009 (4A5BDB4A)
00000000`734b0000 00000000`734b7000   wship6   wship6.dll   Mon Jul 13 21:34:41 2009 (4A5BE0B1)
00000000`73dc0000 00000000`73dc7000   WSHTCPIP WSHTCPIP.DLL Mon Jul 13 21:34:47 2009 (4A5BE0B7)
00000000`74080000 00000000`74089000   wsock32  wsock32.dll  Mon Jul 13 21:34:57 2009 (4A5BE0C1)
00000000`73580000 00000000`73587000   xpcom    xpcom.dll    Fri Jan 15 19:02:52 2010 (4B51022C)
00000000`6fc90000 00000000`707bf000   xul      xul.dll      Fri Jan 15 19:01:18 2010 (4B5101CE)
0:000> !for_each_module .echo @#ModuleIndex : @#Base @#End @#ModuleName @#ImageName @#LoadedImageName
00 : 0000000000020000 0000000000038000 smime3 C:\Program Files (x86)\Mozilla Firefox\smime3.dll smime3.dll
01 : 00000000000f0000 0000000000104000 nssutil3 C:\Program Files (x86)\Mozilla Firefox\nssutil3.dll nssutil3.dll
02 : 0000000000110000 0000000000117000 plc4 C:\Program Files (x86)\Mozilla Firefox\plc4.dll plc4.dll
03 : 0000000000160000 00000000001fb000 nss3 C:\Program Files (x86)\Mozilla Firefox\nss3.dll nss3.dll
04 : 0000000000200000 0000000000207000 plds4 C:\Program Files (x86)\Mozilla Firefox\plds4.dll plds4.dll
05 : 0000000000210000 0000000000230000 ssl3 C:\Program Files (x86)\Mozilla Firefox\ssl3.dll ssl3.dll
06 : 00000000010e0000 00000000011c0000 firefox C:\Program Files (x86)\Mozilla Firefox\firefox.exe firefox.exe
07 : 0000000003e80000 0000000003ea6000 softokn3 C:\Program Files (x86)\Mozilla Firefox\softokn3.dll softokn3.dll
08 : 0000000003eb0000 0000000003ec8000 nssdbm3 C:\Program Files (x86)\Mozilla Firefox\nssdbm3.dll nssdbm3.dll
09 : 0000000004920000 0000000004961000 freebl3 C:\Program Files (x86)\Mozilla Firefox\freebl3.dll freebl3.dll
0a : 00000000049f0000 0000000004a42000 nssckbi C:\Program Files (x86)\Mozilla Firefox\nssckbi.dll nssckbi.dll
0b : 0000000010000000 0000000010029000 nspr4 C:\Program Files (x86)\Mozilla Firefox\nspr4.dll nspr4.dll
0c : 000000006fc90000 00000000707bf000 xul C:\Program Files (x86)\Mozilla Firefox\xul.dll xul.dll
0d : 0000000072120000 0000000072159000 schannel C:\Windows\SysWOW64\schannel.dll schannel.dll
0e : 0000000072160000 000000007219b000 mlang C:\Windows\System32\mlang.dll mlang.dll
0f : 0000000072190000 0000000072626000 NPSWF32 C:\Windows\system32\Macromed\Flash\NPSWF32.dll NPSWF32.dll
10 : 0000000072630000 0000000072672000 icm32 C:\Windows\System32\icm32.dll icm32.dll
11 : 0000000072690000 0000000072699000 credssp C:\Windows\System32\credssp.dll credssp.dll
12 : 00000000726a0000 00000000726ab000 secur32 C:\Windows\System32\secur32.dll secur32.dll
13 : 00000000726b0000 00000000726c8000 msacm32_726b0000 C:\Windows\System32\msacm32.dll msacm32.dll
14 : 00000000726d0000 000000007271f000 AudioSes C:\Windows\System32\AudioSes.dll AudioSes.dll
15 : 0000000072710000 000000007274b000 wdmaud C:\Windows\System32\wdmaud.drv wdmaud.drv
16 : 0000000072740000 000000007278b000 MMDevAPI C:\Windows\System32\MMDevAPI.dll MMDevAPI.dll
17 : 0000000072780000 000000007294a000 explorerframe C:\Windows\System32\explorerframe.dll explorerframe.dll
18 : 00000000728f0000 0000000072ae0000 msxml6 C:\Windows\System32\msxml6.dll explorerframe.dll
19 : 0000000072a60000 0000000072a69000 midimap C:\Windows\System32\midimap.dll midimap.dll
1a : 0000000072a80000 0000000072ab3000 shdocvw C:\Windows\System32\shdocvw.dll shdocvw.dll
1b : 0000000072ab0000 0000000072ba2000 dui70 C:\Windows\System32\dui70.dll dui70.dll
1c : 0000000072b70000 0000000072c0c000 mscms C:\Windows\System32\mscms.dll mscms.dll
1d : 0000000072bf0000 0000000072c25000 EhStorShell C:\Windows\System32\EhStorShell.dll EhStorShell.dll
1e : 0000000072c30000 0000000072c3a000 msacm32 C:\Windows\System32\msacm32.drv msacm32.drv
1f : 0000000072c40000 0000000072c83000 duser C:\Windows\System32\duser.dll duser.dll
20 : 0000000072c70000 0000000072d9a000 WindowsCodecs C:\Windows\System32\WindowsCodecs.dll WindowsCodecs.dll
21 : 0000000072d70000 0000000072e6a000 js3250 C:\Program Files (x86)\Mozilla Firefox\js3250.dll js3250.dll
22 : 0000000072e70000 0000000072f20000 mozcrt19 C:\Program Files (x86)\Mozilla Firefox\mozcrt19.dll mozcrt19.dll
23 : 0000000072f20000 0000000072f93000 sqlite3 C:\Program Files (x86)\Mozilla Firefox\sqlite3.dll sqlite3.dll
24 : 0000000072fa0000 0000000072fc9000 t2embed C:\Windows\System32\t2embed.dll t2embed.dll
25 : 0000000072fc0000 0000000073030000 winspool C:\Windows\System32\winspool.drv winspool.drv
26 : 00000000730e0000 00000000730ef000 profapi C:\Windows\System32\profapi.dll profapi.dll
27 : 00000000730f0000 000000007310e000 userenv C:\Windows\System32\userenv.dll userenv.dll
28 : 0000000073110000 0000000073118000 wow64cpu C:\Windows\System32\wow64cpu.dll wow64cpu.dll
29 : 0000000073120000 000000007317c000 wow64win C:\Windows\System32\wow64win.dll wow64win.dll
2a : 0000000073180000 00000000731bf000 wow64 C:\Windows\System32\wow64.dll wow64.dll
2b : 00000000732c0000 00000000732cb000 slc C:\Windows\System32\slc.dll slc.dll
2c : 00000000732d0000 0000000073350000 ntshrui C:\Windows\System32\ntshrui.dll ntshrui.dll
2d : 0000000073350000 0000000073364000 RpcRtRemote C:\Windows\System32\RpcRtRemote.dll RpcRtRemote.dll
2e : 0000000073450000 0000000073457000 msimg32 C:\Windows\System32\msimg32.dll msimg32.dll
2f : 0000000073460000 0000000073479000 pnrpnsp C:\Windows\System32\pnrpnsp.dll pnrpnsp.dll
30 : 0000000073480000 0000000073495000 NapiNSP C:\Windows\System32\NapiNSP.dll NapiNSP.dll
31 : 0000000073490000 000000007349b000 winrnr C:\Windows\System32\winrnr.dll winrnr.dll
32: Unable to retrieve module names (8007007e)
33 : 00000000734b0000 00000000734b7000 wship6 C:\Windows\System32\wship6.dll wship6.dll
34 : 00000000734c0000 0000000073513000 FWPUCLNT C:\Windows\System32\FWPUCLNT.DLL FWPUCLNT.DLL
35 : 0000000073500000 000000007355b000 dnsapi C:\Windows\System32\dnsapi.dll dnsapi.dll
36 : 0000000073550000 0000000073574000 brwsrcmp C:\Program Files (x86)\Mozilla Firefox\components\brwsrcmp.dll brwsrcmp.dll
37 : 0000000073580000 0000000073587000 xpcom C:\Program Files (x86)\Mozilla Firefox\xpcom.dll xpcom.dll
38 : 0000000073590000 0000000073598000 browserdirprovider C:\Program Files (x86)\Mozilla Firefox\components\browserdirprovider.dll browserdirprovider.dll
39 : 00000000735a0000 00000000735a9000 avrt C:\Windows\System32\avrt.dll avrt.dll
3a : 00000000735b0000 00000000735b6000 ksuser C:\Windows\System32\ksuser.dll ksuser.dll
3b : 00000000735c0000 00000000735c8000 rasadhlp C:\Windows\System32\rasadhlp.dll rasadhlp.dll
3c : 00000000735d0000 00000000735db000 winnsi C:\Windows\System32\winnsi.dll winnsi.dll
3d : 00000000735e0000 0000000073634000 mswsock C:\Windows\System32\mswsock.dll mswsock.dll
3e : 0000000073620000 000000007364d000 ntmarta C:\Windows\System32\ntmarta.dll ntmarta.dll
3f : 0000000073650000 000000007377c000 propsys C:\Windows\System32\propsys.dll propsys.dll
40 : 0000000073da0000 0000000073dc7000 IPHLPAPI C:\Windows\System32\IPHLPAPI.DLL IPHLPAPI.DLL
41 : 0000000073dc0000 0000000073dc7000 WSHTCPIP C:\Windows\System32\WSHTCPIP.DLL WSHTCPIP.DLL
42 : 0000000073fc0000 0000000073fd8000 dwmapi C:\Windows\System32\dwmapi.dll dwmapi.dll
43 : 0000000073fe0000 000000007401b000 winmm C:\Windows\System32\winmm.dll winmm.dll
44 : 0000000074020000 0000000074067000 rsaenh C:\Windows\System32\rsaenh.dll rsaenh.dll
45 : 0000000074060000 0000000074077000 cryptsp C:\Windows\System32\cryptsp.dll cryptsp.dll
46 : 0000000074080000 0000000074089000 wsock32 C:\Windows\System32\wsock32.dll wsock32.dll
47 : 0000000074090000 00000000740e6000 uxtheme C:\Windows\System32\uxtheme.dll uxtheme.dll
48 : 0000000074110000 00000000742ae000 comctl32 C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll comctl32.dll
49: Unable to retrieve module names (8007007e)
4a : 00000000743e0000 00000000743ef000 cscapi C:\Windows\System32\cscapi.dll cscapi.dll
4b : 0000000074470000 00000000744c7000 apphelp C:\Windows\System32\apphelp.dll apphelp.dll
4c : 00000000744c0000 00000000744cc000 version C:\Windows\System32\version.dll version.dll
4d : 00000000744d0000 00000000744f3000 srvcli C:\Windows\System32\srvcli.dll srvcli.dll
4e : 0000000074e10000 0000000074e1c000 CRYPTBASE C:\Windows\SysWOW64\CRYPTBASE.dll CRYPTBASE.dll
4f : 0000000074e20000 0000000074e80000 sspicli C:\Windows\SysWOW64\sspicli.dll sspicli.dll
50 : 0000000074ec0000 0000000074ed2000 devobj C:\Windows\SysWOW64\devobj.dll devobj.dll
51 : 0000000074ee0000 0000000075b29000 shell32 C:\Windows\SysWOW64\shell32.dll shell32.dll
52 : 0000000075b30000 0000000075c20000 rpcrt4 C:\Windows\SysWOW64\rpcrt4.dll rpcrt4.dll
53 : 0000000075c20000 0000000075d55000 urlmon C:\Windows\SysWOW64\urlmon.dll urlmon.dll
54 : 0000000075d60000 0000000075d63000 normaliz C:\Windows\SysWOW64\normaliz.dll normaliz.dll
55 : 0000000075d70000 0000000075d97000 cfgmgr32 C:\Windows\SysWOW64\cfgmgr32.dll cfgmgr32.dll
56 : 0000000075da0000 0000000075ea0000 kernel32 C:\Windows\SysWOW64\kernel32.dll kernel32.dll
57 : 0000000075ed0000 0000000075f15000 Wldap32 C:\Windows\SysWOW64\Wldap32.dll Wldap32.dll
58 : 0000000075f20000 0000000075f2c000 msasn1 C:\Windows\SysWOW64\msasn1.dll msasn1.dll
59 : 0000000075f90000 000000007612d000 setupapi C:\Windows\SysWOW64\setupapi.dll setupapi.dll
5a : 0000000076130000 00000000761ab000 comdlg32 C:\Windows\SysWOW64\comdlg32.dll comdlg32.dll
5b : 00000000761b0000 00000000762b0000 user32 C:\Windows\SysWOW64\user32.dll user32.dll
5c : 00000000762b0000 000000007637c000 msctf C:\Windows\SysWOW64\msctf.dll msctf.dll
5d : 0000000076380000 0000000076399000 sechost C:\Windows\SysWOW64\sechost.dll sechost.dll
5e : 00000000763a0000 00000000763d5000 ws2_32 C:\Windows\SysWOW64\ws2_32.dll ws2_32.dll
5f : 00000000763e0000 0000000076426000 KERNELBASE C:\Windows\SysWOW64\KERNELBASE.dll KERNELBASE.dll
60 : 0000000076430000 00000000764cd000 usp10 C:\Windows\SysWOW64\usp10.dll usp10.dll
61 : 00000000764d0000 000000007662c000 ole32 C:\Windows\SysWOW64\ole32.dll ole32.dll
62 : 0000000076630000 0000000076636000 nsi C:\Windows\SysWOW64\nsi.dll nsi.dll
63 : 0000000076640000 00000000766ec000 msvcrt C:\Windows\SysWOW64\msvcrt.dll msvcrt.dll
64 : 00000000766f0000 0000000076747000 shlwapi C:\Windows\SysWOW64\shlwapi.dll shlwapi.dll
65 : 0000000076750000 00000000767b0000 imm32 C:\Windows\SysWOW64\imm32.dll imm32.dll
66 : 00000000767b0000 00000000768a4000 wininet C:\Windows\SysWOW64\wininet.dll wininet.dll
67 : 00000000768b0000 0000000076933000 clbcatq C:\Windows\SysWOW64\clbcatq.dll clbcatq.dll
68 : 0000000076940000 00000000769d0000 gdi32 C:\Windows\SysWOW64\gdi32.dll gdi32.dll
69 : 00000000769d0000 0000000076a70000 advapi32 C:\Windows\SysWOW64\advapi32.dll advapi32.dll
6a : 0000000076a70000 0000000076c69000 iertutil C:\Windows\SysWOW64\iertutil.dll iertutil.dll
6b : 0000000076c70000 0000000076d8c000 crypt32 C:\Windows\SysWOW64\crypt32.dll crypt32.dll
6c : 0000000076e20000 0000000076eaf000 oleaut32 C:\Windows\SysWOW64\oleaut32.dll oleaut32.dll
6d : 00000000770d0000 000000007727b000 ntdll C:\Windows\System32\ntdll.dll ntdll.dll
6e : 0000000077280000 000000007728a000 lpk C:\Windows\SysWOW64\lpk.dll lpk.dll
6f : 00000000772b0000 0000000077430000 ntdll_772b0000 C:\Windows\SysWOW64\ntdll.dll ntdll.dll
0:000> !for_each_module .echo @#ModuleName fver = @#FileVersion pver = @#ProductVersion  
smime3 fver = 3.12.4.5 Basic ECC pver = 3.12.4.5 Basic ECC
nssutil3 fver = 3.12.4.5 pver = 3.12.4.5
plc4 fver = 4.8.3 pver = 4.8.3
nss3 fver = 3.12.4.5 Basic ECC pver = 3.12.4.5 Basic ECC
plds4 fver = 4.8.3 pver = 4.8.3
ssl3 fver = 3.12.4.5 Basic ECC pver = 3.12.4.5 Basic ECC
firefox fver =  pver =
softokn3 fver = 3.12.4.5 Basic ECC pver = 3.12.4.5 Basic ECC
nssdbm3 fver = 3.12.4.5 Basic ECC pver = 3.12.4.5 Basic ECC
freebl3 fver = 3.12.4.5 Basic ECC pver = 3.12.4.5 Basic ECC
nssckbi fver = 1.77 pver = 1.77
nspr4 fver = 4.8.3 pver = 4.8.3
xul fver =  pver =
schannel fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
mlang fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
NPSWF32 fver =  pver =
icm32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
credssp fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
secur32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msacm32_726b0000 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
AudioSes fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wdmaud fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
MMDevAPI fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
explorerframe fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msxml6 fver =  pver =
midimap fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
shdocvw fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
dui70 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
mscms fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
EhStorShell fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msacm32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
duser fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
WindowsCodecs fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
js3250 fver =  pver =
mozcrt19 fver = 8.00.0000 pver = 8.00.0000
sqlite3 fver = 3.6.16.1 pver = 3.6.16.1
t2embed fver = 6.1.7600.16444 (win7_gdr.091018-2319) pver = 6.1.7600.16444
winspool fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
profapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
userenv fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wow64cpu fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wow64win fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wow64 fver = 6.1.7600.16491 (win7_gdr.091221-1602) pver = 6.1.7600.16491
slc fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
ntshrui fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
RpcRtRemote fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msimg32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
pnrpnsp fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
NapiNSP fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
winrnr fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
32: Unable to retrieve module names (8007007e)
wship6 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
FWPUCLNT fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
dnsapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
brwsrcmp fver =  pver =
xpcom fver =  pver =
browserdirprovider fver =  pver =
avrt fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
ksuser fver =  pver =
rasadhlp fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
winnsi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
mswsock fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
ntmarta fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
propsys fver = 7.00.7600.16385 (win7_rtm.090713-1255) pver = 7.00.7600.16385
IPHLPAPI fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
WSHTCPIP fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
dwmapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
winmm fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
rsaenh fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
cryptsp fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wsock32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
uxtheme fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
comctl32 fver = 6.10 (win7_rtm.090713-1255) pver = 6.1.7600.16385
49: Unable to retrieve module names (8007007e)
cscapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
apphelp fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
version fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
srvcli fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
CRYPTBASE fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
sspicli fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
devobj fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
shell32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
rpcrt4 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
urlmon fver = 8.00.7600.16535 (win7_gdr.100222-1515) pver = 8.00.7600.16535
normaliz fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
cfgmgr32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
kernel32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
Wldap32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msasn1 fver = 6.1.7600.16415 (win7_gdr.090828-1615) pver = 6.1.7600.16415
setupapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
comdlg32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
user32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msctf fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
sechost fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
ws2_32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
KERNELBASE fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
usp10 fver = 1.0626.7600.16385 (win7_rtm.090713-1255) pver = 1.0626.7600.16385
ole32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
nsi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msvcrt fver = 7.0.7600.16385 (win7_rtm.090713-1255) pver = 7.0.7600.16385
shlwapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
imm32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wininet fver = 8.00.7600.16535 (win7_gdr.100222-1515) pver = 8.00.7600.16535
clbcatq fver = 2001.12.8530.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
gdi32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
advapi32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
iertutil fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385
crypt32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
oleaut32 fver =  pver =
ntdll fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
lpk fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
ntdll_772b0000 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385

Jonathan_King · 08 Apr 2010

Thank you guys. Now here's another question, that may be better suited when the situation arises. Say my Firefox was freezing and crashing all the time, so I created a dump and gave it to you.

How could that help you determine why it's crashing? What would you look for?

jcgriff2 · 16 Apr 2010

Hi Jonathan. . .

My apologies on this one. I recall that I saw this post then... May be a kiddie distraction? No, can't say that - my fault.

You generated a user-mode dump that shows us an assert (break) code = 0x80000003, which simply means that you/ the user caused the assert. Unfortunately, there is not much in there for me to go on. As you probably know, the BSOD kernel dumps we regularly work on are post-mortum dumps - caused by a force other than yourself and the dump is created after-the-fact (crash). Here we know exactly what caused/ created the dump.

Can you tell me more about this freezing with Firefox? Is it only Firefox, i.e., not with IE8?

Does Firefox exhibit the same behavior in safemode w/ Networking?

A few other things to try -
- run FFox at elevated admin level - RIGHT-click on FFox icon, "Run as Administrator"
- Try another user account. If you do not have one, activate the hidden admin account. Bring up an elevated admin cmd/DOS prompt, type

net user administrator /active:yes

Logoff your account; "Administrator" account waiting at logon screen for you.

Sorry if you know most of this; I am in my usual detailed instruction mode! If you would like, I will be glad to look at various system reports - they may yield clues. 2nd pair of eyes and all. Lord knows a second or third has saved me in the past. I just updated my BSOD dump & system information gathering app this morning.

The instructions --> BSOD Posting Instructions

Live SysInternals AutoRuns --> http://live.sysinternals.com/autoruns.exe

The EXE file that you would normally extract from the zip file can be found just below.

EXE file --> BSOD_Windows7_Vista_v2.4_jcgriff2_.exe

Please see my PM re: output.

Kind Regards. . .

John

.