Right Click on desktop causing Explorer.exe crash!!!

Frankly, I would be satisfied if MS simply stated, "we are aware of it and are looking into it." Perhaps getting a site like Engadget or Gizmodo to post a related story might light a fire under their butts.

Yeah--I feel the same way...just acknowledge it and say you are working on it. I'd be fine with that!

So yes--someone needs to light a fire under them!! :D
 

My Computer My Computer

OS
Windows 7 Pro 64bit
This same thing is happening to me...

are you guys also getting random BSOD's?

I tried reading my minidump file, but couldn't get debugger working to see if it helps..

Maybe someone else has? or could read mine?
 

My Computer My Computer

OS
Windows 7 Pro 64bit
CPU
Intel i5 750
Motherboard
Intel DP55WB
Memory
OCZ PC3-10666 Platinum RAM
Graphics Card(s)
XFX GeForce 8600 GT XXX
Monitor(s) Displays
22" Soyo
Screen Resolution
1680 x 1050
Hard Drives
(1) 250GB SATA (partitioned to C:100GB & D:150GB)
(1) 1.5TB
PSU
Ultra LSP550 550-Watt
Cooling
Cooler Master RR-B10-212P-GP Hyper 212 Plus
no random BSOD here...just constantly right click -----> crash

for me it happens 90% of the time when I am right clicking on the desktop and the rest of the time it usually happens when I am right clicking to create a new folder within a directory.

I wouldn't be surprised if this is happening to quite a few more people than we realize, and they don't think anything of it because they assume it's something wrong they are doing..

Windows 7 just got officially released, watch the number of cases go up as people receive their new laptop/desktops from Dell, Gateway, etc.
 

My Computer My Computer

OS
Win7 64bit
I guess the BSOD and right click errors are not related..

Wonderful, 2 issues to sort out now.
haha.


When my right click doesn't work it'll pop up with the 'Search for a solution' or w/e it is and I do it, and it sometimes fixes it (by restarting explorer) Have you tried that?
 

My Computer My Computer

OS
Windows 7 Pro 64bit
CPU
Intel i5 750
Motherboard
Intel DP55WB
Memory
OCZ PC3-10666 Platinum RAM
Graphics Card(s)
XFX GeForce 8600 GT XXX
Monitor(s) Displays
22" Soyo
Screen Resolution
1680 x 1050
Hard Drives
(1) 250GB SATA (partitioned to C:100GB & D:150GB)
(1) 1.5TB
PSU
Ultra LSP550 550-Watt
Cooling
Cooler Master RR-B10-212P-GP Hyper 212 Plus
No BSODs for me either...just right-click and get a dialog that says explorer is done followed by another dialog stating that it is restarting. I then usually (always?) lose all open windows. Actually, everything at the Shell-level (including the task bar) disappears momentarily and then comes back after Explorer restarts.



I found a couple of images on the net that look close to what I am seeing:
 

My Computer My Computer

Computer Manufacturer/Model Number
Shuttle (SFF) / SP35P2 Pro
OS
Win 7 Pro 64 Bit
CPU
Q6600
Motherboard
Shuttle
Memory
4GB
Graphics Card(s)
8800GT
Sound Card
On Board
Monitor(s) Displays
Samsung 22"
Screen Resolution
1680x1050
Hard Drives
WD 640 Boot
WD 640 Data
WD 500 external backup
PSU
Shuttle 450 Watt
Case
Shuttle
Cooling
Fans...lots of them
Keyboard
Creative Fatal1ty
Mouse
Logitech MX518
Internet Speed
Wicked Fast
Other Info
Capricorn
I guess the BSOD and right click errors are not related..

Wonderful, 2 issues to sort out now.
haha.


When my right click doesn't work it'll pop up with the 'Search for a solution' or w/e it is and I do it, and it sometimes fixes it (by restarting explorer) Have you tried that?


I dont click on the Search for a solution

I choose the bottom choice similar to "click here to just restart Explorer"..I have found that if I do that enough times it will start working like normal again...Not a pretty solution but at least it works

This is a total PIA, and even if I reboot to "fix" the problem it still happens again within a few hours of the reboot.
 

My Computer My Computer

OS
Win7 64bit
If you aren't already, then make sure you're submitting all your error reports to Microsoft.

I try and do this at least once a day. :p

If it weren't for this issue then Windows 7 would be perfect!

Also, no BSOD for me on Windows 7, ever. Just the random explorer crashes, mainly on right-clicking the desktop or Recycle Bin, and sometimes in Control Panel.

Oddly, I normally only get the issue around 00:00-02:00 in the morning... Go figure? This may just be when I use my computer the most, but I thought I'd mention it just in case. :confused:

For me this issue did not occur until the final RTM build, all the beta and RC builds were fine. :rolleyes:

I might use one of my Technet support incidents and see how that goes, had never thought of doing that until now.

Maybe Neowin, Paul Thurrott, or Long Zheng could help? These people seem to get noticed by Microsoft if they have something to say... :D

BTW. I forgot to say, yeah, the issue will occur once and then continue to occur around four to six times, then revert back to normal behavior.
 
Last edited:

My Computer My Computer

Computer Manufacturer/Model Number
Custom Build
OS
Windows 7 Ultimate x64
CPU
Intel Pentium D 2.8GHz
Motherboard
Gigabyte GA-P35-DQ6
Memory
4GB
Graphics Card(s)
ATI Radeon HD 2600 Pro
Sound Card
Onboard Realtek HD Audio
Monitor(s) Displays
Asus 22"
Screen Resolution
1680 x 1050
Hard Drives
x2 160GB Seagate RAID 0
Case
Gigabyte 3D Aurora
Cooling
Zalman
Keyboard
Microsoft
Mouse
Microsoft
Internet Speed
4MB
If it weren't for this issue then Windows 7 would be perfect!
...
BTW. I forgot to say, yeah, the issue will occur once and then continue to occur around four to six times, then revert back to normal behavior.

@Most of the posters on this thread:

I empathise with your pain, though I can't necessarily offer any solutions. A few thoughts...

An Explorer crash is one of those generic symptoms which can occur for umpteen different reasons. References to "this issue" abound (not just in the quoted text), and from an end-user point of view it's certainly understandable that all Explorer crashes are mentally "bucketised" as the same problem.

However, it's many different problems which all look the same from the outside.

Explorer is a pseudo-container process, almost like IExplore.exe. They're targets for all sorts of add-on code which would seek to extend the functionality of the OS in various ways. Some of those add-ons, like shell extensions, are relatively easy to deactivate because of the availability of specialised tools. Others are "injected code" which is far more difficult to spot and isolate at the sysadmin level.

My (relatively confident) guess is that Microsoft gets thousands of reports every day regarding "Explorer crashing" - most as automated WER report submissions, some by users seeking phone support, and many in the form of web submissions/complaints. Win7 is not special in this regard - similar symptoms always occurred under older versions too, the vast majority due to add-ons.

Hence, Microsoft presumably wouldn't be particularly perturbed until their reporting telemetry and some form of debug analysis identifies crash patterns which point at their code as the culprit. When your installed user base is measured in the millions, even thousands of generic problem reports do not necessarily mean there's anything wrong in your own code.

Suggestions:

a) If your aim is simply to give yourself the greatest possible chance of getting rid of the symptom, without necessarily understanding it, reinstall the OS and be very judicious about add-ons afterwards. Try to add shell extensions and context menu handlers slowly, one-at-a-time, so that you get a feel for the likely culprit if things start acting up again. Easier said than done, I realise.

b) If you'd like to understand, go through this procedure to generate a memory dump of the crash, and then examine it with a debugger, or start your own thread if you'd like assistance:

http://www.sevenforums.com/crash-lo...-generating-memory-dump-crashing-process.html

The results may be in the "obvious 3rd-party involvement", "unknown", or "points at MS" categories, but at least you'll have a better idea of what it might be.

c) Be careful about reading too much into others' misdiagnoses. In the absence of information, people come up with all sorts of bizarre explanations, and then manage to comprehensively convince themselves (and others) that the observed patterns fit their theory.
 

My Computer My Computer

Computer Manufacturer/Model Number
Multiple machines in various stages of decomposition.
OS
Win7x64
I received the error that is tied into explorer.exe and ntdll.dll:

Faulting application name: explorer.exe, version: 6.1.7600.16404, time stamp: 0x4a765771
Faulting module name: ntdll.dll, version: 6.1.7600.16385, time stamp: 0x4a5be02b
Exception code: 0xc0000005
Fault offset: 0x0000000000051da0
Faulting process id: 0x14c
Faulting application start time: 0x01ca5da6248fff9d
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: 95c50508-c999-11de-8bc4-0022158deba1

I've done two fresh re-installs of Windows 7 64-bit. I'm also using the Upgrade DVD. Not sure if the OEM would have been a better choice. I have the Vista and XP OEM discs.

At any rate, I never got this error with XP. However, I have seen Explorer crashes in Vista that were similar. Not sure if they were caused by ntdll.dll, didn't look. I had basically the same types of programs installed on Windows XP and Vista that I do on Windows 7.

Not saying I'm going to go back to XP because it's already registered and installed on my old AMD system.

Also ran the system file checker, did a few system restores, as well as the ShellEx thing and disabled any non-MS stuff.

Some guys over at MS TechNet said it might be caused by O&O software or Avast. Said something about a file named "base.dll". The cause could be any number of things since everyone's system is different. If it is Avast, I don't know if I know of any good free anti-virus software as good as Avast. I know of AVG, but don't think it catches as many things. I could probably do without O&O Defrag because there's lots of free defrag programs out there.

I don't know what I'm going to do for the time being. My system is usable, except for the error.
 
Last edited:

My Computer My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom
OS
Windows 10 Pro 64-bit
CPU
Intel Core i7 6700K 4.5 GHz w/TurboBoost & HT enabled
Motherboard
Asus ROG Strix Z270E
Memory
16 GB DDR4 RAM 2133 MHz
Graphics Card(s)
EVGA GTX 1080 Ti 11 GB
Sound Card
Realtek
Monitor(s) Displays
Acer S243HL
Screen Resolution
1920x1080
Hard Drives
WD Caviar Black 2 TB, WD Black 4 TB, WD Caviar Green 2 TB (x3), WD Caviar Green 3 TB, Crucial M4 256 GB SSD, Samsung 850 Pro SSD
PSU
Corsair 850W
Case
Fractal Design Define R5
Cooling
Cooler Master Hyper 212 Evo
Internet Speed
300 Mbps Shaw Broadband 300
I received the error that is tied into explorer.exe and ntdll.dll:

Faulting application name: explorer.exe, version: 6.1.7600.16404, time stamp: 0x4a765771
Faulting module name: ntdll.dll, version: 6.1.7600.16385, time stamp: 0x4a5be02b
Exception code: 0xc0000005
Fault offset: 0x0000000000051da0
Faulting process id: 0x14c
Faulting application start time: 0x01ca5da6248fff9d
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: 95c50508-c999-11de-8bc4-0022158deba1

I've done two fresh re-installs of Windows 7 64-bit. I'm also using the Upgrade DVD. Not sure if the OEM would have been a better choice. I have the Vista and XP OEM discs.

At any rate, I never got this error with XP. However, I have seen Explorer crashes in Vista that were similar. Not sure if they were caused by ntdll.dll, didn't look. I had basically the same types of programs installed on Windows XP and Vista that I do on Windows 7.

Not saying I'm going to go back to XP because it's already registered and installed on my old AMD system.

Also ran the system file checker, did a few system restores, as well as the ShellEx thing and disabled any non-MS stuff.

Some guys over at MS TechNet said it might be caused by O&O software or Avast. Said something about a file named "base.dll". The cause could be any number of things since everyone's system is different. If it is Avast, I don't know if I know of any good free anti-virus software as good as Avast. I know of AVG, but don't think it catches as many things. I could probably do without O&O Defrag because there's lots of free defrag programs out there.

I don't know what I'm going to do for the time being. My system is usable, except for the error.

one thing we have in common is that I do have O&O Defrag installed (the 64-Bit version)

That's interesting that he mentioned that
 

My Computer My Computer

OS
Win7 64bit
one thing we have in common is that I do have O&O Defrag installed (the 64-Bit version)

That's interesting that he mentioned that

Both also have code injected into Magnetite's Explorer process, so that might be the reasoning behind the "test what happens when you remove 'em" advice he was offered, which is incidentally sound as the crash is another heap corruption issue (hard to tell what component corrupted the heap):

00000000`04320000 00000000`0436b000 oodshrs Mon Nov 03 21:15:55 2008 (490ECF5B)
00000000`64f00000 00000000`64f16000 ashShA64 Tue Sep 15 21:01:02 2009 (4AAF73EE)
00000001`80000000 00000001`800e1000 oodsh Mon Nov 03 21:17:27 2008 (490ECFB7)


The ntdll.dll reference is unimportant. Virtually every app crash shows up as "faulting module ntdll.dll" because that's the interface between the app and the OS (sorta), and it's the component which "catches" the underlying problem and reports it (sorta!).
 

My Computer My Computer

Computer Manufacturer/Model Number
Multiple machines in various stages of decomposition.
OS
Win7x64
Okay, I kept Avast installed, disabled all the "red" ShellExView entries (or all of the non-MS ones), and installed everything else as normal (all my other usual programs). So far, I have not received any issues. Don't hold me to that though. Should set a restore point like I did before doing anything.

So if I'm right, this could be an issue with O&O Defrag Professional 64-bit. At least for me, possibly for some of you as well. I have version 11, BTW.
 

My Computer My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom
OS
Windows 10 Pro 64-bit
CPU
Intel Core i7 6700K 4.5 GHz w/TurboBoost & HT enabled
Motherboard
Asus ROG Strix Z270E
Memory
16 GB DDR4 RAM 2133 MHz
Graphics Card(s)
EVGA GTX 1080 Ti 11 GB
Sound Card
Realtek
Monitor(s) Displays
Acer S243HL
Screen Resolution
1920x1080
Hard Drives
WD Caviar Black 2 TB, WD Black 4 TB, WD Caviar Green 2 TB (x3), WD Caviar Green 3 TB, Crucial M4 256 GB SSD, Samsung 850 Pro SSD
PSU
Corsair 850W
Case
Fractal Design Define R5
Cooling
Cooler Master Hyper 212 Evo
Internet Speed
300 Mbps Shaw Broadband 300

My Computer My Computer

Computer Manufacturer/Model Number
Shuttle (SFF) / SP35P2 Pro
OS
Win 7 Pro 64 Bit
CPU
Q6600
Motherboard
Shuttle
Memory
4GB
Graphics Card(s)
8800GT
Sound Card
On Board
Monitor(s) Displays
Samsung 22"
Screen Resolution
1680x1050
Hard Drives
WD 640 Boot
WD 640 Data
WD 500 external backup
PSU
Shuttle 450 Watt
Case
Shuttle
Cooling
Fans...lots of them
Keyboard
Creative Fatal1ty
Mouse
Logitech MX518
Internet Speed
Wicked Fast
Other Info
Capricorn
Don't know if it can help, but i never had this issue with the RC release...
I'm expriencing this issue on my 2 macs (macbook pro and iMac) running Win7 trought Boot Camp.

Can it be due to an update ? Did someone try without doing windows updates ?
 

My Computer My Computer

Computer Manufacturer/Model Number
Apple
OS
Win Seven
CPU
Intel Core 2 Duo T9300 @ 2.50Ghz
Memory
4Go DDR2
Graphics Card(s)
NVIDIA GeForce 8600M GT
Sound Card
Realtek High Definition Audio
Faulting application name: Explorer.EXE, version: 6.1.7600.16404, time stamp: 0x4a765771
Faulting module name: ntdll.dll, version: 6.1.7600.16385, time stamp: 0x4a5be02b
Exception code: 0xc0000374
Faulting application path: C:\Windows\Explorer.EXE
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll


`

I noticed in at least 2 posts that the Explorer.exe module contained a different version number and timestamp -

Explorer.exe = 0x4a765771 = Sun Aug 02 20:20:17 2009

ntdll.dll = 0x4a5be02b = Mon Jul 13 18:32:27 2009

The timestamp on ntdll is the one that I usually see in BSOD kernel dump files for Windows 7 RTM. Do all that are having this problem with Explorer have the August 2, 2009, timestamp on your Explorer.exe module?

Look in \windows folder.

The only other module that I found in the dump below that had a different version # and time stamp on it -
Code:
[COLOR=#ff0000][COLOR=black][FONT=Lucida Console]000007fe`fce10000 000007fe`fce1f000   msasn1   [COLOR=blue]msasn1.dll[/COLOR]   [COLOR=red]Sat Aug 29 00:40:40 2009[/COLOR] (4A98DB78)[/FONT] [/COLOR][/COLOR]

msasn1.dll can be easily explained by kb974571 - but I have yet to find anything on a Windows Update for Explorer.exe. Does anyone know of one?

Regards. . .

jcgriff2

.



Explorer.exe in a version listing - it shows none --
Code:
[FONT=Lucida Console]user32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=Lucida Console]kernel32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=Lucida Console]ntdll fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=Lucida Console]psapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=Lucida Console]normaliz fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=Lucida Console][COLOR=red]explorer fver =  pver =[/COLOR][/FONT]
[FONT=Lucida Console]ieframe fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385[/FONT]
[FONT=Lucida Console]NLSData0009 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=Lucida Console]davclnt fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=Lucida Console]ntlanman fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=Lucida Console]NaturalLanguage6 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]



Unable to find symbols - explorer.exe & comctl32.dll -
Code:
[FONT=lucida console]Microsoft (R) Windows Debugger Version 6.11.0001.404 X86[/FONT]
[FONT=lucida console]Copyright (c) Microsoft Corporation. All rights reserved.[/FONT]
 
[FONT=lucida console]Loading Dump File [C:\Users\PalmDesert7\AppData\Local\Temp\SAL58.tmp\explorer.exe.2704.dmp][/FONT]
[FONT=lucida console]User Mini Dump File: Only registers, stack and portions of memory are available[/FONT]
[FONT=lucida console]Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols[/FONT]
[FONT=lucida console]Executable search path is: [/FONT]
[FONT=lucida console]Windows 7 Version 7600 MP (4 procs) Free x64[/FONT]
[FONT=lucida console]Product: WinNt, suite: SingleUserTS Personal[/FONT]
[FONT=lucida console]Machine Name:[/FONT]
[FONT=lucida console]Debug session time: Fri Oct 30 22:24:27.000 2009 (GMT-8)[/FONT]
[FONT=lucida console]System Uptime: not available[/FONT]
[FONT=lucida console]Process Uptime: 0 days 0:08:01.000[/FONT]
[FONT=lucida console]................................................................[/FONT]
[FONT=lucida console]................................................................[/FONT]
[FONT=lucida console]....................................[/FONT]
[FONT=lucida console]Loading unloaded module list[/FONT]
[FONT=lucida console]...............[/FONT]
[FONT=lucida console]This dump file has an exception of interest stored in it.[/FONT]
[FONT=lucida console]The stored exception information can be accessed via .ecxr.[/FONT]
[FONT=lucida console](a90.127c): Unknown exception - code c0000374 (first/second chance not available)[/FONT]
[FONT=lucida console]ntdll!NtWaitForSingleObject+0xa:[/FONT]
[FONT=lucida console]00000000`76e5fefa c3              ret[/FONT]
[FONT=lucida console]0:039> !analyze -v[/FONT]
[FONT=lucida console]*******************************************************************************[/FONT]
[FONT=lucida console]*                                                                             *[/FONT]
[FONT=lucida console]*                        Exception Analysis                                   *[/FONT]
[FONT=lucida console]*                                                                             *[/FONT]
[FONT=lucida console]*******************************************************************************[/FONT]
[FONT=lucida console]Unable to load image C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6\comctl32.dll, Win32 error 0n2[/FONT]
[FONT=lucida console]*** WARNING: Unable to verify timestamp for comctl32.dll[/FONT]
[FONT=lucida console]*** WARNING: Unable to verify timestamp for explorer.exe[/FONT]
[FONT=lucida console]*************************************************************************[/FONT]
[FONT=lucida console]***                                                                   ***[/FONT]
[FONT=lucida console]***                                                                   ***[/FONT]
[FONT=lucida console]***    Your debugger is not using the correct symbols                 ***[/FONT]
[FONT=lucida console]***                                                                   ***[/FONT]
[FONT=lucida console]***    In order for this command to work properly, your symbol path   ***[/FONT]
[FONT=lucida console]***    must point to .pdb files that have full type information.      ***[/FONT]
[FONT=lucida console]***                                                                   ***[/FONT]
[FONT=lucida console]***    Certain .pdb files (such as the public OS symbols) do not      ***[/FONT]
[FONT=lucida console]***    contain the required information.  Contact the group that      ***[/FONT]
[FONT=lucida console]***    provided you with these symbols if you need this command to    ***[/FONT]
[FONT=lucida console]***    work.                                                          ***[/FONT]
[FONT=lucida console]***                                                                   ***[/FONT]
[FONT=lucida console]***    Type referenced: kernel32!pNlsUserInfo                         ***[/FONT]
[FONT=lucida console]***                                                                   ***[/FONT]
[FONT=lucida console]*************************************************************************[/FONT]
[FONT=lucida console]*************************************************************************[/FONT]
[FONT=lucida console]***                                                                   ***[/FONT]
[FONT=lucida console]***                                                                   ***[/FONT]
[FONT=lucida console]***    Your debugger is not using the correct symbols                 ***[/FONT]
[FONT=lucida console]***                                                                   ***[/FONT]
[FONT=lucida console]***    In order for this command to work properly, your symbol path   ***[/FONT]
[FONT=lucida console]***    must point to .pdb files that have full type information.      ***[/FONT]
[FONT=lucida console]***                                                                   ***[/FONT]
[FONT=lucida console]***    Certain .pdb files (such as the public OS symbols) do not      ***[/FONT]
[FONT=lucida console]***    contain the required information.  Contact the group that      ***[/FONT]
[FONT=lucida console]***    provided you with these symbols if you need this command to    ***[/FONT]
[FONT=lucida console]***    work.                                                          ***[/FONT]
[FONT=lucida console]***                                                                   ***[/FONT]
[FONT=lucida console]***    Type referenced: kernel32!pNlsUserInfo                         ***[/FONT]
[FONT=lucida console]***                                                                   ***[/FONT]
[FONT=lucida console]*************************************************************************[/FONT]
[FONT=lucida console]FAULTING_IP: [/FONT]
[FONT=lucida console]ntdll!RtlReportCriticalFailure+62[/FONT]
[FONT=lucida console]00000000`76ed6cd2 eb00            jmp     ntdll!RtlReportCriticalFailure+0x64 (00000000`76ed6cd4)[/FONT]
[FONT=lucida console]EXCEPTION_RECORD:  ffffffffffffffff -- (.exr 0xffffffffffffffff)[/FONT]
[FONT=lucida console]ExceptionAddress: 0000000076ed6cd2 (ntdll!RtlReportCriticalFailure+0x0000000000000062)[/FONT]
[FONT=lucida console]  ExceptionCode: c0000374[/FONT]
[FONT=lucida console] ExceptionFlags: 00000001[/FONT]
[FONT=lucida console]NumberParameters: 1[/FONT]
[FONT=lucida console]  Parameter[0]: 0000000076f4c3f0[/FONT]
[FONT=lucida console]DEFAULT_BUCKET_ID:  STATUS_HEAP_CORRUPTION[/FONT]
[FONT=lucida console]PROCESS_NAME:  explorer.exe[/FONT]
[FONT=lucida console]ERROR_CODE: (NTSTATUS) 0xc0000374 - A heap has been corrupted.[/FONT]
[FONT=lucida console]EXCEPTION_CODE: (NTSTATUS) 0xc0000374 - A heap has been corrupted.[/FONT]
[FONT=lucida console]EXCEPTION_PARAMETER1:  0000000076f4c3f0[/FONT]
[FONT=lucida console]NTGLOBALFLAG:  0[/FONT]
[FONT=lucida console]APPLICATION_VERIFIER_FLAGS:  0[/FONT]
[FONT=lucida console]LAST_CONTROL_TRANSFER:  from 0000000000000000 to 0000000076e7d1cd[/FONT]
[FONT=lucida console]FAULTING_THREAD:  ffffffffffffffff[/FONT]
[FONT=lucida console]PRIMARY_PROBLEM_CLASS:  STATUS_HEAP_CORRUPTION[/FONT]
[FONT=lucida console]BUGCHECK_STR:  APPLICATION_FAULT_STATUS_HEAP_CORRUPTION[/FONT]
[FONT=lucida console]STACK_TEXT:  [/FONT]
[FONT=lucida console]00000000`76e7d1cd ntdll! ?? ::FNODOBFM::`string'+0x123b4[/FONT]
[FONT=lucida console]00000000`76d12c7a kernel32!HeapFree+0xa[/FONT]
[FONT=lucida console]000007fe`fb980f2d comctl32!DSA_DeleteAllItems+0x25[/FONT]
[FONT=lucida console]000007fe`fe430c38 shell32!DSA_DeleteAllItems+0x38[/FONT]
[FONT=lucida console]000007fe`fe50bb52 shell32!CBrowserProgressAggregator::~CBrowserProgressAggregator+0x84[/FONT]
[FONT=lucida console]000007fe`fe50bac4 shell32!CBrowserProgressAggregator::`scalar deleting destructor'+0x14[/FONT]
[FONT=lucida console]000007fe`fe3fc0ba shell32!CExtractIconBase::Release+0x22[/FONT]
[FONT=lucida console]000007fe`f773e088 EXPLORERFRAME!CShellBrowser::_OnDestroy+0x194[/FONT]
[FONT=lucida console]000007fe`f773df17 EXPLORERFRAME!CShellBrowser::WndProcBS+0x291[/FONT]
[FONT=lucida console]000007fe`f773d25e EXPLORERFRAME!IEFrameWndProc+0xbf[/FONT]
[FONT=lucida console]00000000`76c0c3c1 user32!UserCallWinProcCheckWow+0x1ad[/FONT]
[FONT=lucida console]00000000`76c0a01b user32!DispatchClientMessage+0xc3[/FONT]
[FONT=lucida console]00000000`76c0a061 user32!_fnDWORD+0x2d[/FONT]
[FONT=lucida console]00000000`76e5fdf5 ntdll!KiUserCallbackDispatcherContinue+0x0[/FONT]
[FONT=lucida console]00000000`76bff5ba user32!ZwUserDestroyWindow+0xa[/FONT]
[FONT=lucida console]000007fe`f773ca3b EXPLORERFRAME!CShellBrowser::_OnConfirmedClose+0x1e3[/FONT]
[FONT=lucida console]000007fe`f773c8ab EXPLORERFRAME!CShellBrowser::OnClose+0xea[/FONT]
[FONT=lucida console]000007fe`f773c7c2 EXPLORERFRAME!CBrowserHost::OnClose+0x26[/FONT]
[FONT=lucida console]000007fe`f773c783 EXPLORERFRAME!CExplorerFrame::_OnClose+0x84[/FONT]
[FONT=lucida console]000007fe`f773e166 EXPLORERFRAME!CExplorerFrame::v_WndProc+0x106[/FONT]
[FONT=lucida console]000007fe`f7701368 EXPLORERFRAME!CImpWndProc::s_WndProc+0x91[/FONT]
[FONT=lucida console]00000000`76c0c3c1 user32!UserCallWinProcCheckWow+0x1ad[/FONT]
[FONT=lucida console]00000000`76c0a01b user32!DispatchClientMessage+0xc3[/FONT]
[FONT=lucida console]00000000`76c0a061 user32!_fnDWORD+0x2d[/FONT]
[FONT=lucida console]00000000`76e5fdf5 ntdll!KiUserCallbackDispatcherContinue+0x0[/FONT]
[FONT=lucida console]00000000`76c0a08a user32!ZwUserMessageCall+0xa[/FONT]
[FONT=lucida console]00000000`76c0a389 user32!RealDefWindowProcWorker+0xa4[/FONT]
[FONT=lucida console]00000000`76c0a332 user32!RealDefWindowProcW+0x5a[/FONT]
[FONT=lucida console]000007fe`fb51795a uxtheme!DoMsgDefault+0x2a[/FONT]
[FONT=lucida console]000007fe`fb53637a uxtheme!OnDwpSysCommand+0x50[/FONT]
[FONT=lucida console]000007fe`fb51168e uxtheme!_ThemeDefWindowProc+0x209[/FONT]
[FONT=lucida console]000007fe`fb511445 uxtheme!ThemeDefWindowProcW+0x11[/FONT]
 
[FONT=lucida console]FOLLOWUP_IP: [/FONT]
[FONT=lucida console]shell32!CBrowserProgressAggregator::~CBrowserProgressAggregator+84[/FONT]
[FONT=lucida console]000007fe`fe50bb52 488d4f18        lea     rcx,[rdi+18h][/FONT]
[FONT=lucida console]SYMBOL_STACK_INDEX:  4[/FONT]
[FONT=lucida console]SYMBOL_NAME:  shell32!CBrowserProgressAggregator::~CBrowserProgressAggregator+84[/FONT]
[FONT=lucida console]FOLLOWUP_NAME:  MachineOwner[/FONT]
[FONT=lucida console]MODULE_NAME: shell32[/FONT]
[FONT=lucida console]IMAGE_NAME:  shell32.dll[/FONT]
[FONT=lucida console]DEBUG_FLR_IMAGE_TIMESTAMP:  4a5be054[/FONT]
[FONT=lucida console]STACK_COMMAND:  !heap ; dds 76f4c458 ; kb[/FONT]
[FONT=lucida console]FAILURE_BUCKET_ID:  STATUS_HEAP_CORRUPTION_c0000374_shell32.dll!CBrowserProgressAggregator::_CBrowserProgressAggregator[/FONT]
[FONT=lucida console]BUCKET_ID:  X64_APPLICATION_FAULT_STATUS_HEAP_CORRUPTION_shell32!CBrowserProgressAggregator::_CBrowserProgressAggregator+84[/FONT]
[FONT=lucida console]WATSON_STAGEONE_URL:  [URL]http://watson.microsoft.com/StageOne/explorer_exe/6_1_7600_16404/4a765771/ntdll_dll/6_1_7600_16385/4a5be02b/c0000374/000c6cd2.htm?Retriage=1[/URL][/FONT]
[FONT=lucida console]Followup: MachineOwner[/FONT]
[FONT=lucida console]---------[/FONT]
[FONT=lucida console]0:039> lmvm shell32[/FONT]
[FONT=lucida console]start             end                 module name[/FONT]
[FONT=lucida console]000007fe`fe390000 000007fe`ff116000   shell32    (pdb symbols)          c:\symbols\shell32.pdb\AF4500C51769484AA0375055B9DBA56E2\shell32.pdb[/FONT]
[FONT=lucida console]   Loaded symbol image file: shell32.dll[/FONT]
[FONT=lucida console]   Mapped memory image file: c:\symbols\shell32.dll\4A5BE054d86000\shell32.dll[/FONT]
[FONT=lucida console]   Image path: C:\Windows\System32\shell32.dll[/FONT]
[FONT=lucida console]   Image name: shell32.dll[/FONT]
[FONT=lucida console]   Timestamp:        Mon Jul 13 18:33:08 2009 (4A5BE054)[/FONT]
[FONT=lucida console]   CheckSum:         00D89E53[/FONT]
[FONT=lucida console]   ImageSize:        00D86000[/FONT]
[FONT=lucida console]   File version:     6.1.7600.16385[/FONT]
[FONT=lucida console]   Product version:  6.1.7600.16385[/FONT]
[FONT=lucida console]   File flags:       0 (Mask 3F)[/FONT]
[FONT=lucida console]   File OS:          40004 NT Win32[/FONT]
[FONT=lucida console]   File type:        2.0 Dll[/FONT]
[FONT=lucida console]   File date:        00000000.00000000[/FONT]
[FONT=lucida console]   Translations:     0409.04b0[/FONT]
[FONT=lucida console]   CompanyName:      Microsoft Corporation[/FONT]
[FONT=lucida console]   ProductName:      Microsoft® Windows® Operating System[/FONT]
[FONT=lucida console]   InternalName:     SHELL32[/FONT]
[FONT=lucida console]   OriginalFilename: SHELL32.DLL[/FONT]
[FONT=lucida console]   ProductVersion:   6.1.7600.16385[/FONT]
[FONT=lucida console]   FileVersion:      6.1.7600.16385 (win7_rtm.090713-1255)[/FONT]
[FONT=lucida console]   FileDescription:  Windows Shell Common Dll[/FONT]
[FONT=lucida console]   LegalCopyright:   © Microsoft Corporation. All rights reserved.[/FONT]
[FONT=lucida console]0:039> lmnt[/FONT]
[FONT=lucida console]start             end                 module name[/FONT]
[FONT=lucida console]00000000`6f060000 00000000`6f2e3000   NLSLexicons0009 NLSLexicons0009.dll Mon Jul 13 18:31:42 2009 (4A5BDFFE)[/FONT]
[FONT=lucida console]00000000`6f2f0000 00000000`6f3d3000   FXSRESM  FXSRESM.dll  Mon Jul 13 18:28:06 2009 (4A5BDF26)[/FONT]
[FONT=lucida console]00000000`74b30000 00000000`74b36000   ksuser   ksuser.dll   Mon Jul 13 18:31:21 2009 (4A5BDFE9)[/FONT]
[FONT=lucida console]00000000`76bf0000 00000000`76cea000   user32   user32.dll   Mon Jul 13 18:34:00 2009 (4A5BE088)[/FONT]
[FONT=lucida console]00000000`76cf0000 00000000`76e0f000   kernel32 kernel32.dll Mon Jul 13 18:31:11 2009 (4A5BDFDF)[/FONT]
[FONT=lucida console]00000000`76e10000 00000000`76fbb000   ntdll    ntdll.dll    Mon Jul 13 18:32:27 2009 (4A5BE02B)[/FONT]
[FONT=lucida console]00000000`76fd0000 00000000`76fd7000   psapi    psapi.dll    Mon Jul 13 16:26:21 2009 (4A5BC29D)[/FONT]
[FONT=lucida console]00000000`76fe0000 00000000`76fe3000   normaliz normaliz.dll Mon Jul 13 18:32:18 2009 (4A5BE022)[/FONT]
[FONT=lucida console]00000000`ffb80000 00000000`ffe3f000   explorer explorer.exe Sun Aug 02 20:20:17 2009 (4A765771)[/FONT]
[FONT=lucida console]000007fe`ee3a0000 000007fe`eef6e000   ieframe  ieframe.dll  Mon Jul 13 18:28:31 2009 (4A5BDF3F)[/FONT]
[FONT=lucida console]000007fe`efb50000 000007fe`f014f000   NLSData0009 NLSData0009.dll Mon Jul 13 18:31:02 2009 (4A5BDFD6)[/FONT]
[FONT=lucida console]000007fe`f1940000 000007fe`f195b000   davclnt  davclnt.dll  Mon Jul 13 18:26:25 2009 (4A5BDEC1)[/FONT]
[FONT=lucida console]000007fe`f1960000 000007fe`f1982000   ntlanman ntlanman.dll Mon Jul 13 18:32:43 2009 (4A5BE03B)[/FONT]
[FONT=lucida console]000007fe`f2920000 000007fe`f2a68000   NaturalLanguage6 NaturalLanguage6.dll Mon Jul 13 18:30:52 2009 (4A5BDFCC)[/FONT]
[FONT=lucida console]000007fe`f2be0000 000007fe`f2bea000   davhlpr  davhlpr.dll  Mon Jul 13 18:26:26 2009 (4A5BDEC2)[/FONT]
[FONT=lucida console]000007fe`f2e90000 000007fe`f2e9a000   drprov   drprov.dll   Mon Jul 13 18:27:40 2009 (4A5BDF0C)[/FONT]
[FONT=lucida console]000007fe`f3510000 000007fe`f3541000   provsvc  provsvc.dll  Mon Jul 13 18:32:20 2009 (4A5BE024)[/FONT]
[FONT=lucida console]000007fe`f3550000 000007fe`f35c2000   ieproxy  ieproxy.dll  Mon Jul 13 18:28:33 2009 (4A5BDF41)[/FONT]
[FONT=lucida console]000007fe`f47f0000 000007fe`f492c000   werconcpl werconcpl.dll Mon Jul 13 18:33:54 2009 (4A5BE082)[/FONT]
[FONT=lucida console]000007fe`f4a20000 000007fe`f4af5000   SearchFolder SearchFolder.dll Mon Jul 13 18:33:17 2009 (4A5BE05D)[/FONT]
[FONT=lucida console]000007fe`f4b00000 000007fe`f4d71000   wpdshext wpdshext.dll Mon Jul 13 18:36:55 2009 (4A5BE137)[/FONT]
[FONT=lucida console]000007fe`f4f80000 000007fe`f509f000   wscui    wscui.cpl    Mon Jul 13 18:34:24 2009 (4A5BE0A0)[/FONT]
[FONT=lucida console]000007fe`f50a0000 000007fe`f513d000   FXSAPI   FXSAPI.dll   Mon Jul 13 18:27:57 2009 (4A5BDF1D)[/FONT]
[FONT=lucida console]000007fe`f5140000 000007fe`f536b000   SyncCenter SyncCenter.dll Mon Jul 13 18:33:40 2009 (4A5BE074)[/FONT]
[FONT=lucida console]000007fe`f5370000 000007fe`f552d000   pnidui   pnidui.dll   Mon Jul 13 18:32:53 2009 (4A5BE045)[/FONT]
[FONT=lucida console]000007fe`f5a60000 000007fe`f5adb000   StructuredQuery StructuredQuery.dll Mon Jul 13 18:33:30 2009 (4A5BE06A)[/FONT]
[FONT=lucida console]000007fe`f5ae0000 000007fe`f5bb7000   FXSST    FXSST.dll    Mon Jul 13 18:28:09 2009 (4A5BDF29)[/FONT]
[FONT=lucida console]000007fe`f5bc0000 000007fe`f5c15000   hgcpl    hgcpl.dll    Mon Jul 13 18:27:49 2009 (4A5BDF15)[/FONT]
[FONT=lucida console]000007fe`f60a0000 000007fe`f6120000   imapi2   imapi2.dll   Mon Jul 13 18:28:27 2009 (4A5BDF3B)[/FONT]
[FONT=lucida console]000007fe`f6120000 000007fe`f61e2000   Actioncenter Actioncenter.dll Mon Jul 13 18:25:00 2009 (4A5BDE6C)[/FONT]
[FONT=lucida console]000007fe`f61f0000 000007fe`f647b000   netshell netshell.dll Mon Jul 13 18:30:58 2009 (4A5BDFD2)[/FONT]
[FONT=lucida console]000007fe`f64b0000 000007fe`f6504000   oleacc   oleacc.dll   Mon Jul 13 18:32:11 2009 (4A5BE01B)[/FONT]
[FONT=lucida console]000007fe`f6510000 000007fe`f65c5000   bthprops bthprops.cpl Mon Jul 13 18:25:48 2009 (4A5BDE9C)[/FONT]
[FONT=lucida console]000007fe`f65d0000 000007fe`f662e000   WWanAPI  WWanAPI.dll  Mon Jul 13 18:34:32 2009 (4A5BE0A8)[/FONT]
[FONT=lucida console]000007fe`f6630000 000007fe`f67cc000   NetworkExplorer NetworkExplorer.dll Mon Jul 13 18:31:01 2009 (4A5BDFD5)[/FONT]
[FONT=lucida console]000007fe`f67f0000 000007fe`f6b06000   msi      msi.dll      Mon Jul 13 18:31:09 2009 (4A5BDFDD)[/FONT]
[FONT=lucida console]000007fe`f6bf0000 000007fe`f6cad000   PortableDeviceApi PortableDeviceApi.dll Mon Jul 13 18:33:11 2009 (4A5BE057)[/FONT]
[FONT=lucida console]000007fe`f6cb0000 000007fe`f6f53000   gameux   gameux.dll   Mon Jul 13 18:27:25 2009 (4A5BDEFD)[/FONT]
[FONT=lucida console]000007fe`f6f60000 000007fe`f6f6c000   linkinfo linkinfo.dll Mon Jul 13 18:28:43 2009 (4A5BDF4B)[/FONT]
[FONT=lucida console]000007fe`f6f70000 000007fe`f6fb5000   QAGENT   QAGENT.DLL   Mon Jul 13 18:32:21 2009 (4A5BE025)[/FONT]
[FONT=lucida console]000007fe`f6fc0000 000007fe`f7034000   DXP      DXP.dll      Mon Jul 13 18:28:13 2009 (4A5BDF2D)[/FONT]
[FONT=lucida console]000007fe`f7060000 000007fe`f714e000   actxprxy actxprxy.dll Mon Jul 13 18:25:06 2009 (4A5BDE72)[/FONT]
[FONT=lucida console]000007fe`f7150000 000007fe`f71a8000   srchadmin srchadmin.dll Mon Jul 13 18:33:47 2009 (4A5BE07B)[/FONT]
[FONT=lucida console]000007fe`f71b0000 000007fe`f7219000   prnfldr  prnfldr.dll  Mon Jul 13 18:33:30 2009 (4A5BE06A)[/FONT]
[FONT=lucida console]000007fe`f72b0000 000007fe`f736a000   batmeter batmeter.dll Mon Jul 13 18:25:07 2009 (4A5BDE73)[/FONT]
[FONT=lucida console]000007fe`f7370000 000007fe`f7479000   cryptui  cryptui.dll  Mon Jul 13 18:30:00 2009 (4A5BDF98)[/FONT]
[FONT=lucida console]000007fe`f74b0000 000007fe`f74e9000   PortableDeviceTypes PortableDeviceTypes.dll Mon Jul 13 18:33:16 2009 (4A5BE05C)[/FONT]
[FONT=lucida console]000007fe`f74f0000 000007fe`f7511000   UIAnimation UIAnimation.dll Mon Jul 13 18:33:38 2009 (4A5BE072)[/FONT]
[FONT=lucida console]000007fe`f7520000 000007fe`f76f8000   authui   authui.dll   Mon Jul 13 18:25:27 2009 (4A5BDE87)[/FONT]
[FONT=lucida console]000007fe`f7700000 000007fe`f78ca000   EXPLORERFRAME EXPLORERFRAME.dll Mon Jul 13 18:29:38 2009 (4A5BDF82)[/FONT]
[FONT=lucida console]000007fe`f7d10000 000007fe`f7d1f000   cscapi   cscapi.dll   Mon Jul 13 18:30:03 2009 (4A5BDF9B)[/FONT]
[FONT=lucida console]000007fe`f7d30000 000007fe`f7d50000   wlanapi  wlanapi.dll  Mon Jul 13 18:35:08 2009 (4A5BE0CC)[/FONT]
[FONT=lucida console]000007fe`f7d50000 000007fe`f7dcf000   tiptsf   tiptsf.dll   Mon Jul 13 18:33:42 2009 (4A5BE076)[/FONT]
[FONT=lucida console]000007fe`f7dd0000 000007fe`f7e96000   msftedit msftedit.dll Mon Jul 13 18:30:50 2009 (4A5BDFCA)[/FONT]
[FONT=lucida console]000007fe`f7f00000 000007fe`f7f7c000   wer      wer.dll      Mon Jul 13 18:33:53 2009 (4A5BE081)[/FONT]
[FONT=lucida console]000007fe`f8060000 000007fe`f8078000   mpr      mpr.dll      Mon Jul 13 18:29:24 2009 (4A5BDF74)[/FONT]
[FONT=lucida console]000007fe`f8090000 000007fe`f80ad000   mssprxy  mssprxy.dll  Mon Jul 13 18:30:18 2009 (4A5BDFAA)[/FONT]
[FONT=lucida console]000007fe`f82a0000 000007fe`f82ac000   npmproxy npmproxy.dll Mon Jul 13 18:32:19 2009 (4A5BE023)[/FONT]
[FONT=lucida console]000007fe`f82d0000 000007fe`f8312000   stobject stobject.dll Mon Jul 13 18:33:32 2009 (4A5BE06C)[/FONT]
[FONT=lucida console]000007fe`f8340000 000007fe`f8352000   wscapi   wscapi.dll   Mon Jul 13 18:34:18 2009 (4A5BE09A)[/FONT]
[FONT=lucida console]000007fe`f8840000 000007fe`f88b0000   winspool winspool.drv Mon Jul 13 18:34:55 2009 (4A5BE0BF)[/FONT]
[FONT=lucida console]000007fe`f8c30000 000007fe`f8ca4000   netprofm netprofm.dll Mon Jul 13 18:30:56 2009 (4A5BDFD0)[/FONT]
[FONT=lucida console]000007fe`f8d20000 000007fe`f8d3f000   QUTIL    QUTIL.DLL    Mon Jul 13 18:32:35 2009 (4A5BE033)[/FONT]
[FONT=lucida console]000007fe`f8d50000 000007fe`f8d70000   wpdshserviceobj wpdshserviceobj.dll Mon Jul 13 18:36:56 2009 (4A5BE138)[/FONT]
[FONT=lucida console]000007fe`f9580000 000007fe`f9770000   msxml6   msxml6.dll   Mon Jul 13 18:30:48 2009 (4A5BDFC8)[/FONT]
[FONT=lucida console]000007fe`f9c40000 000007fe`f9d60000   taskschd taskschd.dll Mon Jul 13 18:33:48 2009 (4A5BE07C)[/FONT]
[FONT=lucida console]000007fe`fa610000 000007fe`fa619000   midimap  midimap.dll  Mon Jul 13 18:30:38 2009 (4A5BDFBE)[/FONT]
[FONT=lucida console]000007fe`fa620000 000007fe`fa638000   msacm32_7fefa620000 msacm32.dll  Mon Jul 13 18:29:51 2009 (4A5BDF8F)[/FONT]
[FONT=lucida console]000007fe`fa640000 000007fe`fa64a000   msacm32  msacm32.drv  Mon Jul 13 18:29:52 2009 (4A5BDF90)[/FONT]
[FONT=lucida console]000007fe`fa650000 000007fe`fa69f000   AudioSes AudioSes.dll Mon Jul 13 18:25:09 2009 (4A5BDE75)[/FONT]
[FONT=lucida console]000007fe`fa900000 000007fe`fa914000   samcli   samcli.dll   Mon Jul 13 18:32:31 2009 (4A5BE02F)[/FONT]
[FONT=lucida console]000007fe`fa920000 000007fe`fa935000   wkscli   wkscli.dll   Mon Jul 13 18:35:05 2009 (4A5BE0C9)[/FONT]
[FONT=lucida console]000007fe`fa940000 000007fe`fa94c000   netutils netutils.dll Mon Jul 13 18:31:00 2009 (4A5BDFD4)[/FONT]
[FONT=lucida console]000007fe`fa970000 000007fe`fa986000   Syncreg  Syncreg.dll  Mon Jul 13 18:33:45 2009 (4A5BE079)[/FONT]
[FONT=lucida console]000007fe`fa9b0000 000007fe`fa9d7000   EhStorAPI EhStorAPI.dll Mon Jul 13 18:27:17 2009 (4A5BDEF5)[/FONT]
[FONT=lucida console]000007fe`fa9e0000 000007fe`fa9ff000   thumbcache thumbcache.dll Mon Jul 13 18:33:34 2009 (4A5BE06E)[/FONT]
[FONT=lucida console]000007fe`faa90000 000007fe`fabba000   WindowsCodecs WindowsCodecs.dll Mon Jul 13 18:34:29 2009 (4A5BE0A5)[/FONT]
[FONT=lucida console]000007fe`fabc0000 000007fe`fabfb000   wdmaud   wdmaud.drv   Mon Jul 13 18:33:55 2009 (4A5BE083)[/FONT]
[FONT=lucida console]000007fe`fac00000 000007fe`fac3b000   winmm    winmm.dll    Mon Jul 13 18:34:40 2009 (4A5BE0B0)[/FONT]
[FONT=lucida console]000007fe`fac40000 000007fe`fac75000   xmllite  xmllite.dll  Mon Jul 13 18:34:16 2009 (4A5BE098)[/FONT]
[FONT=lucida console]000007fe`fac80000 000007fe`fac98000   dwmapi   dwmapi.dll   Mon Jul 13 18:28:07 2009 (4A5BDF27)[/FONT]
[FONT=lucida console]000007fe`faca0000 000007fe`facb1000   dhcpcsvc6 dhcpcsvc6.DLL Mon Jul 13 18:26:31 2009 (4A5BDEC7)[/FONT]
[FONT=lucida console]000007fe`facc0000 000007fe`facd8000   dhcpcsvc dhcpcsvc.dll Mon Jul 13 18:26:30 2009 (4A5BDEC6)[/FONT]
[FONT=lucida console]000007fe`fae00000 000007fe`fae0b000   winnsi   winnsi.dll   Mon Jul 13 18:34:41 2009 (4A5BE0B1)[/FONT]
[FONT=lucida console]000007fe`fae50000 000007fe`fae77000   IPHLPAPI IPHLPAPI.DLL Mon Jul 13 18:28:55 2009 (4A5BDF57)[/FONT]
[FONT=lucida console]000007fe`faee0000 000007fe`faef1000   wtsapi32 wtsapi32.dll Mon Jul 13 18:34:20 2009 (4A5BE09C)[/FONT]
[FONT=lucida console]000007fe`faf30000 000007fe`faf3b000   slc      slc.dll      Mon Jul 13 18:33:23 2009 (4A5BE063)[/FONT]
[FONT=lucida console]000007fe`faf40000 000007fe`fafa7000   es       es.dll       Mon Jul 13 18:29:30 2009 (4A5BDF7A)[/FONT]
[FONT=lucida console]000007fe`fafb0000 000007fe`fafbc000   dsrole   dsrole.dll   Mon Jul 13 18:27:57 2009 (4A5BDF1D)[/FONT]
[FONT=lucida console]000007fe`fafc0000 000007fe`fafd9000   atl      atl.dll      Mon Jul 13 18:25:04 2009 (4A5BDE70)[/FONT]
[FONT=lucida console]000007fe`fb030000 000007fe`fb045000   nlaapi   nlaapi.dll   Mon Jul 13 18:30:49 2009 (4A5BDFC9)[/FONT]
[FONT=lucida console]000007fe`fb120000 000007fe`fb14d000   ntmarta  ntmarta.dll  Mon Jul 13 18:32:45 2009 (4A5BE03D)[/FONT]
[FONT=lucida console]000007fe`fb150000 000007fe`fb15b000   hid      hid.dll      Mon Jul 13 18:27:53 2009 (4A5BDF19)[/FONT]
[FONT=lucida console]000007fe`fb160000 000007fe`fb16d000   wwapi    wwapi.dll    Mon Jul 13 18:34:41 2009 (4A5BE0B1)[/FONT]
[FONT=lucida console]000007fe`fb170000 000007fe`fb1ab000   msls31   msls31.dll   Mon Jul 13 18:31:24 2009 (4A5BDFEC)[/FONT]
[FONT=lucida console]000007fe`fb1b0000 000007fe`fb1d4000   shacct   shacct.dll   Mon Jul 13 18:33:06 2009 (4A5BE052)[/FONT]
[FONT=lucida console]000007fe`fb1e0000 000007fe`fb263000   timedate timedate.cpl Mon Jul 13 18:33:36 2009 (4A5BE070)[/FONT]
[FONT=lucida console]000007fe`fb270000 000007fe`fb2ab000   SndVolSSO SndVolSSO.DLL Mon Jul 13 18:33:49 2009 (4A5BE07D)[/FONT]
[FONT=lucida console]000007fe`fb2b0000 000007fe`fb2e3000   shdocvw  shdocvw.dll  Mon Jul 13 18:33:07 2009 (4A5BE053)[/FONT]
[FONT=lucida console]000007fe`fb2f0000 000007fe`fb505000   GdiPlus  GdiPlus.dll  Mon Jul 13 18:24:55 2009 (4A5BDE67)[/FONT]
[FONT=lucida console]000007fe`fb510000 000007fe`fb566000   uxtheme  uxtheme.dll  Mon Jul 13 18:34:11 2009 (4A5BE093)[/FONT]
[FONT=lucida console]000007fe`fb570000 000007fe`fb5bb000   MMDevAPI MMDevAPI.dll Mon Jul 13 18:29:12 2009 (4A5BDF68)[/FONT]
[FONT=lucida console]000007fe`fb5c0000 000007fe`fb5c9000   avrt     avrt.dll     Mon Jul 13 18:25:42 2009 (4A5BDE96)[/FONT]
[FONT=lucida console]000007fe`fb5d0000 000007fe`fb5d7000   wlanutil wlanutil.dll Mon Jul 13 18:35:22 2009 (4A5BE0DA)[/FONT]
[FONT=lucida console]000007fe`fb5f0000 000007fe`fb71c000   propsys  propsys.dll  Mon Jul 13 18:32:18 2009 (4A5BE022)[/FONT]
[FONT=lucida console]000007fe`fb720000 000007fe`fb74c000   powrprof powrprof.dll Mon Jul 13 18:33:22 2009 (4A5BE062)[/FONT]
[FONT=lucida console]000007fe`fb800000 000007fe`fb81d000   samlib   samlib.dll   Mon Jul 13 18:32:32 2009 (4A5BE030)[/FONT]
[FONT=lucida console]000007fe`fb840000 000007fe`fb84b000   ehSSO    ehSSO.dll    Mon Jul 13 18:27:16 2009 (4A5BDEF4)[/FONT]
[FONT=lucida console]000007fe`fb850000 000007fe`fba44000   comctl32 comctl32.dll Mon Jul 13 18:24:55 2009 (4A5BDE67)[/FONT]
[FONT=lucida console]000007fe`fba50000 000007fe`fbad0000   ntshrui  ntshrui.dll  Mon Jul 13 18:32:47 2009 (4A5BE03F)[/FONT]
[FONT=lucida console]000007fe`fbad0000 000007fe`fbb05000   EhStorShell EhStorShell.dll Mon Jul 13 18:27:22 2009 (4A5BDEFA)[/FONT]
[FONT=lucida console]000007fe`fbb10000 000007fe`fbc02000   dui70    dui70.dll    Mon Jul 13 18:28:05 2009 (4A5BDF25)[/FONT]
[FONT=lucida console]000007fe`fbc10000 000007fe`fbc53000   duser    duser.dll    Mon Jul 13 18:28:06 2009 (4A5BDF26)[/FONT]
[FONT=lucida console]000007fe`fbc60000 000007fe`fbc6b000   hcproviders hcproviders.dll Mon Jul 13 18:27:38 2009 (4A5BDF0A)[/FONT]
[FONT=lucida console]000007fe`fbc70000 000007fe`fbcbc000   framedynos framedynos.dll Mon Jul 13 18:27:36 2009 (4A5BDF08)[/FONT]
[FONT=lucida console]000007fe`fbcc0000 000007fe`fbce8000   wscinterop wscinterop.dll Mon Jul 13 18:34:19 2009 (4A5BE09B)[/FONT]
[FONT=lucida console]000007fe`fbcf0000 000007fe`fbd00000   AltTab   AltTab.dll   Mon Jul 13 18:25:19 2009 (4A5BDE7F)[/FONT]
[FONT=lucida console]000007fe`fbd00000 000007fe`fbd08000   IconCodecService IconCodecService.dll Mon Jul 13 18:28:17 2009 (4A5BDF31)[/FONT]
[FONT=lucida console]000007fe`fbd10000 000007fe`fbd19000   msiltcfg msiltcfg.dll Mon Jul 13 18:31:17 2009 (4A5BDFE5)[/FONT]
[FONT=lucida console]000007fe`fbd20000 000007fe`fbd39000   wercplsupport wercplsupport.dll Mon Jul 13 18:33:55 2009 (4A5BE083)[/FONT]
[FONT=lucida console]000007fe`fbee0000 000007fe`fbeec000   version  version.dll  Mon Jul 13 18:33:54 2009 (4A5BE082)[/FONT]
[FONT=lucida console]000007fe`fc0b0000 000007fe`fc0ce000   userenv  userenv.dll  Mon Jul 13 18:34:03 2009 (4A5BE08B)[/FONT]
[FONT=lucida console]000007fe`fc0d0000 000007fe`fc0e2000   devrtl   devrtl.dll   Mon Jul 13 18:26:58 2009 (4A5BDEE2)[/FONT]
[FONT=lucida console]000007fe`fc2c0000 000007fe`fc307000   rsaenh   rsaenh.dll   Mon Jul 13 18:32:41 2009 (4A5BE039)[/FONT]
[FONT=lucida console]000007fe`fc3e0000 000007fe`fc43b000   dnsapi   dnsapi.dll   Mon Jul 13 18:27:09 2009 (4A5BDEED)[/FONT]
[FONT=lucida console]000007fe`fc550000 000007fe`fc58d000   winsta   winsta.dll   Mon Jul 13 18:34:59 2009 (4A5BE0C3)[/FONT]
[FONT=lucida console]000007fe`fc6f0000 000007fe`fc6f9000   credssp  credssp.dll  Mon Jul 13 18:29:49 2009 (4A5BDF8D)[/FONT]
[FONT=lucida console]000007fe`fc820000 000007fe`fc837000   cryptsp  cryptsp.dll  Mon Jul 13 18:29:58 2009 (4A5BDF96)[/FONT]
[FONT=lucida console]000007fe`fc850000 000007fe`fc8bd000   wevtapi  wevtapi.dll  Mon Jul 13 18:33:59 2009 (4A5BE087)[/FONT]
[FONT=lucida console]000007fe`fc8c0000 000007fe`fc8e3000   srvcli   srvcli.dll   Mon Jul 13 18:34:06 2009 (4A5BE08E)[/FONT]
[FONT=lucida console]000007fe`fca40000 000007fe`fca4b000   secur32  secur32.dll  Mon Jul 13 18:33:26 2009 (4A5BE066)[/FONT]
[FONT=lucida console]000007fe`fcc10000 000007fe`fcc35000   sspicli  sspicli.dll  Mon Jul 13 18:34:13 2009 (4A5BE095)[/FONT]
[FONT=lucida console]000007fe`fcc40000 000007fe`fcc97000   apphelp  apphelp.dll  Mon Jul 13 18:26:04 2009 (4A5BDEAC)[/FONT]
[FONT=lucida console]000007fe`fcca0000 000007fe`fccaf000   CRYPTBASE CRYPTBASE.dll Mon Jul 13 18:29:53 2009 (4A5BDF91)[/FONT]
[FONT=lucida console]000007fe`fccb0000 000007fe`fcd42000   sxs      sxs.dll      Mon Jul 13 18:33:35 2009 (4A5BE06F)[/FONT]
[FONT=lucida console]000007fe`fcd50000 000007fe`fcd64000   RpcRtRemote RpcRtRemote.dll Mon Jul 13 18:32:38 2009 (4A5BE036)[/FONT]
[FONT=lucida console]000007fe`fcd70000 000007fe`fcd7f000   profapi  profapi.dll  Mon Jul 13 18:32:15 2009 (4A5BE01F)[/FONT]
[FONT=lucida console]000007fe`fce10000 000007fe`fce1f000   msasn1   msasn1.dll   Sat Aug 29 00:40:40 2009 (4A98DB78)[/FONT]
[FONT=lucida console]000007fe`fce20000 000007fe`fce56000   cfgmgr32 cfgmgr32.dll Mon Jul 13 18:26:02 2009 (4A5BDEAA)[/FONT]
[FONT=lucida console]000007fe`fce60000 000007fe`fce99000   wintrust wintrust.dll Mon Jul 13 18:35:03 2009 (4A5BE0C7)[/FONT]
[FONT=lucida console]000007fe`fcea0000 000007fe`fcf0b000   KERNELBASE KERNELBASE.dll Mon Jul 13 18:31:12 2009 (4A5BDFE0)[/FONT]
[FONT=lucida console]000007fe`fcf10000 000007fe`fcf2a000   devobj   devobj.dll   Mon Jul 13 18:26:57 2009 (4A5BDEE1)[/FONT]
[FONT=lucida console]000007fe`fcfd0000 000007fe`fd136000   crypt32  crypt32.dll  Mon Jul 13 18:29:52 2009 (4A5BDF90)[/FONT]
[FONT=lucida console]000007fe`fd140000 000007fe`fd1df000   msvcrt   msvcrt.dll   Mon Jul 13 18:30:38 2009 (4A5BDFBE)[/FONT]
[FONT=lucida console]000007fe`fd1e0000 000007fe`fd1ee000   lpk      lpk.dll      Mon Jul 13 18:29:03 2009 (4A5BDF5F)[/FONT]
[FONT=lucida console]000007fe`fd1f0000 000007fe`fd3c7000   setupapi setupapi.dll Mon Jul 13 18:33:06 2009 (4A5BE052)[/FONT]
[FONT=lucida console]000007fe`fd3d0000 000007fe`fd3d8000   nsi      nsi.dll      Mon Jul 13 18:32:25 2009 (4A5BE029)[/FONT]
[FONT=lucida console]000007fe`fd3e0000 000007fe`fd50e000   rpcrt4   rpcrt4.dll   Mon Jul 13 18:32:37 2009 (4A5BE035)[/FONT]
[FONT=lucida console]000007fe`fd510000 000007fe`fd53e000   imm32    imm32.dll    Mon Jul 13 18:28:32 2009 (4A5BDF40)[/FONT]
[FONT=lucida console]000007fe`fd540000 000007fe`fd66a000   wininet  wininet.dll  Mon Jul 13 18:34:35 2009 (4A5BE0AB)[/FONT]
[FONT=lucida console]000007fe`fd670000 000007fe`fd747000   oleaut32 oleaut32.dll Mon Jul 13 18:32:14 2009 (4A5BE01E)[/FONT]
[FONT=lucida console]000007fe`fd750000 000007fe`fd7b7000   gdi32    gdi32.dll    Mon Jul 13 18:27:29 2009 (4A5BDF01)[/FONT]
[FONT=lucida console]000007fe`fd7c0000 000007fe`fd80d000   ws2_32   ws2_32.dll   Mon Jul 13 18:34:13 2009 (4A5BE095)[/FONT]
[FONT=lucida console]000007fe`fd810000 000007fe`fd8eb000   advapi32 advapi32.dll Mon Jul 13 18:24:59 2009 (4A5BDE6B)[/FONT]
[FONT=lucida console]000007fe`fd8f0000 000007fe`fdaf1000   ole32    ole32.dll    Mon Jul 13 18:32:10 2009 (4A5BE01A)[/FONT]
[FONT=lucida console]000007fe`fdb00000 000007fe`fdbca000   usp10    usp10.dll    Mon Jul 13 18:34:04 2009 (4A5BE08C)[/FONT]
[FONT=lucida console]000007fe`fdbd0000 000007fe`fdc41000   shlwapi  shlwapi.dll  Mon Jul 13 18:33:13 2009 (4A5BE059)[/FONT]
[FONT=lucida console]000007fe`fdc50000 000007fe`fdce9000   clbcatq  clbcatq.dll  Mon Jul 13 18:26:18 2009 (4A5BDEBA)[/FONT]
[FONT=lucida console]000007fe`fdd90000 000007fe`fdde0000   Wldap32  Wldap32.dll  Mon Jul 13 18:35:25 2009 (4A5BE0DD)[/FONT]
[FONT=lucida console]000007fe`fdde0000 000007fe`fddff000   sechost  sechost.dll  Mon Jul 13 18:33:18 2009 (4A5BE05E)[/FONT]
[FONT=lucida console]000007fe`fdea0000 000007fe`fdfa9000   msctf    msctf.dll    Mon Jul 13 18:30:18 2009 (4A5BDFAA)[/FONT]
[FONT=lucida console]000007fe`fdfb0000 000007fe`fe128000   urlmon   urlmon.dll   Mon Jul 13 18:33:53 2009 (4A5BE081)[/FONT]
[FONT=lucida console]000007fe`fe130000 000007fe`fe388000   iertutil iertutil.dll Mon Jul 13 18:28:35 2009 (4A5BDF43)[/FONT]
[FONT=lucida console]000007fe`fe390000 000007fe`ff116000   shell32  shell32.dll  Mon Jul 13 18:33:08 2009 (4A5BE054)[/FONT]
[FONT=lucida console]Unloaded modules:[/FONT]
[FONT=lucida console]000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)[/FONT]
[FONT=lucida console]   Checksum:  0000FF7D[/FONT]
[FONT=lucida console]00000000`72bf0000 00000000`72bf3000   sfc.dll [/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)[/FONT]
[FONT=lucida console]   Checksum:  00010B4F[/FONT]
[FONT=lucida console]000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)[/FONT]
[FONT=lucida console]   Checksum:  0000FF7D[/FONT]
[FONT=lucida console]00000000`72bf0000 00000000`72bf3000   sfc.dll [/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)[/FONT]
[FONT=lucida console]   Checksum:  00010B4F[/FONT]
[FONT=lucida console]000007fe`f9780000 000007fe`f97e4000   webio.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:33:49 2009 (4A5BE07D)[/FONT]
[FONT=lucida console]   Checksum:  0006F5FB[/FONT]
[FONT=lucida console]000007fe`f97f0000 000007fe`f985e000   WINHTTP.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:34:34 2009 (4A5BE0AA)[/FONT]
[FONT=lucida console]   Checksum:  00071137[/FONT]
[FONT=lucida console]000007fe`fa800000 000007fe`fa81f000   thumbcache.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:33:34 2009 (4A5BE06E)[/FONT]
[FONT=lucida console]   Checksum:  00020620[/FONT]
[FONT=lucida console]000007fe`f6570000 000007fe`f65c4000   OLEACC.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:32:11 2009 (4A5BE01B)[/FONT]
[FONT=lucida console]   Checksum:  00057A8E[/FONT]
[FONT=lucida console]000007fe`ef580000 000007fe`f014e000   IEFRAME.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:28:31 2009 (4A5BDF3F)[/FONT]
[FONT=lucida console]   Checksum:  00BD3A6B[/FONT]
[FONT=lucida console]000007fe`f2070000 000007fe`f20ab000   MLANG.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:29:05 2009 (4A5BDF61)[/FONT]
[FONT=lucida console]   Checksum:  00038FA3[/FONT]
[FONT=lucida console]000007fe`f6ba0000 000007fe`f6bea000   webcheck.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:34:14 2009 (4A5BE096)[/FONT]
[FONT=lucida console]   Checksum:  00048A35[/FONT]
[FONT=lucida console]000007fe`fad30000 000007fe`fad83000   fwpuclnt.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:27:54 2009 (4A5BDF1A)[/FONT]
[FONT=lucida console]   Checksum:  0005E0D4[/FONT]
[FONT=lucida console]000007fe`f94f0000 000007fe`f9528000   ncsi.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:31:02 2009 (4A5BDFD6)[/FONT]
[FONT=lucida console]   Checksum:  000359DF[/FONT]
[FONT=lucida console]000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)[/FONT]
[FONT=lucida console]   Checksum:  0000FF7D[/FONT]
[FONT=lucida console]00000000`72bf0000 00000000`72bf3000   sfc.dll [/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)[/FONT]
[FONT=lucida console]   Checksum:  00010B4F[/FONT]
[FONT=lucida console]0:039> lmntsm[/FONT]
[FONT=lucida console]start             end                 module name[/FONT]
[FONT=lucida console]000007fe`f6120000 000007fe`f61e2000   Actioncenter Actioncenter.dll Mon Jul 13 18:25:00 2009 (4A5BDE6C)[/FONT]
[FONT=lucida console]000007fe`f7060000 000007fe`f714e000   actxprxy actxprxy.dll Mon Jul 13 18:25:06 2009 (4A5BDE72)[/FONT]
[FONT=lucida console]000007fe`fd810000 000007fe`fd8eb000   advapi32 advapi32.dll Mon Jul 13 18:24:59 2009 (4A5BDE6B)[/FONT]
[FONT=lucida console]000007fe`fbcf0000 000007fe`fbd00000   AltTab   AltTab.dll   Mon Jul 13 18:25:19 2009 (4A5BDE7F)[/FONT]
[FONT=lucida console]000007fe`fcc40000 000007fe`fcc97000   apphelp  apphelp.dll  Mon Jul 13 18:26:04 2009 (4A5BDEAC)[/FONT]
[FONT=lucida console]000007fe`fafc0000 000007fe`fafd9000   atl      atl.dll      Mon Jul 13 18:25:04 2009 (4A5BDE70)[/FONT]
[FONT=lucida console]000007fe`fa650000 000007fe`fa69f000   AudioSes AudioSes.dll Mon Jul 13 18:25:09 2009 (4A5BDE75)[/FONT]
[FONT=lucida console]000007fe`f7520000 000007fe`f76f8000   authui   authui.dll   Mon Jul 13 18:25:27 2009 (4A5BDE87)[/FONT]
[FONT=lucida console]000007fe`fb5c0000 000007fe`fb5c9000   avrt     avrt.dll     Mon Jul 13 18:25:42 2009 (4A5BDE96)[/FONT]
[FONT=lucida console]000007fe`f72b0000 000007fe`f736a000   batmeter batmeter.dll Mon Jul 13 18:25:07 2009 (4A5BDE73)[/FONT]
[FONT=lucida console]000007fe`f6510000 000007fe`f65c5000   bthprops bthprops.cpl Mon Jul 13 18:25:48 2009 (4A5BDE9C)[/FONT]
[FONT=lucida console]000007fe`fce20000 000007fe`fce56000   cfgmgr32 cfgmgr32.dll Mon Jul 13 18:26:02 2009 (4A5BDEAA)[/FONT]
[FONT=lucida console]000007fe`fdc50000 000007fe`fdce9000   clbcatq  clbcatq.dll  Mon Jul 13 18:26:18 2009 (4A5BDEBA)[/FONT]
[FONT=lucida console]000007fe`fb850000 000007fe`fba44000   comctl32 comctl32.dll Mon Jul 13 18:24:55 2009 (4A5BDE67)[/FONT]
[FONT=lucida console]000007fe`fc6f0000 000007fe`fc6f9000   credssp  credssp.dll  Mon Jul 13 18:29:49 2009 (4A5BDF8D)[/FONT]
[FONT=lucida console]000007fe`fcfd0000 000007fe`fd136000   crypt32  crypt32.dll  Mon Jul 13 18:29:52 2009 (4A5BDF90)[/FONT]
[FONT=lucida console]000007fe`fcca0000 000007fe`fccaf000   CRYPTBASE CRYPTBASE.dll Mon Jul 13 18:29:53 2009 (4A5BDF91)[/FONT]
[FONT=lucida console]000007fe`fc820000 000007fe`fc837000   cryptsp  cryptsp.dll  Mon Jul 13 18:29:58 2009 (4A5BDF96)[/FONT]
[FONT=lucida console]000007fe`f7370000 000007fe`f7479000   cryptui  cryptui.dll  Mon Jul 13 18:30:00 2009 (4A5BDF98)[/FONT]
[FONT=lucida console]000007fe`f7d10000 000007fe`f7d1f000   cscapi   cscapi.dll   Mon Jul 13 18:30:03 2009 (4A5BDF9B)[/FONT]
[FONT=lucida console]000007fe`f1940000 000007fe`f195b000   davclnt  davclnt.dll  Mon Jul 13 18:26:25 2009 (4A5BDEC1)[/FONT]
[FONT=lucida console]000007fe`f2be0000 000007fe`f2bea000   davhlpr  davhlpr.dll  Mon Jul 13 18:26:26 2009 (4A5BDEC2)[/FONT]
[FONT=lucida console]000007fe`fcf10000 000007fe`fcf2a000   devobj   devobj.dll   Mon Jul 13 18:26:57 2009 (4A5BDEE1)[/FONT]
[FONT=lucida console]000007fe`fc0d0000 000007fe`fc0e2000   devrtl   devrtl.dll   Mon Jul 13 18:26:58 2009 (4A5BDEE2)[/FONT]
[FONT=lucida console]000007fe`facc0000 000007fe`facd8000   dhcpcsvc dhcpcsvc.dll Mon Jul 13 18:26:30 2009 (4A5BDEC6)[/FONT]
[FONT=lucida console]000007fe`faca0000 000007fe`facb1000   dhcpcsvc6 dhcpcsvc6.DLL Mon Jul 13 18:26:31 2009 (4A5BDEC7)[/FONT]
[FONT=lucida console]000007fe`fc3e0000 000007fe`fc43b000   dnsapi   dnsapi.dll   Mon Jul 13 18:27:09 2009 (4A5BDEED)[/FONT]
[FONT=lucida console]000007fe`f2e90000 000007fe`f2e9a000   drprov   drprov.dll   Mon Jul 13 18:27:40 2009 (4A5BDF0C)[/FONT]
[FONT=lucida console]000007fe`fafb0000 000007fe`fafbc000   dsrole   dsrole.dll   Mon Jul 13 18:27:57 2009 (4A5BDF1D)[/FONT]
[FONT=lucida console]000007fe`fbb10000 000007fe`fbc02000   dui70    dui70.dll    Mon Jul 13 18:28:05 2009 (4A5BDF25)[/FONT]
[FONT=lucida console]000007fe`fbc10000 000007fe`fbc53000   duser    duser.dll    Mon Jul 13 18:28:06 2009 (4A5BDF26)[/FONT]
[FONT=lucida console]000007fe`fac80000 000007fe`fac98000   dwmapi   dwmapi.dll   Mon Jul 13 18:28:07 2009 (4A5BDF27)[/FONT]
[FONT=lucida console]000007fe`f6fc0000 000007fe`f7034000   DXP      DXP.dll      Mon Jul 13 18:28:13 2009 (4A5BDF2D)[/FONT]
[FONT=lucida console]000007fe`fb840000 000007fe`fb84b000   ehSSO    ehSSO.dll    Mon Jul 13 18:27:16 2009 (4A5BDEF4)[/FONT]
[FONT=lucida console]000007fe`fa9b0000 000007fe`fa9d7000   EhStorAPI EhStorAPI.dll Mon Jul 13 18:27:17 2009 (4A5BDEF5)[/FONT]
[FONT=lucida console]000007fe`fbad0000 000007fe`fbb05000   EhStorShell EhStorShell.dll Mon Jul 13 18:27:22 2009 (4A5BDEFA)[/FONT]
[FONT=lucida console]000007fe`faf40000 000007fe`fafa7000   es       es.dll       Mon Jul 13 18:29:30 2009 (4A5BDF7A)[/FONT]
[FONT=lucida console]00000000`ffb80000 00000000`ffe3f000   explorer explorer.exe Sun Aug 02 20:20:17 2009 (4A765771)[/FONT]
[FONT=lucida console]000007fe`f7700000 000007fe`f78ca000   EXPLORERFRAME EXPLORERFRAME.dll Mon Jul 13 18:29:38 2009 (4A5BDF82)[/FONT]
[FONT=lucida console]000007fe`fbc70000 000007fe`fbcbc000   framedynos framedynos.dll Mon Jul 13 18:27:36 2009 (4A5BDF08)[/FONT]
[FONT=lucida console]000007fe`f50a0000 000007fe`f513d000   FXSAPI   FXSAPI.dll   Mon Jul 13 18:27:57 2009 (4A5BDF1D)[/FONT]
[FONT=lucida console]00000000`6f2f0000 00000000`6f3d3000   FXSRESM  FXSRESM.dll  Mon Jul 13 18:28:06 2009 (4A5BDF26)[/FONT]
[FONT=lucida console]000007fe`f5ae0000 000007fe`f5bb7000   FXSST    FXSST.dll    Mon Jul 13 18:28:09 2009 (4A5BDF29)[/FONT]
[FONT=lucida console]000007fe`f6cb0000 000007fe`f6f53000   gameux   gameux.dll   Mon Jul 13 18:27:25 2009 (4A5BDEFD)[/FONT]
[FONT=lucida console]000007fe`fd750000 000007fe`fd7b7000   gdi32    gdi32.dll    Mon Jul 13 18:27:29 2009 (4A5BDF01)[/FONT]
[FONT=lucida console]000007fe`fb2f0000 000007fe`fb505000   GdiPlus  GdiPlus.dll  Mon Jul 13 18:24:55 2009 (4A5BDE67)[/FONT]
[FONT=lucida console]000007fe`fbc60000 000007fe`fbc6b000   hcproviders hcproviders.dll Mon Jul 13 18:27:38 2009 (4A5BDF0A)[/FONT]
[FONT=lucida console]000007fe`f5bc0000 000007fe`f5c15000   hgcpl    hgcpl.dll    Mon Jul 13 18:27:49 2009 (4A5BDF15)[/FONT]
[FONT=lucida console]000007fe`fb150000 000007fe`fb15b000   hid      hid.dll      Mon Jul 13 18:27:53 2009 (4A5BDF19)[/FONT]
[FONT=lucida console]000007fe`fbd00000 000007fe`fbd08000   IconCodecService IconCodecService.dll Mon Jul 13 18:28:17 2009 (4A5BDF31)[/FONT]
[FONT=lucida console]000007fe`ee3a0000 000007fe`eef6e000   ieframe  ieframe.dll  Mon Jul 13 18:28:31 2009 (4A5BDF3F)[/FONT]
[FONT=lucida console]000007fe`f3550000 000007fe`f35c2000   ieproxy  ieproxy.dll  Mon Jul 13 18:28:33 2009 (4A5BDF41)[/FONT]
[FONT=lucida console]000007fe`fe130000 000007fe`fe388000   iertutil iertutil.dll Mon Jul 13 18:28:35 2009 (4A5BDF43)[/FONT]
[FONT=lucida console]000007fe`f60a0000 000007fe`f6120000   imapi2   imapi2.dll   Mon Jul 13 18:28:27 2009 (4A5BDF3B)[/FONT]
[FONT=lucida console]000007fe`fd510000 000007fe`fd53e000   imm32    imm32.dll    Mon Jul 13 18:28:32 2009 (4A5BDF40)[/FONT]
[FONT=lucida console]000007fe`fae50000 000007fe`fae77000   IPHLPAPI IPHLPAPI.DLL Mon Jul 13 18:28:55 2009 (4A5BDF57)[/FONT]
[FONT=lucida console]00000000`76cf0000 00000000`76e0f000   kernel32 kernel32.dll Mon Jul 13 18:31:11 2009 (4A5BDFDF)[/FONT]
[FONT=lucida console]000007fe`fcea0000 000007fe`fcf0b000   KERNELBASE KERNELBASE.dll Mon Jul 13 18:31:12 2009 (4A5BDFE0)[/FONT]
[FONT=lucida console]00000000`74b30000 00000000`74b36000   ksuser   ksuser.dll   Mon Jul 13 18:31:21 2009 (4A5BDFE9)[/FONT]
[FONT=lucida console]000007fe`f6f60000 000007fe`f6f6c000   linkinfo linkinfo.dll Mon Jul 13 18:28:43 2009 (4A5BDF4B)[/FONT]
[FONT=lucida console]000007fe`fd1e0000 000007fe`fd1ee000   lpk      lpk.dll      Mon Jul 13 18:29:03 2009 (4A5BDF5F)[/FONT]
[FONT=lucida console]000007fe`fa610000 000007fe`fa619000   midimap  midimap.dll  Mon Jul 13 18:30:38 2009 (4A5BDFBE)[/FONT]
[FONT=lucida console]000007fe`fb570000 000007fe`fb5bb000   MMDevAPI MMDevAPI.dll Mon Jul 13 18:29:12 2009 (4A5BDF68)[/FONT]
[FONT=lucida console]000007fe`f8060000 000007fe`f8078000   mpr      mpr.dll      Mon Jul 13 18:29:24 2009 (4A5BDF74)[/FONT]
[FONT=lucida console]000007fe`fa640000 000007fe`fa64a000   msacm32  msacm32.drv  Mon Jul 13 18:29:52 2009 (4A5BDF90)[/FONT]
[FONT=lucida console]000007fe`fa620000 000007fe`fa638000   msacm32_7fefa620000 msacm32.dll  Mon Jul 13 18:29:51 2009 (4A5BDF8F)[/FONT]
[FONT=lucida console]000007fe`fce10000 000007fe`fce1f000   msasn1   msasn1.dll   Sat Aug 29 00:40:40 2009 (4A98DB78)[/FONT]
[FONT=lucida console]000007fe`fdea0000 000007fe`fdfa9000   msctf    msctf.dll    Mon Jul 13 18:30:18 2009 (4A5BDFAA)[/FONT]
[FONT=lucida console]000007fe`f7dd0000 000007fe`f7e96000   msftedit msftedit.dll Mon Jul 13 18:30:50 2009 (4A5BDFCA)[/FONT]
[FONT=lucida console]000007fe`f67f0000 000007fe`f6b06000   msi      msi.dll      Mon Jul 13 18:31:09 2009 (4A5BDFDD)[/FONT]
[FONT=lucida console]000007fe`fbd10000 000007fe`fbd19000   msiltcfg msiltcfg.dll Mon Jul 13 18:31:17 2009 (4A5BDFE5)[/FONT]
[FONT=lucida console]000007fe`fb170000 000007fe`fb1ab000   msls31   msls31.dll   Mon Jul 13 18:31:24 2009 (4A5BDFEC)[/FONT]
[FONT=lucida console]000007fe`f8090000 000007fe`f80ad000   mssprxy  mssprxy.dll  Mon Jul 13 18:30:18 2009 (4A5BDFAA)[/FONT]
[FONT=lucida console]000007fe`fd140000 000007fe`fd1df000   msvcrt   msvcrt.dll   Mon Jul 13 18:30:38 2009 (4A5BDFBE)[/FONT]
[FONT=lucida console]000007fe`f9580000 000007fe`f9770000   msxml6   msxml6.dll   Mon Jul 13 18:30:48 2009 (4A5BDFC8)[/FONT]
[FONT=lucida console]000007fe`f2920000 000007fe`f2a68000   NaturalLanguage6 NaturalLanguage6.dll Mon Jul 13 18:30:52 2009 (4A5BDFCC)[/FONT]
[FONT=lucida console]000007fe`f8c30000 000007fe`f8ca4000   netprofm netprofm.dll Mon Jul 13 18:30:56 2009 (4A5BDFD0)[/FONT]
[FONT=lucida console]000007fe`f61f0000 000007fe`f647b000   netshell netshell.dll Mon Jul 13 18:30:58 2009 (4A5BDFD2)[/FONT]
[FONT=lucida console]000007fe`fa940000 000007fe`fa94c000   netutils netutils.dll Mon Jul 13 18:31:00 2009 (4A5BDFD4)[/FONT]
[FONT=lucida console]000007fe`f6630000 000007fe`f67cc000   NetworkExplorer NetworkExplorer.dll Mon Jul 13 18:31:01 2009 (4A5BDFD5)[/FONT]
[FONT=lucida console]000007fe`fb030000 000007fe`fb045000   nlaapi   nlaapi.dll   Mon Jul 13 18:30:49 2009 (4A5BDFC9)[/FONT]
[FONT=lucida console]000007fe`efb50000 000007fe`f014f000   NLSData0009 NLSData0009.dll Mon Jul 13 18:31:02 2009 (4A5BDFD6)[/FONT]
[FONT=lucida console]00000000`6f060000 00000000`6f2e3000   NLSLexicons0009 NLSLexicons0009.dll Mon Jul 13 18:31:42 2009 (4A5BDFFE)[/FONT]
[FONT=lucida console]00000000`76fe0000 00000000`76fe3000   normaliz normaliz.dll Mon Jul 13 18:32:18 2009 (4A5BE022)[/FONT]
[FONT=lucida console]000007fe`f82a0000 000007fe`f82ac000   npmproxy npmproxy.dll Mon Jul 13 18:32:19 2009 (4A5BE023)[/FONT]
[FONT=lucida console]000007fe`fd3d0000 000007fe`fd3d8000   nsi      nsi.dll      Mon Jul 13 18:32:25 2009 (4A5BE029)[/FONT]
[FONT=lucida console]00000000`76e10000 00000000`76fbb000   ntdll    ntdll.dll    Mon Jul 13 18:32:27 2009 (4A5BE02B)[/FONT]
[FONT=lucida console]000007fe`f1960000 000007fe`f1982000   ntlanman ntlanman.dll Mon Jul 13 18:32:43 2009 (4A5BE03B)[/FONT]
[FONT=lucida console]000007fe`fb120000 000007fe`fb14d000   ntmarta  ntmarta.dll  Mon Jul 13 18:32:45 2009 (4A5BE03D)[/FONT]
[FONT=lucida console]000007fe`fba50000 000007fe`fbad0000   ntshrui  ntshrui.dll  Mon Jul 13 18:32:47 2009 (4A5BE03F)[/FONT]
[FONT=lucida console]000007fe`fd8f0000 000007fe`fdaf1000   ole32    ole32.dll    Mon Jul 13 18:32:10 2009 (4A5BE01A)[/FONT]
[FONT=lucida console]000007fe`f64b0000 000007fe`f6504000   oleacc   oleacc.dll   Mon Jul 13 18:32:11 2009 (4A5BE01B)[/FONT]
[FONT=lucida console]000007fe`fd670000 000007fe`fd747000   oleaut32 oleaut32.dll Mon Jul 13 18:32:14 2009 (4A5BE01E)[/FONT]
[FONT=lucida console]000007fe`f5370000 000007fe`f552d000   pnidui   pnidui.dll   Mon Jul 13 18:32:53 2009 (4A5BE045)[/FONT]
[FONT=lucida console]000007fe`f6bf0000 000007fe`f6cad000   PortableDeviceApi PortableDeviceApi.dll Mon Jul 13 18:33:11 2009 (4A5BE057)[/FONT]
[FONT=lucida console]000007fe`f74b0000 000007fe`f74e9000   PortableDeviceTypes PortableDeviceTypes.dll Mon Jul 13 18:33:16 2009 (4A5BE05C)[/FONT]
[FONT=lucida console]000007fe`fb720000 000007fe`fb74c000   powrprof powrprof.dll Mon Jul 13 18:33:22 2009 (4A5BE062)[/FONT]
[FONT=lucida console]000007fe`f71b0000 000007fe`f7219000   prnfldr  prnfldr.dll  Mon Jul 13 18:33:30 2009 (4A5BE06A)[/FONT]
[FONT=lucida console]000007fe`fcd70000 000007fe`fcd7f000   profapi  profapi.dll  Mon Jul 13 18:32:15 2009 (4A5BE01F)[/FONT]
[FONT=lucida console]000007fe`fb5f0000 000007fe`fb71c000   propsys  propsys.dll  Mon Jul 13 18:32:18 2009 (4A5BE022)[/FONT]
[FONT=lucida console]000007fe`f3510000 000007fe`f3541000   provsvc  provsvc.dll  Mon Jul 13 18:32:20 2009 (4A5BE024)[/FONT]
[FONT=lucida console]00000000`76fd0000 00000000`76fd7000   psapi    psapi.dll    Mon Jul 13 16:26:21 2009 (4A5BC29D)[/FONT]
[FONT=lucida console]000007fe`f6f70000 000007fe`f6fb5000   QAGENT   QAGENT.DLL   Mon Jul 13 18:32:21 2009 (4A5BE025)[/FONT]
[FONT=lucida console]000007fe`f8d20000 000007fe`f8d3f000   QUTIL    QUTIL.DLL    Mon Jul 13 18:32:35 2009 (4A5BE033)[/FONT]
[FONT=lucida console]000007fe`fd3e0000 000007fe`fd50e000   rpcrt4   rpcrt4.dll   Mon Jul 13 18:32:37 2009 (4A5BE035)[/FONT]
[FONT=lucida console]000007fe`fcd50000 000007fe`fcd64000   RpcRtRemote RpcRtRemote.dll Mon Jul 13 18:32:38 2009 (4A5BE036)[/FONT]
[FONT=lucida console]000007fe`fc2c0000 000007fe`fc307000   rsaenh   rsaenh.dll   Mon Jul 13 18:32:41 2009 (4A5BE039)[/FONT]
[FONT=lucida console]000007fe`fa900000 000007fe`fa914000   samcli   samcli.dll   Mon Jul 13 18:32:31 2009 (4A5BE02F)[/FONT]
[FONT=lucida console]000007fe`fb800000 000007fe`fb81d000   samlib   samlib.dll   Mon Jul 13 18:32:32 2009 (4A5BE030)[/FONT]
[FONT=lucida console]000007fe`f4a20000 000007fe`f4af5000   SearchFolder SearchFolder.dll Mon Jul 13 18:33:17 2009 (4A5BE05D)[/FONT]
[FONT=lucida console]000007fe`fdde0000 000007fe`fddff000   sechost  sechost.dll  Mon Jul 13 18:33:18 2009 (4A5BE05E)[/FONT]
[FONT=lucida console]000007fe`fca40000 000007fe`fca4b000   secur32  secur32.dll  Mon Jul 13 18:33:26 2009 (4A5BE066)[/FONT]
[FONT=lucida console]000007fe`fd1f0000 000007fe`fd3c7000   setupapi setupapi.dll Mon Jul 13 18:33:06 2009 (4A5BE052)[/FONT]
[FONT=lucida console]000007fe`fb1b0000 000007fe`fb1d4000   shacct   shacct.dll   Mon Jul 13 18:33:06 2009 (4A5BE052)[/FONT]
[FONT=lucida console]000007fe`fb2b0000 000007fe`fb2e3000   shdocvw  shdocvw.dll  Mon Jul 13 18:33:07 2009 (4A5BE053)[/FONT]
[FONT=lucida console]000007fe`fe390000 000007fe`ff116000   shell32  shell32.dll  Mon Jul 13 18:33:08 2009 (4A5BE054)[/FONT]
[FONT=lucida console]000007fe`fdbd0000 000007fe`fdc41000   shlwapi  shlwapi.dll  Mon Jul 13 18:33:13 2009 (4A5BE059)[/FONT]
[FONT=lucida console]000007fe`faf30000 000007fe`faf3b000   slc      slc.dll      Mon Jul 13 18:33:23 2009 (4A5BE063)[/FONT]
[FONT=lucida console]000007fe`fb270000 000007fe`fb2ab000   SndVolSSO SndVolSSO.DLL Mon Jul 13 18:33:49 2009 (4A5BE07D)[/FONT]
[FONT=lucida console]000007fe`f7150000 000007fe`f71a8000   srchadmin srchadmin.dll Mon Jul 13 18:33:47 2009 (4A5BE07B)[/FONT]
[FONT=lucida console]000007fe`fc8c0000 000007fe`fc8e3000   srvcli   srvcli.dll   Mon Jul 13 18:34:06 2009 (4A5BE08E)[/FONT]
[FONT=lucida console]000007fe`fcc10000 000007fe`fcc35000   sspicli  sspicli.dll  Mon Jul 13 18:34:13 2009 (4A5BE095)[/FONT]
[FONT=lucida console]000007fe`f82d0000 000007fe`f8312000   stobject stobject.dll Mon Jul 13 18:33:32 2009 (4A5BE06C)[/FONT]
[FONT=lucida console]000007fe`f5a60000 000007fe`f5adb000   StructuredQuery StructuredQuery.dll Mon Jul 13 18:33:30 2009 (4A5BE06A)[/FONT]
[FONT=lucida console]000007fe`fccb0000 000007fe`fcd42000   sxs      sxs.dll      Mon Jul 13 18:33:35 2009 (4A5BE06F)[/FONT]
[FONT=lucida console]000007fe`f5140000 000007fe`f536b000   SyncCenter SyncCenter.dll Mon Jul 13 18:33:40 2009 (4A5BE074)[/FONT]
[FONT=lucida console]000007fe`fa970000 000007fe`fa986000   Syncreg  Syncreg.dll  Mon Jul 13 18:33:45 2009 (4A5BE079)[/FONT]
[FONT=lucida console]000007fe`f9c40000 000007fe`f9d60000   taskschd taskschd.dll Mon Jul 13 18:33:48 2009 (4A5BE07C)[/FONT]
[FONT=lucida console]000007fe`fa9e0000 000007fe`fa9ff000   thumbcache thumbcache.dll Mon Jul 13 18:33:34 2009 (4A5BE06E)[/FONT]
[FONT=lucida console]000007fe`fb1e0000 000007fe`fb263000   timedate timedate.cpl Mon Jul 13 18:33:36 2009 (4A5BE070)[/FONT]
[FONT=lucida console]000007fe`f7d50000 000007fe`f7dcf000   tiptsf   tiptsf.dll   Mon Jul 13 18:33:42 2009 (4A5BE076)[/FONT]
[FONT=lucida console]000007fe`f74f0000 000007fe`f7511000   UIAnimation UIAnimation.dll Mon Jul 13 18:33:38 2009 (4A5BE072)[/FONT]
[FONT=lucida console]000007fe`fdfb0000 000007fe`fe128000   urlmon   urlmon.dll   Mon Jul 13 18:33:53 2009 (4A5BE081)[/FONT]
[FONT=lucida console]00000000`76bf0000 00000000`76cea000   user32   user32.dll   Mon Jul 13 18:34:00 2009 (4A5BE088)[/FONT]
[FONT=lucida console]000007fe`fc0b0000 000007fe`fc0ce000   userenv  userenv.dll  Mon Jul 13 18:34:03 2009 (4A5BE08B)[/FONT]
[FONT=lucida console]000007fe`fdb00000 000007fe`fdbca000   usp10    usp10.dll    Mon Jul 13 18:34:04 2009 (4A5BE08C)[/FONT]
[FONT=lucida console]000007fe`fb510000 000007fe`fb566000   uxtheme  uxtheme.dll  Mon Jul 13 18:34:11 2009 (4A5BE093)[/FONT]
[FONT=lucida console]000007fe`fbee0000 000007fe`fbeec000   version  version.dll  Mon Jul 13 18:33:54 2009 (4A5BE082)[/FONT]
[FONT=lucida console]000007fe`fabc0000 000007fe`fabfb000   wdmaud   wdmaud.drv   Mon Jul 13 18:33:55 2009 (4A5BE083)[/FONT]
[FONT=lucida console]000007fe`f7f00000 000007fe`f7f7c000   wer      wer.dll      Mon Jul 13 18:33:53 2009 (4A5BE081)[/FONT]
[FONT=lucida console]000007fe`f47f0000 000007fe`f492c000   werconcpl werconcpl.dll Mon Jul 13 18:33:54 2009 (4A5BE082)[/FONT]
[FONT=lucida console]000007fe`fbd20000 000007fe`fbd39000   wercplsupport wercplsupport.dll Mon Jul 13 18:33:55 2009 (4A5BE083)[/FONT]
[FONT=lucida console]000007fe`fc850000 000007fe`fc8bd000   wevtapi  wevtapi.dll  Mon Jul 13 18:33:59 2009 (4A5BE087)[/FONT]
[FONT=lucida console]000007fe`faa90000 000007fe`fabba000   WindowsCodecs WindowsCodecs.dll Mon Jul 13 18:34:29 2009 (4A5BE0A5)[/FONT]
[FONT=lucida console]000007fe`fd540000 000007fe`fd66a000   wininet  wininet.dll  Mon Jul 13 18:34:35 2009 (4A5BE0AB)[/FONT]
[FONT=lucida console]000007fe`fac00000 000007fe`fac3b000   winmm    winmm.dll    Mon Jul 13 18:34:40 2009 (4A5BE0B0)[/FONT]
[FONT=lucida console]000007fe`fae00000 000007fe`fae0b000   winnsi   winnsi.dll   Mon Jul 13 18:34:41 2009 (4A5BE0B1)[/FONT]
[FONT=lucida console]000007fe`f8840000 000007fe`f88b0000   winspool winspool.drv Mon Jul 13 18:34:55 2009 (4A5BE0BF)[/FONT]
[FONT=lucida console]000007fe`fc550000 000007fe`fc58d000   winsta   winsta.dll   Mon Jul 13 18:34:59 2009 (4A5BE0C3)[/FONT]
[FONT=lucida console]000007fe`fce60000 000007fe`fce99000   wintrust wintrust.dll Mon Jul 13 18:35:03 2009 (4A5BE0C7)[/FONT]
[FONT=lucida console]000007fe`fa920000 000007fe`fa935000   wkscli   wkscli.dll   Mon Jul 13 18:35:05 2009 (4A5BE0C9)[/FONT]
[FONT=lucida console]000007fe`f7d30000 000007fe`f7d50000   wlanapi  wlanapi.dll  Mon Jul 13 18:35:08 2009 (4A5BE0CC)[/FONT]
[FONT=lucida console]000007fe`fb5d0000 000007fe`fb5d7000   wlanutil wlanutil.dll Mon Jul 13 18:35:22 2009 (4A5BE0DA)[/FONT]
[FONT=lucida console]000007fe`fdd90000 000007fe`fdde0000   Wldap32  Wldap32.dll  Mon Jul 13 18:35:25 2009 (4A5BE0DD)[/FONT]
[FONT=lucida console]000007fe`f4b00000 000007fe`f4d71000   wpdshext wpdshext.dll Mon Jul 13 18:36:55 2009 (4A5BE137)[/FONT]
[FONT=lucida console]000007fe`f8d50000 000007fe`f8d70000   wpdshserviceobj wpdshserviceobj.dll Mon Jul 13 18:36:56 2009 (4A5BE138)[/FONT]
[FONT=lucida console]000007fe`fd7c0000 000007fe`fd80d000   ws2_32   ws2_32.dll   Mon Jul 13 18:34:13 2009 (4A5BE095)[/FONT]
[FONT=lucida console]000007fe`f8340000 000007fe`f8352000   wscapi   wscapi.dll   Mon Jul 13 18:34:18 2009 (4A5BE09A)[/FONT]
[FONT=lucida console]000007fe`fbcc0000 000007fe`fbce8000   wscinterop wscinterop.dll Mon Jul 13 18:34:19 2009 (4A5BE09B)[/FONT]
[FONT=lucida console]000007fe`f4f80000 000007fe`f509f000   wscui    wscui.cpl    Mon Jul 13 18:34:24 2009 (4A5BE0A0)[/FONT]
[FONT=lucida console]000007fe`faee0000 000007fe`faef1000   wtsapi32 wtsapi32.dll Mon Jul 13 18:34:20 2009 (4A5BE09C)[/FONT]
[FONT=lucida console]000007fe`f65d0000 000007fe`f662e000   WWanAPI  WWanAPI.dll  Mon Jul 13 18:34:32 2009 (4A5BE0A8)[/FONT]
[FONT=lucida console]000007fe`fb160000 000007fe`fb16d000   wwapi    wwapi.dll    Mon Jul 13 18:34:41 2009 (4A5BE0B1)[/FONT]
[FONT=lucida console]000007fe`fac40000 000007fe`fac75000   xmllite  xmllite.dll  Mon Jul 13 18:34:16 2009 (4A5BE098)[/FONT]
[FONT=lucida console]Unloaded modules:[/FONT]
[FONT=lucida console]000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)[/FONT]
[FONT=lucida console]   Checksum:  0000FF7D[/FONT]
[FONT=lucida console]00000000`72bf0000 00000000`72bf3000   sfc.dll [/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)[/FONT]
[FONT=lucida console]   Checksum:  00010B4F[/FONT]
[FONT=lucida console]000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)[/FONT]
[FONT=lucida console]   Checksum:  0000FF7D[/FONT]
[FONT=lucida console]00000000`72bf0000 00000000`72bf3000   sfc.dll [/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)[/FONT]
[FONT=lucida console]   Checksum:  00010B4F[/FONT]
[FONT=lucida console]000007fe`f9780000 000007fe`f97e4000   webio.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:33:49 2009 (4A5BE07D)[/FONT]
[FONT=lucida console]   Checksum:  0006F5FB[/FONT]
[FONT=lucida console]000007fe`f97f0000 000007fe`f985e000   WINHTTP.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:34:34 2009 (4A5BE0AA)[/FONT]
[FONT=lucida console]   Checksum:  00071137[/FONT]
[FONT=lucida console]000007fe`fa800000 000007fe`fa81f000   thumbcache.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:33:34 2009 (4A5BE06E)[/FONT]
[FONT=lucida console]   Checksum:  00020620[/FONT]
[FONT=lucida console]000007fe`f6570000 000007fe`f65c4000   OLEACC.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:32:11 2009 (4A5BE01B)[/FONT]
[FONT=lucida console]   Checksum:  00057A8E[/FONT]
[FONT=lucida console]000007fe`ef580000 000007fe`f014e000   IEFRAME.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:28:31 2009 (4A5BDF3F)[/FONT]
[FONT=lucida console]   Checksum:  00BD3A6B[/FONT]
[FONT=lucida console]000007fe`f2070000 000007fe`f20ab000   MLANG.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:29:05 2009 (4A5BDF61)[/FONT]
[FONT=lucida console]   Checksum:  00038FA3[/FONT]
[FONT=lucida console]000007fe`f6ba0000 000007fe`f6bea000   webcheck.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:34:14 2009 (4A5BE096)[/FONT]
[FONT=lucida console]   Checksum:  00048A35[/FONT]
[FONT=lucida console]000007fe`fad30000 000007fe`fad83000   fwpuclnt.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:27:54 2009 (4A5BDF1A)[/FONT]
[FONT=lucida console]   Checksum:  0005E0D4[/FONT]
[FONT=lucida console]000007fe`f94f0000 000007fe`f9528000   ncsi.dll[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:31:02 2009 (4A5BDFD6)[/FONT]
[FONT=lucida console]   Checksum:  000359DF[/FONT]
[FONT=lucida console]000007fe`f93c0000 000007fe`f93d0000   sfc_os.DLL[/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:33:12 2009 (4A5BE058)[/FONT]
[FONT=lucida console]   Checksum:  0000FF7D[/FONT]
[FONT=lucida console]00000000`72bf0000 00000000`72bf3000   sfc.dll [/FONT]
[FONT=lucida console]   Timestamp: Mon Jul 13 18:33:11 2009 (4A5BE057)[/FONT]
[FONT=lucida console]   Checksum:  00010B4F[/FONT]
[FONT=lucida console]windbg> .hh [/FONT]
[FONT=lucida console]0:039> !for_each_module .echo @#ModuleName fver = @#FileVersion pver = @#ProductVersion [/FONT]
[FONT=lucida console]NLSLexicons0009 fver =  pver =[/FONT]
[FONT=lucida console]FXSRESM fver =  pver =[/FONT]
[FONT=lucida console]ksuser fver =  pver =[/FONT]
[FONT=lucida console]user32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]kernel32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]ntdll fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]psapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]normaliz fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]explorer fver =  pver =[/FONT]
[FONT=lucida console]ieframe fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385[/FONT]
[FONT=lucida console]NLSData0009 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]davclnt fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]ntlanman fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]NaturalLanguage6 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]davhlpr fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]drprov fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]provsvc fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]ieproxy fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385[/FONT]
[FONT=lucida console]werconcpl fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]SearchFolder fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]wpdshext fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]wscui fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]FXSAPI fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]SyncCenter fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]pnidui fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]StructuredQuery fver = 7.00.7600.16385 (win7_rtm.090713-1255) pver = 7.00.7600.16385[/FONT]
[FONT=lucida console]FXSST fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]hgcpl fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]imapi2 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]Actioncenter fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]netshell fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]oleacc fver =  pver =[/FONT]
[FONT=lucida console]bthprops fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]WWanAPI fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]NetworkExplorer fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]msi fver = 5.0.7600.16385 pver = 5.0.7600.16385[/FONT]
[FONT=lucida console]PortableDeviceApi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]gameux fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]linkinfo fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]QAGENT fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]DXP fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]actxprxy fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]srchadmin fver = 7.00.7600.16385 (win7_rtm.090713-1255) pver = 7.00.7600.16385[/FONT]
[FONT=lucida console]prnfldr fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]batmeter fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]cryptui fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]PortableDeviceTypes fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]UIAnimation fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]authui fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]EXPLORERFRAME fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]cscapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]wlanapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]tiptsf fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]msftedit fver =  pver =[/FONT]
[FONT=lucida console]wer fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]mpr fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]mssprxy fver = 7.00.7600.16385 (win7_rtm.090713-1255) pver = 7.00.7600.16385[/FONT]
[FONT=lucida console]npmproxy fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]stobject fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]wscapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]winspool fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]netprofm fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]QUTIL fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]wpdshserviceobj fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]msxml6 fver =  pver =[/FONT]
[FONT=lucida console]taskschd fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]midimap fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]msacm32_7fefa620000 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]msacm32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]AudioSes fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]samcli fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]wkscli fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]netutils fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]Syncreg fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]EhStorAPI fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]thumbcache fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]WindowsCodecs fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]wdmaud fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]winmm fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]xmllite fver =  pver =[/FONT]
[FONT=lucida console]dwmapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]dhcpcsvc6 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]dhcpcsvc fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]winnsi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]IPHLPAPI fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]wtsapi32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]slc fver =  pver =[/FONT]
[FONT=lucida console]es fver = 2001.12.8530.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]dsrole fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]atl fver = 3.05.2284 pver = 6.05.2284[/FONT]
[FONT=lucida console]nlaapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]ntmarta fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]hid fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]wwapi fver = 08.01.02.00 (win7_rtm.090713-1255) pver = 08.01.02.00[/FONT]
[FONT=lucida console]msls31 fver =  pver =[/FONT]
[FONT=lucida console]shacct fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]timedate fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]SndVolSSO fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]shdocvw fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]GdiPlus fver =  pver =[/FONT]
[FONT=lucida console]uxtheme fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]MMDevAPI fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]avrt fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]wlanutil fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]propsys fver = 7.00.7600.16385 (win7_rtm.090713-1255) pver = 7.00.7600.16385[/FONT]
[FONT=lucida console]powrprof fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]samlib fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]ehSSO fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]comctl32 fver =  pver =[/FONT]
[FONT=lucida console]ntshrui fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]EhStorShell fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]dui70 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]duser fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]hcproviders fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]framedynos fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]wscinterop fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]AltTab fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]IconCodecService fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]msiltcfg fver = 5.0.7600.16385 (win7_rtm.090713-1255) pver = 5.0.7600.16385[/FONT]
[FONT=lucida console]wercplsupport fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]version fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]userenv fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]devrtl fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]rsaenh fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]dnsapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]winsta fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]credssp fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]cryptsp fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]wevtapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]srvcli fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]secur32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]sspicli fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]apphelp fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]CRYPTBASE fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]sxs fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]RpcRtRemote fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]profapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]msasn1 fver =  pver =[/FONT]
[FONT=lucida console]cfgmgr32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]wintrust fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]KERNELBASE fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]devobj fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]crypt32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]msvcrt fver = 7.0.7600.16385 (win7_rtm.090713-1255) pver = 7.0.7600.16385[/FONT]
[FONT=lucida console]lpk fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]setupapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]nsi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]rpcrt4 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]imm32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]wininet fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385[/FONT]
[FONT=lucida console]oleaut32 fver =  pver =[/FONT]
[FONT=lucida console]gdi32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]ws2_32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]advapi32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]ole32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]usp10 fver = 1.0626.7600.16385 (win7_rtm.090713-1255) pver = 1.0626.7600.16385[/FONT]
[FONT=lucida console]shlwapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]clbcatq fver = 2001.12.8530.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]Wldap32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]sechost fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]msctf fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
[FONT=lucida console]urlmon fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385[/FONT]
[FONT=lucida console]iertutil fver = 8.00.7600.16385 (win7_rtm.090713-1255) pver = 8.00.7600.16385[/FONT]
[FONT=lucida console]shell32 fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385[/FONT]
 

My Computer My Computer

OS
Windows 7 - Vista
I noticed in at least 2 posts that the Explorer.exe module contained a different version number and timestamp -

Explorer.exe = 0x4a765771 = Sun Aug 02 20:20:17 2009

ntdll.dll = 0x4a5be02b = Mon Jul 13 18:32:27 2009

Hey JC :)

Yeah, Dazeon's (same) Explorer.exe build had me a little concerned at the time:

http://www.sevenforums.com/crashes-...-right-click-under-x64-rtm-10.html#post289860

But sphericalpuma has it too, and by then the MS symbol server had symbols for it:

http://www.sevenforums.com/crashes-debugging/32338-windows-explorer-has-stopped-responding.html

For what it's worth, it's sphericalpuma's crashes that make me suspect a potential problem in MS code somewhere, if only because in his case we ended up enabling full pageheap and the code which tripped the guard page was MS. It's entirely possible that pageheap would show the same stack in many of these other cases too, but not all of them.
 

My Computer My Computer

Computer Manufacturer/Model Number
Multiple machines in various stages of decomposition.
OS
Win7x64
for the sake of this thread I have uninstalled O&O Defrag 64 for the moment to see if it solves the issue.

Keep in mind that I could reproduce the issue off a clean install of Windows 7 with just the updates. I'll keep you posted in the next day or two if I have any crashes with O&O uninstalled.
 

My Computer My Computer

OS
Win7 64bit
Found another thread around here with someone having a similar Windows Explorer problem. I also did a registry edit as well. Just thought I would share this as it's something I did in addition to not installing O&O Defrag.

1. Navigate to:
HKLM->Software->Microsoft->Windows->Windows Error Reporting

2. Create a REG_SZ called CorporateWERServer with the value of NotReally (or something fake, call it anything really).

3. Create a REG_DWORD called ForceQueue with the value of 1.

Don't forget to make a backup. Again, this may not work, but it's just something I was reading when someone was experiencing the "right click=crash" issue.
 

My Computer My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom
OS
Windows 10 Pro 64-bit
CPU
Intel Core i7 6700K 4.5 GHz w/TurboBoost & HT enabled
Motherboard
Asus ROG Strix Z270E
Memory
16 GB DDR4 RAM 2133 MHz
Graphics Card(s)
EVGA GTX 1080 Ti 11 GB
Sound Card
Realtek
Monitor(s) Displays
Acer S243HL
Screen Resolution
1920x1080
Hard Drives
WD Caviar Black 2 TB, WD Black 4 TB, WD Caviar Green 2 TB (x3), WD Caviar Green 3 TB, Crucial M4 256 GB SSD, Samsung 850 Pro SSD
PSU
Corsair 850W
Case
Fractal Design Define R5
Cooling
Cooler Master Hyper 212 Evo
Internet Speed
300 Mbps Shaw Broadband 300
3+ hours and not a single crash yet (on an install which I have lots of other shell enhancements installed)

I would typically have had one by now.

The only thing I did was uninstall O&O Defrag 64-Bit

:party:

(Im not counting my chickens yet)
 

My Computer My Computer

OS
Win7 64bit
Update:

Not only did Explorer.exe crash just now, it brought down my whole O/S..(just a complete blank blue screen((NOT BSOD)) when I clicked "Restart Explorer"

There goes it being just O&O Defrag!

back to the drawing board!
 

My Computer My Computer

OS
Win7 64bit
Back
Top