Исключение в приложении: Прил.: C:\WINDOWS\system32\spoolsv.exe (pid=2956) Время: 22.08.2008 @ 17:15:35.447 Номер: c0000005 (нарушение прав доступа) *----> Сведения о системе <----* Имя компьютера: SCALA Имя пользователя: SYSTEM Код сеанса терминала: 0 Число процессоров: 8 Тип процессора: x86 Family 6 Model 15 Stepping 7 Версия Windows: 5.2 Текущая сборка: 3790 Пакет обновления: 2 Текущий тип: Multiprocessor Free Зарегистрированная организация: q Зарегистрированный пользователь: q *----> Список задач <----* 0 System Process 4 System 304 smss.exe 356 csrss.exe 384 winlogon.exe 432 services.exe 444 lsass.exe 616 svchost.exe 688 svchost.exe 760 svchost.exe 776 svchost.exe 812 svchost.exe 968 msdtc.exe 1264 svchost.exe 1392 inetinfo.exe 1424 msftesql.exe 1440 sqlservr.exe 1576 svchost.exe 1676 svchost.exe 1708 svchost.exe 1736 ReportingServicesService.exe 1900 pctsAuxs.exe 1920 pctsSvc.exe 2036 sqlwriter.exe 2116 lserver.exe 2220 SQLAGENT90.EXE 2296 VivaldiFramework.exe 2344 svchost.exe 2380 cmd.exe 2604 javaw.exe 3268 svchost.exe 3352 alg.exe 3504 svchost.exe 3736 wmiprvse.exe 4088 csrss.exe 192 winlogon.exe 1464 rdpclip.exe 2524 Explorer.EXE 3040 pctsTray.exe 3048 ctfmon.exe 3952 Explorer.EXE 3160 ctfmon.exe 1008 wuauclt.exe 2588 scrnsave.scr 3872 mmc.exe 2788 drwtsn32.exe 2956 spoolsv.exe 500 drwtsn32.exe *----> Список модулей <----* 0000000000f80000 - 0000000000f88000: C:\WINDOWS\system32\hppamon0.dll 0000000000fa0000 - 0000000000fac000: C:\WINDOWS\system32\HPZimn12.dll 0000000001000000 - 0000000001011000: C:\WINDOWS\system32\spoolsv.exe 0000000010000000 - 000000001000b000: C:\WINDOWS\system32\HPBMMON.DLL 000000005a000000 - 000000005a01f000: C:\Program Files\Spyware Doctor\klg.dat 0000000060bc0000 - 0000000060bd0000: C:\Program Files\Crypto Pro\CSP\cpcrypt.dll 0000000066490000 - 00000000664a2000: C:\Program Files\Crypto Pro\CSP\cpsecur.dll 0000000071a80000 - 0000000071a88000: C:\WINDOWS\system32\WS2HELP.dll 0000000071a90000 - 0000000071aa7000: C:\WINDOWS\system32\WS2_32.dll 0000000071ad0000 - 0000000071b27000: C:\WINDOWS\system32\NETAPI32.dll 0000000072ef0000 - 0000000072f17000: C:\WINDOWS\system32\winspool.drv 0000000073f30000 - 0000000073f3e000: C:\WINDOWS\system32\cnbjmon.dll 0000000073f70000 - 0000000073f88000: C:\WINDOWS\system32\SPOOLSS.DLL 0000000075ee0000 - 0000000075f36000: C:\WINDOWS\system32\localspl.dll 00000000760b0000 - 00000000760c2000: C:\WINDOWS\system32\MSASN1.dll 00000000760d0000 - 0000000076164000: C:\WINDOWS\system32\CRYPT32.dll 00000000761b0000 - 00000000761cd000: C:\WINDOWS\system32\IMM32.DLL 0000000076840000 - 0000000076902000: C:\WINDOWS\system32\USERENV.dll 0000000076a90000 - 0000000076a9b000: C:\WINDOWS\system32\PSAPI.DLL 0000000076ad0000 - 0000000076afb000: C:\WINDOWS\system32\WINTRUST.dll 0000000076b00000 - 0000000076b2b000: C:\WINDOWS\system32\sfc_os.dll 0000000076b30000 - 0000000076b58000: C:\WINDOWS\system32\imagehlp.dll 0000000076c10000 - 0000000076c2a000: C:\WINDOWS\system32\iphlpapi.dll 0000000076df0000 - 0000000076e1b000: C:\WINDOWS\system32\DNSAPI.dll 0000000076e70000 - 0000000076e83000: C:\WINDOWS\system32\Secur32.dll 0000000076ea0000 - 0000000076ea5000: C:\WINDOWS\system32\rasadhlp.dll 0000000077510000 - 0000000077649000: C:\WINDOWS\system32\ole32.dll 0000000077b80000 - 0000000077b88000: C:\WINDOWS\system32\VERSION.dll 0000000077b90000 - 0000000077bea000: C:\WINDOWS\system32\msvcrt.dll 0000000077bf0000 - 0000000077c38000: C:\WINDOWS\system32\GDI32.dll 0000000077c40000 - 0000000077cdf000: C:\WINDOWS\system32\RPCRT4.dll 0000000077cf0000 - 0000000077d7b000: C:\WINDOWS\system32\oleaut32.dll 0000000077d90000 - 0000000077e3e000: C:\WINDOWS\system32\ADVAPI32.dll 0000000077f40000 - 0000000077fd1000: C:\WINDOWS\system32\USER32.dll 000000007c800000 - 000000007c903000: C:\WINDOWS\system32\kernel32.dll 000000007c910000 - 000000007c9d1000: C:\WINDOWS\system32\ntdll.dll *----> Копия памяти для потока 0xe34<----* eax=77dac42e ebx=00000000 ecx=0007fd1c edx=00000025 esi=00000000 edi=00000060 eip=7c9385ec esp=0007fbd0 ebp=0007fc38 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll - функция: ntdll!KiFastSystemCallRet 7c9385ce e82c000000 call ntdll!RtlRaiseException (7c9385ff) 7c9385d3 8b0424 mov eax,[esp] 7c9385d6 8be5 mov esp,ebp 7c9385d8 5d pop ebp 7c9385d9 c3 ret 7c9385da 8da42400000000 lea esp,[esp] 7c9385e1 8da42400000000 lea esp,[esp] ntdll!KiFastSystemCall: 7c9385e8 8bd4 mov edx,esp 7c9385ea 0f34 sysenter ntdll!KiFastSystemCallRet: 7c9385ec c3 ret 7c9385ed 8da42400000000 lea esp,[esp] 7c9385f4 8d642400 lea esp,[esp] ntdll!KiIntSystemCall: 7c9385f8 8d542408 lea edx,[esp+0x8] 7c9385fc cd2e int 2e 7c9385fe c3 ret ntdll!RtlRaiseException: 7c9385ff 55 push ebp 7c938600 8bec mov ebp,esp 7c938602 8da42430fdffff lea esp,[esp-0x2d0] *----> Обратная трассировка стека <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ADVAPI32.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\spoolsv.exe - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\kernel32.dll - ChildEBP RetAddr Args to Child WARNING: Stack unwind information not available. Following frames may be wrong. 0007fc38 77da5edb 00000060 0007fd04 0000021a ntdll!KiFastSystemCallRet 0007fc64 77da5f82 00000060 0007fd04 0000021a ADVAPI32!LookupPrivilegeValueW+0x114 0007fcd8 77d91ed9 00000060 0007fd04 0000021a ADVAPI32!LookupPrivilegeValueW+0x1bb 0007ff3c 01004019 0100d5bc 010047a2 00000001 ADVAPI32!StartServiceCtrlDispatcherW+0x8b 0007ffc0 7c82f23b 00000000 00000000 7ffde000 spoolsv+0x4019 0007fff0 00000000 0100468c 00000000 78746341 kernel32!ProcessIdToSessionId+0x209 *----> Копия необработанного стека <----* 000000000007fbd0 6b 77 93 7c b2 18 80 7c - 60 00 00 00 00 00 00 00 kw.|...|`....... 000000000007fbe0 00 00 00 00 00 00 00 00 - 10 fc 07 00 04 fd 07 00 ................ 000000000007fbf0 1a 02 00 00 00 00 00 00 - 00 00 00 00 4b 18 80 7c ............K..| 000000000007fc00 b8 fc 07 00 04 fd 07 00 - 00 00 00 00 b8 55 82 7c .............U.| 000000000007fc10 04 fd 07 00 50 8b 09 00 - 00 00 00 00 ef 65 00 00 ....P........e.. 000000000007fc20 fc fb 07 00 00 00 00 00 - c8 fc 07 00 60 1a 82 7c ............`..| 000000000007fc30 c8 d5 81 7c ff ff ff ff - 64 fc 07 00 db 5e da 77 ...|....d....^.w 000000000007fc40 60 00 00 00 04 fd 07 00 - 1a 02 00 00 60 fc 07 00 `...........`... 000000000007fc50 00 00 00 00 04 fd 07 00 - 50 8b 09 00 00 00 00 00 ........P....... 000000000007fc60 00 00 00 00 d8 fc 07 00 - 82 5f da 77 60 00 00 00 ........._.w`... 000000000007fc70 04 fd 07 00 1a 02 00 00 - b8 fc 07 00 00 00 00 00 ................ 000000000007fc80 00 00 00 00 00 e0 fd 7f - 00 00 00 00 00 00 00 00 ................ 000000000007fc90 00 00 00 00 01 00 00 00 - 70 5e da 77 f0 66 09 00 ........p^.w.f.. 000000000007fca0 50 8b 09 00 20 06 00 00 - 00 00 00 00 00 00 00 00 P... ........... 000000000007fcb0 1c fd 07 00 74 00 72 00 - 00 00 00 00 00 00 00 00 ....t.r......... 000000000007fcc0 7c fc 07 00 34 00 36 00 - 2c ff 07 00 c0 8d d9 77 |...4.6.,......w 000000000007fcd0 e0 60 da 77 ff ff ff ff - 3c ff 07 00 d9 1e d9 77 .`.w....<......w 000000000007fce0 60 00 00 00 04 fd 07 00 - 1a 02 00 00 00 00 00 00 `............... 000000000007fcf0 00 00 00 00 00 e0 fd 7f - 00 00 00 00 c4 fc 07 00 ................ 000000000007fd00 60 00 00 00 2c 00 00 00 - 51 00 00 00 00 00 00 00 `...,...Q....... *----> Копия памяти для потока 0xb1c<----* eax=7c91e1fa ebx=0091fef0 ecx=00000000 edx=00000000 esi=00000002 edi=00000000 eip=7c9385ec esp=0091fea4 ebp=0091ff48 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 функция: ntdll!KiFastSystemCallRet 7c9385ce e82c000000 call ntdll!RtlRaiseException (7c9385ff) 7c9385d3 8b0424 mov eax,[esp] 7c9385d6 8be5 mov esp,ebp 7c9385d8 5d pop ebp 7c9385d9 c3 ret 7c9385da 8da42400000000 lea esp,[esp] 7c9385e1 8da42400000000 lea esp,[esp] ntdll!KiFastSystemCall: 7c9385e8 8bd4 mov edx,esp 7c9385ea 0f34 sysenter ntdll!KiFastSystemCallRet: 7c9385ec c3 ret 7c9385ed 8da42400000000 lea esp,[esp] 7c9385f4 8d642400 lea esp,[esp] ntdll!KiIntSystemCall: 7c9385f8 8d542408 lea edx,[esp+0x8] 7c9385fc cd2e int 2e 7c9385fe c3 ret ntdll!RtlRaiseException: 7c9385ff 55 push ebp 7c938600 8bec mov ebp,esp 7c938602 8da42430fdffff lea esp,[esp-0x2d0] *----> Обратная трассировка стека <----* ChildEBP RetAddr Args to Child WARNING: Stack unwind information not available. Following frames may be wrong. 0091ff48 7c91e4a2 00000002 0091ff70 00000000 ntdll!KiFastSystemCallRet 0091ffb8 7c824829 00000000 00000000 00000000 ntdll!RtlSetLastWin32ErrorAndNtStatusFromNtStatus+0x301 0091ffec 00000000 7c91e1fa 00000000 00000000 kernel32!GetModuleHandleA+0xdf *----> Копия необработанного стека <----* 000000000091fea4 fb 7c 93 7c bb e5 91 7c - 02 00 00 00 f0 fe 91 00 .|.|...|........ 000000000091feb4 01 00 00 00 01 00 00 00 - 10 ff 91 00 00 10 00 00 ................ 000000000091fec4 90 2f 7e 00 c0 83 99 7c - 24 00 00 00 01 00 00 00 ./~....|$....... 000000000091fed4 00 00 00 00 00 00 00 00 - 30 00 00 00 ff ff ff ff ........0....... 000000000091fee4 ff ff ff ff 61 d3 91 7c - 00 00 00 00 74 00 00 00 ....a..|....t... 000000000091fef4 7c 00 00 00 08 00 00 c0 - 00 10 00 00 30 ff 91 00 |...........0... 000000000091ff04 d1 96 93 7c d6 96 93 7c - 00 10 00 00 00 a2 2f 4d ...|...|....../M 000000000091ff14 ff ff ff ff 00 e0 fd 7f - c0 83 99 7c 10 ff 91 00 ...........|.... 000000000091ff24 f0 fe 91 00 e0 96 93 7c - 02 00 00 00 c0 fe 91 00 .......|........ 000000000091ff34 ae e1 91 7c dc ff 91 00 - 70 82 93 7c c8 d3 91 7c ...|....p..|...| 000000000091ff44 00 00 00 00 b8 ff 91 00 - a2 e4 91 7c 02 00 00 00 ...........|.... 000000000091ff54 70 ff 91 00 00 00 00 00 - e0 93 04 00 01 00 00 00 p............... 000000000091ff64 00 00 00 00 00 00 00 00 - 00 00 00 00 74 00 00 00 ............t... 000000000091ff74 7c 00 00 00 00 10 00 00 - 90 2f 7e 00 00 10 00 00 |......../~..... 000000000091ff84 88 1f 7e 00 a0 70 99 7c - 00 00 00 00 28 00 00 00 ..~..p.|....(... 000000000091ff94 80 70 99 7c 00 10 00 00 - a0 70 99 7c 90 2f 7e 00 .p.|.....p.|./~. 000000000091ffa4 00 00 00 00 80 70 99 7c - e5 03 00 00 00 10 00 00 .....p.|........ 000000000091ffb4 88 1f 7e 00 ec ff 91 00 - 29 48 82 7c 00 00 00 00 ..~.....)H.|.... 000000000091ffc4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000091ffd4 c4 ff 91 00 60 31 83 80 - ff ff ff ff 60 1a 82 7c ....`1......`..| *----> Копия памяти для потока 0x620<----* eax=00000001 ebx=000966f0 ecx=003bff60 edx=7c9385ec esi=00000100 edi=00000000 eip=7c9385ec esp=003bff0c ebp=003bff7c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 функция: ntdll!KiFastSystemCallRet 7c9385ce e82c000000 call ntdll!RtlRaiseException (7c9385ff) 7c9385d3 8b0424 mov eax,[esp] 7c9385d6 8be5 mov esp,ebp 7c9385d8 5d pop ebp 7c9385d9 c3 ret 7c9385da 8da42400000000 lea esp,[esp] 7c9385e1 8da42400000000 lea esp,[esp] ntdll!KiFastSystemCall: 7c9385e8 8bd4 mov edx,esp 7c9385ea 0f34 sysenter ntdll!KiFastSystemCallRet: 7c9385ec c3 ret 7c9385ed 8da42400000000 lea esp,[esp] 7c9385f4 8d642400 lea esp,[esp] ntdll!KiIntSystemCall: 7c9385f8 8d542408 lea edx,[esp+0x8] 7c9385fc cd2e int 2e 7c9385fe c3 ret ntdll!RtlRaiseException: 7c9385ff 55 push ebp 7c938600 8bec mov ebp,esp 7c938602 8da42430fdffff lea esp,[esp-0x2d0] *----> Обратная трассировка стека <----* ChildEBP RetAddr Args to Child WARNING: Stack unwind information not available. Following frames may be wrong. 003bff7c 7c821c8d 00000100 ffffffff 00000000 ntdll!KiFastSystemCallRet 003bff90 010043a3 00000100 ffffffff 000966f0 kernel32!WaitForSingleObject+0x12 003bffa4 77da5e91 00000001 000966fc 00000000 spoolsv+0x43a3 003bffb8 7c824829 000966f0 00000000 00000000 ADVAPI32!LookupPrivilegeValueW+0xca 003bffec 00000000 77da5e70 000966f0 00000000 kernel32!GetModuleHandleA+0xdf *----> Копия необработанного стека <----* 00000000003bff0c 0b 7d 93 7c 1e 1d 82 7c - 00 01 00 00 00 00 00 00 .}.|...|........ 00000000003bff1c 00 00 00 00 00 00 00 00 - f0 66 09 00 f0 66 09 00 .........f...f.. 00000000003bff2c 24 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 $............... 00000000003bff3c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000003bff4c 00 00 00 00 00 00 00 00 - 6c ff 3b 00 00 e0 fd 7f ........l.;..... 00000000003bff5c 00 00 00 00 01 00 00 00 - 20 ff 3b 00 10 d5 00 01 ........ .;..... 00000000003bff6c dc ff 3b 00 60 1a 82 7c - 48 1d 82 7c 00 00 00 00 ..;.`..|H..|.... 00000000003bff7c 90 ff 3b 00 8d 1c 82 7c - 00 01 00 00 ff ff ff ff ..;....|........ 00000000003bff8c 00 00 00 00 a4 ff 3b 00 - a3 43 00 01 00 01 00 00 ......;..C...... 00000000003bff9c ff ff ff ff f0 66 09 00 - b8 ff 3b 00 91 5e da 77 .....f....;..^.w 00000000003bffac 01 00 00 00 fc 66 09 00 - 00 00 00 00 ec ff 3b 00 .....f........;. 00000000003bffbc 29 48 82 7c f0 66 09 00 - 00 00 00 00 00 00 00 00 )H.|.f.......... 00000000003bffcc f0 66 09 00 00 00 00 00 - c4 ff 3b 00 60 31 83 80 .f........;.`1.. 00000000003bffdc ff ff ff ff 60 1a 82 7c - 30 48 82 7c 00 00 00 00 ....`..|0H.|.... 00000000003bffec 00 00 00 00 00 00 00 00 - 70 5e da 77 f0 66 09 00 ........p^.w.f.. 00000000003bfffc 00 00 00 00 c8 00 00 00 - 51 01 00 00 ff ee ff ee ........Q....... 00000000003c000c 02 00 00 00 00 00 00 00 - 00 fe 00 00 00 00 10 00 ................ 00000000003c001c 00 20 00 00 00 02 00 00 - 00 20 00 00 2c 00 00 00 . ....... ..,... 00000000003c002c ff ef fd 7f 03 00 08 06 - 00 00 00 00 00 00 00 00 ................ 00000000003c003c 00 00 00 00 00 00 00 00 - 98 05 3c 00 0f 00 00 00 ..........<..... *----> Копия памяти для потока 0xb04<----* eax=000f10c0 ebx=000d97f0 ecx=00000035 edx=000f10c0 esi=000ddae0 edi=00000000 eip=7c9385ec esp=00aafe1c ebp=00aaff84 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 функция: ntdll!KiFastSystemCallRet 7c9385ce e82c000000 call ntdll!RtlRaiseException (7c9385ff) 7c9385d3 8b0424 mov eax,[esp] 7c9385d6 8be5 mov esp,ebp 7c9385d8 5d pop ebp 7c9385d9 c3 ret 7c9385da 8da42400000000 lea esp,[esp] 7c9385e1 8da42400000000 lea esp,[esp] ntdll!KiFastSystemCall: 7c9385e8 8bd4 mov edx,esp 7c9385ea 0f34 sysenter ntdll!KiFastSystemCallRet: 7c9385ec c3 ret 7c9385ed 8da42400000000 lea esp,[esp] 7c9385f4 8d642400 lea esp,[esp] ntdll!KiIntSystemCall: 7c9385f8 8d542408 lea edx,[esp+0x8] 7c9385fc cd2e int 2e 7c9385fe c3 ret ntdll!RtlRaiseException: 7c9385ff 55 push ebp 7c938600 8bec mov ebp,esp 7c938602 8da42430fdffff lea esp,[esp-0x2d0] *----> Обратная трассировка стека <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\RPCRT4.dll - ChildEBP RetAddr Args to Child WARNING: Stack unwind information not available. Following frames may be wrong. 00aaff84 77c78792 00aaffac 77c7872d 000ddae0 ntdll!KiFastSystemCallRet 00aaff8c 77c7872d 000ddae0 00000000 00000000 RPCRT4!I_RpcFree+0xbd0 00aaffac 77c6b110 00096d38 00aaffec 7c824829 RPCRT4!I_RpcFree+0xb6b 00aaffb8 7c824829 000c9370 00000000 00000000 RPCRT4!NdrFullPointerInsertRefId+0x3ba 00aaffec 00000000 77c6b0f5 000c9370 00000000 kernel32!GetModuleHandleA+0xdf *----> Копия необработанного стека <----* 0000000000aafe1c 3b 78 93 7c ac 85 c7 77 - 14 01 00 00 74 ff aa 00 ;x.|...w....t... 0000000000aafe2c 00 00 00 00 f0 97 0d 00 - 54 ff aa 00 f8 1c 88 c0 ........T....... 0000000000aafe3c ce 91 83 80 21 01 00 00 - 63 01 00 00 4c 0b a0 f5 ....!...c...L... 0000000000aafe4c 10 92 83 80 00 00 00 00 - 70 1f 2a 8a f8 1c 88 c0 ........p.*..... 0000000000aafe5c 64 01 00 00 f8 1c 88 c0 - 74 0b a0 f5 ec a9 83 80 d.......t....... 0000000000aafe6c 7c 0b a0 f5 01 80 bf 77 - 70 1f 2a 8a 84 22 88 c0 |......wp.*..".. 0000000000aafe7c 00 00 00 00 00 00 00 00 - 90 35 d0 82 c0 df 3b c0 .........5....;. 0000000000aafe8c 8c 0b a0 f5 0d d1 84 80 - 21 01 00 00 c0 df 3b c0 ........!.....;. 0000000000aafe9c 90 35 d0 82 00 00 00 00 - d0 0b a0 f5 13 ec 84 80 .5.............. 0000000000aafeac 55 80 bf 77 c0 df 3b c0 - 90 35 d0 82 00 00 00 00 U..w..;..5...... 0000000000aafebc 7c 26 0d 00 a0 88 a4 e1 - 00 00 00 00 00 00 00 00 |&.............. 0000000000aafecc ae c1 a5 80 00 00 00 00 - 00 00 00 00 02 02 00 00 ................ 0000000000aafedc e0 0b a0 f5 d9 c3 a5 80 - 02 00 00 00 00 00 00 00 ................ 0000000000aafeec f4 c3 a5 80 00 00 00 00 - 02 00 00 00 f0 0b a0 f5 ................ 0000000000aafefc 56 c4 a5 80 00 00 00 00 - 00 00 00 00 1c 0c a0 f5 V............... 0000000000aaff0c 85 34 83 80 d8 0a 4e 8a - 80 0b 4e 8a 01 00 00 00 .4....N...N..... 0000000000aaff1c d8 0a 4e 8a 07 00 00 00 - ff ff ff ff 01 00 00 00 ..N............. 0000000000aaff2c 7c 7a 72 f7 84 ff aa 00 - a6 84 c7 77 4c ff aa 00 |zr........wL... 0000000000aaff3c b6 84 c7 77 ab a3 92 7c - d0 b2 0c 00 70 93 0c 00 ...w...|....p... 0000000000aaff4c 00 a2 2f 4d ff ff ff ff - 00 17 5b ca ff ff ff ff ../M......[..... *----> Копия памяти для потока 0xaf4<----* eax=00000402 ebx=7c92a3ab ecx=00000410 edx=0001dc6b esi=0100d620 edi=000ee364 eip=7c9385ec esp=00b2ff7c ebp=00b2ffb8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 функция: ntdll!KiFastSystemCallRet 7c9385ce e82c000000 call ntdll!RtlRaiseException (7c9385ff) 7c9385d3 8b0424 mov eax,[esp] 7c9385d6 8be5 mov esp,ebp 7c9385d8 5d pop ebp 7c9385d9 c3 ret 7c9385da 8da42400000000 lea esp,[esp] 7c9385e1 8da42400000000 lea esp,[esp] ntdll!KiFastSystemCall: 7c9385e8 8bd4 mov edx,esp 7c9385ea 0f34 sysenter ntdll!KiFastSystemCallRet: 7c9385ec c3 ret 7c9385ed 8da42400000000 lea esp,[esp] 7c9385f4 8d642400 lea esp,[esp] ntdll!KiIntSystemCall: 7c9385f8 8d542408 lea edx,[esp+0x8] 7c9385fc cd2e int 2e 7c9385fe c3 ret ntdll!RtlRaiseException: 7c9385ff 55 push ebp 7c938600 8bec mov ebp,esp 7c938602 8da42430fdffff lea esp,[esp-0x2d0] *----> Обратная трассировка стека <----* ChildEBP RetAddr Args to Child WARNING: Stack unwind information not available. Following frames may be wrong. 00b2ffb8 7c824829 00000000 00000000 00000000 ntdll!KiFastSystemCallRet 00b2ffec 00000000 010045b9 00000000 00000000 kernel32!GetModuleHandleA+0xdf *----> Копия необработанного стека <----* 0000000000b2ff7c 48 c6 bf 77 37 46 00 01 - 64 e3 0e 00 00 20 00 00 H..w7F..d.... .. 0000000000b2ff8c cc ce 0e 00 00 04 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000000b2ff9c 00 00 00 00 c4 4c 7b f5 - 00 20 00 00 00 04 00 00 .....L{.. ...... 0000000000b2ffac 00 00 00 00 00 00 00 00 - cc ce 0e 00 ec ff b2 00 ................ 0000000000b2ffbc 29 48 82 7c 00 00 00 00 - 00 00 00 00 00 00 00 00 )H.|............ 0000000000b2ffcc 00 00 00 00 00 00 00 00 - c4 ff b2 00 60 31 83 80 ............`1.. 0000000000b2ffdc ff ff ff ff 60 1a 82 7c - 30 48 82 7c 00 00 00 00 ....`..|0H.|.... 0000000000b2ffec 00 00 00 00 00 00 00 00 - b9 45 00 01 00 00 00 00 .........E...... 0000000000b2fffc 00 00 00 00 c8 00 00 00 - 52 01 00 00 ff ee ff ee ........R....... 0000000000b3000c 02 10 00 00 00 00 00 00 - 00 fe 00 00 00 00 10 00 ................ 0000000000b3001c 00 20 00 00 00 02 00 00 - 00 20 00 00 cf 07 00 00 . ....... ...... 0000000000b3002c ff ef fd 7f 07 00 08 06 - 00 00 00 00 00 00 00 00 ................ 0000000000b3003c 00 00 00 00 00 00 00 00 - 98 05 b3 00 0f 00 00 00 ................ 0000000000b3004c f8 ff ff ff 50 00 b3 00 - 50 00 b3 00 40 06 b3 00 ....P...P...@... 0000000000b3005c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000000b3006c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000000b3007c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000000b3008c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000000b3009c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000000b300ac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ *----> Копия памяти для потока 0x3a8<----* eax=73f73023 ebx=00000000 ecx=00000000 edx=00000000 esi=00000164 edi=00000000 eip=7c9385ec esp=00ccf7a0 ebp=00ccf810 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 функция: ntdll!KiFastSystemCallRet 7c9385ce e82c000000 call ntdll!RtlRaiseException (7c9385ff) 7c9385d3 8b0424 mov eax,[esp] 7c9385d6 8be5 mov esp,ebp 7c9385d8 5d pop ebp 7c9385d9 c3 ret 7c9385da 8da42400000000 lea esp,[esp] 7c9385e1 8da42400000000 lea esp,[esp] ntdll!KiFastSystemCall: 7c9385e8 8bd4 mov edx,esp 7c9385ea 0f34 sysenter ntdll!KiFastSystemCallRet: 7c9385ec c3 ret 7c9385ed 8da42400000000 lea esp,[esp] 7c9385f4 8d642400 lea esp,[esp] ntdll!KiIntSystemCall: 7c9385f8 8d542408 lea edx,[esp+0x8] 7c9385fc cd2e int 2e 7c9385fe c3 ret ntdll!RtlRaiseException: 7c9385ff 55 push ebp 7c938600 8bec mov ebp,esp 7c938602 8da42430fdffff lea esp,[esp-0x2d0] *----> Обратная трассировка стека <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\SPOOLSS.DLL - ChildEBP RetAddr Args to Child WARNING: Stack unwind information not available. Following frames may be wrong. 00ccf810 7c821c8d 00000164 ffffffff 00000000 ntdll!KiFastSystemCallRet 00ccf824 73f74705 00000164 ffffffff 00000000 kernel32!WaitForSingleObject+0x12 00ccf868 010056ad 00000002 00000000 00000002 SPOOLSS!SpoolerInit+0x1a2 00ccf8a0 0100562d 00000002 00000000 00000002 spoolsv!YGetPrinter+0x27e 00ccf8c8 77c70193 00000002 00000000 00000002 spoolsv!YGetPrinter+0x1fe 00ccf8f8 77cd33e1 0100560c 00ccfae0 00000007 RPCRT4!NdrServerInitialize+0x1fa 00ccfcf8 77cd35c4 00000000 00000000 000f04b4 RPCRT4!NdrStubCall2+0x217 00ccfd14 77c6ff7a 000f04b4 000d9900 000f04b4 RPCRT4!NdrServerCall2+0x19 00ccfd48 77c7042d 01002c47 000f04b4 00ccfdec RPCRT4!I_RpcSendReceive+0x2ad 00ccfd9c 77c70353 00000000 00000000 0100d228 RPCRT4!NdrServerInitialize+0x494 00ccfdc0 77c711dc 000f04b4 00000000 0100d228 RPCRT4!NdrServerInitialize+0x3ba 00ccfdfc 77c712f0 000d36d0 000ddae0 000d9a20 RPCRT4!NdrServerInitializeNew+0xb3e 00ccfe20 77c78678 000ddb18 00ccfe38 000d36d0 RPCRT4!NdrServerInitializeNew+0xc52 00ccff84 77c78792 00ccffac 77c7872d 000ddae0 RPCRT4!I_RpcFree+0xab6 00ccff8c 77c7872d 000ddae0 00000000 00000000 RPCRT4!I_RpcFree+0xbd0 00ccffac 77c6b110 00096d38 00ccffec 7c824829 RPCRT4!I_RpcFree+0xb6b 00ccffb8 7c824829 000c9410 00000000 00000000 RPCRT4!NdrFullPointerInsertRefId+0x3ba 00ccffec 00000000 77c6b0f5 000c9410 00000000 kernel32!GetModuleHandleA+0xdf *----> Копия необработанного стека <----* 0000000000ccf7a0 0b 7d 93 7c 1e 1d 82 7c - 64 01 00 00 00 00 00 00 .}.|...|d....... 0000000000ccf7b0 00 00 00 00 78 01 00 00 - 7c 01 00 00 00 00 00 00 ....x...|....... 0000000000ccf7c0 24 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 $............... 0000000000ccf7d0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000000ccf7e0 00 00 00 00 f0 f7 cc 00 - e7 74 db 77 00 e0 fd 7f .........t.w.... 0000000000ccf7f0 00 00 00 00 88 2e f7 73 - b4 f7 cc 00 08 00 00 00 .......s........ 0000000000ccf800 e8 fc cc 00 60 1a 82 7c - 48 1d 82 7c 00 00 00 00 ....`..|H..|.... 0000000000ccf810 24 f8 cc 00 8d 1c 82 7c - 64 01 00 00 ff ff ff ff $......|d....... 0000000000ccf820 00 00 00 00 68 f8 cc 00 - 05 47 f7 73 64 01 00 00 ....h....G.sd... 0000000000ccf830 ff ff ff ff 00 00 00 00 - dc fa cc 00 4d 30 f7 73 ............M0.s 0000000000ccf840 dc fa cc 00 a0 fc cc 00 - 00 00 00 00 00 00 00 00 ................ 0000000000ccf850 00 00 00 00 00 00 00 00 - bc 2d 00 01 00 00 00 00 .........-...... 0000000000ccf860 84 d0 00 01 00 00 00 00 - a0 f8 cc 00 ad 56 00 01 .............V.. 0000000000ccf870 02 00 00 00 00 00 00 00 - 02 00 00 00 00 00 00 00 ................ 0000000000ccf880 00 00 00 00 90 fc cc 00 - a0 fc cc 00 cc f8 cc 00 ................ 0000000000ccf890 dc fa cc 00 10 fd cc 00 - 58 d6 00 01 54 00 00 00 ........X...T... 0000000000ccf8a0 c8 f8 cc 00 2d 56 00 01 - 02 00 00 00 00 00 00 00 ....-V.......... 0000000000ccf8b0 02 00 00 00 00 00 00 00 - 00 00 00 00 90 fc cc 00 ................ 0000000000ccf8c0 a0 fc cc 00 01 00 00 00 - f8 f8 cc 00 93 01 c7 77 ...............w 0000000000ccf8d0 02 00 00 00 00 00 00 00 - 02 00 00 00 00 00 00 00 ................ *----> Копия памяти для потока 0xc78<----* eax=00d0ebd8 ebx=00b84b90 ecx=7c93d995 edx=00000000 esi=00d0ebd8 edi=100070d4 eip=00000000 esp=00d0eb48 ebp=00d0eb50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010246 функция: No prior disassembly possible : 00000000 ?? ??? 00000002 ?? ??? 00000004 ?? ??? 00000006 ?? ??? 00000008 ?? ??? 0000000a ?? ??? 0000000c ?? ??? 0000000e ?? ??? СБОЙ -> : 00000000 ?? ??? Error 0x00000001 00000002 ?? ??? 00000004 ?? ??? 00000006 ?? ??? 00000008 ?? ??? 0000000a ?? ??? 0000000c ?? ??? 0000000e ?? ??? 00000010 ?? ??? 00000012 ?? ??? 00000014 ?? ??? *----> Обратная трассировка стека <----* *** WARNING: Unable to verify checksum for C:\WINDOWS\system32\hppamon0.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\hppamon0.dll - *** WARNING: Unable to verify checksum for C:\WINDOWS\system32\HPBMMON.DLL *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\HPBMMON.DLL - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\localspl.dll - ChildEBP RetAddr Args to Child 00d0eb44 00f8118c 00d0ebd8 00d0eb98 100020e4 0x0 WARNING: Stack unwind information not available. Following frames may be wrong. 00d0eb50 100020e4 00d0ebd8 00000000 00000005 hppamon0!InitializePrintMonitor+0x27 00d0eb98 75ee6efa 00000000 00d0ebd8 77da2824 HPBMMON!DllEntryPoint+0x2c4 00d0ede4 75ee819e 00d0ee20 00d0f028 00b84aa8 localspl!InitializePrintMonitor+0x4cf 00d0f234 75ee74b4 00b84aa8 00b82ab8 00000001 localspl!EnumPrintProcessorDatatypesW+0x973 00d0f668 75ee91f8 00b81ed8 00000001 00d0f68c localspl!SplCreateSpooler+0x40a 00d0f908 73f74c44 00b82ab8 00000158 00000000 localspl!InitializePrintProvidor+0x1bc 00d0f930 73f74915 73f74cd0 00000000 00000000 SPOOLSS!InitializeRouter+0x4f7 00d0ffb8 7c824829 00bbff80 00000000 00000000 SPOOLSS!InitializeRouter+0x1c8 00d0ffec 00000000 01003df8 00bbff80 00000000 kernel32!GetModuleHandleA+0xdf *----> Копия необработанного стека <----* 0000000000d0eb48 8c 11 f8 00 d8 eb d0 00 - 98 eb d0 00 e4 20 00 10 ............. .. 0000000000d0eb58 d8 eb d0 00 00 00 00 00 - 05 00 00 00 09 21 00 10 .............!.. 0000000000d0eb68 d4 70 00 10 d8 eb d0 00 - 00 00 00 00 7a 3d 82 7c .p..........z=.| 0000000000d0eb78 78 69 ee 75 d8 eb d0 00 - 00 00 00 00 a8 4a b8 00 xi.u.........J.. 0000000000d0eb88 90 4b b8 00 ff ff ff ff - 00 00 00 00 f0 20 00 10 .K........... .. 0000000000d0eb98 e4 ed d0 00 fa 6e ee 75 - 00 00 00 00 d8 eb d0 00 .....n.u........ 0000000000d0eba8 24 28 da 77 00 00 00 00 - 00 00 00 00 02 00 00 80 $(.w............ 0000000000d0ebb8 aa 92 b8 00 a8 4a b8 00 - 90 f2 b8 00 ff ff ff ff .....J.......... 0000000000d0ebc8 20 ee d0 00 00 00 00 00 - 01 00 00 00 28 f0 d0 00 ...........(... 0000000000d0ebd8 53 00 79 00 73 00 74 00 - 65 00 6d 00 5c 00 43 00 S.y.s.t.e.m.\.C. 0000000000d0ebe8 75 00 72 00 72 00 65 00 - 6e 00 74 00 43 00 6f 00 u.r.r.e.n.t.C.o. 0000000000d0ebf8 6e 00 74 00 72 00 6f 00 - 6c 00 53 00 65 00 74 00 n.t.r.o.l.S.e.t. 0000000000d0ec08 5c 00 43 00 6f 00 6e 00 - 74 00 72 00 6f 00 6c 00 \.C.o.n.t.r.o.l. 0000000000d0ec18 5c 00 50 00 72 00 69 00 - 6e 00 74 00 5c 00 4d 00 \.P.r.i.n.t.\.M. 0000000000d0ec28 6f 00 6e 00 69 00 74 00 - 6f 00 72 00 73 00 5c 00 o.n.i.t.o.r.s.\. 0000000000d0ec38 48 00 50 00 20 00 4d 00 - 61 00 73 00 74 00 65 00 H.P. .M.a.s.t.e. 0000000000d0ec48 72 00 20 00 4d 00 6f 00 - 6e 00 69 00 74 00 6f 00 r. .M.o.n.i.t.o. 0000000000d0ec58 72 00 00 00 00 00 00 00 - d8 01 00 00 32 00 00 00 r...........2... 0000000000d0ec68 00 00 00 00 00 00 00 00 - 62 49 d1 70 16 64 c8 01 ........bI.p.d.. 0000000000d0ec78 00 00 00 00 22 00 00 00 - 48 00 50 00 20 00 4d 00 ...."...H.P. .M. *----> Копия памяти для потока 0xb28<----* eax=73f752c2 ebx=00d4fefc ecx=00000000 edx=00000000 esi=00d4fefc edi=7ffde000 eip=7c9385ec esp=00d4feb0 ebp=00d4ff58 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 функция: ntdll!KiFastSystemCallRet 7c9385ce e82c000000 call ntdll!RtlRaiseException (7c9385ff) 7c9385d3 8b0424 mov eax,[esp] 7c9385d6 8be5 mov esp,ebp 7c9385d8 5d pop ebp 7c9385d9 c3 ret 7c9385da 8da42400000000 lea esp,[esp] 7c9385e1 8da42400000000 lea esp,[esp] ntdll!KiFastSystemCall: 7c9385e8 8bd4 mov edx,esp 7c9385ea 0f34 sysenter ntdll!KiFastSystemCallRet: 7c9385ec c3 ret 7c9385ed 8da42400000000 lea esp,[esp] 7c9385f4 8d642400 lea esp,[esp] ntdll!KiIntSystemCall: 7c9385f8 8d542408 lea edx,[esp+0x8] 7c9385fc cd2e int 2e 7c9385fe c3 ret ntdll!RtlRaiseException: 7c9385ff 55 push ebp 7c938600 8bec mov ebp,esp 7c938602 8da42430fdffff lea esp,[esp-0x2d0] *----> Обратная трассировка стека <----* ChildEBP RetAddr Args to Child WARNING: Stack unwind information not available. Following frames may be wrong. 00d4ff58 7c822fbe 00000001 00d4ffac 00000000 ntdll!KiFastSystemCallRet 00d4ff74 73f7532a 00000001 00d4ffac 00000000 kernel32!WaitForMultipleObjects+0x18 00d4ffb8 7c824829 00000140 00000000 00000000 SPOOLSS!BuildOtherNamesFromMachineName+0x3db 00d4ffec 00000000 73f752c2 00033d58 00000000 kernel32!GetModuleHandleA+0xdf *----> Копия необработанного стека <----* 0000000000d4feb0 fb 7c 93 7c 2c 20 82 7c - 01 00 00 00 fc fe d4 00 .|.|, .|........ 0000000000d4fec0 01 00 00 00 00 00 00 00 - 00 00 00 00 e5 03 00 00 ................ 0000000000d4fed0 58 3d 03 00 00 00 00 00 - 24 00 00 00 01 00 00 00 X=......$....... 0000000000d4fee0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000000d4fef0 00 00 00 00 00 00 00 00 - 00 00 00 00 78 01 00 00 ............x... 0000000000d4ff00 e5 03 00 00 98 ff d4 00 - 48 ff d4 00 1f 17 80 7c ........H......| 0000000000d4ff10 26 17 80 7c 40 01 00 00 - 7a 3a 82 7c 00 00 00 00 &..|@...z:.|.... 0000000000d4ff20 07 00 00 00 00 e0 fd 7f - 05 00 00 00 00 00 00 00 ................ 0000000000d4ff30 fc fe d4 00 c0 ff d4 00 - dc ff d4 00 01 00 00 00 ................ 0000000000d4ff40 cc fe d4 00 ff ff ff ff - dc ff d4 00 60 1a 82 7c ............`..| 0000000000d4ff50 f8 1f 82 7c 00 00 00 00 - 74 ff d4 00 be 2f 82 7c ...|....t..../.| 0000000000d4ff60 01 00 00 00 ac ff d4 00 - 00 00 00 00 ff ff ff ff ................ 0000000000d4ff70 00 00 00 00 b8 ff d4 00 - 2a 53 f7 73 01 00 00 00 ........*S.s.... 0000000000d4ff80 ac ff d4 00 00 00 00 00 - ff ff ff ff 00 00 00 00 ................ 0000000000d4ff90 00 00 00 00 58 3d 03 00 - 03 01 00 00 00 00 00 00 ....X=.......... 0000000000d4ffa0 00 00 00 00 00 00 00 00 - 78 01 00 00 78 01 00 00 ........x...x... 0000000000d4ffb0 00 00 00 00 5c 2d f8 73 - ec ff d4 00 29 48 82 7c ....\-.s....)H.| 0000000000d4ffc0 40 01 00 00 00 00 00 00 - 00 00 00 00 58 3d 03 00 @...........X=.. 0000000000d4ffd0 00 00 00 00 c4 ff d4 00 - 60 31 83 80 ff ff ff ff ........`1...... 0000000000d4ffe0 60 1a 82 7c 30 48 82 7c - 00 00 00 00 00 00 00 00 `..|0H.|........ *----> Таблица символов <----* Error 0x80004002