Anwendungsausnahme aufgetreten:
Anwendung: C:\Programme\Ahead\Nero Recode\Recode.exe (pid=1912)
Wann: 25.02.2005 @ 11:10:52.718
Ausnahmenummer: c0000005 (Zugriffsverletzung)
*----> Systeminformationen <----*
Computername:
Benutzername:
Terminalsitzungskennung: 0
Prozessoranzahl: 1
Prozessortyp: x86 Family 15 Model 2 Stepping 7
Windows-Version: 5.1
Aktuelles Build: 2600
Service Pack: 2
Aktueller Typ: Uniprocessor Free
Firma:
Besitzer:
** alle aktuellen MS Patches eingespielt
*----> Taskliste <----*
0 System Process
4 System
520 smss.exe
576 csrss.exe
600 winlogon.exe
644 services.exe
656 lsass.exe
812 Ati2evxx.exe
824 svchost.exe
912 svchost.exe
940 svchost.exe
1120 spoolsv.exe
1200 svchost.exe
1228 AVGUARD.EXE
1260 AVWUPSRV.EXE
1324 kpf4ss.exe
1552 kpf4gui.exe
1892 Ati2evxx.exe
1980 Explorer.EXE
480 kpf4gui.exe
552 CTHELPER.EXE
564 CTSysVol.exe
864 em_exec.exe
844 iTouch.exe
968 SchSvr.exe
1056 daemon.exe
1464 AVGNT.EXE
1576 CoreCenter.exe
1636 MouseMapper.exe
220 NeroStartSmart.exe
1912 Recode.exe
952 drwtsn32.exe
*----> Modulliste <----*
(0000000000400000 - 0000000000eb2000: C:\Programme\Ahead\Nero Recode\Recode.exe
(0000000001b30000 - 0000000001cb3000: C:\Programme\Ahead\Nero Recode\Recode-DEU.NLS
(0000000001cc0000 - 0000000001df1000: C:\Programme\Gemeinsame Dateien\Ahead\Lib\AdvrCntr.dll
(0000000001e10000 - 0000000001e17000: C:\Programme\Logitech\MouseWare\System\LgWndHk.dll
(0000000001ec0000 - 0000000002045000: C:\Programme\Gemeinsame Dateien\Ahead\DSFilter\NeNDGui.dll
(00000000026a0000 - 00000000032ba000: C:\Programme\Ahead\NeroVision\NeroFiles\NeroAPI.dll
(00000000032c0000 - 00000000032d9000: C:\Programme\Ahead\NeroVision\NeroFiles\NeRSDB.dll
(0000000003c60000 - 0000000003d71000: C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroCBUI.dll
(0000000003e90000 - 0000000003eb3000: C:\Programme\Gemeinsame Dateien\Ahead\Lib\DriveLocker.dll
(0000000004740000 - 000000000474c000: C:\Programme\Mousemapper\MouseHook.dll
(0000000004760000 - 000000000477e000: C:\Programme\Gemeinsame Dateien\Logitech\Scrolling\LgMsgHk.dll
(0000000004790000 - 0000000004797000: C:\Programme\Logitech\iTouch\iTchHk.dll
(00000000047a0000 - 00000000047b0000: C:\WINDOWS\system32\ctagent.dll
(0000000005000000 - 0000000005040000: C:\Programme\Ahead\NeroVision\NeroFiles\CDROM.DLL
(0000000005040000 - 0000000005319000: C:\WINDOWS\system32\xpsp2res.dll
(0000000010000000 - 0000000010133000: C:\Programme\Ahead\Nero Recode\NeroFSStandalone.dll
(0000000013000000 - 000000001302a000: C:\Programme\Ahead\NeroVision\NeroFiles\WNASPI32.Dll
(0000000015000000 - 0000000015023000: C:\Programme\Ahead\NeroVision\NeroFiles\image.dll
(0000000019000000 - 00000000190ac000: C:\Programme\Ahead\NeroVision\NeroFiles\MMC.DLL
(0000000020000000 - 0000000020049000: C:\Programme\Ahead\NeroVision\NeroFiles\NeroErr.dll
(0000000021000000 - 0000000021029000: C:\Programme\Ahead\NeroVision\NeroFiles\neroscsi.dll
(0000000022000000 - 0000000022043000: C:\Programme\Ahead\NeroVision\NeroFiles\newtrf.dll
(000000004d5c0000 - 000000004d618000: C:\WINDOWS\system32\WINHTTP.dll
(000000005b0f0000 - 000000005b128000: C:\WINDOWS\system32\UxTheme.dll
(000000005f1a0000 - 000000005f1b7000: C:\WINDOWS\system32\OLEPRO32.DLL
(0000000072f70000 - 0000000072f96000: C:\WINDOWS\system32\WINSPOOL.DRV
(0000000074790000 - 00000000748fe000: C:\WINDOWS\system32\QUARTZ.dll
(0000000074900000 - 0000000074a30000: C:\WINDOWS\system32\msxml3.dll
(0000000074cb0000 - 0000000074cd1000: C:\WINDOWS\system32\oledlg.dll
(0000000076320000 - 0000000076325000: C:\WINDOWS\system32\MSIMG32.dll
(0000000076350000 - 000000007639a000: C:\WINDOWS\system32\comdlg32.dll
(00000000765a0000 - 00000000765bd000: C:\WINDOWS\System32\CSCDLL.dll
(0000000076620000 - 00000000766d5000: C:\WINDOWS\system32\USERENV.dll
(0000000076af0000 - 0000000076b1e000: C:\WINDOWS\system32\WINMM.dll
(0000000076f90000 - 000000007700f000: C:\WINDOWS\system32\CLBCATQ.DLL
(0000000077010000 - 00000000770e3000: C:\WINDOWS\system32\COMRes.dll
(00000000770f0000 - 000000007717c000: C:\WINDOWS\system32\OLEAUT32.dll
(0000000077180000 - 0000000077227000: C:\WINDOWS\system32\WININET.dll
(00000000773a0000 - 00000000774a2000: C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\COMCTL32.dll
(00000000774b0000 - 00000000775ed000: C:\WINDOWS\system32\ole32.dll
(00000000779f0000 - 0000000077a46000: C:\WINDOWS\System32\cscui.dll
(0000000077a50000 - 0000000077ae5000: C:\WINDOWS\system32\CRYPT32.dll
(0000000077af0000 - 0000000077b02000: C:\WINDOWS\system32\MSASN1.dll
(0000000077b10000 - 0000000077b32000: C:\WINDOWS\system32\appHelp.dll
(0000000077bd0000 - 0000000077bd8000: C:\WINDOWS\system32\VERSION.dll
(0000000077be0000 - 0000000077c38000: C:\WINDOWS\system32\msvcrt.dll
(0000000077d10000 - 0000000077da0000: C:\WINDOWS\system32\USER32.dll
(0000000077da0000 - 0000000077e4a000: C:\WINDOWS\system32\ADVAPI32.dll
(0000000077e50000 - 0000000077ee1000: C:\WINDOWS\system32\RPCRT4.dll
(0000000077ef0000 - 0000000077f36000: C:\WINDOWS\system32\GDI32.dll
(0000000077f40000 - 0000000077fb6000: C:\WINDOWS\system32\SHLWAPI.dll
(000000007c800000 - 000000007c906000: C:\WINDOWS\system32\kernel32.dll
(000000007c910000 - 000000007c9c7000: C:\WINDOWS\system32\ntdll.dll
(000000007c9d0000 - 000000007d1ee000: C:\WINDOWS\system32\SHELL32.dll
*----> Statusabbild für Threadkennung 0x6e0 <----*
eax=00000000 ebx=77d1e2ae ecx=01e422b8 edx=00000000 esi=00000000 edi=016bebc0
eip=01ef5769 esp=016beba4 ebp=00000000 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
*** WARNING: Unable to verify checksum for C:\Programme\Gemeinsame Dateien\Ahead\DSFilter\NeNDGui.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Programme\Gemeinsame Dateien\Ahead\DSFilter\NeNDGui.dll -
Funktion: NeNDGui
01ef574f 33c0 xor eax,eax
01ef5751 eb08 jmp NeNDGui+0x3575b (01ef575b)
01ef5753 8b4118 mov eax,[ecx+0x18]
01ef5756 2bc2 sub eax,edx
01ef5758 c1f803 sar eax,0x3
01ef575b 3bf0 cmp esi,eax
01ef575d 7e07 jle NeNDGui+0x35766 (01ef5766)
01ef575f b857000780 mov eax,0x80070057
01ef5764 eb11 jmp NeNDGui+0x35777 (01ef5777)
01ef5766 8b4114 mov eax,[ecx+0x14]
FEHLER ->01ef5769 8b44f004 mov eax,[eax+esi*8+0x4] ds:0023:00000004=????????
01ef576d 8907 mov [edi],eax
01ef576f 50 push eax
01ef5770 8b08 mov ecx,[eax]
01ef5772 ff5104 call dword ptr [ecx+0x4]
01ef5775 33c0 xor eax,eax
01ef5777 5f pop edi
01ef5778 5e pop esi
01ef5779 c20c00 ret 0xc
01ef577c b8ecabf601 mov eax,0x1f6abec
01ef5781 e88af90500 call NeNDGui+0x95110 (01f55110)
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
00000000 00000000 00000000 00000000 00000000 NeNDGui+0x35769
*----> Raw Stack Dump <----*
*----> Statusabbild für Threadkennung 0x710 <----*
eax=13006e10 ebx=016bf158 ecx=0000000d edx=00000000 esi=00000168 edi=00000000
eip=7c91eb94 esp=03b4ff28 ebp=03b4ff8c iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll -
Funktion: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\kernel32.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Programme\Ahead\NeroVision\NeroFiles\WNASPI32.Dll -
ChildEBP RetAddr Args to Child
03b4ff8c 7c802542 00000168 000001f4 00000000 ntdll!KiFastSystemCallRet
03b4ffa0 13006e3d 00000168 000001f4 7c9206eb kernel32!WaitForSingleObject+0x12
03b4ffec 00000000 13006e10 016bf158 00000000 WNASPI32+0x6e3d
*----> Raw Stack Dump <----*
*----> Statusabbild für Threadkennung 0x554 <----*
eax=00000001 ebx=00000000 ecx=003a6f38 edx=00000000 esi=033177b0 edi=033177b0
eip=7c91eb94 esp=0470febc ebp=0470fee0 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
Funktion: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Programme\Ahead\NeroVision\NeroFiles\NeroAPI.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0470fee0 028d9013 033177b0 00000000 00000000 ntdll!KiFastSystemCallRet
033177b0 00001b04 00000000 00000000 000207e5 NeroAPI+0x239013
*----> Raw Stack Dump <----*
*----> Statusabbild für Threadkennung 0x30c <----*
eax=05b1ff54 ebx=00000000 ecx=000b1688 edx=7c91eb94 esi=000b1688 edi=00000100
eip=7c91eb94 esp=05b1fe1c ebp=05b1ff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
Funktion: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\RPCRT4.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
05b1ff80 77e56c22 05b1ffa8 77e56a3b 000b1688 ntdll!KiFastSystemCallRet
05b1ff88 77e56a3b 000b1688 00000000 016bdf20 RPCRT4!I_RpcBCacheFree+0x5ea
05b1ffa8 77e56c0a 00085930 05b1ffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
05b1ffb4 7c80b50b 000b1800 00000000 016bdf20 RPCRT4!I_RpcBCacheFree+0x5d2
05b1ffec 00000000 77e56bf0 000b1800 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
*----> Statusabbild für Threadkennung 0x3a8 <----*
eax=774cd888 ebx=00007530 ecx=7ffd4000 edx=00000000 esi=00000000 edi=0631ff50
eip=7c91eb94 esp=0631ff20 ebp=0631ff78 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206
Funktion: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ole32.dll -
ChildEBP RetAddr Args to Child
0631ff78 7c802451 0000ea60 00000000 0631ffb4 ntdll!KiFastSystemCallRet
0631ff88 774cd6ae 0000ea60 000b0610 774cd83b kernel32!Sleep+0xf
0631ffb4 7c80b50b 000b0610 7c920945 7c92094e ole32!IsValidInterface+0x295
0631ffec 00000000 774cd888 000b0610 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
* der Text ist zu lang * omg ... hab ihn gekürzt (jeweils den RAW-Stack-Dump gelöscht) ...