------------------------------------------------------------ 02-11-2015 11:56:40 SYS3170 PID 0068 TID 0001 Slot 00b9 E:\PROGRAMS\FIREFOX\FIREFOX.EXE 00cccccc 00cccccc P1=00cccccc P2=00cccccc P3=00cccccc P4=00cccccc EAX=00000001 EBX=00000000 ECX=170b0000 EDX=0000000c ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1c392e55 CSACC=d0df CSLIM=5fffffff SS:ESP=0053:0012fd68 SSACC=d0f3 SSLIM=5fffffff EBP=00000000 FLG=00010206 LIBC066.DLL ------------------------------------------------------------ 02-11-2015 12:24:03 SYS3170 PID 00d8 TID 0001 Slot 00d5 E:\PROGRAMS\FIREFOX\FIREFOX.EXE 1aa69084 000102af P1=00000001 P2=00000000 P3=1aa69084 P4=00000000 EAX=00000001 EBX=00000000 ECX=17050000 EDX=0000000c ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1c392e55 CSACC=d0df CSLIM=5fffffff SS:ESP=0053:0012fdd0 SSACC=d0f3 SSLIM=5fffffff EBP=00000000 FLG=00010206 FIREFOX.EXE 0001:000002af ------------------------------------------------------------ 02-12-2015 17:14:17 SYS3170 PID 004b TID 0001 Slot 00aa E:\PROGRAMS\THUNDERBIRD\THUNDERBIRD.EXE 1aa6932c 0001053c P1=00000001 P2=00000000 P3=1aa6932c P4=00000000 EAX=00000001 EBX=00000000 ECX=17400000 EDX=0000000c ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1c8f2e55 CSACC=d0df CSLIM=5fffffff SS:ESP=0053:0012fdb8 SSACC=d0f3 SSLIM=5fffffff EBP=00000000 FLG=00210206 THUNDERBIRD.EXE 0001:0000053c ------------------------------------------------------------ 02-12-2015 18:23:52 SYS3170 PID 0049 TID 0001 Slot 0096 E:\PROGRAMS\FIREFOX\FIREFOX.EXE 1aa69084 000102af P1=00000001 P2=00000000 P3=1aa69084 P4=d2001818 EAX=00000001 EBX=00000000 ECX=17400000 EDX=0000000c ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1c8f2e55 CSACC=d0df CSLIM=5fffffff SS:ESP=0053:0012fdd0 SSACC=d0f3 SSLIM=5fffffff EBP=00000000 FLG=00210206 FIREFOX.EXE 0001:000002af ------------------------------------------------------------ 02-13-2015 11:14:29 SYS3175 PID 004a TID 0001 Slot 00ba D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=144098ac ECX=1f1e1b80 EDX=14409700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 11:14:29 SYS3175 PID 004a TID 0001 Slot 00ba D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 11:14:50 SYS3175 PID 004b TID 0001 Slot 00bf D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=144098ac ECX=1f1e1b80 EDX=14409700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 11:14:50 SYS3175 PID 004b TID 0001 Slot 00bf D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 11:14:52 SYS3175 PID 004c TID 0001 Slot 00bf D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=144098ac ECX=1f1e1b80 EDX=14409700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 11:14:52 SYS3175 PID 004c TID 0001 Slot 00bf D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 11:14:53 SYS3175 PID 004d TID 0001 Slot 00bf D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=144098ac ECX=1f1e1b80 EDX=14409700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 11:14:53 SYS3175 PID 004d TID 0001 Slot 00bf D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 11:16:04 SYS3175 PID 006d TID 0001 Slot 00c1 D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=144098ac ECX=1f1e1b80 EDX=14409700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 11:16:04 SYS3175 PID 006d TID 0001 Slot 00c1 D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 11:16:17 SYS3175 PID 006e TID 0001 Slot 00c1 D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=144098ac ECX=1f1e1b80 EDX=14409700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 11:16:17 SYS3175 PID 006e TID 0001 Slot 00c1 D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 11:21:47 SYS3175 PID 0071 TID 0001 Slot 00be D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=144098ac ECX=1f1e1b80 EDX=14409700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 11:21:47 SYS3175 PID 0071 TID 0001 Slot 00be D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 11:21:54 SYS3175 PID 0072 TID 0001 Slot 00be D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=144098ac ECX=1f1e1b80 EDX=14409700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 11:21:54 SYS3175 PID 0072 TID 0001 Slot 00be D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 11:21:55 SYS3175 PID 0073 TID 0001 Slot 00be D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=144098ac ECX=1f1e1b80 EDX=14409700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 11:21:55 SYS3175 PID 0073 TID 0001 Slot 00be D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 11:21:56 SYS3175 PID 0074 TID 0001 Slot 00be D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=144098ac ECX=1f1e1b80 EDX=14409700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 11:21:56 SYS3175 PID 0074 TID 0001 Slot 00be D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 11:21:56 SYS3175 PID 0075 TID 0001 Slot 00be D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=144098ac ECX=1f1e1b80 EDX=14409700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 11:21:56 SYS3175 PID 0075 TID 0001 Slot 00be D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 11:21:57 SYS3175 PID 0076 TID 0001 Slot 00be D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=144098ac ECX=1f1e1b80 EDX=14409700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 11:21:57 SYS3175 PID 0076 TID 0001 Slot 00be D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 11:38:14 SYS3170 PID 0046 TID 0001 Slot 0096 E:\PROGRAMS\FIREFOX\FIREFOX.EXE c0010003 1d3a18c9 P1=00000003 P2=XXXXXXXX P3=XXXXXXXX P4=XXXXXXXX EAX=00000001 EBX=00000000 ECX=143e0000 EDX=0000000c ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1c9a2e55 CSACC=d0df CSLIM=5fffffff SS:ESP=0053:0012fdb0 SSACC=d0f3 SSLIM=5fffffff EBP=00000000 FLG=00010206 NSPR4.DLL 0001:000218c9 ------------------------------------------------------------ 02-13-2015 14:54:37 SYS3175 PID 0044 TID 0001 Slot 0097 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=17a898ac ECX=1f1e1b80 EDX=17a89700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bff70 SSACC=d0f3 SSLIM=5fffffff EBP=008bff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 14:54:37 SYS3175 PID 0044 TID 0001 Slot 0097 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=1a96a000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bfafc SSACC=d0f3 SSLIM=5fffffff EBP=008bfb98 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 14:54:47 SYS3175 PID 0045 TID 0001 Slot 0098 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=174c98ac ECX=1f1e1b80 EDX=174c9700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bff70 SSACC=d0f3 SSLIM=5fffffff EBP=008bff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 14:54:47 SYS3175 PID 0045 TID 0001 Slot 0098 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=1a84f000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bfafc SSACC=d0f3 SSLIM=5fffffff EBP=008bfb98 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 14:54:53 SYS3175 PID 0047 TID 0001 Slot 008d D:\MMEDIA\SMPLAYER\SMPLAYER.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=175098ac ECX=1f1e1b80 EDX=17509700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:00afff70 SSACC=d0f3 SSLIM=5fffffff EBP=00afff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 14:54:53 SYS3175 PID 0047 TID 0001 Slot 008d D:\MMEDIA\SMPLAYER\SMPLAYER.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:00affaf4 SSACC=d0f3 SSLIM=5fffffff EBP=00affb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 14:54:54 SYS3175 PID 0048 TID 0001 Slot 008d D:\MMEDIA\SMPLAYER\SMPLAYER.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=175098ac ECX=1f1e1b80 EDX=17509700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:00afff70 SSACC=d0f3 SSLIM=5fffffff EBP=00afff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 14:54:54 SYS3175 PID 0048 TID 0001 Slot 008d D:\MMEDIA\SMPLAYER\SMPLAYER.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:00affaf4 SSACC=d0f3 SSLIM=5fffffff EBP=00affb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 14:59:21 SYS3175 PID 004d TID 0001 Slot 009b H:\JAVA_6\JRE\BIN\JAVA.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=173f98ac ECX=1f1e1b80 EDX=173f9700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:0083ff70 SSACC=d0f3 SSLIM=5fffffff EBP=0083ff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 14:59:21 SYS3175 PID 004d TID 0001 Slot 009b H:\JAVA_6\JRE\BIN\JAVA.EXE c0000005 1717c5aa P1=00000001 P2=00000006 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=0083fd60 EDX=171e0000 ESI=0000150b EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1717c5aa CSACC=d0df CSLIM=5fffffff SS:ESP=0053:0083fdb4 SSACC=d0f3 SSLIM=5fffffff EBP=0083fdcc FLG=00010206 WGSS50.DLL 0001:0000c5aa ------------------------------------------------------------ 02-13-2015 15:00:46 SYS3175 PID 0050 TID 0001 Slot 009c D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=173f98ac ECX=1f1e1b80 EDX=173f9700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 15:00:46 SYS3175 PID 0050 TID 0001 Slot 009c D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 15:01:30 SYS3175 PID 0051 TID 0001 Slot 009b D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=173f98ac ECX=1f1e1b80 EDX=173f9700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 15:01:30 SYS3175 PID 0051 TID 0001 Slot 009b D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 15:02:06 SYS3175 PID 0053 TID 0001 Slot 009c D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=173f98ac ECX=1f1e1b80 EDX=173f9700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 15:02:06 SYS3175 PID 0053 TID 0001 Slot 009c D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 15:02:11 SYS3175 PID 0055 TID 0001 Slot 009c D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=173f98ac ECX=1f1e1b80 EDX=173f9700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 15:02:11 SYS3175 PID 0055 TID 0001 Slot 009c D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 15:02:46 SYS3175 PID 0057 TID 0001 Slot 009c D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=173f98ac ECX=1f1e1b80 EDX=173f9700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-13-2015 15:02:46 SYS3175 PID 0057 TID 0001 Slot 009c D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-13-2015 18:22:43 SYS3175 PID 005a TID 0001 Slot 009c E:\PROGRAMS\FIREFOX\FIREFOX.EXE c0000005 00000000 P1=00000001 P2=00000000 P3=XXXXXXXX P4=XXXXXXXX EAX=00000001 EBX=00000000 ECX=15720000 EDX=0000000c ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:15712e55 CSACC=d0df CSLIM=5fffffff SS:ESP=0053:0012fdb0 SSACC=d0f3 SSLIM=5fffffff EBP=00000000 FLG=00210206 ------------------------------------------------------------ 02-13-2015 18:43:44 SYS3170 PID 005d TID 0001 Slot 009c E:\PROGRAMS\FIREFOX\FIREFOX.EXE 1a459084 000102af P1=00000001 P2=00000000 P3=1a459084 P4=92001818 EAX=00000001 EBX=00000000 ECX=15750000 EDX=0000000c ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:15742e55 CSACC=d0df CSLIM=5fffffff SS:ESP=0053:0012fdd0 SSACC=d0f3 SSLIM=5fffffff EBP=00000000 FLG=00010206 FIREFOX.EXE 0001:000002af ------------------------------------------------------------ 02-13-2015 21:11:51 SYS3175 PID 0047 TID 0001 Slot 008d E:\PROGRAMS\FIREFOX\FIREFOX.EXE c0000005 00000000 P1=00000001 P2=00000000 P3=XXXXXXXX P4=XXXXXXXX EAX=00000001 EBX=00000000 ECX=143e0000 EDX=0000000c ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1c9a2e55 CSACC=d0df CSLIM=5fffffff SS:ESP=0053:0012fdb0 SSACC=d0f3 SSLIM=5fffffff EBP=00000000 FLG=00210206 ------------------------------------------------------------ 02-13-2015 22:15:09 SYS3170 PID 0049 TID 0001 Slot 008d E:\PROGRAMS\FIREFOX\FIREFOX.EXE c0010001 1ffde411 EAX=00000001 EBX=00000000 ECX=143e0000 EDX=0000000c ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1c9a2e55 CSACC=d0df CSLIM=5fffffff SS:ESP=0053:0012fdd0 SSACC=d0f3 SSLIM=5fffffff EBP=00000000 FLG=00010206 DOSCALL1.DLL 0003:0000e411 ------------------------------------------------------------ 02-14-2015 09:23:26 SYS3175 PID 0049 TID 0001 Slot 00b7 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ee3629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=143e98ac ECX=1f1e1b80 EDX=143e9700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f2 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee3629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bff70 SSACC=d0f3 SSLIM=5fffffff EBP=008bff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-14-2015 09:23:26 SYS3175 PID 0049 TID 0001 Slot 00b7 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=1a7da000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f2 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bfafc SSACC=d0f3 SSLIM=5fffffff EBP=008bfb98 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-14-2015 09:24:06 SYS3175 PID 004a TID 0001 Slot 00b6 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ee3629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=143e98ac ECX=1f1e1b80 EDX=143e9700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f2 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee3629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bff70 SSACC=d0f3 SSLIM=5fffffff EBP=008bff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-14-2015 09:24:06 SYS3175 PID 004a TID 0001 Slot 00b6 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=1a7db000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f2 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bfafc SSACC=d0f3 SSLIM=5fffffff EBP=008bfb98 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-14-2015 09:24:38 SYS3175 PID 004b TID 0001 Slot 00b7 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ee3629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=143e98ac ECX=1f1e1b80 EDX=143e9700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f2 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee3629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bff70 SSACC=d0f3 SSLIM=5fffffff EBP=008bff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-14-2015 09:24:38 SYS3175 PID 004b TID 0001 Slot 00b7 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=1a7da000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f2 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bfafc SSACC=d0f3 SSLIM=5fffffff EBP=008bfb98 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-14-2015 09:24:40 SYS3175 PID 004c TID 0001 Slot 00b6 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ee3629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=143e98ac ECX=1f1e1b80 EDX=143e9700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f2 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee3629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bff70 SSACC=d0f3 SSLIM=5fffffff EBP=008bff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-14-2015 09:24:40 SYS3175 PID 004c TID 0001 Slot 00b6 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=1a7da000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f2 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bfafc SSACC=d0f3 SSLIM=5fffffff EBP=008bfb98 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-14-2015 09:24:41 SYS3175 PID 004d TID 0001 Slot 00b7 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ee3629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=143e98ac ECX=1f1e1b80 EDX=143e9700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f2 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee3629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bff70 SSACC=d0f3 SSLIM=5fffffff EBP=008bff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-14-2015 09:24:41 SYS3175 PID 004d TID 0001 Slot 00b7 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=1a7da000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f2 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bfafc SSACC=d0f3 SSLIM=5fffffff EBP=008bfb98 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-14-2015 10:04:11 SYS3170 PID 0044 TID 0001 Slot 0099 E:\PROGRAMS\FIREFOX\FIREFOX.EXE 1a979084 000102af P1=00000001 P2=00000000 P3=1a979084 P4=d2001818 EAX=00000001 EBX=00000000 ECX=143c0000 EDX=0000000c ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1c992e55 CSACC=d0df CSLIM=5fffffff SS:ESP=0053:0012fdd0 SSACC=d0f3 SSLIM=5fffffff EBP=00000000 FLG=00210206 FIREFOX.EXE 0001:000002af ------------------------------------------------------------ 02-14-2015 13:52:30 SYS3175 PID 0057 TID 0001 Slot 00a9 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=143f98ac ECX=1f1e1b80 EDX=143f9700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bff70 SSACC=d0f3 SSLIM=5fffffff EBP=008bff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-14-2015 13:52:30 SYS3175 PID 0057 TID 0001 Slot 00a9 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=1a557000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bfafc SSACC=d0f3 SSLIM=5fffffff EBP=008bfb98 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-14-2015 13:52:32 SYS3175 PID 0058 TID 0001 Slot 00a9 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=143f98ac ECX=1f1e1b80 EDX=143f9700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bff70 SSACC=d0f3 SSLIM=5fffffff EBP=008bff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-14-2015 13:52:32 SYS3175 PID 0058 TID 0001 Slot 00a9 D:\MMEDIA\SMPLAYER\SMTUBE.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=1a557000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008bfafc SSACC=d0f3 SSLIM=5fffffff EBP=008bfb98 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-14-2015 13:52:35 SYS3175 PID 0059 TID 0001 Slot 00a9 D:\MMEDIA\SMPLAYER\SMPLAYER.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=143f98ac ECX=1f1e1b80 EDX=143f9700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:00afff70 SSACC=d0f3 SSLIM=5fffffff EBP=00afff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-14-2015 13:52:35 SYS3175 PID 0059 TID 0001 Slot 00a9 D:\MMEDIA\SMPLAYER\SMPLAYER.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:00affaf4 SSACC=d0f3 SSLIM=5fffffff EBP=00affb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-14-2015 13:52:36 SYS3175 PID 005a TID 0001 Slot 00a9 D:\MMEDIA\SMPLAYER\SMPLAYER.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=143f98ac ECX=1f1e1b80 EDX=143f9700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:00afff70 SSACC=d0f3 SSLIM=5fffffff EBP=00afff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-14-2015 13:52:36 SYS3175 PID 005a TID 0001 Slot 00a9 D:\MMEDIA\SMPLAYER\SMPLAYER.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:00affaf4 SSACC=d0f3 SSLIM=5fffffff EBP=00affb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-14-2015 13:53:20 SYS3175 PID 0064 TID 0001 Slot 00cb D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ee2629f P1=00000002 P2=1f1e1b80 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=143f98ac ECX=1f1e1b80 EDX=143f9700 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ee2629f CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cff70 SSACC=d0f3 SSLIM=5fffffff EBP=008cff70 FLG=00010246 GCC1.DLL 0001:0000629f ------------------------------------------------------------ 02-14-2015 13:53:20 SYS3175 PID 0064 TID 0001 Slot 00cb D:\OFFICE\QT4\QPDFVIEW-13\QPDFVIEW.EXE c0000005 1ea7dc0c P1=00000001 P2=000000e6 P3=XXXXXXXX P4=XXXXXXXX EAX=00000000 EBX=00000000 ECX=18a803e5 EDX=00000073 ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1ea7dc0c CSACC=d0df CSLIM=5fffffff SS:ESP=0053:008cfaf4 SSACC=d0f3 SSLIM=5fffffff EBP=008cfb90 FLG=00010246 REGISTRY.DLL 0001:0000dc0c ------------------------------------------------------------ 02-14-2015 14:19:53 SYS3170 PID 0045 TID 0001 Slot 0099 E:\PROGRAMS\FIREFOX\FIREFOX.EXE 1a979084 000102af P1=00000001 P2=00000408 P3=1b1c0044 P4=0012fcb0 EAX=00000001 EBX=00000000 ECX=143d0000 EDX=0000000c ESI=00000000 EDI=00000000 DS=0053 DSACC=d0f3 DSLIM=5fffffff ES=0053 ESACC=d0f3 ESLIM=5fffffff FS=150b FSACC=00f3 FSLIM=00000030 GS=0000 GSACC=**** GSLIM=******** CS:EIP=005b:1c9a2e55 CSACC=d0df CSLIM=5fffffff SS:ESP=0053:0012fdd0 SSACC=d0f3 SSLIM=5fffffff EBP=00000000 FLG=00210206 FIREFOX.EXE 0001:000002af