=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2018.01.07 00:36:35 =~=~=~=~=~=~=~=~=~=~=~= (ntoskrnl/io/iomgr/driver.c:1576) '\Driver\BUSLOGIC' initialization failed, status (0xc00000c0) (ntoskrnl/io/iomgr/driver.c:64) Deleting driver object '\Driver\BUSLOGIC' (drivers/ksfilter/swenum/swenum.c:428) SWENUM loaded (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\VBoxVideo.sys' with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\pcnet.sys' with status 0xc000003a vgdrvHeartbeatInit: Setting up heartbeat to trigger every 2000 milliseconds vgdrvNtInit: Device is ready! (drivers/usb/usbohci/hardware.cpp:1395) Disabling status change interrupt (drivers/usb/usbohci/hardware.cpp:1477) New device arrival at Port 0 LowSpeed 0 (drivers/usb/usbohci/hardware.cpp:1138) Waiting 100 milliseconds for port to stabilize after connection (drivers/usb/usbehci/hardware.cpp:367) Controller Capabilities Length 0x20 (drivers/usb/usbehci/hardware.cpp:368) Controller EHCI Version 0x100 (drivers/usb/usbehci/hardware.cpp:369) Controller EHCI Caps HCSParamsLong 0xc (drivers/usb/usbehci/hardware.cpp:370) Controller EHCI Caps HCCParamsLong 0x84 (drivers/usb/usbehci/hardware.cpp:371) Controller has 12 Ports (drivers/usb/usbehci/hardware.cpp:256) Controller Port Routing Rules 0 (drivers/usb/usbehci/hardware.cpp:257) Number of Ports per Companion Controller 0 (drivers/usb/usbehci/hardware.cpp:258) Number of Companion Controller 0 (drivers/usb/usbehci/hardware.cpp:277) Controller supports Asynchronous Schedule Park (drivers/usb/usbehci/hardware.cpp:489) Starting Controller (drivers/usb/usbehci/hardware.cpp:714) Interrupt Mask 37 (drivers/usb/usbehci/hardware.cpp:813) UsbSts c000 (drivers/usb/usbehci/hardware.cpp:816) UsbCmd.PeriodicEnable 1 (drivers/usb/usbehci/hardware.cpp:817) UsbCmd.AsyncEnable 1 (drivers/usb/usbehci/hardware.cpp:818) UsbCmd.IntThreshold 8 (drivers/usb/usbehci/hardware.cpp:819) UsbCmd.Run 1 (drivers/usb/usbehci/hardware.cpp:820) UsbCmd.FrameListSize 0 (drivers/usb/usbehci/hardware.cpp:827) EHCI Started! (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\VBoxVideo.sys' with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\pcnet.sys' with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\i8042prt.sys' with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\i8042prt.sys' with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\serial.sys' with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\cmbatt.sys' with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\cmbatt.sys' with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\VBoxVideo.sys' with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\pcnet.sys' with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\i8042prt.sys' with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\i8042prt.sys' with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\serial.sys' with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\cmbatt.sys' with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\cmbatt.sys' with status 0xc000003a (ntoskrnl/io/iomgr/iorsrce.c:725) Failed to open symlink \Device\Harddisk0\Partition1, Status=c0000024 (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\VBoxVideo.sys at F4AFC000 with 30 pages (drivers/usb/usbohci/hardware.cpp:1395) Disabling status change interrupt (drivers/usb/usbohci/hardware.cpp:1514) Port 0 completed reset (sdk/lib/drivers/libusb/hub_controller.cpp:334) [USBOHCI] Change state on port 0 (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\VIDEOPRT.SYS at F4AD6000 with 26 pages (sdk/lib/drivers/libusb/hub_controller.cpp:2714) USBHI_CreateUsbDevice (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\pcnet.sys at F4AB3000 with f pages (sdk/lib/drivers/libusb/usb_device.cpp:314) [USBOHCI] SetDeviceAddress> Address 1 (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\i8042prt.sys at F4A95000 with 1b pages (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\kbdclass.sys at F4A81000 with 14 pages (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\VBoxMouse.sys at F4A56000 with 2b pages IPRT: RTMpPoke => rtMpPokeCpuUsingDpc (sdk/lib/drivers/libusb/usb_device.cpp:844) Dumping Device Descriptor B84F1920 (sdk/lib/drivers/libusb/usb_device.cpp:845) bLength 12 (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\mouclass.sys at F4A48000 with e pages (sdk/lib/drivers/libusb/usb_device.cpp:846) bDescriptorType 1 (sdk/lib/drivers/libusb/usb_device.cpp:847) bcdUSB 110 (sdk/lib/drivers/libusb/usb_device.cpp:848) bDeviceClass 0 (sdk/lib/drivers/libusb/usb_device.cpp:849) bDeviceSubClass 0 (sdk/lib/drivers/libusb/usb_device.cpp:850) bDeviceProtocol 0 (sdk/lib/drivers/libusb/usb_device.cpp:851) bMaxPacketSize0 8 (sdk/lib/drivers/libusb/usb_device.cpp:852) idVendor 80ee (sdk/lib/drivers/libusb/usb_device.cpp:853) idProduct 21 (sdk/lib/drivers/libusb/usb_device.cpp:854) bcdDevice 100 (sdk/lib/drivers/libusb/usb_device.cpp:855) iManufacturer 1 (sdk/lib/drivers/libusb/usb_device.cpp:856) iProduct 3 (sdk/lib/drivers/libusb/usb_device.cpp:857) iSerialNumber 0 (sdk/lib/drivers/libusb/usb_device.cpp:858) bNumConfigurations 1 (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\serial.sys at F4A35000 with 13 pages (ntoskrnl/io/pnpmgr/pnpres.c:615) Resource conflict: IRQ (0x4 0x4 vs. 0x4 0x4) (ntoskrnl/io/pnpmgr/pnpres.c:1100) Boot resources for ACPI\PNP0501\1 cause a resource conflict! (ntoskrnl/io/pnpmgr/pnpres.c:385) Failed to find an available interrupt resource (0x4 to 0x4) (ntoskrnl/io/pnpmgr/pnpres.c:513) Unable to satisfy preferred resource or alternates in list 0 (ntoskrnl/io/pnpmgr/pnpres.c:524) Out of alternate lists! (ntoskrnl/io/pnpmgr/pnpres.c:1123) Failed to fixup a resource list from supplied resources for ACPI\PNP0501\1 (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\cmbatt.sys at F4A20000 with 15 pages (sdk/lib/drivers/libusb/usb_device.cpp:865) Dumping ConfigurationDescriptor B8485000 (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\battc.sys at F4A17000 with 9 pages (sdk/lib/drivers/libusb/usb_device.cpp:866) bLength 9 (sdk/lib/drivers/libusb/usb_device.cpp:867) bDescriptorType 2 (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\wmilib.sys at F4A0F000 with 8 pages (drivers/bus/acpi/eval.c:169) Query method _BTP failed on B87C96D0 WARNING: AcpiInterfaceNotificationsRegister at drivers/bus/acpi/interface.c:80 is UNIMPLEMENTED! (ntoskrnl/io/iomgr/device.c:445) Unloading driver '\Driver\CMBATT' (automatic) (ntoskrnl/io/pnpmgr/pnpmgr.c:469) \Driver\CMBATT->AddDevice(ACPI\PNP0C0A\0) failed with status 0xc0000002 (ntoskrnl/io/iomgr/driver.c:64) Deleting driver object '\Driver\CMBATT' (ntoskrnl/mm/ARM3/sysldr.c:955) Leaking driver: cmbatt.sys (ntoskrnl/mm/ARM3/sysldr.c:428) \SystemRoot\System32\drivers\battc.sys (ntoskrnl/mm/ARM3/sysldr.c:428) \SystemRoot\System32\drivers\wmilib.sys (sdk/lib/drivers/libusb/usb_device.cpp:868) wTotalLength 22 (sdk/lib/drivers/libusb/usb_device.cpp:869) bNumInterfaces 1 (sdk/lib/drivers/libusb/usb_device.cpp:870) bConfigurationValue 1 (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\cmbatt.sys at F49FA000 with 15 pages WARNING: AcpiInterfaceNotificationsRegister at drivers/bus/acpi/interface.c:80 is UNIMPLEMENTED! (sdk/lib/drivers/libusb/usb_device.cpp:871) iConfiguration 0 (sdk/lib/drivers/libusb/usb_device.cpp:872) bmAttributes 80 (sdk/lib/drivers/libusb/usb_device.cpp:873) MaxPower 32 (drivers/usb/usbhub/fdo.c:787) IsCompositeDevice bNumInterfaces 1 (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\system32\drivers\floppy.sys at F49E1000 with 19 pages (ntoskrnl/io/iomgr/driver.c:1576) '\Driver\FLOPPY' initialization failed, status (0xc000000e) (ntoskrnl/io/iomgr/driver.c:64) Deleting driver object '\Driver\FLOPPY' (ntoskrnl/io/iomgr/driver.c:1986) IopInitializeDriverModule() failed (Status c000000e) (ntoskrnl/mm/ARM3/sysldr.c:955) Leaking driver: floppy.sys (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\system32\drivers\cdrom.sys at F49C2000 with 1b pages (drivers/usb/usbhub/fdo.c:693) StringDesc->bLength 22 (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\BdAgent.sys at F49AB000 with 17 pages (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\FLTMGR.SYS' with status 0xc0000034 (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\drivers\FLTMGR.SYS' with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:1247) Failed to load dependency: \SystemRoot\System32\drivers\drivers\FLTMGR.SYS (ntoskrnl/mm/ARM3/sysldr.c:3245) MiResolveImageReferences failed with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:3247) Missing driver '\SystemRoot\System32\drivers\drivers\FLTMGR.SYS', missing API '(null)' (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\BdSpy.sys at F4999000 with 12 pages (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\FLTMGR.SYS' with status 0xc0000034 (ntoskrnl/mm/ARM3/sysldr.c:3025) ZwOpenFile failed for '\SystemRoot\System32\drivers\drivers\FLTMGR.SYS' with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:1247) Failed to load dependency: \SystemRoot\System32\drivers\drivers\FLTMGR.SYS (ntoskrnl/mm/ARM3/sysldr.c:3245) MiResolveImageReferences failed with status 0xc000003a (ntoskrnl/mm/ARM3/sysldr.c:3247) Missing driver '\SystemRoot\System32\drivers\drivers\FLTMGR.SYS', missing API '(null)' (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\system32\drivers\fs_rec.sys at F498B000 with e pages (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\system32\drivers\null.sys at F4983000 with 8 pages (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\system32\drivers\beep.sys at F497A000 with 9 pages (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\system32\drivers\blue.sys at F496F000 with b pages (drivers/usb/usbhub/pdo.c:575) USB Tablet (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\system32\drivers\vbemp.sys at F4963000 with c pages (drivers/usb/usbhub/pdo.c:575) USB Tablet (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\system32\drivers\msfs.sys at F4958000 with b pages (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\system32\drivers\npfs.sys at F4936000 with 22 pages (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\tcpip.sys at F48CF000 with 67 pages NDIS_STATUS_MEDIA_CONNECT Unhandled event type: 6 (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\hidusb.sys at F48BE000 with d pages (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\hidclass.sys at F48AC000 with 12 pages (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\hidparse.sys at F4899000 with 13 pages (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\system32\drivers\ndisuio.sys at F488A000 with f pages (drivers/usb/usbhub/pdo.c:850) PDO IRP_MJ_PNP / unknown minor function 0xd (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\system32\drivers\afd.sys at F485B000 with 2f pages (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\VBoxSF.sys at F4811000 with 4a pages WARNING: USBHUB_PdoStartDevice at drivers/usb/usbhub/pdo.c:450 is UNIMPLEMENTED! WARNING: RtlCreateTagHeap at sdk/lib/rtl/heap.c:3881 is UNIMPLEMENTED! (drivers/usb/usbohci/usb_queue.cpp:667) URB failed with status 0xc0000004 (drivers/usb/usbohci/usb_request.cpp:1855) OHCI_TD_CONDITION_STALL detected in TransferDescriptor TransferDescriptor F4B313E0 (sdk/lib/drivers/libusb/hub_controller.cpp:2191) [USBOHCI] URB_FUNCTION_CLASS_INTERFACE failed with Urb Status 0 (drivers/hid/hidusb/hidusb.c:1416) Status c0000001 (drivers/usb/usbhub/pdo.c:317) IOCTL_INTERNAL_USB_SUBMIT_URB Function 28 NOT IMPLEMENTED (drivers/usb/usbhub/pdo.c:850) PDO IRP_MJ_PNP / unknown minor function 0x14 (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\drivers\mouhid.sys at F47E5000 with b pages (base/system/autochk/autochk.c:353) AUTOCHK: Checking \??\C: (drivers/filesystems/fastfat/fsctl.c:1120) Can't lock: 6 opened (drivers/filesystems/fastfat/fsctl.c:1130) Opened (1 - 4): \WINDOWS (drivers/filesystems/fastfat/fsctl.c:1130) Opened (1 - 7): \WINDOWS\system32 (drivers/filesystems/fastfat/fsctl.c:1130) Opened (1 - 2): \WINDOWS\system32\drivers\VBoxVideo.sys (drivers/filesystems/fastfat/fsctl.c:1130) Opened (1 - 2): \WINDOWS\system32\drivers\VBoxMouse.sys (drivers/filesystems/fastfat/fsctl.c:1130) Opened (1 - 2): \WINDOWS\system32\drivers\VBoxSF.sys (sdk/lib/fslib/vfatlib/check/io.c:238) NtFsControlFile() failed with Status 0xc0000022 (sdk/lib/fslib/vfatlib/check/io.c:238) NtFsControlFile() failed with Status 0xc0000022 (base/system/smss/sminit.c:2160) SMSS: '\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsr11.tmp' => '' failed - Status == c0000034 (base/system/smss/sminit.c:2160) SMSS: '\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\{95716cce-fc71-413f-8ad5-56c2892d4b3a}\.be' => '' failed - Status == c0000034 (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\system32\drivers\cdfs.sys at F476E000 with 4f pages (drivers/storage/scsiport/scsiport.c:2894) unknown ioctl code: 0x24054 (base/system/smss/pagefile.c:878) SMSS:PFILE: Open volume `\??\D:\' failed with status C0000022 Boot took 10647993181 cycles! Interrupts: 917 System Calls: 17881 Context Switches: 701 (ntoskrnl/config/cmsysini.c:1230) CmpGetRegistryPath: ConfigPath = '\SystemRoot\System32\Config\' (ntoskrnl/config/cmsysini.c:1230) CmpGetRegistryPath: ConfigPath = '\SystemRoot\System32\Config\' (ntoskrnl/config/cmsysini.c:1230) CmpGetRegistryPath: ConfigPath = '\SystemRoot\System32\Config\' (ntoskrnl/config/cmsysini.c:1230) CmpGetRegistryPath: ConfigPath = '\SystemRoot\System32\Config\' (ntoskrnl/config/cmsysini.c:1230) CmpGetRegistryPath: ConfigPath = '\SystemRoot\System32\Config\' (ntoskrnl/config/cmsysini.c:1230) CmpGetRegistryPath: ConfigPath = '\SystemRoot\System32\Config\' (ntoskrnl/config/cmsysini.c:1230) CmpGetRegistryPath: ConfigPath = '\SystemRoot\System32\Config\' (ntoskrnl/config/cmcheck.c:25) CmCheckRegistry(0xB82F3008, 0) is UNIMPLEMENTED! (ntoskrnl/config/cmcheck.c:25) CmCheckRegistry(0xB82CC008, 0) is UNIMPLEMENTED! (ntoskrnl/config/cmcheck.c:25) CmCheckRegistry(0xB82AA008, 0) is UNIMPLEMENTED! (ntoskrnl/config/cmcheck.c:25) CmCheckRegistry(0xB82CB008, 0) is UNIMPLEMENTED! (ntoskrnl/mm/ARM3/session.c:790) Session 0 is ready to go: 0xBF7F0000 0xF47CA000, dfd07 0xB82F4008 (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\win32k.sys at F44BF000 with 2af pages (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\ftfd.dll at F4390000 with 12f pages (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\VBoxDisp.dll at F436B000 with 15 pages (win32ss/user/ntuser/class.c:2335) err: SYSTEMCUR(ARROW) == NULL, should not happen!! (win32ss/user/ntuser/class.c:2335) err: SYSTEMCUR(ARROW) == NULL, should not happen!! (win32ss/user/ntuser/class.c:2335) err: SYSTEMCUR(ARROW) == NULL, should not happen!! (win32ss/user/ntuser/class.c:2335) err: SYSTEMCUR(ARROW) == NULL, should not happen!! (win32ss/user/ntuser/class.c:2335) err: SYSTEMCUR(ARROW) == NULL, should not happen!! (win32ss/user/ntuser/class.c:2335) err: SYSTEMCUR(ARROW) == NULL, should not happen!! (win32ss/user/ntuser/winsta.c:226) err: Invalid window station handle (win32ss/user/ntuser/clipboard.c:31) err: Cannot open winsta (win32ss/user/ntuser/winsta.c:494) err: Initializing input window station (win32ss/user/ntuser/desktop.c:2513) err: Attempted to change thread desktop although the thread has windows! (ntoskrnl/mm/ARM3/sysldr.c:176) Loading: \SystemRoot\System32\kbdus.dll at F47C5000 with 5 pages (base/system/services/services.c:279) ScmApplyServiceAccountsHack() (base/system/services/services.c:148) ScmLogAccountsHack(LocalService, S-1-5-19) (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(wlnotify.dll) failing with status c0000135 (ntoskrnl/config/cmcheck.c:25) CmCheckRegistry(0xB7FFF008, 0) is UNIMPLEMENTED! (base/system/services/services.c:241) ScmLogAccountsHack(LocalService) returned success (base/system/services/services.c:148) ScmLogAccountsHack(NetworkService, S-1-5-20) (ntoskrnl/config/cmcheck.c:25) CmCheckRegistry(0xB7FFB008, 0) is UNIMPLEMENTED! (base/system/services/services.c:241) ScmLogAccountsHack(NetworkService) returned success (win32ss/user/ntuser/class.c:2335) err: SYSTEMCUR(ARROW) == NULL, should not happen!! (win32ss/user/ntuser/class.c:2335) err: SYSTEMCUR(ARROW) == NULL, should not happen!! (win32ss/user/ntuser/class.c:2335) err: SYSTEMCUR(ARROW) == NULL, should not happen!! (win32ss/user/ntuser/class.c:2335) err: SYSTEMCUR(ARROW) == NULL, should not happen!! (win32ss/user/ntuser/class.c:2335) err: SYSTEMCUR(ARROW) == NULL, should not happen!! (win32ss/user/ntuser/class.c:2335) err: SYSTEMCUR(ARROW) == NULL, should not happen!! err:(win32ss/user/user32/windows/cursoricon.c:25) Loading System Cursors err:(win32ss/user/user32/misc/dllmain.c:600) hIconSmWindows 00020070 hIconWindows 0002006E (win32ss/user/ntuser/callback.c:1138) err: hIconSmWindows 00020070 hIconWindows 0002006E (win32ss/user/ntuser/desktop.c:2513) err: Attempted to change thread desktop although the thread has windows! err:(win32ss/user/user32/windows/window.c:490) CreateWindowExW RegisterSystemControls (win32ss/user/ntuser/desktop.c:713) err: ptiLastInput is CLEARED!! (win32ss/user/ntuser/msgqueue.c:846) err: Remove Window Messages E1678558 From Sent Queue (win32ss/user/ntuser/msgqueue.c:1277) err: NB Receiving Thread woken up dead! (win32ss/user/ntuser/msgqueue.c:2300) err: Thread Cleanup Sent Messages E1678558 (win32ss/user/ntuser/message.c:1256) err: UserPostMessage: Invalid handle 0x00020072 Msg 0x0! Boot took 11907990559 cycles! Interrupts: 1718 System Calls: 26326 Context Switches: 3319 VBoxService 5.2.4 r119785 (verbosity: 0) win.x86 (Dec 18 2017 15:49:49) release log 00:00:00.000000 main Log opened 2018-01-07T08:36:52.618521600Z 00:00:00.014995 main OS Product: Windows 2003 00:00:00.014995 main OS Release: 5.2.3790 00:00:00.014995 main OS Service Pack: 2 00:00:00.014995 main Executable: C:\WINDOWS\System32\VBoxService.exe 00:00:00.014995 main Process ID: 224 00:00:00.014995 main Package type: WINDOWS_32BITS_GENERIC WARNING: MmSecureVirtualMemory at ntoskrnl/mm/ARM3/virtual.c:2673 is UNIMPLEMENTED! WARNING: MmUnsecureVirtualMemory at ntoskrnl/mm/ARM3/virtual.c:2684 is UNIMPLEMENTED! 00:00:00.029990 main 5.2.4 r119785 started. Verbose level = 0 (base/system/services/services.c:64) ScmLogEvent: RegisterEventSourceW failed 1722 (base/system/services/services.c:64) ScmLogEvent: RegisterEventSourceW failed 1722 fixme:(dll/win32/rpcrt4/rpc_server.c:1716) (0x1000): stub err:(dll/win32/lsasrv/lsarpc.c:1368) LsapOpenDbObject failed (Status 0xc0000034) err:(dll/win32/lsasrv/lsarpc.c:1368) LsapOpenDbObject failed (Status 0xc0000034) err:(dll/win32/lsasrv/lsarpc.c:1368) LsapOpenDbObject failed (Status 0xc0000034) err:(dll/win32/lsasrv/lsarpc.c:1368) LsapOpenDbObject failed (Status 0xc0000034) (base/system/services/rpcserver.c:1800) RNotifyBootConfigStatus(00000000 1) called (win32ss/user/winsrv/usersrv/init.c:144) We are logged on (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name LIBEAY32.dll (10000000-10143000 -> 00830000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: c:\program files\bullguard ltd\bullguard\bsmain.dll (ntoskrnl/config/cmcheck.c:25) CmCheckRegistry(0xB7F7D3E8, 0) is UNIMPLEMENTED! Boot took 12401578544 cycles! Interrupts: 1955 System Calls: 36732 Context Switches: 5376 (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCR110.dll (10000000-100D6000 -> 00980000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: c:\program files\bullguard ltd\bullguard\bsmain.dll fixme:(dll/win32/rpcrt4/rpc_server.c:1716) (0x1000): stub (win32ss/user/ntuser/desktop.c:2513) err: Attempted to change thread desktop although the thread has windows! (win32ss/user/ntuser/desktop.c:713) err: ptiLastInput is CLEARED!! fixme:(dll/win32/rpcrt4/rpc_server.c:1716) (0x1000): stub (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\WINDOWS\System32\VBoxGINA.dll) failing with status c000000f (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\WINDOWS\System32\VBoxCredProv.dll) failing with status c000000f (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name SQLite.dll (10000000-10079000 -> 00A60000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: c:\program files\bullguard ltd\bullguard\bsmain.dll DHCPCSVC: Adapter Name: [{2cbc4bbe-0257-4929-9d73-f8b49f3b5e24}] (dynamic) err:(base/services/wkssvc/rpcserver.c:61) RpcServerListen() failed (Status 6b1) fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF270 00BAF26C fixme:(dll/win32/rpcrt4/rpc_server.c:1716) (0x1000): stub (base/services/umpnpmgr/umpnpmgr.c:3263) Installing: PCI\VEN_8086&DEV_2415&SUBSYS_00008086&REV_01\3&609b8881&05 (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCR110.dll (10000000-100D6000 -> 00230000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\WINDOWS\System32\MSVCP110.dll (ntoskrnl/se/token.c:111) FIXME: Pretending tokens are equal! (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(rshell.dll) failing with status c0000135 (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCP110.dll (10000000-10085000 -> 00AE0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: c:\program files\bullguard ltd\bullguard\bsmain.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCP110.dll (10000000-10085000 -> 00830000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: c:\program files\bullguard ltd\bullguard\bsfilescan.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCR110.dll (10000000-100D6000 -> 008C0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: c:\program files\bullguard ltd\bullguard\bsfilescan.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name zlib1.dll (10000000-10014000 -> 003C0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: c:\program files\bullguard ltd\bullguard\bsmain.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name LIBBZ2.dll (10000000-10010000 -> 00230000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\WINDOWS\System32\MSVCR110.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCP110.dll (10000000-10085000 -> 00240000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\WINDOWS\System32\MSVCR110.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name libcurl.dll (10000000-1002F000 -> 00B70000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: c:\program files\bullguard ltd\bullguard\bsmain.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name libcurl.dll (10000000-1002F000 -> 002D0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\WINDOWS\System32\MSVCR110.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name LIBEAY32.dll (10000000-10143000 -> 00460000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\WINDOWS\System32\MSVCR110.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name SSLEAY32.dll (10000000-10047000 -> 00BA0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: c:\program files\bullguard ltd\bullguard\bsmain.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\WINDOWS\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_none_deadbeef\comctl32.dll (7BEA0000-7C036000 -> 00630000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\WINDOWS\system32\comctl32.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\WINDOWS\System32\VBoxMRXNP.dll (10000000-1011A000 -> 009A0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: c:\program files\bullguard ltd\bullguard\bsfilescan.dll fixme:(dll/win32/shdocvw/shdocvw_main.c:201) (), stub! (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name SSLEAY32.dll (10000000-10047000 -> 00300000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\WINDOWS\System32\MSVCR110.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name LibXml2.dll (10000000-1008B000 -> 00BF0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: c:\program files\bullguard ltd\bullguard\bsmain.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name zlib1.dll (10000000-10014000 -> 00350000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\WINDOWS\System32\MSVCR110.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name LibXml2.dll (10000000-1008B000 -> 00370000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\WINDOWS\System32\MSVCR110.dll VBOXNP: DLL loaded. (ntoskrnl/fsrtl/unc.c:290) FsRtlRegisterUncProvider(B835DC1C, \Device\VBoxMiniRdr, 0) (ntoskrnl/fsrtl/unc.c:301) DFS is not disabled. Going through MUP (drivers/filesystems/mup/mup.c:2191) Opening MUP (ntoskrnl/fsrtl/unc.c:146) FsRtlpRegisterProviderWithMUP(000003E8, \Device\VBoxMiniRdr, 0) (drivers/filesystems/mup/mup.c:1121) RegisterUncProvider(B87CB728, B7F29BC8) (drivers/filesystems/mup/mup.c:1243) UNC provider \Device\VBoxMiniRdr registered VBOXNP: DLL loaded. (win32ss/user/ntuser/msgqueue.c:1271) err: MsqSendMessage timed out 2 Status 102 (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(perfdisk.dll) failing with status c0000135 fixme:(dll/win32/wtsapi32/wtsapi32.c:355) Stub 000200FA 0x00000000 fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0xffffffff 8 0012FEE8 0012FEF0 Windows version 5.2 (base/system/services/database.c:1688) Log EVENT_SERVICE_DIFFERENT_PID_CONNECTED by BullGuard update service (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\WINDOWS\System32\VBoxHook.dll (10000000-1000F000 -> 008A0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\WINDOWS\System32\VBoxMRXNP.dll fixme:(dll/win32/comctl32/toolbar.c:380) [00020100] TBSTYLE_REGISTERDROP not implemented Starting services ... Starting service 'display' ... Service 'display' started Starting service 'clipboard' ... Service 'clipboard' started Starting service 'seamless' ... Service 'seamless' started Starting service 'VRDP' ... err:(base/services/srvsvc/rpcserver.c:64) RpcServerListen() failed (Status 6b1) Service 'VRDP' started Starting service 'IPC' ... VBoxIPCInit: Local IPC server now running at "\\.\pipe\VBoxTrayIPC-Administrator" Service 'IPC' started Starting service 'LA' ... LA: RegQueryValueExW: failed [SOFTWARE\Oracle\VirtualBox Guest Additions/VBoxTrayLog] LA: RegQueryValueExW: failed [SOFTWARE\Oracle\VirtualBox Guest Additions/VBoxTrayLA] LA: DetachOnDisconnect=true Service 'LA' started Starting service 'draganddrop' ... DnD: Drag and drop service successfully started Service 'draganddrop' started All services started (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\WINDOWS\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_none_deadbeef\comctl32.dll (7BEA0000-7C036000 -> 00630000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\WINDOWS\system32\comctl32.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name beepmidi.dll (795C0000-795D1000 -> 00C80000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\WINDOWS\System32\browseui.dll (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 Mounting "vbox" to "D:" resulted in dwErr = 85 Shared folder "vbox" was mounted to drive "E:" (win32ss/user/ntuser/display.c:306) err: No GRAPHICS_DEVICE found (win32ss/user/ntuser/display.c:306) err: No GRAPHICS_DEVICE found Extended Display Support. Display with ID=0 already enabled Already at desired resolution. No Change. (win32ss/user/ntuser/winpos.c:1409) err: Window is HWND_BOTTOM hwnd 00000001 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 WARNING: CcSetReadAheadGranularity at ntoskrnl/cc/cacheman.c:166 is UNIMPLEMENTED! fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 (base/services/umpnpmgr/umpnpmgr.c:3263) Installing: USB\ROOT_HUB20\4&4a1348a1 err:(dll/win32/setupapi/queue.c:1091) LZOpenFileW(1) error -1 L"C:\\WINDOWS\\inf\\usbport.sys" err:(dll/win32/setupapi/queue.c:1794) copy error 2 L"C:\\WINDOWS\\inf\\usbport.sys" -> L"C:\\WINDOWS\\System32\\drivers\\usbport.sys" err:(dll/win32/setupapi/queue.c:1091) LZOpenFileW(1) error -1 L"C:\\WINDOWS\\inf\\usbhub.sys" err:(dll/win32/setupapi/queue.c:1794) copy error 2 L"C:\\WINDOWS\\inf\\usbhub.sys" -> L"C:\\WINDOWS\\System32\\drivers\\usbhub.sys" (ntoskrnl/io/pnpmgr/plugplay.c:896) A reboot is required for the current driver for 'USB\ROOT_HUB20\4&4a1348a1' to be replaced (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 fixme:(dll/win32/shell32/shlexec.cpp:1804) flags ignored: 0x00000004 (sdk/lib/rtl/actctx.c:2447) unknown element compatibility (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\WINDOWS\System32\DWMAPI.dll) failing with status c0000135 (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\WINDOWS\System32\CRYPTBASE.dll) failing with status c0000135 (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\WINDOWS\System32\CLBCATQ.dll) failing with status c0000135 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (dll/win32/kernel32/client/proc.c:2928) Open file failed: c0000034 (\??\C:\Documents and Settings\Administrator\Desktop\BgProbe.exe) (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (dll/win32/kernel32/client/proc.c:2928) Open file failed: c0000034 (\??\C:\Documents and Settings\Administrator\Desktop\BgProbe.exe) (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsy5.tmp\NSinetc.dll (00400000-0040C000 -> 018C0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\Documents and Settings\Administrator\Desktop\BullGuard180AV_171003.exe (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\WINDOWS\System32\VBoxMRXNP.dll (10000000-1011A000 -> 018D0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsy5.tmp\Gui.DLL VBOXNP: DLL loaded. (dll/ntdll/ldr/ldrutils.c:2348) Image BullGuard180AV_171003.exe has no exports, but were trying to get procedure DwmSetWindowAttribute. BaseAddress asked 0x00400000, got entry BA 0x00400000 fixme:(dll/win32/wininet/internet.c:2314) INTERNET_OPTION_CONNECTED_STATE: semi-stub fixme:(dll/win32/wininet/internet.c:2808) INTERNET_OPTION_SEND/RECEIVE_TIMEOUT/DATA_SEND_TIMEOUT 60000 00:00:10.106764 timesync vgsvcTimeSyncWorker: Radical guest time change: -32 388 376 689 600ns (GuestNow=1 515 281 824 346 798 400 ns GuestLast=1 515 314 212 723 488 000 ns fSetTimeLastLoop=true ) (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 err:(dll/win32/advapi32/service/sctrl.c:243) WaitNamedPipe(\\.\pipe\net\NtControlPipe10) failed (Error 121) err:(dll/win32/advapi32/service/sctrl.c:243) WaitNamedPipe(\\.\pipe\net\NtControlPipe10) failed (Error 121) (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 TCP operation failed: 0xc0000128 (-12) (sdk/lib/rtl/actctx.c:2447) unknown element compatibility (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsy5.tmp\InetBgDL.dll (10000000-10005000 -> 01B00000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsy5.tmp\Gui.DLL VBOXNP: DLL unloaded. (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name Gui.DLL (10000000-100F0000 -> 00F50000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsd8.tmp\System.dll (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsd8.tmp\.dll) failing with status c000000f (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsd8.tmp\GuiPiele.dll) failing with status c000000f (dll/win32/kernel32/client/proc.c:2928) Open file failed: c0000034 (\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\BgProbe.exe) (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (dll/win32/kernel32/client/proc.c:2928) Open file failed: c0000034 (\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\BgProbe.exe) (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsd8.tmp\UserInfo.dll (10000000-10005000 -> 01640000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsd8.tmp\System.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsd8.tmp\NSutils.dll (10000000-1000B000 -> 01640000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsd8.tmp\System.dll err:(dll/win32/ole32/compobj.c:3055) class {ea502722-a23d-11d1-a7d3-0000f87571e3} not registered err:(dll/win32/ole32/compobj.c:3135) no class object {ea502722-a23d-11d1-a7d3-0000f87571e3} could be created for context 0x1 (sdk/lib/rtl/actctx.c:2447) unknown element compatibility (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name Gui.DLL (10000000-100F0000 -> 00F50000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\System.dll (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\.dll) failing with status c000000f (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\GuiPiele.dll) failing with status c000000f (dll/win32/kernel32/client/proc.c:2928) Open file failed: c0000034 (\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\BgProbe.exe) (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (ntoskrnl/mm/ARM3/vadnode.c:288) Given address conflicts with existing node (ntoskrnl/mm/ARM3/virtual.c:4675) Failed to insert the VAD! (dll/win32/kernel32/client/proc.c:2928) Open file failed: c0000034 (\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\BgProbe.exe) (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\UserInfo.dll (10000000-10005000 -> 01640000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\System.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\NSutils.dll (10000000-1000B000 -> 01640000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\System.dll err:(dll/win32/ole32/compobj.c:3055) class {ea502722-a23d-11d1-a7d3-0000f87571e3} not registered err:(dll/win32/ole32/compobj.c:3135) no class object {ea502722-a23d-11d1-a7d3-0000f87571e3} could be created for context 0x1 (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\LangDLL.dll (10000000-10007000 -> 01650000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\System.dll (dll/ntdll/ldr/ldrutils.c:2348) Image BG-25-xpsp2.exe has no exports, but were trying to get procedure DwmSetWindowAttribute. BaseAddress asked 0x00400000, got entry BA 0x00400000 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (ntoskrnl/ex/sysinfo.c:825) Process B7EA22D8 (BullGuardUpdate:000002C0) is a zombie fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 (dll/ntdll/ldr/ldrutils.c:2348) Image BG-25-xpsp2.exe has no exports, but were trying to get procedure DwmSetWindowAttribute. BaseAddress asked 0x00400000, got entry BA 0x00400000 (win32ss/user/ntuser/winpos.c:3327) err: NtUserSetWindowPos bad window handle! (win32ss/user/ntuser/winpos.c:3327) err: NtUserSetWindowPos bad window handle! fixme:(dll/win32/ole32/compobj.c:3988) (00000000,-1,00000000,00000000,6,3,00000000,0,00000000) - stub! err:(dll/win32/ole32/compobj.c:3055) class {0f87369f-a4e5-4cfc-bd3e-73e6154572dd} not registered err:(dll/win32/ole32/compobj.c:3135) no class object {0f87369f-a4e5-4cfc-bd3e-73e6154572dd} could be created for context 0x1 (win32ss/user/ntuser/winpos.c:3327) err: NtUserSetWindowPos bad window handle! (win32ss/user/ntuser/winpos.c:3327) err: NtUserSetWindowPos bad window handle! (win32ss/user/ntuser/winpos.c:3327) err: NtUserSetWindowPos bad window handle! (win32ss/user/ntuser/winpos.c:3327) err: NtUserSetWindowPos bad window handle! (win32ss/user/ntuser/winpos.c:3327) err: NtUserSetWindowPos bad window handle! (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\InetBgDL.dll (10000000-10005000 -> 01720000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\System.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\WINDOWS\System32\VBoxMRXNP.dll (10000000-1011A000 -> 01AD0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\System.dll VBOXNP: DLL loaded. fixme:(dll/win32/wininet/internet.c:2314) INTERNET_OPTION_CONNECTED_STATE: semi-stub (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 err:(dll/win32/secur32/wine/ntlm.c:2060) ntlm_auth was not found or is outdated. Make sure that ntlm_auth >= 3.0.23 is in your path. Usually, you can find it in the winbind package of your distribution. TCP operation failed: 0xc0000128 (-12) (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\nsDialogs.dll (10000000-10009000 -> 019A0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\System.dll (dll/ntdll/ldr/ldrutils.c:2348) Image BG-25-xpsp2.exe has no exports, but were trying to get procedure DwmSetWindowAttribute. BaseAddress asked 0x00400000, got entry BA 0x00400000 (win32ss/user/ntuser/winpos.c:3327) err: NtUserSetWindowPos bad window handle! (win32ss/user/ntuser/winpos.c:3327) err: NtUserSetWindowPos bad window handle! (win32ss/user/ntuser/msgqueue.c:1541) err: Not the same cursor! (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name BgCSDetect.DLL (10000000-10219000 -> 01ED0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\System.dll (sdk/lib/rtl/actctx.c:2447) unknown element application (dll/win32/kernel32/client/version.c:134) VerifyVersionInfo -- Version mismatch (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\BgCSDetectENU.dll) failing with status c0000135 (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\BgCSDetectENU.dll) failing with status c000000f (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\BgCSDetectENU.dll) failing with status c0000135 (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\BgCSDetectENU.dll) failing with status c000000f (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\BgCSDetectENU.dll) failing with status c0000135 (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\BgCSDetectENU.dll) failing with status c000000f (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\BgCSDetectENU.dll) failing with status c0000135 (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\BgCSDetectENU.dll) failing with status c000000f (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\BgCSDetectENU.dll) failing with status c0000135 (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\BgCSDetectENU.dll) failing with status c000000f (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\BgCSDetectLOC.dll) failing with status c0000135 (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\BgCSDetectLOC.dll) failing with status c000000f (dll/ntdll/ldr/ldrutils.c:2348) Image BG-25-xpsp2.exe has no exports, but were trying to get procedure DwmSetWindowAttribute. BaseAddress asked 0x00400000, got entry BA 0x00400000 (sdk/lib/rtl/actctx.c:2447) unknown element compatibility (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\UserInfo.dll (10000000-10005000 -> 00E80000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\System.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\execDos.dll (10000000-10005000 -> 00E80000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\System.dll WARNING: HvHiveWillShrink at sdk/lib/cmlib/hivewrt.c:280 is UNIMPLEMENTED! WARNING: HvpWriteLog at sdk/lib/cmlib/hivewrt.c:29 is UNIMPLEMENTED! WARNING: HvHiveWillShrink at sdk/lib/cmlib/hivewrt.c:280 is UNIMPLEMENTED! (base/system/services/database.c:447) ScmDereferenceServiceImage() called (base/system/services/database.c:453) dwImageRunCount == 0 (base/system/services/database.c:447) ScmDereferenceServiceImage() called (base/system/services/database.c:453) dwImageRunCount == 0 err:(dll/win32/advapi32/service/sctrl.c:568) Pipe read failed (Error: 109) (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\WINDOWS\System32\BgLsp.dll (10000000-10013000 -> 00E80000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\System.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCR110.dll (10000000-100D6000 -> 00EA0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\System.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCP110.dll (10000000-10085000 -> 00FA0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\System.dll (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\WINDOWS\System32\Drivers\afw.sys) failing with status c000000f (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\WINDOWS\System32\Drivers\afwcore.sys) failing with status c000000f Unhandled exception ExceptionCode: c0000005 Faulting Address: 176473c CS:EIP 1b:7c68f16e DS 23 ES 23 FS 3b GS 0 EAX: 00000000 EBX: 100044fd ECX: ffffffff EDX: ffffffff EBP: 0022e4c0 ESI: 00000200 ESP: 0022e418 EDI: 0176473c EFLAGS: 00010286 Address: (C:\WINDOWS\system32\msvcrt.dll@7c660000) Frames: (C:\WINDOWS\system32\msvcrt.dll@7c660000) (C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\BgInstallAssist.dll@10000000) (C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\BgInstallAssist.dll@10000000) (C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\BgInstallAssist.dll@10000000) (C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\BgInstallAssist.dll@10000000) (C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\BgInstallAssist.dll@10000000) (C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\BgInstallAssist.dll@10000000) (C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\BgInstallAssist.dll@10000000) (C:\WINDOWS\System32\RunDll32.exe@400000) (C:\WINDOWS\System32\RunDll32.exe@400000) (C:\WINDOWS\System32\RunDll32.exe@400000) (C:\WINDOWS\System32\RunDll32.exe@400000) (C:\WINDOWS\system32\kernel32.dll@7c710000) err:(win32ss/user/user32/windows/window.c:490) CreateWindowExW RegisterSystemControls WARNING: MmLockPageableDataSection at ntoskrnl/mm/ARM3/drvmgmt.c:62 is UNIMPLEMENTED! WARNING: MmUnlockPageableImageSection at ntoskrnl/mm/ARM3/drvmgmt.c:39 is UNIMPLEMENTED! (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (ntoskrnl/ex/sysinfo.c:825) Process B7F9B808 (SvcHost.exe:0000013C) is a zombie (ntoskrnl/ex/sysinfo.c:825) Process B7EA22D8 (BullGuardUpdate:000002C0) is a zombie fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 TCP operation failed: 0xc0000128 (-12) TCP operation failed: 0xc0000128 (-12) TCP operation failed: 0xc0000128 (-12) TCP operation failed: 0xc0000128 (-12) (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (ntoskrnl/ex/sysinfo.c:825) Process B7F9B808 (SvcHost.exe:0000013C) is a zombie (ntoskrnl/ex/sysinfo.c:825) Process B7EA22D8 (BullGuardUpdate:000002C0) is a zombie fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (win32ss/user/ntuser/winpos.c:3327) err: NtUserSetWindowPos bad window handle! (base/system/services/database.c:447) ScmDereferenceServiceImage() called (base/system/services/database.c:453) dwImageRunCount == 0 (base/system/services/database.c:447) ScmDereferenceServiceImage() called (base/system/services/database.c:453) dwImageRunCount == 0 (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\BgInstallAssist.dll (10000000-1001C000 -> 00E80000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\System.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\execDos.dll (10000000-10005000 -> 00E80000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsm15.tmp\System.dll (win32ss/user/winsrv/consrv/frontends/terminal.c:265) Using FrontEndIFace HACK(1), should be removed after proper implementation! (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCP110.dll (10000000-10085000 -> 006C0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\Program Files\BullGuard Ltd\BullGuard\Spamfilter\MailScanAddin.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCR110.dll (10000000-100D6000 -> 00750000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\Program Files\BullGuard Ltd\BullGuard\Spamfilter\MailScanAddin.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\Program Files\BullGuard Ltd\BullGuard\res\en\PluginHookRes.dll (10000000-10011000 -> 003E0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\Program Files\BullGuard Ltd\BullGuard\Spamfilter\MailScanAddin.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\WINDOWS\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_none_deadbeef\COMCTL32.dll (7BEA0000-7C036000 -> 006C0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\WINDOWS\system32\comctl32.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCP110.dll (10000000-10085000 -> 00860000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\Program Files\BullGuard Ltd\BullGuard\Spamfilter\WindowsLiveHook.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCR110.dll (10000000-100D6000 -> 008F0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\Program Files\BullGuard Ltd\BullGuard\Spamfilter\WindowsLiveHook.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\Program Files\BullGuard Ltd\BullGuard\res\en\PluginHookRes.dll (10000000-10011000 -> 003E0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\Program Files\BullGuard Ltd\BullGuard\Spamfilter\WindowsLiveHook.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name atl110.DLL (10000000-1002A000 -> 006C0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\Program Files\BullGuard Ltd\BullGuard\Antiphishing\IE\BGAntiphishingIE.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCR110.dll (10000000-100D6000 -> 006F0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\Program Files\BullGuard Ltd\BullGuard\Antiphishing\IE\BGAntiphishingIE.dll (sdk/lib/rtl/actctx.c:2447) unknown element application (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCP110.dll (10000000-10085000 -> 006C0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\Program Files\BullGuard Ltd\BullGuard\BgShellExt.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCR110.dll (10000000-100D6000 -> 00750000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\Program Files\BullGuard Ltd\BullGuard\BgShellExt.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\WINDOWS\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_none_deadbeef\comctl32.dll (7BEA0000-7C036000 -> 00830000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\WINDOWS\system32\comctl32.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\Program Files\BullGuard Ltd\BullGuard\res\en\BgShellExtRes.dll (10000000-10003000 -> 003E0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\Program Files\BullGuard Ltd\BullGuard\BgShellExt.dll fixme:(dll/win32/ole32/compobj.c:3988) (00000000,-1,00000000,00000000,6,3,00000000,0,00000000) - stub! err:(dll/win32/ole32/compobj.c:3055) class {0f87369f-a4e5-4cfc-bd3e-73e6154572dd} not registered err:(dll/win32/ole32/compobj.c:3135) no class object {0f87369f-a4e5-4cfc-bd3e-73e6154572dd} could be created for context 0x1 shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator (ntoskrnl/config/cmcheck.c:25) CmCheckRegistry(0xB7F943E8, 0) is UNIMPLEMENTED! WARNING: HvHiveWillShrink at sdk/lib/cmlib/hivewrt.c:280 is UNIMPLEMENTED! shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator TCP operation failed: 0xc0000128 (-12) (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\execDos.dll (10000000-10005000 -> 019C0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsnE.tmp\System.dll (win32ss/user/winsrv/consrv/frontends/terminal.c:265) Using FrontEndIFace HACK(1), should be removed after proper implementation! shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator fixme:(dll/win32/ole32/compobj.c:3988) (00000000,-1,00000000,00000000,0,3,00000000,0,00000000) - stub! (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 63EC0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 63EC0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A050000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A050000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A0F0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A0F0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A200000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A200000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 733C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 733C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74800000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74800000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 767C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 767C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76B20000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76B20000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 795C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 795C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 797C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 797C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79D10000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79D10000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A200000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A200000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A810000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A810000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A860000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A860000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A890000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A890000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A910000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A910000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7AB30000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7AB30000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7BBA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7BBA0000 err:(dll/win32/msafd/misc/dllmain.c:1970) Async Connect UNIMPLEMENTED! (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 797C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 797C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74C10000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74C10000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76140000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76140000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76D60000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76D60000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 73AA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 73AA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 756E0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 756E0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A810000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A810000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A890000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A890000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 73BF0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 73BF0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 73CB0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 73CB0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74720000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74720000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74800000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74800000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74B70000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74B70000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A200000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A200000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74230000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74230000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 797C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 797C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 73D40000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 73D40000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76E60000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76E60000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76EA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76EA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79CA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79CA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A810000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A810000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A890000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A890000 (ntoskrnl/mm/ARM3/section.c:1732) VAD is not a section (ntoskrnl/mm/ARM3/section.c:1858) Failed to get file object for Address 00C80000 (ntoskrnl/mm/ARM3/section.c:1732) VAD is not a section (ntoskrnl/mm/ARM3/section.c:1858) Failed to get file object for Address 00C80000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 733C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 733C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74660000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74660000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74A00000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74A00000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 75880000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 75880000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76B20000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76B20000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79450000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79450000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 797C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 797C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A200000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A200000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A860000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A860000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A910000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A910000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7AEB0000 TCP operation failed: 0xc0000128 (-12) (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7AEB0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7BBA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7BBA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 73AA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 73AA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 757F0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 757F0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A200000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A200000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7AE70000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7AE70000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 77470000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 77470000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A200000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A200000 TCP operation failed: 0xc0000128 (-12) (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 00F50000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 00F50000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 01640000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 01640000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74880000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74880000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 797C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 797C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79ED0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79ED0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A200000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A200000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 00F50000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 00F50000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 01640000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 01640000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 01720000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 01720000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 019A0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 019A0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 019C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 019C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 01AD0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 01AD0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 01ED0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 01ED0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 733C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 733C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 73E70000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 73E70000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74880000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74880000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74BA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 74BA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 75300000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 75300000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 75510000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 75510000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 757C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 757C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 757F0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 757F0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 75B00000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 75B00000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76B20000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76B20000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76C90000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76C90000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76F00000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 76F00000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 77390000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 77390000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 795C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 795C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 797C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 797C0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79850000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79850000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79C20000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79C20000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79DB0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79DB0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79ED0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79ED0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79F00000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 79F00000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A200000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A200000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A2D0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A2D0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A810000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A810000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A890000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A890000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A910000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7A910000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7AB30000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7AB30000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7ABA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7ABA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7ACA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7ACA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7AD60000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7AD60000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7AE70000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7AE70000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7AEB0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7AEB0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7BBA0000 (ntoskrnl/mm/ARM3/section.c:1849) No VAD at address 7BBA0000 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 TCP operation failed: 0xc0000128 (-12) fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 err:(dll/win32/msafd/misc/dllmain.c:1970) Async Connect UNIMPLEMENTED! TCP operation failed: 0xc0000128 (-12) (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 err:(dll/win32/msafd/misc/dllmain.c:1970) Async Connect UNIMPLEMENTED! TCP operation failed: 0xc0000128 (-12) shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator shellpath.c:1485: _SHGetUserProfileDirectoryW returning C:\Documents and Settings\Administrator err:(dll/win32/msafd/misc/dllmain.c:1970) Async Connect UNIMPLEMENTED! TCP operation failed: 0xc0000128 (-12) TCP operation failed: 0xc0000128 (-12) fixme:(dll/win32/ole32/compobj.c:3988) (00000000,-1,00000000,00000000,6,3,00000000,0,00000000) - stub! err:(dll/win32/ole32/compobj.c:3055) class {0f87369f-a4e5-4cfc-bd3e-73e6154572dd} not registered err:(dll/win32/ole32/compobj.c:3135) no class object {0f87369f-a4e5-4cfc-bd3e-73e6154572dd} could be created for context 0x1 (sdk/lib/rtl/actctx.c:2447) unknown element compatibility (base/system/services/rpcserver.c:2465) (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsa1A.tmp\NSutils.dll (10000000-1000B000 -> 00E80000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsa1A.tmp\System.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsa1A.tmp\NSutils.dll (10000000-1000B000 -> 00E80000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsa1A.tmp\System.dll (base/system/services/rpcserver.c:2465) (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCR110.dll (10000000-100D6000 -> 00630000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\Program Files\BullGuard Ltd\BullGuard\BgInstallAssist.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\Program Files\BullGuard Ltd\BullGuard\BdInstHk.dll (00400000-00411000 -> 003E0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\WINDOWS\System32\RunDll32.exe (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\WINDOWS\System32\drivers\Trufos.sys) failing with status c000000f (base/system/services/rpcserver.c:2465) (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCR110.dll (10000000-100D6000 -> 00630000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\Program Files\BullGuard Ltd\BullGuard\BgInstallAssist.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name MSVCR110.dll (10000000-100D6000 -> 00630000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\Program Files\BullGuard Ltd\BullGuard\BgInstallAssist.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\Program Files\BullGuard Ltd\BullGuard\BdInstHk.dll (00400000-00411000 -> 003E0000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\WINDOWS\System32\RunDll32.exe (dll/win32/kernel32/client/loader.c:384) LoadLibraryExW(C:\WINDOWS\System32\drivers\BdSpy.sys) failing with status c000000f (base/system/services/rpcserver.c:2465) (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsa1A.tmp\NSutils.dll (10000000-1000B000 -> 00E90000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsa1A.tmp\System.dll (dll/ntdll/ldr/ldrutils.c:1334) LDR: LdrpMapDll Relocating Image Name C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsa1A.tmp\execDos.dll (10000000-10005000 -> 00E90000) (dll/ntdll/ldr/ldrutils.c:1373) Overlapping DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsa1A.tmp\System.dll (win32ss/user/winsrv/consrv/frontends/terminal.c:265) Using FrontEndIFace HACK(1), should be removed after proper implementation! TCP operation failed: 0xc0000128 (-12) (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 TCP operation failed: 0xc0000128 (-12) fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 fixme:(dll/win32/comctl32/toolbar.c:380) [0035007C] TBSTYLE_REGISTERDROP not implemented (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 traywnd.cpp:2639: Unexpected failure 80004005. fixme:(dll/win32/wtsapi32/wtsapi32.c:289) Stub 00000000 0x00000000 8 00BAF268 00BAF264 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (drivers/bus/acpi/main.c:316) Unsupported IOCTL: 294040 (win32ss/user/winsrv/usersrv/shutdown.c:642) SrvExitWindowsEx(ClientId: 280.284, Flags: 0x1) (win32ss/user/ntuser/shutdown.c:165) err: NotifyLogon(0x1, 0x0) (win32ss/user/winsrv/usersrv/shutdown.c:695) NtUserSetInformationThread returned STATUS_PENDING (win32ss/user/winsrv/usersrv/shutdown.c:642) SrvExitWindowsEx(ClientId: b0.28c, Flags: 0x200) (ntoskrnl/ps/query.c:1551) Privilege to change priority from f to d lacking (win32ss/user/winsrv/usersrv/shutdown.c:805) Terminating process 2bc (\Device\Harddisk0\Partition1\WINDOWS\system32\VBoxTray.exe) (win32ss/user/winsrv/usersrv/shutdown.c:805) Terminating process 2d4 (\Device\Harddisk0\Partition1\WINDOWS\system32\kbswitch.exe) (win32ss/user/winsrv/usersrv/shutdown.c:805) Terminating process 3dc (\Device\Harddisk0\Partition1\Documents and Settings\Administrator\Local Settings\Temp\BG-25-xpsp2.exe) (win32ss/user/ntuser/message.c:1264) err: Attempted to post message to window 000200B0 when the thread is in cleanup! (win32ss/user/ntuser/msgqueue.c:2283) err: Thread Cleanup Post Messages E1765C58 (win32ss/user/winsrv/usersrv/shutdown.c:805) Terminating process 3f8 (\Device\Harddisk0\Partition1\Documents and Settings\Administrator\Local Settings\Temp\BG-25-xpsp2.exe) (win32ss/user/winsrv/usersrv/shutdown.c:805) Terminating process 360 (\Device\Harddisk0\Partition1\Program Files\BullGuard Ltd\BullGuard\Instalator.exe) (win32ss/user/ntuser/focus.c:1266) err: SetFocus: Set Active Failed! (win32ss/user/ntuser/focus.c:91) err: Application is keeping itself Active to prevent the change! (win32ss/user/ntuser/focus.c:91) err: Application is keeping itself Active to prevent the change! (win32ss/user/winsrv/usersrv/shutdown.c:805) Terminating process 280 (\Device\Harddisk0\Partition1\WINDOWS\explorer.exe) (win32ss/user/ntuser/shutdown.c:165) err: NotifyLogon(0x200, 0x0) (win32ss/user/ntuser/window.c:2674) err: Destroying the ShellWindow! (win32ss/user/ntuser/message.c:1264) err: Attempted to post message to window 0002010C when the thread is in cleanup! (win32ss/user/ntuser/message.c:1264) err: Attempted to post message to window 0002010C when the thread is in cleanup! (win32ss/user/ntuser/message.c:1264) err: Attempted to post message to window 0002010C when the thread is in cleanup! (win32ss/user/ntuser/message.c:1264) err: Attempted to post message to window 0002010C when the thread is in cleanup! (win32ss/user/ntuser/message.c:1264) err: Attempted to post message to window 0002010C when the thread is in cleanup! (win32ss/user/ntuser/message.c:1264) err: Attempted to post message to window 0002010C when the thread is in cleanup! (win32ss/user/ntuser/message.c:1264) err: Attempted to post message to window 0002010C when the thread is in cleanup! (win32ss/user/ntuser/desktop.c:713) err: ptiLastInput is CLEARED!! (win32ss/user/ntuser/desktop.c:2513) err: Attempted to change thread desktop although the thread has windows! (win32ss/user/ntuser/msgqueue.c:1277) err: NB Receiving Thread woken up dead! (win32ss/user/ntuser/painting.c:1218) err: WARNING SOMETHING HAS GONE WRONG: Thread marked as containing dirty windows, but no dirty windows found! Counts 1 (win32ss/user/winsrv/usersrv/shutdown.c:642) SrvExitWindowsEx(ClientId: b0.4a8, Flags: 0x10204) (ntoskrnl/ps/query.c:1551) Privilege to change priority from f to d lacking (win32ss/user/winsrv/usersrv/shutdown.c:805) Terminating process 280 (\Device\Harddisk0\Partition1\WINDOWS\explorer.exe) (win32ss/user/ntuser/shutdown.c:165) err: NotifyLogon(0x10204, 0x0) (dll/win32/userenv/profile.c:1458) RegUnLoadKeyW() failed (Error 5) fixme:(dll/win32/msgina/stubs.c:37) WlxLogoff is UNIMPLEMENTED! fixme:(dll/win32/msgina/stubs.c:52) WlxShutdown is UNIMPLEMENTED! (win32ss/user/winsrv/usersrv/shutdown.c:642) SrvExitWindowsEx(ClientId: b0.4b8, Flags: 0x201) (win32ss/user/winsrv/usersrv/shutdown.c:805) Terminating process c8 (\Device\Harddisk0\Partition1\WINDOWS\system32\lsass.exe) (win32ss/user/winsrv/usersrv/shutdown.c:805) Terminating process e0 (\Device\Harddisk0\Partition1\WINDOWS\system32\VBoxService.exe) (win32ss/user/winsrv/usersrv/shutdown.c:805) Terminating process 10c (\Device\Harddisk0\Partition1\WINDOWS\system32\eventlog.exe) (win32ss/user/winsrv/usersrv/shutdown.c:805) Terminating process 1a8 (\Device\Harddisk0\Partition1\WINDOWS\system32\rpcss.exe) (win32ss/user/winsrv/usersrv/shutdown.c:805) Terminating process 1c4 (\Device\Harddisk0\Partition1\WINDOWS\system32\svchost.exe) (win32ss/user/winsrv/usersrv/shutdown.c:805) Terminating process 1dc (\Device\Harddisk0\Partition1\WINDOWS\system32\svchost.exe) (win32ss/user/winsrv/usersrv/shutdown.c:805) Terminating process 210 (\Device\Harddisk0\Partition1\WINDOWS\system32\wlansvc.exe) (win32ss/user/winsrv/usersrv/shutdown.c:805) Terminating process 24c (\Device\Harddisk0\Partition1\WINDOWS\system32\spoolsv.exe) (win32ss/user/winsrv/usersrv/shutdown.c:805) Terminating process c0 (\Device\Harddisk0\Partition1\WINDOWS\system32\services.exe) (win32ss/user/winsrv/usersrv/shutdown.c:805) Terminating process 280 (\Device\Harddisk0\Partition1\WINDOWS\explorer.exe) (win32ss/user/ntuser/shutdown.c:165) err: NotifyLogon(0x301, 0x0) err:(base/system/winlogon/sas.c:938) Shutting down NT... (win32ss/user/ntuser/message.c:1256) err: UserPostMessage: Invalid handle 0x00020078 Msg 0x4c! WARNING: HvHiveWillShrink at sdk/lib/cmlib/hivewrt.c:280 is UNIMPLEMENTED! WARNING: HvHiveWillShrink at sdk/lib/cmlib/hivewrt.c:280 is UNIMPLEMENTED! WARNING: HvHiveWillShrink at sdk/lib/cmlib/hivewrt.c:280 is UNIMPLEMENTED! WARNING: HvHiveWillShrink at sdk/lib/cmlib/hivewrt.c:280 is UNIMPLEMENTED! WARNING: HvHiveWillShrink at sdk/lib/cmlib/hivewrt.c:280 is UNIMPLEMENTED! WARNING: HvHiveWillShrink at sdk/lib/cmlib/hivewrt.c:280 is UNIMPLEMENTED! WARNING: HvHiveWillShrink at sdk/lib/cmlib/hivewrt.c:280 is UNIMPLEMENTED! WARNING: HvHiveWillShrink at sdk/lib/cmlib/hivewrt.c:280 is UNIMPLEMENTED! WARNING: HvHiveWillShrink at sdk/lib/cmlib/hivewrt.c:280 is UNIMPLEMENTED! WARNING: HvHiveWillShrink at sdk/lib/cmlib/hivewrt.c:280 is UNIMPLEMENTED! (win32ss/user/ntuser/input.c:330) err: Raw Input Thread Exit! (ntoskrnl/po/poshtdwn.c:259) smss.exe is still RUNNING (00000068) (ntoskrnl/po/poshtdwn.c:259) csrss.exe is still RUNNING (00000098) (ntoskrnl/po/poshtdwn.c:259) winlogon.exe is still RUNNING (000000B0) (ntoskrnl/po/poshtdwn.c:259) services.exe is still RUNNING (000000C0) (ntoskrnl/po/poshtdwn.c:259) lsass.exe is still RUNNING (000000C8) (ntoskrnl/po/poshtdwn.c:259) VBoxService.exe is still RUNNING (000000E0) (ntoskrnl/po/poshtdwn.c:259) eventlog.exe is still RUNNING (0000010C) (ntoskrnl/po/poshtdwn.c:259) rpcss.exe is still RUNNING (000001A8) (ntoskrnl/po/poshtdwn.c:259) svchost.exe is still RUNNING (000001C4) (ntoskrnl/po/poshtdwn.c:259) svchost.exe is still RUNNING (000001DC) (ntoskrnl/po/poshtdwn.c:259) wlansvc.exe is still RUNNING (00000210) (ntoskrnl/po/poshtdwn.c:259) spoolsv.exe is still RUNNING (0000024C) (ntoskrnl/po/poshtdwn.c:259) explorer.exe is still RUNNING (00000280) (ntoskrnl/po/poshtdwn.c:259) BgWsc.exe is still RUNNING (000002C4) WARNING: CcWaitForCurrentLazyWriterActivity at ntoskrnl/cc/copy.c:526 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! (drivers/usb/usbhub/usbhub.c:224) Power Function 3 WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! (drivers/usb/usbhub/usbhub.c:224) Power Function 3 WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! (drivers/usb/usbhub/usbhub.c:224) Power Function 3 WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED! WARNING: PoStartNextPowerIrp at ntoskrnl/po/power.c:621 is UNIMPLEMENTED!