I'm sorry (for my english too...) but I need your kind help.
My Domino R4.6b server was working fine from 1999 till september when
begin crash often (every 2-3 days).
NDRT crash and I'm not able to solve the problem. Help me please. Thanks to all.
This is my notes.rip
************************************************
* Quincy for Win32 Rev 2.00 *
* Copyright 1995-7, Lotus Development Corp. *
* All rights reserved *
* Abnormal Termination Report *
************************************************
Portions Copyright (C) 1985-1993 Microsoft Corp. All rights reserved.
Quincy has detected the following fatal exception
Please report this crash to the vendor of the faulting application:
App: C:\notes\ndrt.exe (PID=0x388) ""
When: 11/9/2006 @ 17:3:49.171
Exception Number: 0x80000003 (hardcoded breakpoint)
Exception Flags: 0x00000000 (continuable)
Notes Build: Release 4.6.2a (Intl)|28 August 1998
State Dump for Thread ID 0x8C4
EAX: 00FB0998 EBX: 00120000 ECX: 00F8064C EDX: 003C344F ESI: 0012CD64 EDI: 001201A2
EIP: 7C911230 ESP: 0012CB58 EBP: 0012CEC8 IOPL: 0 nv up ei pl nz na pe nc
CS: 001B SS: 0023 DS: 0023 ES: 0023 FS: 003B GS: 0000 EFL: 00000202
---------- Code Disassembly ----------
function: <nosymbols>+0000
7c91121c f6461010 test byte ptr [esi+0x10],0x10 ds:00eeb97e=00
7c911220 0f84e0f10000 je 7c920406
7c911226 5e pop esi
7c911227 c9 leave
7c911228 c20400 ret 0x4
7c91122b 90 nop
7c91122c 90 nop
7c91122d 90 nop
7c91122e 90 nop
7c91122f 90 nop
FAULT ->7c911230 cc int 3
7c911231 c3 ret
7c911232 8bff mov edi,edi
7c911234 90 nop
7c911235 90 nop
7c911236 90 nop
7c911237 90 nop
7c911238 90 nop
7c911239 cc int 3
7c91123a c3 ret
7c91123b 90 nop
7c91123c 8bff mov edi,edi
PANIC: LookupHandle: null handle
---------- Top of the Stack ----------
0012CB58 005A8AAA 00000000 00120000 54200A0A |..Z........... T|
0012CB68 61657268 305B3D64 3A383833 34433830 |hread=[0388:08C4|
0012CB78 41500A5D 3A43494E 6F6F4C20 4870756B |].PANIC: LookupH|
0012CB88 6C646E61 6E203A65 206C6C75 646E6168 |andle: null hand|
0012CB98 000A656C 0113D938 0113D914 0050155C |le..8.......\.P.|
0012CBA8 0050158F 03170062 00000388 0050161F |..P.b.........P.|
0012CBB8 00501672 03170062 03170062 0012CBD4 |r.P.b...b.......|
0012CBC8 00501856 03170062 03170060 0012CC00 |V.P.b...`.......|
0012CBD8 00508913 03170060 00019ECC 03170000 |..P.`...........|
0012CBE8 00000000 0012CC58 000000FC 000029AC |....X........)..|
0012CBF8 0001A130 0318946C 0012CC20 005087FE |0...l... .....P.|
0012CC08 008D6FAC 00019ECC 00000264 00019ED4 |.o......d.......|
0012CC18 0050155C 0050158F 0050161F 00501672 |\.P...P...P.r.P.|
0012CC28 00E10030 00E10030 0012CC4C 00508BBE |0...0...L.....P.|
0012CC38 0050161F 00501672 01B380C4 0012CCE4 |..P.r.P.........|
0012CC48 0012CC54 00505254 01B380C4 0012CC9C |T...TRP.........|
0012CC58 00546CBB 0000000E CCBC0000 00000080 |.lT.............|
0012CC68 0012CCE4 00000006 0012EC1C 0012ECA8 |................|
0012CC78 00000002 00000080 00464456 004B6FBD |........VDF..oK.|
0012CC88 C1257220 00000080 01008E0C 000029AC | r%..........)..|
0012CC98 00000000 0012CCBC 00546AE1 00464456 |.........jT.VDF.|
0012CCA8 0012CCE4 00000002 0012EC1C 0012CEF0 |................|
0012CCB8 00592A48 0000000F 01010000 00000080 |H*Y.............|
0012CCC8 00464456 00000002 0012EC1C 0012ECA8 |VDF.............|
0012CCD8 00120000 0012ED18 00464456 0001020A |........VDF.....|
0012CCE8 00180000 4E430500 4C41473D 4F4E4147 |......CN=GALGANO|
0012CCF8 4F2F544E 4C41473D 4F4E4147 0012CD00 |NT/O=GALGANO....|
0012CD08 00505104 036EA340 000027FC 008339E0 |.QP.@.n..'...9..|
0012CD18 0012CD30 00511218 000027FC 0042E03C |0.....Q..'..<.B.|
0012CD28 000027FC 0012000B 0012CD84 0050E950 |.'..........P.P.|
0012CD38 000027FC 000027FC 00001F50 0050155C |.'...'..P...\.P.|
0012CD48 0050158F 036EA364 00000000 00000000 |..P.d.n.........|
0012CD58 0050158F 036EA364 036EA364 6B6F6F4C |..P.d.n.d.n.Look|
0012CD68 61487075 656C646E 756E203A 68206C6C |upHandle: null h|
0012CD78 6C646E61 00120065 00000000 036EA364 |andle.......d.n.|
0012CD88 0012CD9C 00505104 036EA340 00000000 |.....QP.@.n.....|
0012CD98 00000000 0012CDCC 00512765 000027FC |........e'Q..'..|
0012CDA8 0012CEED 000027FC 00120001 00000000 |.....'..........|
0012CDB8 000027FC 00000000 00000000 05001F34 |.'..........4...|
0012CDC8 000027FC 00000000 0040E7B1 0000CEED |.'........@.....|
0012CDD8 0012CEF0 0040E7E5 0012CDEC 00120000 |......@.........|
0012CDE8 00000000 00000000 706B2E79 00504000 |........y.kp.@P.|
0012CDF8 0050158F 000008C4 0101C736 00000388 |..P.....6.......|
0012CE08 00501672 0000AFC8 00513537 0101C736 |r.P.....75Q.6...|
0012CE18 004B6FBD C1257220 000008C4 01008E28 |.oK. r%.....(...|
0012CE28 00000000 000005DC 00000000 00513537 |............75Q.|
0012CE38 01008E28 00000388 000008C4 00000388 |(...............|
0012CE48 01008E28 00000388 01008E28 000008C4 |(.......(.......|
0012CE58 0012CE78 00513683 01008E62 01008E00 |x....6Q.b.......|
0012CE68 00000000 00001001 000008C4 01008E58 |............X...|
0012CE78 0012CE98 0012CED4 0052A4A0 00000012 |..........R.....|
0012CE88 ECC401A2 00000080 0012EC1C 00000000 |................|
0012CE98 00000001 00000001 00000FFF 00001001 |................|
0012CEA8 0012ECB4 00000000 00000000 0012ECAC |................|
0012CEB8 0012ECBE 00120000 0012ED18 0012ECB4 |................|
---------- Stack Back Trace ----------
Stopped at 7C911230 (0001:00000230 in C:\WINDOWS\system32\ntdll.dll) Base=0x7c910000 RVA=0x00001000
0012CEC8 0012CEDC 005051D0 88880136 001201A2 |.....QP.6.......|
0012CED8 0012ED18 0012CF00 00504FE9 00000000 |.........OP.....|
Called from 005051D0 (0001:000041D0 in C:\notes\nnotes.dll) Base=0x00500000 RVA=0x00001000
0012CEDC 0012CF00 00504FE9 00000000 0012CEF8 |.....OP.........|
0012CEEC 0012CEFC 001201A2 0012ED18 008339E0 |.............9..|
0012CEFC 00882E50 0012ECC4 0040E4D5 00000000 |P.........@.....|
Called from 00504FE9 (0001:00003FE9 in C:\notes\nnotes.dll) Base=0x00500000 RVA=0x00001000
0012CF00 0012ECC4 0040E4D5 00000000 003E00C4 |......@.......>.|
0012CF10 00002699 00000000 00120000 00000100 |.&..............|
0012CF20 00000007 0012CE80 00000000 00120000 |................|
0012CF30 008D642C 00010570 FFFD0000 00000001 |,d..p...........|
0012CF40 0004F05B 00FC0004 00010000 0012CF84 |[...............|
0012CF50 0000002E 0012CF74 0050948E 0012CF70 |....t.....P.p...|
0012CF60 0000002E 0012D3FC 0012D3D0 0000002E |................|
0012CF70 0012CFAC 0012CF8C 0012CF88 6E5C3A63 |............c:\n|
0012CF80 7365746F 7461645C 00000061 0012D3B0 |otes\data.......|
0012CF90 0050F373 0012CFAC 0000002E 0012DA6A |s.P.........j...|
0012CFA0 0012DB5C 00000000 61746164 00000000 |\.......data....|
0012CFB0 00000000 0012CFFC 00000040 00000000 |........@.......|
0012CFC0 00000000 0012D2B8 001522DC 001520A0 |........."... ..|
0012CFD0 00000000 00000000 00000000 00000000 |................|
0012CFE0 00000066 00000020 0012D034 7FFDFBF8 |f... ...4.......|
0012CFF0 00000000 00000010 0012D054 0012D05C |........T...\...|
0012D000 00000000 0012D030 7C923134 0012D830 |....0...41.|0...|
0012D010 00000000 0012D03C 0012D29C 00000000 |....<...........|
0012D020 00000000 0012D830 7C9112D6 00000000 |....0......|....|
0012D030 0012D2BC 7C813654 0012D05C 00000000 |....T6.|\.......|
0012D040 00000000 0000000D 0012000D 7C813673 |............s6.||
0012D050 001522C8 00020000 0012D29C 000E0000 |."..............|
0012D060 0012D830 00000000 00000010 FEF86874 |0...........th..|
0012D070 01C6F1C1 478FC924 01C70392 478FC924 |....$..G....$..G|
0012D080 0012CF88 0012D2E8 0050EE81 0012D830 |..........P.0...|
0012D090 0012D0A4 00000000 0012D73E 0012D830 |........>...0...|
0012D0A0 00000000 00000010 FEF86874 01C6F1C1 |........th......|
0012D0B0 EAE4C000 01C70416 C3250B88 01C70416 |..........%.....|
0012D0C0 00000000 00000000 00000000 00000002 |................|
0012D0D0 61746164 7C98E400 7C923E6F 7C923E62 |data...|o>.|b>.||
0012D0E0 00000208 0012D4C8 0012D49C 0000001A |................|
0012D0F0 00000000 00000000 00000000 00000000 |................|
0012D100 0012D206 00000000 0000000D 00000002 |................|
0012D110 001C001A 7FFDFC00 0012D128 00000000 |........(.......|
0012D120 7C9205C8 00156A58 0012D1F4 7C920551 |...|Xj......Q..||
0012D130 00150778 7C92056D 00156A80 00156A60 |x...m..|.j..`j..|
0012D140 001522DC 00000000 01000000 0012D208 |."..............|
0012D150 43000000 00000000 00000000 0012D218 |...C............|
0012D160 7C920945 0012D198 00150000 7C920732 |E..|........2..||
0012D170 00000005 00150778 00150000 00156A60 |....x.......`j..|
0012D180 0012D170 0012D194 0012D3B4 7C91EE18 |p..............||
0012D190 0012D1A0 00000000 7C9205C8 001522C0 |...........|."..|
0012D1A0 0012D26C 7C920551 6E5C3A63 7365746F |l...Q..|c:\notes|
0012D1B0 7461645C 00150061 00000000 00150000 |\data...........|
0012D1C0 00000000 000A0008 7C923E88 0000021A |.........>.|....|
0012D1D0 0012D4C4 00010000 00000005 0012D138 |............8...|
0012D1E0 0000001A 0012D220 7C91EE18 7C920570 |.... ......|p..||
0012D1F0 FFFFFFFF 03700000 00000414 00000000 |......p.........|
0012D200 7C98C080 7C921970 00156A80 00000038 |...|p..|.j..8...|
0012D210 001522DC 7FFDF000 0012D208 7C9206AB |.".............||
0012D220 0012D264 00120004 0012D2D8 008D0004 |d...............|
0012D230 0012D27C 00505508 0012D72C 0012D2D8 ||....UP.,.......|
0012D240 00120004 0050155C 0050158F 00F812CA |....\.P...P.....|
0012D250 00F8130E 00F812CA 00000000 0050155C |............\.P.|
0012D260 0050158F 00F812CA 00F8130E 00F812CA |..P.............|
0012D270 00000000 0012D288 005014D5 00000000 |..........P.....|
0012D280 00F7F3B0 0012D2AC 00501409 00887660 |..........P.`v..|
0012D290 8A780003 00000000 00008000 00008128 |..x.........(...|
0012D2A0 00000001 0050161F 00501672 0012D2E0 |......P.r.P.....|
0012D2B0 00150000 7C920732 00000045 00151378 |....2..|E...x...|
0012D2C0 00150000 001520A0 0012D2B8 0012D930 |..... ......0...|
0012D2D0 0012D4FC 7C91EE18 7C920738 FFFFFFFF |.......|8..|....|
0012D2E0 7C920732 7C9206AB 7C9206EB 0012D840 |2..|...|...|@...|
0012D2F0 0012D844 0012D818 0012DC64 0012D73E |D.......d...>...|
Called from 0040E4D5 (0001:0000D4D5 in C:\notes\ndrt.exe) Base=0x00400000 RVA=0x00001000
0012ECC4 0012F638 004044BE 00002A2A 00000077 |8....D@.**..w...|
0012ECD4 003E99F5 003E1950 0012F608 0012ED18 |..>.P.>.........|
0012ECE4 0012EE1C 0012EF20 0012F024 0012F604 |.... ...$.......|
0012ECF4 0012F128 0012F22C 0012F600 0012F610 |(...,...........|
0012ED04 0012F330 0012F634 003E00C4 00002699 |0...4.....>..&..|
0012ED14 0012FAB0 204C4C41 45544E49 54454E52 |....ALL INTERNET|
0012ED24 534F4820 00005354 76657224 6F697369 | HOSTS..$revisio|
0012ED34 0000736E 031B6BC1 0000000A 0012ED54 |ns...k......T...|
0012ED44 00000100 0000000A 0012F930 031B6B01 |........0....k..|
0012ED54 76657224 6F697369 6100736E 008D6500 |$revisions.a.e..|
0012ED64 0006B198 00000C14 0006B1A0 008D65DC |.............e..|
0012ED74 008339E0 0012ED94 0050877E 008D65DC |.9......~.P..e..|
0012ED84 0006B1A0 00000C08 00001406 036EA340 |............@.n.|
0012ED94 0012EDA4 0050A9DD 0050155C 0050158F |......P.\.P...P.|
0012EDA4 0050155C 0050158F 036EA364 036EA364 |\.P...P.d.n.d.n.|
0012EDB4 0050155C 0050158F 036DD9DC 00000388 |\.P...P...m.....|
0012EDC4 0050161F 00501672 036DD9DC 036DD9DC |..P.r.P...m...m.|
0012EDD4 0012EDE4 00501856 036DD9DC 036DD9DA |....V.P...m...m.|
0012EDE4 0012EE14 00506F1C 036DD9DA 00000058 |.....oP...m.X...|
0012EDF4 0012F930 0050155C 0050158F 03170062 |0...\.P...P.b...|
0012EE04 00000388 0050161F 00501672 03170062 |......P.r.P.b...|
0012EE14 03170062 0012EE28 00501800 03170062 |b...(.....P.b...|
0012EE24 03170060 0012EE54 00508913 03170060 |`...T.....P.`...|
0012EE34 0001C7FC 03170000 00000000 0012EE4C |............L...|
0012EE44 000000FC 00000008 0001CF3C 0318C274 |........<...t...|
0012EE54 0012EE74 005087FE 008D6FAC 0001C7FC |t.....P..o......|
0012EE64 00000740 0001C804 0050155C 0050158F |@.......\.P...P.|
0012EE74 0050161F 00501672 00E10030 00E10030 |..P.r.P.0...0...|
0012EE84 0012EEA0 00508BBE 0050161F 00501672 |......P...P.r.P.|
0012EE94 01421E08 01421DE4 0012EEA8 00505254 |..B...B.....TRP.|
0012EEA4 01421E08 0012EEC0 005090FA 01421DE4 |..B.......P...B.|
0012EEB4 00000000 00862E50 00E10004 0012F960 |....P.......`...|
0012EEC4 0052580D 0000012E 0000012E 0000012E |.XR.............|
0012EED4 00000000 0012EEE4 00505254 036EA310 |........TRP...n.|
0012EEE4 0012EEF8 00505104 036EA2EC 02F9AFB8 |.....QP...n.....|
0012EEF4 008339E0 0012F024 0071ACF0 000027FB |.9..$.....q..'..|
0012EF04 0318CA8E 0000012D 00000000 03680062 |....-.......b.h.|
0012EF14 00000388 0050155C 0050158F 036EA300 |....\.P...P...n.|
0012EF24 0050155C 0050158F 036EA364 036EA364 |\.P...P.d.n.d.n.|
0012EF34 036EA340 0012EFA4 0050161F 0050155C |@.n.......P.\.P.|
0012EF44 0050158F 036EA364 0050155C 0050158F |..P.d.n.\.P...P.|
0012EF54 036EA364 036EA364 036EA340 0012EFC8 |d.n.d.n.@.n.....|
0012EF64 0050161F 00501672 036EA364 031E1E50 |..P.r.P.d.n.P...|
0012EF74 00002B85 000E0C6A 0012EF90 0050AA0B |.+..j.........P.|
0012EF84 031E1E50 0050155C 0050158F 02488434 |P...\.P...P.4.H.|
0012EF94 02488434 02488410 000E0C6A 0050161F |4.H...H.j.....P.|
0012EFA4 00501672 02488434 02488410 0012EFBC |r.P.4.H...H.....|
0012EFB4 00505254 02488434 0012EFD0 00505104 |TRP.4.H......QP.|
0012EFC4 010A6CA4 C1257221 0050434B 010A6CA4 |.l..!r%.KCP..l..|
0012EFD4 02F9AFCA 00000008 0012F004 006A8EF5 |..............j.|
0012EFE4 010A6CA4 0050161F 00501672 010191B1 |.l....P.r.P.....|
0012EFF4 010191B1 0012F008 00501856 010191B1 |........V.P.....|
0012F004 010A6C54 0012F028 0052FD20 010191AF |Tl..(... .R.....|
0012F014 006A93C6 00000000 03170001 000E0C6A |..j.........j...|
0012F024 00000000 0012FA08 006DC329 02F9AFB8 |........).m.....|
0012F034 00000000 006DC3F9 0000012E 000027FC |......m......'..|
0012F044 000027FC 00000000 7C92043D C0000023 |.'......=..|#...|
0012F054 7C9205D4 0012F088 7C91FB6C 7C91FB71 |...|....l..|q..||
0012F064 7C9205D4 C0000023 7C92043D 0012F064 |...|#...=..|d...|
0012F074 00000041 0012FFB0 7C91EE18 7C9205D4 |A..........|...||
0012F084 000000CB 0012F098 27F69392 03189EFA |...........'....|
0012F094 C0000023 0012F0D0 0050155C 0050158F |#.......\.P...P.|
0012F0A4 00F812CA 00F8130E 00F812CA 02F90000 |................|
0012F0B4 0012F0C8 005014D5 00000000 00F7F3B0 |......P.........|
Called from 004044BE (0001:000034BE in C:\notes\ndrt.exe) Base=0x00400000 RVA=0x00001000
0012F638 0012FA88 00403A9A 00002699 0012FAB0 |.....:@..&......|
0012F648 0012F65C 0012FA7C 00000011 00002699 |\...|........&..|
0012F658 00000000 0003000A 00000000 00000000 |................|
0012F668 00000000 00000000 00000000 00000000 |................|
0012F678 00000000 00000000 00000000 00000000 |................|
0012F688 00000000 00000000 00000000 00000000 |................|
0012F698 00000000 00000000 00000000 00000000 |................|
0012F6A8 00000000 00000000 00000000 00000000 |................|
0012F6B8 00000000 00000000 00000000 00000000 |................|
0012F6C8 00000000 00000000 00000000 00000000 |................|
0012F6D8 00000000 00000000 00000000 00000000 |................|
0012F6E8 00000000 00000000 00000000 00000000 |................|
0012F6F8 00000000 00000000 00000000 00000000 |................|
0012F708 00000000 00000000 00000000 00000000 |................|
0012F718 00000000 00000000 00000000 00000000 |................|
0012F728 00000000 00000000 00000000 00000000 |................|
0012F738 00000000 00000000 00000000 00000000 |................|
0012F748 00000000 00000000 00000000 00000000 |................|
0012F758 00000000 00000000 00000000 00000000 |................|
0012F768 00000000 00000000 00000000 00000000 |................|
0012F778 00000000 00000000 00000000 00000000 |................|
0012F788 00000000 00000000 00000000 00000000 |................|
0012F798 00000000 00000000 00000000 00000000 |................|
0012F7A8 00000000 00000000 00000000 00000000 |................|
0012F7B8 00000000 00000000 00000000 00000000 |................|
0012F7C8 00000000 00000000 00000000 00000000 |................|
0012F7D8 00000000 00000000 00000000 00000000 |................|
0012F7E8 00000000 00000000 00000000 00000000 |................|
0012F7F8 00000000 00000000 00000000 00000000 |................|
0012F808 00000000 00000000 00000000 00000000 |................|
0012F818 00000000 00000000 00000000 00000000 |................|
0012F828 00000000 00000000 00000000 00000000 |................|
0012F838 00000000 00000000 00000000 00000000 |................|
0012F848 00000000 00000000 00000000 00000000 |................|
0012F858 00000000 00000000 00000000 00000000 |................|
0012F868 00000000 00010000 03171620 0012FA00 |........ .......|
0012F878 00000011 0012F890 00000100 0012FA20 |............ ...|
0012F888 0012FC26 00000000 64737177 72616273 |&.......wqsdsbar|
0012F898 77796172 646F6271 61650079 00726564 |raywqbody.eader.|
0012F8A8 00000000 0318C898 00000000 00000000 |................|
0012F8B8 0012C125 00000000 0050155C 0050158F |%.......\.P...P.|
0012F8C8 03170062 00000388 0050161F 00501672 |b.........P.r.P.|
0012F8D8 03170062 03170062 0012F8F0 0050155C |b...b.......\.P.|
0012F8E8 0050158F 03780062 00000388 0050161F |..P.b.x.......P.|
0012F8F8 0050155C 0050158F 03680062 00000388 |\.P...P.b.h.....|
0012F908 0050161F 00501672 03680062 03680062 |..P.r.P.b.h.b.h.|
0012F918 0012F928 00501856 03680062 0050155C |(...V.P.b.h.\.P.|
0012F928 0050158F 03170062 00000388 0050161F |..P.b.........P.|
0012F938 00501672 03170062 03170062 0012F954 |r.P.b...b...T...|
0012F948 00501856 03170062 0000002C 0012F984 |V.P.b...,.......|
0012F958 0050969F 03170060 00000118 00000023 |..P.`.......#...|
0012F968 008D6FAC 0012F990 000000FC 008D6500 |.o...........e..|
0012F978 0000002C 0000000C 031711F8 0012F998 |,...............|
0012F988 00509535 008D6FAC 00000020 013D4790 |5.P..o.. ....G=.|
0012F998 0012F9BC 00508E32 008D6FAC 00000020 |....2.P..o.. ...|
0012F9A8 013D4790 00000020 013D4780 0000F409 |.G=. ....G=.....|
0012F9B8 008D6F20 0012F9DC 00508D57 00E10004 | o......W.P.....|
0012F9C8 00000020 013D478E 013D4790 0050161F | ....G=..G=...P.|
0012F9D8 00501672 013D47A4 013D4780 0050155C |r.P..G=..G=.\.P.|
0012F9E8 0050158F 013D47A4 013D47A4 013D4780 |..P..G=..G=..G=.|
0012F9F8 00000001 0050161F 00501672 013D47A4 |......P.r.P..G=.|
0012FA08 013D4780 0012FA18 00505254 013D47A4 |.G=.....TRP..G=.|
0012FA18 0012FA34 00505067 013D4780 00000002 |4...gPP..G=.....|
0012FA28 0000001A 03171620 0012FC72 0012FA54 |.... ...r...T...|
Called from 00403A9A (0001:00002A9A in C:\notes\ndrt.exe) Base=0x00400000 RVA=0x00001000
0012FA88 0012FC90 00402ECD 00002699 0012FAB0 |......@..&......|
0012FA98 0012FC80 0012FC8C 00002A74 00000000 |........t*......|
0012FAA8 00002699 00000000 0000012E 00000000 |.&..............|
0012FAB8 00000000 000027FC 00006920 00000000 |.....'.. i......|
0012FAC8 00000000 00000000 00000000 00000000 |................|
0012FAD8 00000000 00000000 00000004 00000001 |................|
0012FAE8 33240001 226E0000 0001000E 00000000 |..$3..n"........|
0012FAF8 00000000 00000000 00000000 00000000 |................|
0012FB08 00000000 00000000 00030000 00000000 |................|
0012FB18 00120000 00508913 0317060C 03171114 |......P.........|
0012FB28 03170000 00000000 003E0538 000000FC |........8.>.....|
0012FB38 001203E8 00001FC4 03171EB8 0012FB64 |............d...|
0012FB48 000027F9 03781074 00000000 0000009C |.'..t.x.........|
0012FB58 00001F30 3143155C 32373532 302E3132 |0...\.C1257221.0|
0012FB68 34373530 00433334 00E10030 0012FB90 |057443C.0.......|
0012FB78 00508BBE 0050161F 00501672 02263B2C |..P...P.r.P.,;&.|
0012FB88 02263B08 0012FB98 00505254 02263B2C |.;&.....TRP.,;&.|
0012FB98 0012FBB0 515790FA 48657250 65646165 |......WQPreHeade|
0012FBA8 00000072 00000000 00000000 00000000 |r...............|
0012FBB8 00000000 00000000 00000000 00000000 |................|
0012FBC8 00000000 00000000 00000000 27FE0000 |...............'|
0012FBD8 B1080000 0000036E 51570000 79646F42 |....n.....WQBody|
0012FBE8 64616548 00007265 00000000 00000000 |Header..........|
0012FBF8 00000000 00000000 00000000 00000000 |................|
0012FC08 00000000 00000000 00000000 00000000 |................|
0012FC18 27FB0000 B1A40000 0000036E 51570000 |...'....n.....WQ|
0012FC28 79646F42 00000000 00000000 00000000 |Body............|
0012FC38 00000000 00000000 00000000 00000000 |................|
0012FC48 00000000 00000000 00000000 33240000 |..............$3|
0012FC58 00000000 27F30000 B1D80000 0000036E |.......'....n...|
0012FC68 00400000 003E0538 162003E8 00010317 |..@.8.>... .....|
0012FC78 0042DA5C 003E00C4 0000000B 00000001 |\.B...>.........|
0012FC88 00002A74 000E226E 0012FCD8 00401A21 |t*..n"......!.@.|
Called from 00402ECD (0001:00001ECD in C:\notes\ndrt.exe) Base=0x00400000 RVA=0x00001000
0012FC90 0012FCD8 00401A21 00002699 0012FCB0 |....!.@..&......|
0012FCA0 FE200029 00380000 003E00C4 00000000 |). ...8...>.....|
0012FCB0 0000012E 00000000 00000000 00000018 |................|
0012FCC0 037800C0 03BF0029 00000000 00000000 |..x.)...........|
0012FCD0 003E0538 00290538 0012FE20 004016B5 |8.>.8.). .....@.|
Called from 00401A21 (0001:00000A21 in C:\notes\ndrt.exe) Base=0x00400000 RVA=0x00001000
0012FCD8 0012FE20 004016B5 00002699 003A0000 | .....@..&....:.|
0012FCE8 0012FCFC 00000000 003A34F8 00000004 |.........4:.....|
0012FCF8 7FFDD000 00000000 00000000 00000000 |................|
0012FD08 00000000 00000000 00000000 00000000 |................|
0012FD18 00000000 00000000 00000000 00000000 |................|
0012FD28 00000000 00000000 00000000 00000000 |................|
0012FD38 00000000 00000000 00000000 00000000 |................|
0012FD48 00000000 00000000 00000000 00000000 |................|
0012FD58 00000000 00000000 00000000 00000000 |................|
0012FD68 00000000 00000000 00000000 00000000 |................|
0012FD78 00000000 00000000 00000000 00000000 |................|
0012FD88 00000000 00000000 00000000 00000000 |................|
0012FD98 00000000 00000000 00000000 00000000 |................|
0012FDA8 00000000 00000000 00000000 00000000 |................|
0012FDB8 00000000 00000000 00000000 00000000 |................|
0012FDC8 00000000 00000000 00000000 00000000 |................|
0012FDD8 00000000 00000000 00000000 00000000 |................|
0012FDE8 00000000 00000000 00000000 00000000 |................|
0012FDF8 00000000 00000000 005778C4 C1257221 |.........xW.!r%.|
0012FE08 00002699 11192B5B 003A0000 00000001 |.&..[+....:.....|
0012FE18 00002699 00000003 0012FE2C 0040103B |.&......,...;.@.|
Called from 004016B5 (0001:000006B5 in C:\notes\ndrt.exe) Base=0x00400000 RVA=0x00001000
0012FE20 0012FE2C 0040103B 0042B030 0012FE4C |,...;.@.0.B.L...|
Called from 0040103B (0001:0000003B in C:\notes\ndrt.exe) Base=0x00400000 RVA=0x00001000
0012FE2C 0012FE4C 00401082 00400000 00000004 |L.....@...@.....|
0012FE3C 003A34F8 00000000 00120000 00400000 |.4:...........@.|
Called from 00401082 (0001:00000082 in C:\notes\ndrt.exe) Base=0x00400000 RVA=0x00001000
0012FE4C 0012FF64 00401188 00000004 003A34F8 |d.....@......4:.|
0012FE5C 00000000 00120000 7C98C0D8 7C929AEB |...........|...||
0012FE6C 003B0178 7C80AC28 0000FFFF 7FFDF000 |x.;.(..|........|
0012FE7C 002527E8 00000000 7C80262C 00000000 |.'%.....,&.|....|
0012FE8C 002527F8 0012FF60 7C800000 7C920551 |.'%.`......|Q..||
0012FE9C 0012FEB4 00000162 00000000 00006C7B |....b.......{l..|
0012FEAC 00251FC0 7C809919 65470000 72754374 |..%....|..GetCur|
0012FEBC 003B0178 65726854 4D006461 006B7361 |x.;.Thread.Mask.|
0012FECC 7FFDD000 0012FEC0 00155448 003B2BE8 |........HT...+;.|
0012FEDC 003B2760 003B0178 00000008 00000101 |`';.x.;.........|
0012FEEC 00000000 00000001 0000CA70 0012FE6C |........p...l...|
0012FEFC 7FFDFBF8 0012FFB0 003B2CE8 7C929AF0 |.........,;....||
0012FF0C 00000000 00000000 003B2CE8 00000808 |.........,;.....|
0012FF1C 003B2CF0 FFFFFFFE 003B0178 00000808 |.,;.....x.;.....|
0012FF2C 00000004 003B0000 0012FD2C 7FFDF000 |......;.,.......|
0012FF3C 0012FFB0 7C91EE18 7C9206F0 FFFFFFFF |.......|...|....|
0012FF4C 7C9206EB 0042007E 003B0000 00000008 |...|~.B...;.....|
0012FF5C 00000800 0042B010 0012FF80 004010A7 |......B.......@.|
Called from 00401188 (0001:00000188 in C:\notes\ndrt.exe) Base=0x00400000 RVA=0x00001000
0012FF64 0012FF80 004010A7 00000000 00000000 |......@.........|
0012FF74 00000000 00000004 003A34F8 0012FFC0 |.........4:.....|
Called from 004010A7 (0001:000000A7 in C:\notes\ndrt.exe) Base=0x00400000 RVA=0x00001000
0012FF80 0012FFC0 0041EC07 00000004 003B2760 |......A.....`';.|
0012FF90 003B27A0 00000000 00120000 7FFDD000 |.';.............|
0012FFA0 00000001 80000003 0012FF94 0012C778 |............x...|
0012FFB0 0012FFE0 00421F60 0042A008 00000000 |....`.B...B.....|
Called from 0041EC07 (0001:0001DC07 in C:\notes\ndrt.exe) Base=0x00400000 RVA=0x00001000
0012FFC0 0012FFF0 7C816D4F 00000000 00120000 |....Om.|........|
0012FFD0 7FFDD000 80000003 0012FFC8 0012C778 |............x...|
0012FFE0 FFFFFFFF 7C8399F3 7C816D58 00000000 |.......|Xm.|....|
Called from 7C816D4F (0001:00015D4F in C:\WINDOWS\system32\KERNEL32.dll) Base=0x7c800000 RVA=0x00001000
----- System Information -----
Computer Name: GALGCOMM
User Name: cherry
Number of Processors: 2
Processor Type: Intel Pentium
Windows Version: NT 5.1 (Build 2600) - Service Pack 2
Current Build: 2600
Current Type: Multiprocessor Free
Registered Owner: pc
----- Task List -----
PID Task Name
0x0 Idle.exe
0x4 System.exe
0x200 C:\WINDOWS\system32\smss.exe 08-19-104 13:00:00 Size: 50688
0x230 C:\WINDOWS\system32\csrss.exe 08-19-104 13:00:00 Size: 6144
0x248 C:\WINDOWS\system32\winlogon.exe 08-19-104 13:00:00 Size: 504832
0x274 C:\WINDOWS\system32\services.exe 08-19-104 13:00:00 Size: 108544
0x280 C:\WINDOWS\system32\lsass.exe 08-19-104 13:00:00 Size: 13312
0x32C C:\WINDOWS\system32\svchost.exe 08-19-104 13:00:00 Size: 14336
0x358 C:\WINDOWS\system32\svchost.exe 08-19-104 13:00:00 Size: 14336
0x3AC C:\WINDOWS\system32\svchost.exe 08-19-104 13:00:00 Size: 14336
0x414 C:\WINDOWS\system32\svchost.exe 08-19-104 13:00:00 Size: 14336
0x434 C:\WINDOWS\system32\svchost.exe 08-19-104 13:00:00 Size: 14336
0x4E8 C:\WINDOWS\system32\spoolsv.exe 06-11-105 00:53:32 Size: 57856
0x558 amgrsrvc.exe
0x580 inetinfo.exe
0x590 FrameworkService.exe
0x5BC Mcshield.exe
0x5E0 naPrdMgr.exe
0x668 VsTskMgr.exe
0x704 MDM.exe
0x72C NAIlgpip.exe
0x76C SMAgent.exe
0x7BC MailCFG.exe
0xC4 Outbreak.exe
0x144 log_qtine.exe
0x698 C:\WINDOWS\explorer.exe 08-19-104 13:00:00 Size: 1034752
0x8A0 C:\WINDOWS\system32\alg.exe 08-19-104 13:00:00 Size: 44544
0xA74 C:\WINDOWS\system32\igfxtray.exe 12-14-103 17:20:38 Size: 155648
0xA7C C:\WINDOWS\system32\hkcmd.exe 12-14-103 17:07:26 Size: 118784
0xAD4 SMTray.exe
0xB10 jusched.exe
0xB34 shstat.exe
0xB3C UpdaterUI.exe
0xB44 StatusClient.exe
0xB80 hpwuSchd2.exe
0xB88 TBMon.exe
0xB90 C:\WINDOWS\system32\ctfmon.exe 08-19-104 13:00:00 Size: 15360
0xB9C GoogleToolbarNotifier.exe
0xC08 C:\WINDOWS\system32\javaw.exe 11-10-105 11:27:16 Size: 49250
0xD64 C:\notes\nserver.exe 08-18-98 15:00:52 Size: 18432
0x82C C:\notes\nreplica.exe 08-18-98 15:00:10 Size: 41984
0x2D8 C:\notes\nrouter.exe 08-18-98 15:00:14 Size: 97280
0x5C0 C:\notes\nupdate.exe 08-18-98 15:01:54 Size: 66048
0xDFC C:\notes\nstats.exe 08-18-98 15:01:50 Size: 44544
0xD4C C:\notes\namgr.exe 08-18-98 14:50:00 Size: 95744
0x108 C:\notes\namgr.exe 08-18-98 14:50:00 Size: 95744
0xB00 C:\notes\nadminp.exe 08-18-98 14:49:54 Size: 135680
0xFE4 C:\notes\nsched.exe 08-18-98 15:00:16 Size: 62464
0xFF0 C:\notes\ncalconn.exe 08-18-98 15:00:16 Size: 39936
0xB98 C:\notes\nreport.exe 08-18-98 15:00:12 Size: 78336
0xE10 C:\notes\nevent.exe 08-18-98 14:53:06 Size: 73216
0xA10 C:\notes\nsmtpmta.exe 08-26-98 14:09:14 Size: 371712
0xF7C C:\notes\nlnotes.exe 08-18-98 14:55:44 Size: 489984
0x1C4 mailscan.exe
0xAEC C:\notes\nomsgcnv.exe 08-26-98 14:09:08 Size: 744448
0xACC C:\notes\nosesctl.exe 08-26-98 14:09:10 Size: 367616
0xFE8 C:\notes\nimsgcnv.exe 08-26-98 14:09:02 Size: 659456
0x47C C:\notes\nisesctl.exe 08-26-98 14:09:04 Size: 382976
0x388 C:\notes\ndrt.exe 08-26-98 14:08:48 Size: 465408
0x15C C:\notes\niseshlr.exe 08-26-98 14:09:06 Size: 450560
0xA88 C:\notes\niseshlr.exe 08-26-98 14:09:06 Size: 450560
0x364 C:\notes\noseshlr.exe 08-26-98 14:09:12 Size: 380928
0xD60 C:\notes\noseshlr.exe 08-26-98 14:09:12 Size: 380928
0x6AC DAO_Log.exe
0xD10 C:\notes\qnc.exe 08-18-98 15:00:06 Size: 116736
0x0 _Total.exe
----- Module List -----
Loaded Address Module Name
(003F0000 - 003F7000) C:\notes\namhook.dll 08-18-98 14:50:00 Size: 4096
(00400000 - 0047B000) C:\notes\ndrt.exe 08-26-98 14:08:48 Size: 465408
(00480000 - 004CB000) C:\notes\ni18nlt.dll 08-26-98 14:08:54 Size: 286720
(00500000 - 00922000) C:\notes\nnotes.dll 08-24-98 17:41:12 Size: 3871232
(03430000 - 03479000) C:\notes\ni18njp.dll 08-26-98 14:08:52 Size: 278528
(03480000 - 034C8000) C:\notes\ni18ncn.dll 08-26-98 14:08:50 Size: 275456
(034E0000 - 034EC000) C:\notes\ni18nkr.dll 08-26-98 14:08:52 Size: 25600
(03500000 - 03548000) C:\notes\ni18ntw.dll 08-26-98 14:08:58 Size: 274944
(10000000 - 10065000) app.dll
(5D4D0000 - 5D567000) C:\WINDOWS\system32\COMCTL32.dll 08-19-104 13:00:00 Size: 611328
(770F0000 - 7717C000) C:\WINDOWS\system32\OLEAUT32.dll 08-19-104 13:00:00 Size: 553472
(773A0000 - 774A2000) C:\WINDOWS\system32\COMCTL32.dll 08-19-104 13:00:00 Size: 611328
(774B0000 - 775ED000) C:\WINDOWS\system32\ole32.dll 07-26-105 05:40:28 Size: 1284608
(77BE0000 - 77C38000) C:\notes\msvcrt.dll 03-19-97 21:27:06 Size: 266240
(77D10000 - 77DA0000) C:\WINDOWS\system32\USER32.dll 03-02-105 19:10:24 Size: 578048
(77DA0000 - 77E31000) C:\WINDOWS\system32\RPCRT4.dll 08-19-104 13:00:00 Size: 581120
(77E40000 - 77E87000) C:\WINDOWS\system32\GDI32.dll 12-29-105 03:55:45 Size: 280064
(77E90000 - 77F06000) C:\WINDOWS\system32\SHLWAPI.dll 10-21-105 04:40:23 Size: 474112
(77F40000 - 77FEB000) C:\WINDOWS\system32\ADVAPI32.dll 08-19-104 13:00:00 Size: 683008
(7C800000 - 7C8FF000) C:\WINDOWS\system32\KERNEL32.dll 08-19-104 13:00:00 Size: 1027584
(7C910000 - 7C9C6000) C:\WINDOWS\system32\ntdll.dll 08-19-104 13:00:00 Size: 729600
(7C9D0000 - 7D1EC000) C:\WINDOWS\system32\SHELL32.dll 09-23-105 04:06:50 Size: 8479744
Print this page
