Ok, lost my password, but here's another log file with debugging turned on..

Jan 11 23:23:54: vcpu-0| VMSAMPLE32: cs=0x8, eip=0x80544d2e

Jan 11 23:23:55: vcpu-0| VMSAMPLE32: cs=0x8, eip=0x80544d2e

Jan 11 23:23:56: vcpu-0| VMSAMPLE32: cs=0x8, eip=0xbf8acce0

Jan 11 23:23:57: vcpu-0| VMSAMPLE32: cs=0x8, eip=0x80544d2e

Jan 11 23:23:58: vcpu-0| VMSAMPLE32: cs=0x8, eip=0x80544d2e

Jan 11 23:23:59: vcpu-0| VMSAMPLE32: cs=0x8, eip=0x80544d0e

Jan 11 23:24:00: vcpu-0| VMSAMPLE32: cs=0x8, eip=0x80544d2e

Jan 11 23:24:01: vmx| VMMEM 0 1 134591 499712 -1 499712 -1 50

Jan 11 23:24:01: vmx| COWStats: numHints 4633 unique 34 shared 1002 totalUnique 49 totalBreaks 2586

Jan 11 23:24:01: vmx| COWStats Hot Page: hash 0x957aa21b577d56a3 count 5

Jan 11 23:24:01: vmx| COWStats Hot Page: hash 0xbf7142bb49e776b0 count 12

Jan 11 23:24:01: vmx| COWStats Hot Page: hash 0x5d5d5547019d1334 count 15

Jan 11 23:24:01: vmx| COWStats Hot Page: hash 0x80423e2119bbbecb count 323

Jan 11 23:24:01: vmx| COWStats Hot Page: hash 0x2bd8e6157e6af6d6 count 586

Jan 11 23:24:01: vmx| VMMEM VM 0 min 77538 max 146267 share 131072 paged 137457 nonpaged 8810 locked 134557 cowed 1002 usedPct 91

Jan 11 23:24:01: vcpu-0| VMSAMPLE32: cs=0x8, eip=0xf6f4fc76

Jan 11 23:28:19: mks| MKS unknown keycode 0xa0

Jan 11 23:28:19: mks| MKS unknown keycode 0xa0

Jan 11 23:28:19: mks| MKS starting full screen: off

Jan 11 23:28:19: mks| MKS starting switch from full screen SVGA, state 1

Jan 11 23:28:19: mks| MKS Leaving fullscreen.

You can see at 23:24:01 is when it began. Any ideas? Disabling the CDROM didn't do the trick.