Capture Machine Overview Dump started on 7/27/2012 at 12:2:5.753 Operating system: Microsoft Windows Vista Enterprise Service Pack 2 (build 6002), 32-bit User name: thin-app Member of: None, Everyone, Administrators, Users, INTERACTIVE, Authenticated Users, This Organization, , LOCAL, NTLM Authentication, High Mandatory Level Computer name: PACKAGER-1 IE version: 9.0.8112.16421 Drives: Drive C: Fixed NTFS serial 1555297668 [x5CB3F584], 11,540 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS Drive D: Fixed NTFS serial 1679077932 [x6414B22C], 455 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS Drive E: Working dir: C:\Windows\system32 ADO version: 6.0.6002.18005 Terminal services: Not running Remote session: No LUA enabled: No LOCALE_SYSTEM_DEFAULT: 0409 ENU LOCALE_USER_DEFAULT: 0409 ENU Installed apps System-wide AddressBook, Connection Manager, DirectDrawEx, DXM_Runtime, Fontcore, IE40, IE4Data, IE5BAKEX, IEData, MobileOptionPack, MPlayer2, SchedulingAgent, WIC, Java(TM) 7 Update 5, Java Auto Updater, VMware ThinApp, VMware Tools, Per-user Environment strings: =::=::\ ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\thin-app\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files COMPUTERNAME=PACKAGER-1 ComSpec=C:\Windows\system32\cmd.exe DFSTRACINGON=FALSE FP_NO_HOST_CHECK=NO HOMEDRIVE=C: HOMEPATH=\Users\thin-app LOCALAPPDATA=C:\Users\thin-app\AppData\Local LOGONSERVER=\\PACKAGER-1 NUMBER_OF_PROCESSORS=2 OS=Windows_NT Path=C:\Program Files\VMware\VMware ThinApp;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 6 Model 26 Stepping 5, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=1a05 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files PUBLIC=C:\Users\Public SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\Windows TEMP=C:\Users\thin-app\AppData\Local\Temp TMP=C:\Users\thin-app\AppData\Local\Temp TRACE_FORMAT_SEARCH_PATH=\\winseqfe\release\Windows6.0\lh_sp2rtm\6002.18005.090410-1830\x86fre\symbols.pri\TraceFormat TS_OPTIONS=C:\Program Files\VMware\VMware ThinApp\Setup Capture.exe TS_ORIGIN=C:\Program Files\VMware\VMware ThinApp\Setup Capture.exe USERDOMAIN=Packager-1 USERNAME=thin-app USERPROFILE=C:\Users\thin-app windir=C:\Windows Current process: Process ID: 752 Minimum req'd operating system ver: 5.0 snapshot.exe C:\Program Files\VMware\VMware ThinApp\snapshot.exe FileDescription: Snapshot tool FileVersion: 4.7.0-5388 InternalName: snapshot LegalCopyright: Copyright 2006-2011 VMware, Inc. OriginalFilename: snapshot.exe ProductName: VMware ThinApp ProductVersion: 4.7.0-5388 Priority class: Normal Processor affinity mask: x3 System affinity mask: x3 Creation time: Fri 27 Aug 2012 12:00:27 Priority boost: Normal behavior Modules: Base Size Entry x00400000 x0007C000 x0042F5CD snapshot.exe C:\Program Files\VMware\VMware ThinApp\snapshot.exe x77A50000 x00127000 x00000000 ntdll.dll C:\Windows\system32\ntdll.dll x76790000 x000DC000 x767DB7F5 kernel32.dll C:\Windows\system32\kernel32.dll x77640000 x0009D000 x77657A1D USER32.dll C:\Windows\system32\USER32.dll x76740000 x0004B000 x7674F12A GDI32.dll C:\Windows\system32\GDI32.dll x77570000 x000C6000 x775B0CC1 ADVAPI32.dll C:\Windows\system32\ADVAPI32.dll x764B0000 x000C3000 x765002EB RPCRT4.dll C:\Windows\system32\RPCRT4.dll x77C90000 x0001E000 x77C91378 IMM32.DLL C:\Windows\system32\IMM32.DLL x77BB0000 x000C8000 x77BB169E MSCTF.dll C:\Windows\system32\MSCTF.dll x76400000 x000AA000 x76409FAE msvcrt.dll C:\Windows\system32\msvcrt.dll x77A40000 x00009000 x77A41303 LPK.DLL C:\Windows\system32\LPK.DLL x776E0000 x0007D000 x776E9B1E USP10.dll C:\Windows\system32\USP10.dll x773D0000 x0008D000 x773D3F45 oleaut32.dll C:\Windows\system32\oleaut32.dll x765F0000 x00145000 x766494C0 ole32.dll C:\Windows\system32\ole32.dll x75140000 x0003F000 x7514EB31 uxtheme.dll C:\Windows\system32\uxtheme.dll x75FB0000 x00014000 x75FB1235 Secur32.dll C:\Windows\system32\Secur32.dll x6F7E0000 x00227000 x6F7E76F6 msi.dll C:\Windows\system32\msi.dll x75E10000 x00076000 x75E14329 NETAPI32.dll C:\Windows\system32\NETAPI32.dll x76110000 x00007000 x7611154B PSAPI.DLL C:\Windows\system32\PSAPI.DLL x09470000 x003C4000 x09475800 Logging.dll C:\Program Files\VMware\VMware ThinApp\Logging.dll x75840000 x00008000 x7584122F VERSION.dll C:\Windows\system32\VERSION.dll 32-bit processes: 0000 [x0000] system idle process 0004 [x0004] system 0464 [x01D0] smss.exe C:\Windows\System32\smss.exe 0528 [x0210] csrss.exe C:\Windows\System32\csrss.exe 0568 [x0238] wininit.exe C:\Windows\System32\wininit.exe 0580 [x0244] csrss.exe C:\Windows\System32\csrss.exe 0612 [x0264] services.exe C:\Windows\System32\services.exe 0624 [x0270] lsass.exe C:\Windows\System32\lsass.exe 0632 [x0278] lsm.exe C:\Windows\System32\lsm.exe 0668 [x029C] winlogon.exe C:\Windows\System32\winlogon.exe 0816 [x0330] svchost.exe C:\Windows\System32\svchost.exe 0876 [x036C] svchost.exe C:\Windows\System32\svchost.exe 0912 [x0390] svchost.exe C:\Windows\System32\svchost.exe 1004 [x03EC] svchost.exe C:\Windows\System32\svchost.exe 1032 [x0408] svchost.exe C:\Windows\System32\svchost.exe 1044 [x0414] svchost.exe C:\Windows\System32\svchost.exe 1108 [x0454] 1136 [x0470] SLsvc.exe C:\Windows\System32\SLsvc.exe 1268 [x04F4] svchost.exe C:\Windows\System32\svchost.exe 1368 [x0558] svchost.exe C:\Windows\System32\svchost.exe 1548 [x060C] spoolsv.exe C:\Windows\System32\spoolsv.exe 1572 [x0624] svchost.exe C:\Windows\System32\svchost.exe 1836 [x072C] svchost.exe C:\Windows\System32\svchost.exe 1868 [x074C] VMwareService.exe C:\Program Files\VMware\VMware Tools\VMwareService.exe 1904 [x0770] svchost.exe C:\Windows\System32\svchost.exe 0208 [x00D0] SearchIndexer.exe C:\Windows\System32\SearchIndexer.exe 0492 [x01EC] VMUpgradeHelper.exe C:\Program Files\VMware\VMware Tools\VMUpgradeHelper.exe 2144 [x0860] msdtc.exe C:\Windows\System32\msdtc.exe 2708 [x0A94] taskeng.exe C:\Windows\System32\taskeng.exe 3036 [x0BDC] taskeng.exe C:\Windows\System32\taskeng.exe 3184 [x0C70] dwm.exe C:\Windows\System32\dwm.exe 3220 [x0C94] explorer.exe C:\Windows\explorer.exe 3464 [x0D88] MSASCui.exe C:\Program Files\Windows Defender\MSASCui.exe 3472 [x0D90] VMwareTray.exe C:\Program Files\VMware\VMware Tools\VMwareTray.exe 3480 [x0D98] VMwareUser.exe C:\Program Files\VMware\VMware Tools\VMwareUser.exe 3488 [x0DA0] sidebar.exe C:\Program Files\Windows Sidebar\sidebar.exe 3544 [x0DD8] setup_capture.exe C:\Program Files\VMware\VMware ThinApp\setup_capture.exe 4056 [x0FD8] svchost.exe C:\Windows\System32\svchost.exe 2564 [x0A04] msiexec.exe C:\Windows\System32\msiexec.exe 2116 [x0844] dllhost.exe C:\Windows\System32\dllhost.exe 2928 [x0B70] WmiPrvSE.exe C:\Windows\System32\wbem\WmiPrvSE.exe 0752 [x02F0] snapshot.exe C:\Program Files\VMware\VMware ThinApp\snapshot.exe Shell folders: ProgramFilesDir = C:\Program Files Common StartMenu = C:\ProgramData\Microsoft\Windows\Start Menu StartMenu = C:\Users\thin-app\AppData\Roaming\Microsoft\Windows\Start Menu Common AppData = C:\ProgramData Local AppData = C:\Users\thin-app\AppData\Local AppData = C:\Users\thin-app\AppData\Roaming Common Desktop = C:\Users\Public\Desktop Desktop = C:\Users\thin-app\Desktop Common Startup = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup [default: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp] Startup = C:\Users\thin-app\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [default: C:\Users\thin-app\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartUp] Common Programs = C:\ProgramData\Microsoft\Windows\Start Menu\Programs Programs = C:\Users\thin-app\AppData\Roaming\Microsoft\Windows\Start Menu\Programs Common Favorites = C:\Users\thin-app\Favorites Favorites = C:\Users\thin-app\Favorites SendTo = C:\Users\thin-app\AppData\Roaming\Microsoft\Windows\SendTo Templates = C:\Users\thin-app\AppData\Roaming\Microsoft\Windows\Templates Recent = C:\Users\thin-app\AppData\Roaming\Microsoft\Windows\Recent NetHood = C:\Users\thin-app\AppData\Roaming\Microsoft\Windows\Network Shortcuts Fonts = C:\Windows\Fonts My Pictures = C:\Users\thin-app\Pictures My Videos = C:\Users\thin-app\Videos Personal = C:\Users\thin-app\Documents Profile = C:\Users\thin-app Profiles = SystemSystem = C:\Windows\system32 32-bit device drivers: Kernel mode drivers: ACPI Microsoft ACPI Driver adp94xx adp94xx adpahci adpahci adpu160m adpu160m adpu320 adpu320 AFD Ancilliary Function Driver for Winsock agp440 Intel AGP Bus Filter aic78xx aic78xx aliide aliide amdagp AMD AGP Bus Filter Driver amdide amdide AmdK7 AMD K7 Processor Driver AmdK8 AMD K8 Processor Driver arc arc arcsas arcsas AsyncMac RAS Asynchronous Media Driver atapi IDE Channel Beep Beep blbdrive blbdrive BrFiltLo Brother USB Mass-Storage Lower Filter Driver BrFiltUp Brother USB Mass-Storage Upper Filter Driver Brserid Brother MFC Serial Port Interface Driver (WDM) BrSerWdm Brother WDM Serial driver BrUsbMdm Brother MFC USB Fax Only Modem BrUsbSer Brother MFC USB Serial WDM Driver BTHMODEM Bluetooth Serial Communications Driver cdrom CD-ROM Driver circlass Consumer IR Devices CLFS Common Log (CLFS) CmBatt Microsoft AC Adapter Driver cmdide cmdide Compbatt Microsoft Composite Battery Driver crcdisk Crcdisk Filter Driver Crusoe Transmeta Crusoe Processor Driver CSC Offline Files Driver disk Disk Driver DXGKrnl LDDM Graphics Subsystem E1G60 Intel(R) PRO/1000 NDIS 6 Adapter Driver Ecache ReadyBoost Caching Driver elxstor elxstor ErrDev Microsoft Hardware Error Device Driver fdc Floppy Disk Controller Driver flpydisk Floppy Disk Driver fvevol BitLocker Drive Encryption Filter Driver gagp30kx Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms HDAudBus Microsoft UAA Bus Driver for High Definition Audio HidBth Microsoft Bluetooth HID Miniport HidIr Microsoft Infrared HID Driver HidUsb Microsoft HID Class Driver HpCISSs HpCISSs HTTP HTTP i2omp i2omp i8042prt i8042 Keyboard and PS/2 Mouse Port Driver iaStorV Intel RAID Controller Vista iirsp iirsp intelide intelide intelppm Intel Processor Driver IpFilter IP Traffic Filter Driver IpInIp IP in IP Tunnel Driver IPMIDRV IPMIDRV IPNAT IP Network Address Translator IRENUM IR Bus Enumerator isapnp PnP ISA/EISA Bus Driver iScsiPrt iScsiPort Driver iteatapi ITEATAPI_Service_Install iteraid ITERAID_Service_Install kbdclass Keyboard Class Driver kbdhid Keyboard HID Driver KSecDD KSecDD lltdio Link-Layer Topology Discovery Mapper I/O Driver LSI_FC LSI_FC LSI_SAS LSI_SAS LSI_SCSI LSI_SCSI megasas megasas MegaSR MegaSR Modem Modem monitor Microsoft Monitor Class Function Driver Service mouclass Mouse Class Driver mouhid Mouse HID Driver MountMgr Mount Point Manager mpio Microsoft Multi-Path Bus Driver mpsdrv Windows Firewall Authorization Driver Mraid35x Mraid35x msahci msahci msdsm Microsoft Multi-Path Device Specific Module msisadrv ISA/EISA Class Driver MsRPC MsRPC mssmbios Microsoft System Management BIOS Driver NativeWi NativeWiFi Filter NDIS NDIS System Driver NdisTapi Remote Access NDIS TAPI Driver Ndisuio NDIS Usermode I/O Protocol NdisWan Remote Access NDIS WAN Driver NDProxy NDIS Proxy netbt netbt nfrd960 nfrd960 nsiproxy NSI proxy service ntrigdig N-trig HID Tablet Driver Null Null nvraid NVIDIA nForce RAID Driver nvstor nvstor nv_agp NVIDIA nForce AGP Bus Filter NwlnkFlt IPX Traffic Filter Driver NwlnkFwd IPX Traffic Forwarder Driver ohci1394 NEC FireWarden OHCI Compliant IEEE 1394 Host Controller Parport Parallel port driver partmgr Partition Manager Parvdm Parvdm pci PCI Bus Driver pciide pciide pcmcia pcmcia PEAUTH PEAUTH PptpMini WAN Miniport (PPTP) Processo Processor Driver PSched QoS Packet Scheduler ql2300 QLogic Fibre Channel Miniport Driver ql40xx QLogic iSCSI Miniport Driver QWAVEdrv QWAVE driver RasAcd Remote Access Auto Connection Driver Rasl2tp WAN Miniport (L2TP) RasPppoe Remote Access PPPOE Driver RasSstp WAN Miniport (SSTP) RDPCDD RDPCDD rdpdr Terminal Server Device Redirector Driver RDPENCDD RDP Encoder Mirror Driver RDPWD RDP Winstation Driver rspndr Link-Layer Topology Discovery Responder sbp2port SBP-2 Transport/Protocol Bus Driver secdrv Security Driver Serenum Serenum Filter Driver Serial Serial Port Driver sermouse Serial Mouse Driver sffdisk SFF Storage Class Driver sffp_mmc SFF Storage Protocol Driver for MMC sffp_sd SFF Storage Protocol Driver for SDBus sfloppy High-Capacity Floppy Disk Drive sisagp SIS AGP Bus Filter SiSRaid2 SiSRaid2 SiSRaid4 SiSRaid4 Smb Message-oriented TCP/IP and TCP/IPv6 Protocol (SMB session) spldr Security Processor Loader Driver swenum Software Bus Driver Symc8xx Symc8xx Sym_hi Sym_hi Sym_u3 Sym_u3 Tcpip TCP/IP Protocol Driver Tcpip6 Microsoft IPv6 Protocol Driver tcpipreg TCP/IP Registry Compatibility TDPIPE TDPIPE TDTCP TDTCP tdx NetIO Legacy TDI Support Driver TermDD Terminal Device Driver tssecsrv Terminal Services Security Filter Driver tunnel Microsoft IPv6 Tunnel Miniport Adapter Driver uagp35 Microsoft AGPv3.5 Filter uliagpkx Uli AGP Bus Filter uliahci uliahci UlSata UlSata ulsata2 ulsata2 umbus UMBus Enumerator Driver usbccgp Microsoft USB Generic Parent Driver usbcir eHome Infrared Receiver (USBCIR) usbehci Microsoft USB 2.0 Enhanced Host Controller Miniport Driver usbhub USB2 Enabled Hub usbohci Microsoft USB Open Host Controller Miniport Driver usbprint Microsoft USB PRINTER Class USBSTOR USB Mass Storage Driver usbuhci Microsoft USB Universal Host Controller Miniport Driver vga vga VgaSave VgaSave viaagp VIA AGP Bus Filter ViaC7 VIA C7 Processor Driver viaide viaide vmci VMware VMCI Bus Driver vmdebug VMware Replay Debugging Helper VMMEMCTL Memory Control Driver vmmouse VMware Pointing Device vmrawdsk VMware Vista Physical Disk Helper vmx_svga vmx_svga volmgr Volume Manager Driver volmgrx Dynamic Volume Manager volsnap Storage volumes vsmraid vsmraid WacomPen Wacom Serial Pen HID Driver Wanarp Remote Access IP ARP Driver Wanarpv6 Remote Access IPv6 ARP Driver Wd Microsoft Watchdog Timer Driver Wdf01000 Kernel Mode Driver Frameworks service WmiAcpi Microsoft Windows Management Interface for ACPI ws2ifsl Windows Socket 2.0 Non-IFS Service Provider Support Environment 190 kernel mode drivers File system and filter drivers: bowser bowser cdfs CD/DVD File System Reader DfsC DFS Namespace Client Driver exfat exFAT File System Driver fastfat FAT12/16/32 File System Driver FileInfo File Information FS MiniFilter Filetrac Filetrace FltMgr FltMgr luafv UAC File Virtualization MRxDAV WebDav Client Redirector Driver mrxsmb SMB MiniRedirector Wrapper and Engine mrxsmb10 SMB 1.x MiniRedirector mrxsmb20 SMB 2.0 MiniRedirector Msfs Msfs Mup Mup NetBIOS NetBIOS Interface Npfs Npfs Ntfs Ntfs rdbss Redirected Buffering Sub Sysytem srv srv srv2 srv2 srvnet srvnet udfs udfs vmhgfs vmhgfs 24 file system and filter drivers Adapter drivers: 0 adapter drivers Recognizer drivers: 0 recognizer drivers 214 device drivers Dump ended on 7/27/2012 at 12:2:6.49 ========================================================================= =========================================================================