I now suspect that the problem is in THttpCli with keep-alive timeout of web server. For example,
Keep-Alive: max=99, timeout=5 means there will be a maximum of 99 requests per connection with 5 secs timeout. This is a response header. I suspect the component does not detect connection close well. Regards, SZ ----- Original Message ----- From: "Arno Garrels" <[EMAIL PROTECTED]> To: "ICS support mailing" <[email protected]> Sent: Tuesday, April 10, 2007 9:51 AM Subject: Re: [twsocket] Very strange Abnormal Program Termination > Fastream Technologies wrote: >> Hello, >> >> The client still complains and he provides the following info: >> >> - This is a HTTP reverse proxy >> - He uses a Lotus Domino web server (which is based on Apache) that >> uses chunked encoding as well as content-length >> - The problem occurs when keep-alive is enabled >> - IQ web server which uses the same code base except the HTTPCli part >> does not have any problem >> - MadExcept does not give any "Abnormal Program Termination"s as >> before Arno's unit >> >> SO, I believe the problem lies in THttpCli--in keep-alive and/or >> chunked encoding and/or POST. > > If the problem lies in THttpCli you should be able to reproduce > that with a very simple HttpCli demo application. You also should > check whether the problem exists when you compile with > OverbyteIcsHttpProt.pas from current ICS V6 Beta download. > > -- > Arno Garrels [TeamICS] > http://www.overbyte.be/eng/overbyte/teamics.html > >>I do not understand why it does not >> accept in new connections though. Perhaps the connections are hung >> and the maximum connections number is reached(?). > > > > >> Regards, >> >> SZ >> >> ----- Original Message ----- >> From: "Arno Garrels" <[EMAIL PROTECTED]> >> To: "ICS support mailing" <[email protected]> >> Sent: Saturday, April 07, 2007 8:34 PM >> Subject: Re: [twsocket] Very strange Abnormal Program Termination >> >> >>> Fastream Technologies wrote: >>>> Does that fixed version includes dynamic arrays for chunked >>>> encoding? Customer uses Apache which uses chunked encoding. >>> >>> Concerning chunked transfers Francois is the contact. >>> I'm a newbee in HTTP. >>> >>>> >>>> Regards, >>>> >>>> SZ >>>> >>>> ----- Original Message ----- >>>> From: "Arno Garrels" <[EMAIL PROTECTED]> >>>> To: "ICS support mailing" <[email protected]> >>>> Sent: Saturday, April 07, 2007 7:33 PM >>>> Subject: Re: [twsocket] Very strange Abnormal Program Termination >>>> >>>> >>>>> Fastream Technologies wrote: >>>>>> The comment is there in the HttpProt prior to your fix. Please >>>>>> send me the best version to this email address. We are an ICS-SSL >>>>>> contributor. >>>>> >>>>> So GET the fix from the URL I posted in one of my replies to this >>>>> thread today. >>>>> >>>>> -- >>>>> Arno Garrels [TeamICS] >>>>> http://www.overbyte.be/eng/overbyte/teamics.html >>>>> >>>>>> >>>>>> BR, >>>>>> >>>>>> SZ >>>>>> >>>>>> ----- Original Message ----- >>>>>> From: "Arno Garrels" <[EMAIL PROTECTED]> >>>>>> To: "ICS support mailing" <[email protected]> >>>>>> Sent: Saturday, April 07, 2007 6:52 PM >>>>>> Subject: Re: [twsocket] Very strange Abnormal Program Termination >>>>>> >>>>>> >>>>>>> Fastream Technologies wrote: >>>>>>>> Again you confused me! >>>>>>>> Isn't your code the latest v6 HttpCli? Or is >>>>>>>> there a better version from Francois? Or has the code forked?? >>>>>>> >>>>>>> Just tell me whether the comment is there or not! >>>>>>> The new version I'm talking about is included in the SSL V6 >>>>>>> package only (so far). >>>>>>> >>>>>>> -- >>>>>>> Arno Garrels [TeamICS] >>>>>>> http://www.overbyte.be/eng/overbyte/teamics.html >>>>>>> >>>>>>>> >>>>>>>> Regards, >>>>>>>> >>>>>>>> SZ >>>>>>>> >>>>>>>> ----- Original Message ----- >>>>>>>> From: "Arno Garrels" <[EMAIL PROTECTED]> >>>>>>>> To: "ICS support mailing" <[email protected]> >>>>>>>> Sent: Saturday, April 07, 2007 6:22 PM >>>>>>>> Subject: Re: [twsocket] Very strange Abnormal Program >>>>>>>> Termination >>>>>>>> >>>>>>>> >>>>>>>>> Fastream Technologies wrote: >>>>>>>>>> This seems more like a workaround than an actual fix. Why >>>>>>>>>> should one waste 8KB/THttpCli? Will there be a real fix? >>>>>>>>> >>>>>>>>> This comment is from Francois who implemented a new dynamic >>>>>>>>> buffer in order to get chunked transfer working. In these >>>>>>>>> changes I found a small bug. So _if_ you find this comment in >>>>>>>>> your V6 OverbyteIcsHttpProt.pas it indicates that it needs my >>>>>>>>> small fix, if you do not find it no fix is required. >>>>>>>>> >>>>>>>>> -- >>>>>>>>> Arno Garrels [TeamICS] >>>>>>>>> http://www.overbyte.be/eng/overbyte/teamics.html >>>>>>>>> >>>>>>>>>> >>>>>>>>>> Best Regards, >>>>>>>>>> >>>>>>>>>> SZ >>>>>>>>>> >>>>>>>>>> ----- Original Message ----- >>>>>>>>>> From: "Arno Garrels" <[EMAIL PROTECTED]> >>>>>>>>>> To: "ICS support mailing" <[email protected]> >>>>>>>>>> Sent: Saturday, April 07, 2007 4:43 PM >>>>>>>>>> Subject: Re: [twsocket] Very strange Abnormal Program >>>>>>>>>> Termination >>>>>>>>>> >>>>>>>>>> >>>>>>>>>>> Just a guess, if you find this comment in HttpProt.pas V6: >>>>>>>>>>> "// Make FReceiveBuffer at least 8KB larger than actually >>>>>>>>>>> received data" you should use my fix, I got the same error on >>>>>>>>>>> freeing the component. >>>>>>>>>>> >>>>>>>>>>> Fix: >>>>>>>>>>> http://www.duodata.de/misc/delphi/OverbyteIcsHttpProt.zip >>>>>>>>>>> >>>>>>>>>>> -- >>>>>>>>>>> Arno Garrels [TeamICS] >>>>>>>>>>> http://www.overbyte.be/eng/overbyte/teamics.html >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> Fastream Technologies wrote: >>>>>>>>>>>> Hello All, >>>>>>>>>>>> >>>>>>>>>>>> How could such a report be caused? >>>>>>>>>>>> >>>>>>>>>>>> Best Regards, >>>>>>>>>>>> >>>>>>>>>>>> SZ >>>>>>>>>>>> >>>>>>>>>>>> date/time : 2007-04-07, 15:49:41, 468ms >>>>>>>>>>>> computer name : FASTREAM >>>>>>>>>>>> user name : Fastream <admin> >>>>>>>>>>>> operating system : Windows 2003 Service Pack 2 build 3790 >>>>>>>>>>>> system language : Turkish >>>>>>>>>>>> system up time : 3 hours 32 minutes >>>>>>>>>>>> program up time : 38 seconds >>>>>>>>>>>> processors : 2x Intel(R) Core(TM)2 CPU 6600 @ 2.40GHz >>>>>>>>>>>> physical memory : 1371/2047 MB (free/total) >>>>>>>>>>>> free disk space : (C:) 39,03 GB (D:) 90,25 GB >>>>>>>>>>>> display mode : 1440x900, 32 bit >>>>>>>>>>>> process id : $1030 >>>>>>>>>>>> allocated memory : 22,66 MB >>>>>>>>>>>> executable : IQEngineDebug.exe >>>>>>>>>>>> exec. date/time : 2007-04-07 15:44 >>>>>>>>>>>> version : 6.7.5.1091 >>>>>>>>>>>> madExcept version : 3.0b >>>>>>>>>>>> contact name : Gorkem >>>>>>>>>>>> contact email : [EMAIL PROTECTED] >>>>>>>>>>>> callstack crc : $2f6122ed, $8b36da21, $75c34480 >>>>>>>>>>>> count : 2 >>>>>>>>>>>> exception number : 1 >>>>>>>>>>>> exception class : BcbTermination >>>>>>>>>>>> exception message : Abnormal program termination. >>>>>>>>>>>> >>>>>>>>>>>> thread $1218 (ReverseProxyThread): <priority:1> >>>>>>>>>>>> 004fe5e9 +011 IQEngineDebug.exe System >>>>>>>>>>>> TObject.FreeInstance >>>>>>>>>>>> 004fe99a +002 IQEngineDebug.exe System >>>>>>>>>>>> @ClassDestroy >>>>>>>>>>>> 004aff15 +045 IQEngineDebug.exe OverbyteIcsWSocket >>>>>>>>>>>> TCustomLineWSocket.Destroy >>>>>>>>>>>> 004fe62c +008 IQEngineDebug.exe System >>>>>>>>>>>> TObject.Free >>>>>>>>>>>> 004cff2c +01c IQEngineDebug.exe OverbyteIcsHttpProt >>>>>>>>>>>> THttpCli.Destroy >>>>>>>>>>>> 00422bbb +11f IQEngineDebug.exe >>>>>>>>>>>> ReverseProxyClientClassUnit.cpp 4238 +9 httpClient.Destroy >>>>>>>>>>>> 00497794 +088 IQEngineDebug.exe >>>>>>>>>>>> ReverseProxyClientManagerUnit.cpp 31 +6 >>>>>>>>>>>> httpClientContainer.Destroy 00497bab +14b IQEngineDebug.exe >>>>>>>>>>>> ReverseProxyClientManagerUnit.cpp 122 +44 >>>>>>>>>>>> httpClientManager.releaseHTTPClient 0042cb42 +216 >>>>>>>>>>>> IQEngineDebug.exe ReverseProxyThreadUnit.cpp 756 +42 >>>>>>>>>>>> ReverseProxyThread.processServerThreadMessage 0042c869 +011 >>>>>>>>>>>> IQEngineDebug.exe ReverseProxyThreadUnit.cpp 684 +8 >>>>>>>>>>>> ReverseProxyThread.messagePump 00429dd0 +118 >>>>>>>>>>>> IQEngineDebug.exe ReverseProxyThreadUnit.cpp 121 +17 >>>>>>>>>>>> ReverseProxyThread.Execute 005b21d7 +02b IQEngineDebug.exe >>>>>>>>>>>> Madexcept _17162 >>>>>>>>>>>> 004e2bf4 +034 IQEngineDebug.exe Classes >>>>>>>>>>>> _17197 >>>>>>>>>>>> 004ff490 +028 IQEngineDebug.exe System >>>>>>>>>>>> _16780 >>>>>>>>>>>> 005b20b9 +00d IQEngineDebug.exe Madexcept >>>>>>>>>>>> _17160 >>>>>>>>>>>> 005b2123 +037 IQEngineDebug.exe Madexcept >>>>>>>>>>>> _17161 >>>>>>>>>>>>>> created by main thread ($13fc) at: >>>>>>>>>>>> 004299a5 +059 IQEngineDebug.exe ReverseProxyThreadUnit.cpp >>>>>>>>>>>> 63 +0 ReverseProxyThread.Create >>>>>>>>>>>> >>>>>>>>>>>> main thread ($13fc): >>>>>>>>>>>> 7d94936a +000 USER32.dll >>>>>>>>>>>> 00528f39 +12d IQEngineDebug.exe Forms >>>>>>>>>>>> TApplication.Idle 005283ef +017 IQEngineDebug.exe Forms >>>>>>>>>>>> TApplication.HandleMessage >>>>>>>>>>>> 00528602 +096 IQEngineDebug.exe Forms >>>>>>>>>>>> TApplication.Run 00402835 +071 IQEngineDebug.exe >>>>>>>>>>>> IQEngineDebug.cpp 24 +8 WinMain 00588520 +14c >>>>>>>>>>>> IQEngineDebug.exe __startup >>>>>>>>>>>> >>>>>>>>>>>> thread $e60: >>>>>>>>>>>> 7d61d051 ntdll.dll >>>>>>>>>>>> >>>>>>>>>>>> thread $134c: <priority:1> >>>>>>>>>>>> 7d61c8a0 +00 ntdll.dll >>>>>>>>>>>> 005b20b9 +0d IQEngineDebug.exe Madexcept _17160 >>>>>>>>>>>> 005b2123 +37 IQEngineDebug.exe Madexcept _17161 >>>>>>>>>>>>>> created by main thread ($13fc) at: >>>>>>>>>>>> 7db4b854 +00 mswsock.dll >>>>>>>>>>>> >>>>>>>>>>>> thread $10e8: <suspended> >>>>>>>>>>>> 7d4d1504 +00 kernel32.dll >>>>>>>>>>>>>> created by main thread ($13fc) at: >>>>>>>>>>>> 005627b9 +3d IQEngineDebug.exe Authread >>>>>>>>>>>> TauEventThread.Create >>>>>>>>>>>> >>>>>>>>>>>> thread $1a5c (ReverseProxyClientThread): >>>>>>>>>>>> 7d947860 +00 USER32.dll >>>>>>>>>>>> 7d947bba +45 USER32.dll >>>>>>>>>>>> GetMessageA >>>>>>>>>>>> 004282a0 +20 IQEngineDebug.exe >>>>>>>>>>>> ReverseProxyClientThreadUnit.cpp 66 +4 >>>>>>>>>>>> ReverseProxyClientThread.messagePump 0042826d +1d >>>>>>>>>>>> IQEngineDebug.exe ReverseProxyClientThreadUnit.cpp 59 +7 >>>>>>>>>>>> ReverseProxyClientThread.Execute 005b21d7 +2b >>>>>>>>>>>> IQEngineDebug.exe Madexcept _17162 004e2bf4 +34 >>>>>>>>>>>> IQEngineDebug.exe Classes _17197 004ff490 +28 >>>>>>>>>>>> IQEngineDebug.exe System _16780 005b20b9 +0d >>>>>>>>>>>> IQEngineDebug.exe Madexcept _17160 005b2123 +37 >>>>>>>>>>>> IQEngineDebug.exe Madexcept _17161 >>>>>>>>>>>>>> created by thread $1218 (ReverseProxyThread) at: >>>>>>>>>>>> 00428185 +59 IQEngineDebug.exe >>>>>>>>>>>> ReverseProxyClientThreadUnit.cpp 34 +0 >>>>>>>>>>>> ReverseProxyClientThread.Create >>>>>>>>>>>> >>>>>>>>>>>> thread $8d4 (ReverseProxyClientThread): >>>>>>>>>>>> 7d947860 +00 USER32.dll >>>>>>>>>>>> 7d947bba +45 USER32.dll >>>>>>>>>>>> GetMessageA >>>>>>>>>>>> 004282a0 +20 IQEngineDebug.exe >>>>>>>>>>>> ReverseProxyClientThreadUnit.cpp 66 +4 >>>>>>>>>>>> ReverseProxyClientThread.messagePump 0042826d +1d >>>>>>>>>>>> IQEngineDebug.exe ReverseProxyClientThreadUnit.cpp 59 +7 >>>>>>>>>>>> ReverseProxyClientThread.Execute 005b21d7 +2b >>>>>>>>>>>> IQEngineDebug.exe Madexcept _17162 004e2bf4 +34 >>>>>>>>>>>> IQEngineDebug.exe Classes _17197 004ff490 +28 >>>>>>>>>>>> IQEngineDebug.exe System _16780 005b20b9 +0d >>>>>>>>>>>> IQEngineDebug.exe Madexcept _17160 005b2123 +37 >>>>>>>>>>>> IQEngineDebug.exe Madexcept _17161 >>>>>>>>>>>>>> created by thread $1218 (ReverseProxyThread) at: >>>>>>>>>>>> 00428185 +59 IQEngineDebug.exe >>>>>>>>>>>> ReverseProxyClientThreadUnit.cpp 34 +0 >>>>>>>>>>>> ReverseProxyClientThread.Create >>>>>>>>>>>> >>>>>>>>>>>> thread $f90: >>>>>>>>>>>> 7d61cca8 ntdll.dll >>>>>>>>>>>> >>>>>>>>>>>> thread $12d0: >>>>>>>>>>>> 7d61c8a0 ntdll.dll >>>>>>>>>>>> >>>>>>>>>>>> thread $1a8c (ReverseProxyClientThread): >>>>>>>>>>>> 7d947860 +00 USER32.dll >>>>>>>>>>>> 7d947bba +45 USER32.dll >>>>>>>>>>>> GetMessageA >>>>>>>>>>>> 004282a0 +20 IQEngineDebug.exe >>>>>>>>>>>> ReverseProxyClientThreadUnit.cpp 66 +4 >>>>>>>>>>>> ReverseProxyClientThread.messagePump 0042826d +1d >>>>>>>>>>>> IQEngineDebug.exe ReverseProxyClientThreadUnit.cpp 59 +7 >>>>>>>>>>>> ReverseProxyClientThread.Execute 005b21d7 +2b >>>>>>>>>>>> IQEngineDebug.exe Madexcept _17162 004e2bf4 +34 >>>>>>>>>>>> IQEngineDebug.exe Classes _17197 004ff490 +28 >>>>>>>>>>>> IQEngineDebug.exe System _16780 005b20b9 +0d >>>>>>>>>>>> IQEngineDebug.exe Madexcept _17160 005b2123 +37 >>>>>>>>>>>> IQEngineDebug.exe Madexcept _17161 >>>>>>>>>>>>>> created by thread $1218 (ReverseProxyThread) at: >>>>>>>>>>>> 00428185 +59 IQEngineDebug.exe >>>>>>>>>>>> ReverseProxyClientThreadUnit.cpp 34 +0 >>>>>>>>>>>> ReverseProxyClientThread.Create >>>>>>>>>>>> >>>>>>>>>>>> modules: >>>>>>>>>>>> 00400000 IQEngineDebug.exe 6.7.5.1091 >>>>>>>>>>>> D:\Fastream\Current Projects\IQRP Engine >>>>>>>>>>>> 007c0000 ADVAPI32.DLL 5.2.3790.3959 >>>>>>>>>>>> C:\WINDOWS\syswow64 00860000 SHLWAPI.dll 6.0.3790.3959 >>>>>>>>>>>> C:\WINDOWS\syswow64 008c0000 OLEAUT32.DLL 5.2.3790.3959 >>>>>>>>>>>> C:\WINDOWS\syswow64 00950000 Normaliz.dll 6.0.5441.0 >>>>>>>>>>>> C:\WINDOWS\syswow64 03ae0000 SSLEAY32.DLL 0.9.8.1 >>>>>>>>>>>> D:\Fastream\Current Projects\IQRP Engine >>>>>>>>>>>> 03ea0000 IP2LOC~1.DLL 1.0.0.1 >>>>>>>>>>>> D:\Fastream\CURREN~1\IQWFSE~1 10000000 LIBEAY32.DLL >>>>>>>>>>>> 0.9.8.1 D:\Fastream\Current Projects\IQRP Engine >>>>>>>>>>>> 4b3c0000 MSCTF.dll 5.2.3790.3959 >>>>>>>>>>>> C:\WINDOWS\SysWOW64 4dc30000 msctfime.ime 5.2.3790.3959 >>>>>>>>>>>> C:\WINDOWS\system32 5f270000 hnetcfg.dll 5.2.3790.3959 >>>>>>>>>>>> C:\WINDOWS\system32 6e850000 iertutil.dll >>>>>>>>>>>> 7.0.6000.16414 C:\WINDOWS\syswow64 71720000 WININET.DLL >>>>>>>>>>>> 7.0.6000.16414 C:\WINDOWS\syswow64 71ae0000 wshtcpip.dll >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\System32 71bb0000 WSOCK32.DLL >>>>>>>>>>>> 5.2.3790.0 C:\WINDOWS\system32 71bf0000 WS2HELP.dll >>>>>>>>>>>> 5.2.3790.1830 C:\WINDOWS\system32 71c00000 WS2_32.dll >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\system32 71c40000 NETAPI32.dll >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\syswow64 71e00000 msapsspc.dll >>>>>>>>>>>> 6.0.0.7755 C:\WINDOWS\system32 71e20000 msnsspc.dll >>>>>>>>>>>> 6.1.1825.0 C:\WINDOWS\system32 71f60000 security.dll >>>>>>>>>>>> 5.2.3790.0 C:\WINDOWS\system32 722f0000 sensapi.dll >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\system32 726d0000 urlmon.dll >>>>>>>>>>>> 7.0.6000.16414 C:\WINDOWS\syswow64 75da0000 SXS.DLL >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\system32 75e60000 apphelp.dll >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\system32 76190000 MSASN1.dll >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\syswow64 761b0000 CRYPT32.dll >>>>>>>>>>>> 5.131.3790.3959 C:\WINDOWS\syswow64 762b0000 COMDLG32.DLL >>>>>>>>>>>> 6.0.3790.3959 C:\WINDOWS\syswow64 76920000 USERENV.dll >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\system32 76aa0000 WINMM.dll >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\system32 76b70000 PSAPI.DLL >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\system32 76c90000 msv1_0.DLL >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\SysWOW64 76cf0000 IPHLPAPI.DLL >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\system32 76e30000 rtutils.dll >>>>>>>>>>>> 5.2.3790.1830 C:\WINDOWS\system32 76e40000 rasman.dll >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\system32 76e60000 TAPI32.dll >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\system32 76e90000 RASAPI32.dll >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\system32 76ed0000 DNSAPI.dll >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\system32 76f10000 WLDAP32.dll >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\syswow64 76f70000 winrnr.dll >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\System32 76f80000 rasadhlp.dll >>>>>>>>>>>> 5.2.3790.3959 C:\WINDOWS\system32 77010000 COMRes.dll >>>>>>>>>>>> 2001.12.4720.3959 C:\WINDOWS\system32 77530000 COMCTL32.DLL >>>>>>>>>>>> 5.82.3790.3959 >>>>>>>>>>>> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common- >>>>>>>>>>>> Controls_6595b64144ccf1df_5.82.3790.3959_x-ww_78FCF8D0 >>>>>>>>>>>> 77670000 OLE32.DLL 5.2.3790.3959 >>>>>>>>>>>> C:\WINDOWS\syswow64 777b0000 CLBCatQ.DLL 2001.12.4720.3959 >>>>>>>>>>>> C:\WINDOWS\system32 77b90000 VERSION.DLL 5.2.3790.1830 >>>>>>>>>>>> C:\WINDOWS\syswow64 77ba0000 msvcrt.dll 7.0.3790.3959 >>>>>>>>>>>> C:\WINDOWS\syswow64 78080000 MSVCRT40.dll 5.2.3790.0 >>>>>>>>>>>> C:\WINDOWS\system32 7c8d0000 SHELL32.dll 6.0.3790.3959 >>>>>>>>>>>> C:\WINDOWS\syswow64 7d4c0000 kernel32.dll 5.2.3790.3959 >>>>>>>>>>>> C:\WINDOWS\syswow64 7d600000 ntdll.dll 5.2.3790.3959 >>>>>>>>>>>> C:\WINDOWS\system32 7d800000 GDI32.dll 5.2.3790.4033 >>>>>>>>>>>> C:\WINDOWS\syswow64 7d8d0000 Secur32.dll 5.2.3790.3959 >>>>>>>>>>>> C:\WINDOWS\syswow64 7d930000 USER32.dll 5.2.3790.4033 >>>>>>>>>>>> C:\WINDOWS\syswow64 7da20000 RPCRT4.dll 5.2.3790.3959 >>>>>>>>>>>> C:\WINDOWS\syswow64 7db30000 mswsock.dll 5.2.3790.3959 >>>>>>>>>>>> C:\WINDOWS\system32 7dbd0000 comctl32.dll 6.0.3790.3959 >>>>>>>>>>>> C:\WINDOWS\WinSxS\WOW64_Microsoft.Windows.Common- >>>>>>>>>>>> Controls_6595b64144ccf1df_6.0.3790.3959_x-ww_5FA17F4E >>>>>>>>>>>> 7dee0000 IMM32.DLL 5.2.3790.3959 >>>>>>>>>>>> C:\WINDOWS\system32 7df50000 uxtheme.dll 6.0.3790.3959 >>>>>>>>>>>> C:\WINDOWS\system32 >>>>>>>>>>>> >>>>>>>>>>>> processes: >>>>>>>>>>>> 0000 Idle >>>>>>>>>>>> 0004 System normal >>>>>>>>>>>> 0140 smss.exe normal >>>>>>>>>>>> 01f0 csrss.exe >>>>>>>>>>>> 020c winlogon.exe high >>>>>>>>>>>> 023c services.exe normal >>>>>>>>>>>> 0250 lsass.exe normal >>>>>>>>>>>> 0308 ati2evxx.exe normal >>>>>>>>>>>> 0330 svchost.exe normal >>>>>>>>>>>> 0364 svchost.exe >>>>>>>>>>>> 0394 svchost.exe normal >>>>>>>>>>>> 03c8 svchost.exe >>>>>>>>>>>> 03ec svchost.exe >>>>>>>>>>>> 044c spoolsv.exe normal >>>>>>>>>>>> 04a4 ati2evxx.exe normal >>>>>>>>>>>> 05e0 svchost.exe normal >>>>>>>>>>>> 0620 inetinfo.exe normal >>>>>>>>>>>> 0728 explorer.exe normal >>>>>>>>>>>> 0754 mdm.exe normal C:\Program Files >>>>>>>>>>>> (x86)\Common Files\Microsoft Shared\VS7Debug >>>>>>>>>>>> 0304 svchost.exe >>>>>>>>>>>> 0890 svchost.exe normal >>>>>>>>>>>> 08e8 ctfmon.exe normal >>>>>>>>>>>> 0930 wmiprvse.exe >>>>>>>>>>>> 0988 ctfmon.exe normal C:\WINDOWS\SysWOW64 >>>>>>>>>>>> 09d4 AnonTns.exe normal C:\Program Files >>>>>>>>>>>> (x86)\Anonymizer TNS 09dc Smax4.exe normal >>>>>>>>>>>> C:\Program Files (x86)\Analog Devices\SoundMAX >>>>>>>>>>>> 0a04 smax4pnp.exe normal C:\Program Files >>>>>>>>>>>> (x86)\Analog Devices\Core >>>>>>>>>>>> 0a18 JMRaidTool.exe normal C:\WINDOWS\SysWOW64 >>>>>>>>>>>> 0b04 alg.exe >>>>>>>>>>>> 12cc taskmgr.exe high >>>>>>>>>>>> 1700 msnmsgr.exe normal C:\Program Files >>>>>>>>>>>> (x86)\MSN Messenger 1224 usnsvc.exe normal >>>>>>>>>>>> C:\Program Files (x86)\MSN Messenger 1a68 >>>>>>>>>>>> IQWebFTPServerEngine.exe normal D:\Fastream\Current >>>>>>>>>>>> Projects\IQWF Server Engine 1a80 httpd.exe >>>>>>>>>>>> normal C:\Program Files (x86)\Apache Software >>>>>>>>>>>> Foundation\Apache2.2\bin 0354 httpd.exe >>>>>>>>>>>> normal C:\Program Files (x86)\Apache Software >>>>>>>>>>>> Foundation\Apache2.2\bin 1030 IQEngineDebug.exe >>>>>>>>>>>> normal D:\Fastream\Current Projects\IQRP Engine >>>>>>>>>>>> 14d0 WebStressTester.exe normal D:\Fastream\Current >>>>>>>>>>>> Projects\Web Stress Tester\Release_Build >>>>>>>>>>>> >>>>>>>>>>>> hardware: >>>>>>>>>>>> + Bluetooth >>>>>>>>>>>> - Bluetooth RFBNEP (driver 4.0.920.0) >>>>>>>>>>>> - Bluetooth RFBUS (driver 4.0.915.0) >>>>>>>>>>>> - Bluetooth RFCOMM (driver 4.0.920.0) >>>>>>>>>>>> - Bluetooth RFHID (driver 4.0.903.0) >>>>>>>>>>>> + Computer >>>>>>>>>>>> - ACPI Multiprocessor x64-based PC >>>>>>>>>>>> + Disk drives >>>>>>>>>>>> - Generic USB CF Reader USB Device >>>>>>>>>>>> - Generic USB MS Reader USB Device >>>>>>>>>>>> - Generic USB SD Reader USB Device >>>>>>>>>>>> - Generic USB SM Reader USB Device >>>>>>>>>>>> - WDC WD3200KS-00PFB0 >>>>>>>>>>>> + Display adapters >>>>>>>>>>>> - Radeon X1600 Series (driver 8.342.0.0) >>>>>>>>>>>> - Radeon X1600 Series Secondary (driver 8.342.0.0) >>>>>>>>>>>> + DVD/CD-ROM drives >>>>>>>>>>>> - HJ3430V FJN164M SCSI CdRom Device >>>>>>>>>>>> - SATA DVD-RAM GSA-H22N SCSI CdRom Device >>>>>>>>>>>> + IDE ATA/ATAPI controllers >>>>>>>>>>>> - Intel(R) ICH8 2 port Serial ATA Storage Controller - >>>>>>>>>>>> 2825 (driver 8.0.0.1008) >>>>>>>>>>>> - Intel(R) ICH8 4 port Serial ATA Storage Controller - >>>>>>>>>>>> 2820 (driver 8.0.0.1008) >>>>>>>>>>>> - Primary IDE Channel >>>>>>>>>>>> - Primary IDE Channel >>>>>>>>>>>> - Secondary IDE Channel >>>>>>>>>>>> - Secondary IDE Channel >>>>>>>>>>>> + Keyboards >>>>>>>>>>>> - Standard 101/102-Key or Microsoft Natural PS/2 Keyboard >>>>>>>>>>>> + Mice and other pointing devices >>>>>>>>>>>> - Microsoft PS/2 Mouse >>>>>>>>>>>> + Modems >>>>>>>>>>>> - Standard 33600 bps Modem >>>>>>>>>>>> + Monitors >>>>>>>>>>>> - Plug and Play Monitor >>>>>>>>>>>> + Network adapters >>>>>>>>>>>> - Bluetooth Personal Area Network (driver 4.0.920.0) >>>>>>>>>>>> - Realtek RTL8168/8111 PCI-E Gigabit Ethernet NIC (driver >>>>>>>>>>>> 5.646.727.2006) + Ports (COM & LPT) >>>>>>>>>>>> - BT Port (COM10) >>>>>>>>>>>> - BT Port (COM11) >>>>>>>>>>>> - BT Port (COM12) >>>>>>>>>>>> - BT Port (COM13) >>>>>>>>>>>> - BT Port (COM14) >>>>>>>>>>>> - BT Port (COM20) >>>>>>>>>>>> - BT Port (COM21) >>>>>>>>>>>> - BT Port (COM6) >>>>>>>>>>>> - BT Port (COM7) >>>>>>>>>>>> - Communications Port (COM1) >>>>>>>>>>>> - ECP Printer Port (LPT1) >>>>>>>>>>>> + Processors >>>>>>>>>>>> - Intel(R) Core(TM)2 CPU 6600 @ 2.40GHz >>>>>>>>>>>> - Intel(R) Core(TM)2 CPU 6600 @ 2.40GHz >>>>>>>>>>>> + SCSI and RAID controllers >>>>>>>>>>>> - JMicron JMB36X RAID Controller (driver 5.2.3790.104) >>>>>>>>>>>> - JMicron JMB36X RAID Processor (driver 5.2.3790.104) >>>>>>>>>>>> - SCSI/RAID Host Controller >>>>>>>>>>>> + Sound, video and game controllers >>>>>>>>>>>> - Audio Codecs >>>>>>>>>>>> - Legacy Audio Drivers >>>>>>>>>>>> - Legacy Video Capture Devices >>>>>>>>>>>> - Media Control Devices >>>>>>>>>>>> - SoundMAX Integrated Digital HD Audio (driver >>>>>>>>>>>> 5.10.2.4530) - Video Codecs >>>>>>>>>>>> + System devices >>>>>>>>>>>> - ACPI Fixed Feature Button >>>>>>>>>>>> - ACPI Power Button >>>>>>>>>>>> - ATK0110 ACPI UTILITY (driver 1043.2.15.37) >>>>>>>>>>>> - Direct memory access controller >>>>>>>>>>>> - Extended IO Bus >>>>>>>>>>>> - High Precision Event Timer (driver 7.0.0.1011) >>>>>>>>>>>> - Intel(R) 82801 PCI Bridge - 244E (driver 7.0.0.1011) >>>>>>>>>>>> - Intel(R) ICH8 Family PCI Express Root Port 1 - 283F >>>>>>>>>>>> (driver 8.0.0.1010) - Intel(R) ICH8 Family PCI Express >>>>>>>>>>>> Root Port 4 - 2845 (driver 8.0.0.1010) - Intel(R) ICH8 >>>>>>>>>>>> Family PCI Express Root Port 5 - 2847 (driver 8.0.0.1010) >>>>>>>>>>>> - Intel(R) ICH8 Family SMBus Controller - 283E (driver >>>>>>>>>>>> 8.0.0.1008) - Intel(R) ICH8/ICH8R Family LPC Interface >>>>>>>>>>>> Controller - 2810 (driver 8.0.0.1010) - Intel(R) P965/G965 >>>>>>>>>>>> PCI Express Root Port - 29A1 (driver 8.0.0.1010) - >>>>>>>>>>>> Intel(R) P965/G965 Processor to I/O Controller - 29A0 >>>>>>>>>>>> (driver 8.0.0.1010) - Logical Disk Manager >>>>>>>>>>>> - Microcode Update Device >>>>>>>>>>>> - Microsoft ACPI-Compliant System >>>>>>>>>>>> - Microsoft System Management BIOS Driver >>>>>>>>>>>> - Microsoft UAA Bus Driver for High Definition Audio >>>>>>>>>>>> - Motherboard resources >>>>>>>>>>>> - Motherboard resources >>>>>>>>>>>> - Motherboard resources >>>>>>>>>>>> - Motherboard resources >>>>>>>>>>>> - Numeric data processor >>>>>>>>>>>> - PCI bus >>>>>>>>>>>> - Plug and Play Software Device Enumerator >>>>>>>>>>>> - Printer Port Logical Interface >>>>>>>>>>>> - Programmable interrupt controller >>>>>>>>>>>> - System board >>>>>>>>>>>> - System board >>>>>>>>>>>> - System CMOS/real time clock >>>>>>>>>>>> - System speaker >>>>>>>>>>>> - System timer >>>>>>>>>>>> - Terminal Server Device Redirector >>>>>>>>>>>> - Terminal Server Keyboard Driver >>>>>>>>>>>> - Terminal Server Mouse Driver >>>>>>>>>>>> - Volume Manager >>>>>>>>>>>> + Universal Serial Bus controllers >>>>>>>>>>>> - Generic Bluetooth Radio (driver 4.0.1216.0) >>>>>>>>>>>> - Intel(R) ICH8 Family USB Universal Host Controller - >>>>>>>>>>>> 2830 (driver 8.0.0.1008) >>>>>>>>>>>> - Intel(R) ICH8 Family USB Universal Host Controller - >>>>>>>>>>>> 2831 (driver 8.0.0.1008) >>>>>>>>>>>> - Intel(R) ICH8 Family USB Universal Host Controller - >>>>>>>>>>>> 2832 (driver 8.0.0.1008) >>>>>>>>>>>> - Intel(R) ICH8 Family USB Universal Host Controller - >>>>>>>>>>>> 2834 (driver 8.0.0.1008) >>>>>>>>>>>> - Intel(R) ICH8 Family USB Universal Host Controller - >>>>>>>>>>>> 2835 (driver 8.0.0.1008) >>>>>>>>>>>> - Intel(R) ICH8 Family USB2 Enhanced Host Controller - >>>>>>>>>>>> 2836 (driver 8.0.0.1008) >>>>>>>>>>>> - Intel(R) ICH8 Family USB2 Enhanced Host Controller - >>>>>>>>>>>> 283A (driver 8.0.0.1008) >>>>>>>>>>>> - USB Mass Storage Device >>>>>>>>>>>> - USB Root Hub >>>>>>>>>>>> - USB Root Hub >>>>>>>>>>>> - USB Root Hub >>>>>>>>>>>> - USB Root Hub >>>>>>>>>>>> - USB Root Hub >>>>>>>>>>>> - USB Root Hub >>>>>>>>>>>> - USB Root Hub >>>>>>>>>>>> >>>>>>>>>>>> disassembling: >>>>>>>>>>>> [...] >>>>>>>>>>>> 00422baa xor eax, eax >>>>>>>>>>>> 00422bac mov [edx+$42f0], eax >>>>>>>>>>>> 00422bb2 sub dword ptr [ebp-$24], $3e >>>>>>>>>>>> 00422bb6 xor edx, edx >>>>>>>>>>>> 00422bb8 mov eax, [ebp-4] >>>>>>>>>>>> 00422bbb > call +$ad350 ($4cff10) ; >>>>>>>>>>>> Overbyteicshttpprot.THttpCli.Destroy >>>>>>>>>>>> 00422bc0 4239 mov edx, [ebp-$40] >>>>>>>>>>>> 00422bc3 mov fs:[0], edx >>>>>>>>>>>> 00422bca mov cl, [ebp-$41] >>>>>>>>>>>> 00422bcd test cl, cl >>>>>>>>>>>> 00422bcf jle loc_422bd9 >>>>>>>>>>>> [...] >>>>>>>>>>> -- >>>>>>>>>>> To unsubscribe or change your settings for TWSocket mailing >>>>>>>>>>> list please goto >>>>>>>>>>> http://www.elists.org/mailman/listinfo/twsocket Visit our >>>>>>>>>>> website at http://www.overbyte.be >>>>>>>>> -- >>>>>>>>> To unsubscribe or change your settings for TWSocket mailing >>>>>>>>> list please goto >>>>>>>>> http://www.elists.org/mailman/listinfo/twsocket Visit our >>>>>>>>> website at http://www.overbyte.be >>>>>>> -- >>>>>>> To unsubscribe or change your settings for TWSocket mailing list >>>>>>> please goto http://www.elists.org/mailman/listinfo/twsocket >>>>>>> Visit our website at http://www.overbyte.be >>>>> -- >>>>> To unsubscribe or change your settings for TWSocket mailing list >>>>> please goto http://www.elists.org/mailman/listinfo/twsocket >>>>> Visit our website at http://www.overbyte.be >>> -- >>> To unsubscribe or change your settings for TWSocket mailing list >>> please goto http://www.elists.org/mailman/listinfo/twsocket >>> Visit our website at http://www.overbyte.be > -- > To unsubscribe or change your settings for TWSocket mailing list > please goto http://www.elists.org/mailman/listinfo/twsocket > Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://www.elists.org/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
