| 1 | Log created: 2008-01-16T22:15:24.011572000Z
|
|---|
| 2 | Executable: /usr/lib/virtualbox/VirtualBox
|
|---|
| 3 | Arg[0]: /usr/lib/virtualbox/VirtualBox
|
|---|
| 4 | Arg[1]: -comment
|
|---|
| 5 | Arg[2]: XP
|
|---|
| 6 | Arg[3]: -startvm
|
|---|
| 7 | Arg[4]: f8fa7a46-6204-4d88-f7a8-a9316a9665ff
|
|---|
| 8 |
|
|---|
| 9 | The mappings are FLOATING.
|
|---|
| 10 | ea800000 - eaffffff Hypervisor Memory Area
|
|---|
| 11 |
|
|---|
| 12 | Virtual handlers:
|
|---|
| 13 | WRITE 0015a000-0015afff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 14 | Physical page 00000 ffffffff
|
|---|
| 15 | WRITE 0080a000-0080afff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 16 | Physical page 00000 ffffffff
|
|---|
| 17 | WRITE 0080b000-0080bfff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 18 | Physical page 00000 ffffffff
|
|---|
| 19 | WRITE 0080d000-0080dfff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 20 | Physical page 00000 ffffffff
|
|---|
| 21 | WRITE 00813000-00813fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 22 | Physical page 00000 ffffffff
|
|---|
| 23 | WRITE 0081a000-0081afff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 24 | Physical page 00000 ffffffff
|
|---|
| 25 | WRITE 00824000-00824fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 26 | Physical page 00000 ffffffff
|
|---|
| 27 | WRITE 00829000-00829fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 28 | Physical page 00000 ffffffff
|
|---|
| 29 | WRITE 0082a000-0082afff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 30 | Physical page 00000 ffffffff
|
|---|
| 31 | WRITE 00832000-00832fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 32 | Physical page 00000 ffffffff
|
|---|
| 33 | WRITE 0083e000-0083efff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 34 | Physical page 00000 ffffffff
|
|---|
| 35 | WRITE 00862000-00862fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 36 | Physical page 00000 ffffffff
|
|---|
| 37 | WRITE 00991000-00991fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 38 | Physical page 00000 ffffffff
|
|---|
| 39 | WRITE 03792000-03792fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 40 | Physical page 00000 ffffffff
|
|---|
| 41 | WRITE 0379c000-0379cfff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 42 | Physical page 00000 ffffffff
|
|---|
| 43 | WRITE 8003f000-8003f3ff size 00000400 Guest GDT write access handler
|
|---|
| 44 | Physical page 00000 0003f000
|
|---|
| 45 | WRITE 8003f400-8003fbff size 00000800 Guest IDT write access handler
|
|---|
| 46 | Physical page 00000 0003f400
|
|---|
| 47 | WRITE 80042000-80042087 size 00000088 Guest TSS write access handler
|
|---|
| 48 | Physical page 00000 00042000
|
|---|
| 49 | WRITE 80153000-80153fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 50 | Physical page 00000 00153000
|
|---|
| 51 | WRITE 80154000-80154fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 52 | Physical page 00000 00154000
|
|---|
| 53 | WRITE 80157000-80157fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 54 | Physical page 00000 00157000
|
|---|
| 55 | WRITE 80158000-80158fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 56 | Physical page 00000 00158000
|
|---|
| 57 | WRITE 80159000-80159fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 58 | Physical page 00000 00159000
|
|---|
| 59 | WRITE 8015a000-8015afff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 60 | Physical page 00000 0015a000
|
|---|
| 61 | WRITE 8015c000-8015cfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 62 | Physical page 00000 ffffffff
|
|---|
| 63 | WRITE 80806000-80806fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 64 | Physical page 00000 00806000
|
|---|
| 65 | WRITE 80807000-80807fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 66 | Physical page 00000 00807000
|
|---|
| 67 | WRITE 80808000-80808fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 68 | Physical page 00000 00808000
|
|---|
| 69 | WRITE 80809000-80809fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 70 | Physical page 00000 00809000
|
|---|
| 71 | WRITE 8080a000-8080afff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 72 | Physical page 00000 0080a000
|
|---|
| 73 | WRITE 8080b000-8080bfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 74 | Physical page 00000 0080b000
|
|---|
| 75 | WRITE 8080c000-8080cfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 76 | Physical page 00000 0080c000
|
|---|
| 77 | WRITE 8080d000-8080dfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 78 | Physical page 00000 0080d000
|
|---|
| 79 | WRITE 8080e000-8080efff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 80 | Physical page 00000 0080e000
|
|---|
| 81 | WRITE 8080f000-8080ffff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 82 | Physical page 00000 0080f000
|
|---|
| 83 | WRITE 80811000-80811fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 84 | Physical page 00000 00811000
|
|---|
| 85 | WRITE 80812000-80812fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 86 | Physical page 00000 00812000
|
|---|
| 87 | WRITE 80813000-80813fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 88 | Physical page 00000 00813000
|
|---|
| 89 | WRITE 80814000-80814fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 90 | Physical page 00000 00814000
|
|---|
| 91 | WRITE 80815000-80815fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 92 | Physical page 00000 00815000
|
|---|
| 93 | WRITE 80816000-80816fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 94 | Physical page 00000 00816000
|
|---|
| 95 | WRITE 80817000-80817fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 96 | Physical page 00000 00817000
|
|---|
| 97 | WRITE 80818000-80818fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 98 | Physical page 00000 00818000
|
|---|
| 99 | WRITE 80819000-80819fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 100 | Physical page 00000 00819000
|
|---|
| 101 | WRITE 8081d000-8081dfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 102 | Physical page 00000 0081d000
|
|---|
| 103 | WRITE 80824000-80824fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 104 | Physical page 00000 00824000
|
|---|
| 105 | WRITE 8082a000-8082afff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 106 | Physical page 00000 0082a000
|
|---|
| 107 | WRITE 80833000-80833fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 108 | Physical page 00000 00833000
|
|---|
| 109 | WRITE 80834000-80834fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 110 | Physical page 00000 00834000
|
|---|
| 111 | WRITE 80836000-80836fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 112 | Physical page 00000 00836000
|
|---|
| 113 | WRITE 8083c000-8083cfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 114 | Physical page 00000 0083c000
|
|---|
| 115 | WRITE 8083e000-8083efff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 116 | Physical page 00000 0083e000
|
|---|
| 117 | WRITE 80844000-80844fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 118 | Physical page 00000 00844000
|
|---|
| 119 | WRITE 8084e000-8084efff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 120 | Physical page 00000 0084e000
|
|---|
| 121 | WRITE 8084f000-8084ffff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 122 | Physical page 00000 0084f000
|
|---|
| 123 | WRITE 80857000-80857fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 124 | Physical page 00000 00857000
|
|---|
| 125 | WRITE 80865000-80865fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 126 | Physical page 00000 00865000
|
|---|
| 127 | WRITE 80925000-80925fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 128 | Physical page 00000 00925000
|
|---|
| 129 | WRITE 809f0000-809f0fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 130 | Physical page 00000 009f0000
|
|---|
| 131 | WRITE 83b92000-83b92fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 132 | Physical page 00000 03792000
|
|---|
| 133 | WRITE 83b93000-83b93fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 134 | Physical page 00000 03793000
|
|---|
| 135 | WRITE 83b9c000-83b9cfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 136 | Physical page 00000 0379c000
|
|---|
| 137 | WRITE 83bea000-83beafff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 138 | Physical page 00000 037ea000
|
|---|
| 139 | WRITEHYP ea80f090-ea80f88f size 00000800 Shadow IDT write access handler
|
|---|
| 140 | WRITEHYP ea810580-ea810607 size 00000088 Shadow TSS write access handler
|
|---|
| 141 | WRITEHYP eab1d000-eab2cfff size 00010000 Shadow GDT write access handler
|
|---|
| 142 | WRITEHYP eab2d000-eab3dfff size 00011000 Shadow LDT write access handler
|
|---|
| 143 | WRITE f722a000-f722afff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 144 | Physical page 00000 ffffffff
|
|---|
| 145 | WRITE f724d000-f724dfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 146 | Physical page 00000 ffffffff
|
|---|
| 147 | WRITE f7261000-f7261fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 148 | Physical page 00000 ffffffff
|
|---|
| 149 | WRITE f727d000-f727dfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 150 | Physical page 00000 ffffffff
|
|---|
| 151 | WRITE f72c8000-f72c8fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 152 | Physical page 00000 ffffffff
|
|---|
| 153 | WRITE f7531000-f7531fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 154 | Physical page 00000 03b5c000
|
|---|
| 155 | WRITE f75f6000-f75f6fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 156 | Physical page 00000 03993000
|
|---|
| 157 | WRITE f75f9000-f75f9fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 158 | Physical page 00000 03996000
|
|---|
| 159 | WRITE f75fa000-f75fafff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 160 | Physical page 00000 03997000
|
|---|
| 161 |
|
|---|
| 162 | Physical handlers: (PhysHandlers=319552 (0x4e040))
|
|---|
| 163 | From - To (incl) HandlerHC UserHC HandlerHC UserHC HandlerGC UserGC Type Description
|
|---|
| 164 | 00039000 - 00039fff b5e529c0 b3b51f98 f8dfe520 b3b51f98 ead68210 ea963f98 Write Guest Paging Access Handler
|
|---|
| 165 | 0003a000 - 0003afff b5e529c0 b3b5204c f8dfe520 b3b5204c ead68210 ea96404c Write Guest Paging Access Handler
|
|---|
| 166 | 0003b000 - 0003bfff b5e529c0 b3b51db8 f8dfe520 b3b51db8 ead68210 ea963db8 Write Guest Paging Access Handler
|
|---|
| 167 | 0003c000 - 0003cfff b5e529c0 b3b51df4 f8dfe520 b3b51df4 ead68210 ea963df4 Write Guest Paging Access Handler
|
|---|
| 168 | 0003d000 - 0003dfff b5e529c0 b3b51e6c f8dfe520 b3b51e6c ead68210 ea963e6c Write Guest Paging Access Handler
|
|---|
| 169 | 0003e000 - 0003efff b5e529c0 b3b52088 f8dfe520 b3b52088 ead68210 ea964088 Write Guest Paging Access Handler
|
|---|
| 170 | 000a0000 - 000bffff 00000000 b3c2fc30 00000000 b3c2fc30 ead497d0 ea827c30 MMIO VGA - VGA Video Buffer
|
|---|
| 171 | 000c0000 - 000c7fff 00000000 00000000 00000000 00000000 ead62100 00000000 Write VGA BIOS
|
|---|
| 172 | 000e0000 - 000e0fff 00000000 00000000 00000000 00000000 ead62100 00000000 Write ACPI RSDP
|
|---|
| 173 | 000e1000 - 000e1fff 00000000 00000000 00000000 00000000 ead62100 00000000 Write DMI tables
|
|---|
| 174 | 000e2000 - 000ecfff 00000000 00000000 00000000 00000000 ead62100 00000000 Write Net Boot ROM
|
|---|
| 175 | 000f0000 - 000fffff 00000000 00000000 00000000 00000000 ead62100 00000000 Write PC BIOS - 0xfffff
|
|---|
| 176 | 005f2000 - 005f2fff b5e529c0 b3b51d7c f8dfe520 b3b51d7c ead68210 ea963d7c Write Guest Paging Access Handler
|
|---|
| 177 | 005f7000 - 005f7fff b5e529c0 b3b51fd4 f8dfe520 b3b51fd4 ead68210 ea963fd4 Write Guest Paging Access Handler
|
|---|
| 178 | 0168e000 - 0168efff b5e529c0 b3b51ae8 f8dfe520 b3b51ae8 ead68210 ea963ae8 Write Guest Paging Access Handler
|
|---|
| 179 | 01690000 - 01690fff b5e529c0 b3b51d04 f8dfe520 b3b51d04 ead68210 ea963d04 Write Guest Paging Access Handler
|
|---|
| 180 | 01691000 - 01691fff b5e529c0 b3b52010 f8dfe520 b3b52010 ead68210 ea964010 Write Guest Paging Access Handler
|
|---|
| 181 | 01692000 - 01692fff b5e529c0 b3b51f20 f8dfe520 b3b51f20 ead68210 ea963f20 Write Guest Paging Access Handler
|
|---|
| 182 | 01693000 - 01693fff b5e529c0 b3b520c4 f8dfe520 b3b520c4 ead68210 ea9640c4 Write Guest Paging Access Handler
|
|---|
| 183 | 03800000 - 03800fff b5e529c0 b3b51f5c f8dfe520 b3b51f5c ead68210 ea963f5c Write Guest Paging Access Handler
|
|---|
| 184 | 03801000 - 03801fff b5e529c0 b3b51e30 f8dfe520 b3b51e30 ead68210 ea963e30 Write Guest Paging Access Handler
|
|---|
| 185 | 03808000 - 03808fff b5e529c0 b3b51ea8 f8dfe520 b3b51ea8 ead68210 ea963ea8 Write Guest Paging Access Handler
|
|---|
| 186 | 03900000 - 03900fff b5e529c0 b3b51ee4 f8dfe520 b3b51ee4 ead68210 ea963ee4 Write Guest Paging Access Handler
|
|---|
| 187 | 0478c000 - 0478cfff b5e529c0 b3b51c8c f8dfe520 b3b51c8c ead68210 ea963c8c Write Guest Paging Access Handler
|
|---|
| 188 | 0478d000 - 0478dfff b5e529c0 b3b51aac f8dfe520 b3b51aac ead68210 ea963aac Write Guest Paging Access Handler
|
|---|
| 189 | 04815000 - 04815fff b5e529c0 b3b51c50 f8dfe520 b3b51c50 ead68210 ea963c50 Write Guest Paging Access Handler
|
|---|
| 190 | 04841000 - 04841fff b5e529c0 b3b51bd8 f8dfe520 b3b51bd8 ead68210 ea963bd8 Write Guest Paging Access Handler
|
|---|
| 191 | 048ba000 - 048bafff b5e529c0 b3b51d40 f8dfe520 b3b51d40 ead68210 ea963d40 Write Guest Paging Access Handler
|
|---|
| 192 | 04900000 - 04900fff b5e529c0 b3b51c14 f8dfe520 b3b51c14 ead68210 ea963c14 Write Guest Paging Access Handler
|
|---|
| 193 | 04afb000 - 04afbfff b5e529c0 b3b51a34 f8dfe520 b3b51a34 ead68210 ea963a34 Write Guest Paging Access Handler
|
|---|
| 194 | 04baa000 - 04baafff b5e529c0 b3b51a70 f8dfe520 b3b51a70 ead68210 ea963a70 Write Guest Paging Access Handler
|
|---|
| 195 | 04bb6000 - 04bb6fff b5e529c0 b3b519f8 f8dfe520 b3b519f8 ead68210 ea9639f8 Write Guest Paging Access Handler
|
|---|
| 196 | 04bb7000 - 04bb7fff b5e529c0 b3b51908 f8dfe520 b3b51908 ead68210 ea963908 Write Guest Paging Access Handler
|
|---|
| 197 | 04c65000 - 04c65fff b5e529c0 b3b51980 f8dfe520 b3b51980 ead68210 ea963980 Write Guest Paging Access Handler
|
|---|
| 198 | 04c99000 - 04c99fff b5e529c0 b3b51944 f8dfe520 b3b51944 ead68210 ea963944 Write Guest Paging Access Handler
|
|---|
| 199 | 04c9b000 - 04c9bfff b5e529c0 b3b519bc f8dfe520 b3b519bc ead68210 ea9639bc Write Guest Paging Access Handler
|
|---|
| 200 | 04ca0000 - 04ca0fff b5e529c0 b3b518cc f8dfe520 b3b518cc ead68210 ea9638cc Write Guest Paging Access Handler
|
|---|
| 201 | 04fb3000 - 04fb3fff b5e529c0 b3b51890 f8dfe520 b3b51890 ead68210 ea963890 Write Guest Paging Access Handler
|
|---|
| 202 | 04fe4000 - 04fe4fff b5e529c0 b3b51854 f8dfe520 b3b51854 ead68210 ea963854 Write Guest Paging Access Handler
|
|---|
| 203 | e0000000 - e07fffff b34b0a80 b2f09060 00000000 b2f09060 ead8a180 ead96060 Write VGA LFB
|
|---|
| 204 | f0000000 - f0000fff 00000000 b3c64e10 00000000 b3c64e10 ead497d0 ea85ce10 MMIO PCNet
|
|---|
| 205 | fee00000 - fee00fff 00000000 b3c2e6f0 00000000 b3c2e6f0 ead497d0 ea8266f0 MMIO APIC Memory
|
|---|
| 206 | ffff0000 - ffffffff 00000000 00000000 00000000 00000000 ead62100 00000000 Write PC BIOS - 0xffffffff
|
|---|