Log created: 2008-01-11T03:10:37.222160000Z Executable: /usr/lib/virtualbox/VirtualBox Arg[0]: /usr/lib/virtualbox/VirtualBox Arg[1]: -comment Arg[2]: XP Arg[3]: -startvm Arg[4]: 52b96835-b4a0-4bb6-bd97-d439f65b6b0c The mappings are FLOATING. ea800000 - eaffffff Hypervisor Memory Area Virtual handlers: WRITE 0014d000-0014dfff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 0080a000-0080afff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 0080b000-0080bfff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 0080d000-0080dfff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 00813000-00813fff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 00824000-00824fff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 00829000-00829fff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 0082a000-0082afff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 00832000-00832fff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 0083e000-0083efff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 00862000-00862fff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 00991000-00991fff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 06783000-06783fff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 0679f000-0679ffff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 8003f000-8003f3ff size 00000400 Guest GDT write access handler Physical page 00000 0003f000 WRITE 8003f400-8003fbff size 00000800 Guest IDT write access handler Physical page 00000 0003f400 WRITE 80042000-80042087 size 00000088 Guest TSS write access handler Physical page 00000 00042000 WRITE 80146000-80146fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00146000 WRITE 80147000-80147fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00147000 WRITE 8014a000-8014afff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0014a000 WRITE 8014b000-8014bfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0014b000 WRITE 8014c000-8014cfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0014c000 WRITE 8014d000-8014dfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0014d000 WRITE 8014f000-8014ffff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 80806000-80806fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00806000 WRITE 80807000-80807fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00807000 WRITE 80808000-80808fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00808000 WRITE 80809000-80809fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00809000 WRITE 8080a000-8080afff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0080a000 WRITE 8080b000-8080bfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0080b000 WRITE 8080c000-8080cfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0080c000 WRITE 8080d000-8080dfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0080d000 WRITE 8080e000-8080efff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0080e000 WRITE 8080f000-8080ffff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0080f000 WRITE 80811000-80811fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00811000 WRITE 80812000-80812fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00812000 WRITE 80813000-80813fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00813000 WRITE 80814000-80814fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00814000 WRITE 80815000-80815fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00815000 WRITE 80816000-80816fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00816000 WRITE 80817000-80817fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00817000 WRITE 80818000-80818fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00818000 WRITE 80819000-80819fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00819000 WRITE 8081d000-8081dfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0081d000 WRITE 80824000-80824fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00824000 WRITE 8082a000-8082afff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0082a000 WRITE 80833000-80833fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00833000 WRITE 80834000-80834fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00834000 WRITE 80836000-80836fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00836000 WRITE 8083c000-8083cfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0083c000 WRITE 8083e000-8083efff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0083e000 WRITE 80844000-80844fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00844000 WRITE 80848000-80848fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00848000 WRITE 8084e000-8084efff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0084e000 WRITE 8084f000-8084ffff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0084f000 WRITE 80857000-80857fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00857000 WRITE 80865000-80865fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00865000 WRITE 80925000-80925fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00925000 WRITE 809f0000-809f0fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 009f0000 WRITE 809f9000-809f9fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 009f9000 WRITE 8677d000-8677dfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0677d000 WRITE 86783000-86783fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 06783000 WRITE 86798000-86798fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 06798000 WRITE 8679b000-8679bfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0679b000 WRITE 8679f000-8679ffff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0679f000 WRITEHYP ea80f090-ea80f88f size 00000800 Shadow IDT write access handler WRITEHYP ea810580-ea810607 size 00000088 Shadow TSS write access handler WRITEHYP eab9d000-eabacfff size 00010000 Shadow GDT write access handler WRITEHYP eabad000-eabbdfff size 00011000 Shadow LDT write access handler WRITE f7691000-f7691fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 06b5a000 WRITE f76d9000-f76d9fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 06a9d000 WRITE f7756000-f7756fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 06993000 WRITE f7759000-f7759fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 06996000 WRITE f775a000-f775afff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 06997000 WRITE f78be000-f78befff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 06b20000 WRITE f78bf000-f78bffff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 06b21000 WRITE f7ac0000-f7ac0fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 06a4a000 Physical handlers: (PhysHandlers=274928 (0x431f0)) From - To (incl) HandlerHC UserHC HandlerHC UserHC HandlerGC UserGC Type Description 00039000 - 00039fff b5d819c0 b3ab9fd4 f8d89520 b3ab9fd4 eade8210 ea963fd4 Write Guest Paging Access Handler 0003a000 - 0003afff b5d819c0 b3aba04c f8d89520 b3aba04c eade8210 ea96404c Write Guest Paging Access Handler 0003b000 - 0003bfff b5d819c0 b3ab9ae8 f8d89520 b3ab9ae8 eade8210 ea963ae8 Write Guest Paging Access Handler 0003c000 - 0003cfff b5d819c0 b3ab9cc8 f8d89520 b3ab9cc8 eade8210 ea963cc8 Write Guest Paging Access Handler 0003d000 - 0003dfff b5d819c0 b3ab9b60 f8d89520 b3ab9b60 eade8210 ea963b60 Write Guest Paging Access Handler 0003e000 - 0003efff b5d819c0 b3aba088 f8d89520 b3aba088 eade8210 ea964088 Write Guest Paging Access Handler 000a0000 - 000bffff 00000000 b3b98030 00000000 b3b98030 eadc97d0 ea828030 MMIO VGA - VGA Video Buffer 000c0000 - 000c7fff 00000000 00000000 00000000 00000000 eade2100 00000000 Write VGA BIOS 000e0000 - 000e0fff 00000000 00000000 00000000 00000000 eade2100 00000000 Write ACPI RSDP 000e1000 - 000e1fff 00000000 00000000 00000000 00000000 eade2100 00000000 Write DMI tables 000e2000 - 000ecfff 00000000 00000000 00000000 00000000 eade2100 00000000 Write Net Boot ROM 000f0000 - 000fffff 00000000 00000000 00000000 00000000 eade2100 00000000 Write PC BIOS - 0xfffff 01030000 - 01030fff b5d819c0 b3ab9a70 f8d89520 b3ab9a70 eade8210 ea963a70 Write Guest Paging Access Handler 01031000 - 01031fff b5d819c0 b3ab9c50 f8d89520 b3ab9c50 eade8210 ea963c50 Write Guest Paging Access Handler 01032000 - 01032fff b5d819c0 b3ab9ee4 f8d89520 b3ab9ee4 eade8210 ea963ee4 Write Guest Paging Access Handler 01033000 - 01033fff b5d819c0 b3ab9c14 f8d89520 b3ab9c14 eade8210 ea963c14 Write Guest Paging Access Handler 06800000 - 06800fff b5d819c0 b3ab9f98 f8d89520 b3ab9f98 eade8210 ea963f98 Write Guest Paging Access Handler 06801000 - 06801fff b5d819c0 b3ab9b24 f8d89520 b3ab9b24 eade8210 ea963b24 Write Guest Paging Access Handler 06815000 - 06815fff b5d819c0 b3ab9b9c f8d89520 b3ab9b9c eade8210 ea963b9c Write Guest Paging Access Handler 06900000 - 06900fff b5d819c0 b3ab9bd8 f8d89520 b3ab9bd8 eade8210 ea963bd8 Write Guest Paging Access Handler 06dff000 - 06dfffff b5d819c0 b3ab9d04 f8d89520 b3ab9d04 eade8210 ea963d04 Write Guest Paging Access Handler 06ec8000 - 06ec8fff b5d819c0 b3ab9d40 f8d89520 b3ab9d40 eade8210 ea963d40 Write Guest Paging Access Handler 06f00000 - 06f00fff b5d819c0 b3ab9c8c f8d89520 b3ab9c8c eade8210 ea963c8c Write Guest Paging Access Handler 06f01000 - 06f01fff b5d819c0 b3ab9db8 f8d89520 b3ab9db8 eade8210 ea963db8 Write Guest Paging Access Handler 06f3a000 - 06f3afff b5d819c0 b3ab9aac f8d89520 b3ab9aac eade8210 ea963aac Write Guest Paging Access Handler 06fc0000 - 06fc0fff b5d819c0 b3ab9d7c f8d89520 b3ab9d7c eade8210 ea963d7c Write Guest Paging Access Handler 070fb000 - 070fbfff b5d819c0 b3ab9f5c f8d89520 b3ab9f5c eade8210 ea963f5c Write Guest Paging Access Handler 071aa000 - 071aafff b5d819c0 b3ab9f20 f8d89520 b3ab9f20 eade8210 ea963f20 Write Guest Paging Access Handler 071b6000 - 071b6fff b5d819c0 b3aba010 f8d89520 b3aba010 eade8210 ea964010 Write Guest Paging Access Handler 071b7000 - 071b7fff b5d819c0 b3ab99bc f8d89520 b3ab99bc eade8210 ea9639bc Write Guest Paging Access Handler 07225000 - 07225fff b5d819c0 b3ab9a34 f8d89520 b3ab9a34 eade8210 ea963a34 Write Guest Paging Access Handler 07259000 - 07259fff b5d819c0 b3ab99f8 f8d89520 b3ab99f8 eade8210 ea9639f8 Write Guest Paging Access Handler 0725b000 - 0725bfff b5d819c0 b3aba0c4 f8d89520 b3aba0c4 eade8210 ea9640c4 Write Guest Paging Access Handler 07260000 - 07260fff b5d819c0 b3ab9980 f8d89520 b3ab9980 eade8210 ea963980 Write Guest Paging Access Handler 075a4000 - 075a4fff b5d819c0 b3ab9944 f8d89520 b3ab9944 eade8210 ea963944 Write Guest Paging Access Handler e0000000 - e07fffff b3388a80 b2dde060 00000000 b2dde060 eae0a180 eae16060 Write VGA LFB f0000000 - f0000fff 00000000 b3bcdf20 00000000 b3bcdf20 eadc97d0 ea85df20 MMIO PCNet f0800000 - f0800fff 00000000 b3bce120 00000000 b3bce120 eadc97d0 ea85e120 MMIO USB OHCI fee00000 - fee00fff 00000000 b3b96af0 00000000 b3b96af0 eadc97d0 ea826af0 MMIO APIC Memory ffff0000 - ffffffff 00000000 00000000 00000000 00000000 eade2100 00000000 Write PC BIOS - 0xffffffff