Edit C:\Windows\System32\drivers\werkernel.sys
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ ???'??'??'??'??'???4?'???1?'???2?'???5?'???-?'???6?'???3?'??ich?'?? PE d? ?R ? " Z ? ? ? ` ? & h? ( ? @ t `! ? 0! ?! ? ( .text @ h.rdata ? @ H.data ? 0 @ ?.pdata @ @ HPAGE A P B `.edata & ? Z @ @INIT ? ? \ ?.rsrc ? l @ B.reloc T ? r @ B L?$L?$ SUVWH?(3???H?H=???? ?G??x5H??L?$hH?H???r ?xH?;?uf?,^?f?,^? ??H?tf?.?H?(_^][?L?$L?$ SUVWH?(H?3??H???? ?=??G??5H??L?$hH?H???? ?xH?;?uf?,_?f?,_? ??H?tf?/?H?(_^][???$H?$H?$3???H??D?D???uCD?A?u8fA;?2?? fD;?'H?H?u f?ufE?uE?D?H?I?I??? ??\? O? ?H?M+?3M+???t E? fE?tfF? H?????I????uH?t fA92? ?E?A??? H?$H?$H?$??H?$WH? H?H??? H?H?H?$0H? _?? ??????????ff ? H; ? uH?f???u??? ?? ?)??(M?8H?I?? ? H?(??@SH? A? H?L?D?L?A??tA?McP?L?c?#?c??H??HK??t ?????3??H? [??????? ????????????????????????H+?? I?OsXM?I?t D H? H?I??????tf ? ? H????A?u???fffff ? ?????H?rp??tL+?Bo?I??I?I? ? I? ?o ?oL H? fA?I????O???fffffff ? ffffff ? ?t? I??H???u?? ? ?????????H? r? D @H?? ???? ? ?o ?oL f?f?H?@?oD ?oL ???????? I? s?? $ M?I???????? ? ???????I??OsOM?I?tH? ??I???u??tf ? ? ?H????u???fffff ? ???H??tH??tL+???oD?@???I?I? ? I? ?oD ?oL ?? fAf I???T???fffffff ? ffffff ? ?t??? I???u?? ? ?????????H? ??w? H?? D @???? ? ?oD ?oL ??????@?oD ?o f?f? ???? I? s?? $ M?I?????????????I?r,?I?I?I?Gs`M?I??????u??t D A??I???fffffff ? fffffff ? fffffff ? ? ??tL+??H??I?M?I?I?t I?J? ??I??? O? ????H?H?H?H? H?(H?0H?8H?@I????t A??I??? ? ? ? ? ? ? ? 8? F? Z? n? ? ? ? ? ? ? ? ? ,? >? J? b? z? ? ? ? ? ? ? ? $? 2? @? N? `? n? ?R & T" T \ S y s t e m R o o t \ L i v e K e r n e l R e p o r t s ?n? ?????u?: ?? 0 RSDSM??T+G?n_?? werkernel.pdb Bp ` P 0 t d 4 ?d 4 ? p P J2p 4 2p ? t 4 R??? d 4 R p )20 d T 4 2??p% t 4 P H ? 4 Rp d T R p 4 r?? ? ?p`P ? t d 4 R? 4 Rp# #t! #d #4 # ????P ? t d 4 P [20/ tc db 4a ^ P H ? ? 4 ??? P 4 ?pH p d 4 ???? p P t 4 P d 4 ?p B d 4 ? p 4 2 p d 4 2 p d T 4 Rp1 #t3 #d2 #41 #* ????P H @ d 4 ? pH ` t 4 ? P ' ? ? ??p`0P d 4 R p 4 ??? ? ?p`P 4 2p 20 2?-?+ ? ??? w ?" x ? ?" ? ? ?" ? ?% H e ?$ h ? ?% 9 ?% @ 9 ?% P ? ?" ? 'Q ?" (Q ? ?" ? ? # ? ? # U ? ,# V vW H# xW X h# X !Y x# $Y ? ?# ? ? ?# ? ? ?# ? g_ ?# h_ h` ?# h` a $ a ? $$ ? ? H$ ? ? `$ ? ? x$ ? ? ?$ ? ? ?$ ? ? ?$ ? ? ?# ? Dk ?$ Dk ? ?$ ? l ?" l ? ?$ ? ?m % @m ? % ? ? H% ? ? d% ? w ?% ? ? ?" ?? ? x% ? ? ?% @WH? H?H?t ?9Wlkct5? L?? ?????? L??& ?????? ?? _?? H?? ??y? L?' D??????? L?-' D???y??????$WH? 3?H?H?u? ?m?9Wlkct+? L? @ ???:??L?' ???(???H?H?t ? H? ?? L?-' L??????3???&???H?$0H? _?H?$H?$L?$ AUAVAWH?0L?3??L?H?? M?? M?? 8???I??u L?%' ??????? ?| A? I??A?f9t H?H????? ?D??? L?(' ??7???3 ? ? A?rew?4??H?H?u ? ? 3?? H??2???WlkcA?L?$PI?? E3??? L??& ? ?$P?u"L?' ??????3?? ?" ?? H?I??H+??I???H?t? f?t f?H?I????u H?? ?fD??y D?L??& ?H?? ??y D?L?"' ?+?$PL?8L?I?? ??xH? uL?8' D?? ??????y4A?& E3??tPH?H?t? H?? L?3??????(?? L? ' ?L??$ ????I???A???*M?tI?M?tA?? L??$ ??v??? ??$XH?$`L?$hH?0A_A^A]??H?$H?$WH?0H?H?H?? H?? H?" ?9Wlkct ? L??< ?? ??L? ' ?H?$@ H?$@? ? ??yL?)' ????????"H?$ H?$@L?J' L?? ????H? ??L?^& ? ?????? ??$HH?$PH?0_??@SH? H?H?t ?9Wlkct8? L?&< ??U??? L?1' L???=??? ?? [?e ??y? L?S' D??????????$H?$H?$WAVAWH? L?A? H?A?? ?????H?uL?P' ?A?????? ? Hc??rewA?????H?H?uL?;' ?A??????L?3?????E?I?H??I????yL?4' A?? ?N???3???I??3?? ?y 3???b??3?? ?H?$@H?$HH?$PH? A_A^_??c??rew? H?% ?????$H?$UH?$??? H????H3??GH? H?' 3?!E?!EH?????/H?7H??H???? L????H?? ?$(H?2?E?0 ? ?$ ?P???yL?]& D??? ?E???H???/H??? ?$ ?????y L?`& ??C??H?H?t L??& ?.H?7H?t L??& ? H% ?? ?;?@??L??& ?? ????H???t?m???H?GH3????L?$? I?I?I?]???$WH?0H?H?u?L??& ??k??? ?mH?$( H?$@H??& A?A? H?$ ? ??xH?$@H?t?!??H?$@????H?? ???y? L??& D???????H?$HH?0_??I?I?WH?0I?3?E3?WE3??I?????= ?t"=# ?L??& ??D?????? HcT$H? A?rew????H?H?uL??& ???f???D?$HH?$HL?? H?H?$ ?T???y? L?|& D???(???"? r? L??& ?? ???? 3???1??H?$@H?$P?H?0_??H?$UVWATAUAVAWH?H?@3??A?rewD??8D?A?H???????H?H?? ????H?X3?EPH?$(L?E3???$ 6 ?y??= ?? ?y L?& D?A?? ?J???+ A?A;?? D?? L???H?A? I?f?F? ?y5L?L? & A?? ????H???? ????H??? H??3??HA?E3??$ ????= ?t =# ?? HcUHA?rewA?????H?H?? D?HH???HL?? H?$ ?~??D??xDw?? L??$ D???I??H???t ????H??3???c??E?x_D;uPwYA? H?XA?H?$(???L?Z% D?A?? ?????(L??% A?? ????H???t ????H??3??????D;uPv? L??% ??????? ?H?$? H?@A_A^A]A\_^]??H?H?H?L? AWH?0E3?I??L?M?? H?? D?A?L??% ??3??????;?#A?L??% D???$ ???? h?????uI?? ?AE? ;?L? & ????$ ?????L?@& D?? ????? 3?"? L??$ ?????H?tD?>? ??$@H?$HH?$PL?$XH?0A_??H?$WH?0H?H?u?L?& ??O??? ?-????? L????D$ L?& ?x?? ???H?$@H?0_??H?H?H? UATAUAVAWH???? E3??L?L?gH?? H?? L?? L?*fE9.t!A?L?& M??????? ?? ?? ??;?? H?8H?L? ???H?$(H?$ L??1 I?? ?????yL?X1 D????C??fE?.?yL??% D????'??? I??2 ??y`D?L?& ??uOH?8L? `??L??0 ? I?H?$ ?????yL??0 D???????fE?.?y L??% ?H????????$h L?$`D?$XD?$PL?$H?$@" ?$8 H???$0L???H?g? ?$(? L?$ ?0 L?? @ H?L?'L?/???????y L??% M???$ ???fE?.?L?gL??% ? L?$ ????H?gI?$?#? L?$ ?????M?tM?,$? ??$? ?I?8I?@I?HI?A_A^A]A\]?H?H?H?H?L? UH???? H?w?? A?A?L?H?u L?? ???X??? ?? H??????H?/ H?7 H??H???H?$0H? 3???H??E3?E0 ?$(H?$ L??'@ ?#????y? L? % D???????H?H?t ????3???$? I?I?I? M?(I?]?SH? H?3??D?A? ??t8M?t3M?t.?t*H??H?H??9Ku??r L?B ? ??L??? ?? [???A9Cu??(r L??$ ?8;??u? ???uM?I?H?? ?A?uM?I?H?? D?A??H?H?H?H? UH???H?? H????H3??? H?H??3?3?? f?????H??????H?$pH?$x?$p ?d??H? $ H?$p?????? H?H?$p??????yL??# ??D??7??? ?$h H?$`?$X?$PH?$H?$@ ?$8 H?$p?$0 L??????? ?$(? ??0 H?$ H??E? H?????? ????x H???a???=5 ?H??u??H?? H3????L?$? I?I? I?(I?]?L?I?M?UAVAWH?H?PI?? H?? H?? H?? H?? L?H???L?H? # E3?? 3???t????y D?L??# ? ?????? H?????u L??# ??? ?????( M?t(H?$( H????3?? I?H?$ ?????? L? ?????? ??D?L??# ????E2??8M?t/H???8E3??$(H??? I?H?$ ???D?8??? L?? ?? ??? ??D?L??# ????E?u ? L??# M??? ??????H???$( H???d A?A? H?$ ?????yD??2???H??q??3????t ?H??H?? H???t ?4??H?? H???t?yH????H?? ?I?$H???t????L?$x?H?$pH?PA_A^]?L?I?WH?? H???H3??$pH?H? ???I??? I????x??H?$`H?$P?????$f?$dD?$b?$hD?$`?$@?$8?$0D?$(H?8L?L??" ? H?D?$ ????3??L??" ??D?f??r???H?$pH3?{??H?$? H?? _???I?I?UWATAVAWH?H?PI?? H?? H?? H?? H?? L?H???L?H??" E3?? 3???U????y ? D?L?? ?????? ? ?M?t(H?$( H????3?? I?H?$ ?????L? ??????? ??D?L?? ???H??~???uL?W ??? ?P??? E2??HM?t/H???HE3??$(H??? I?H?$ ???D?H??L?? ??????? ??D?L?? ????E?uL?? M???? ??????H???$( H???J D?A? H?$ ?????yD?????H??W??3????t ?.??H?? H???t ???H?? H???t?yH?????H?? ?I?$H???t????L?$P?I?0I?8I?A_A^A\_]???$H?$UH?$??? H?? 3?f9;uL?<! ??????? H?H?????$h H?$`?$X?$PH?$H?$@ ?$8 H??$0 L?L?'H?g? ?$(? H?$ ?'0 H?/??@ H?7H?GH?O?????x H?g????f?;L?$? I?I? I?]??H?H?H?WH?PH?H?H??L??H?=U??3?)H?$0H??3??H?$0H?$@E3?P???u H?(H?u?wH? H?tnH? ??D?A?H?H???D;?H??D;???H?$hL?? H?$(H?$ H;?L? ??f???L?e ? ?R??2??$`H?$pH?P_??(H?t3?g??H?(???$WH?0E3?? ???H?H?H?<??H?=??H?L? A?3???D;? 3???D;? H?$ ? L;?L?* ???????+L?v ? ????H?H?????u??????H?$@H?0_??H?$H?$WH?`I?A?H?H?tqH?tlH?$ ????H?$P H?$X H?$ L?$0?H??$00 H?$8H?$@?$H@ ?,????y? L?* D???????3??? L?j ?????? ??$pH?$xH?`_??H?L?WH? I?H?tRH?tMH?tHH? L??( H?$@??xH?t? u?u H? H??H?# H?t3??????? ??$0H? _???$WH? I?A?M?u? ?2L?$HD??3 H? h? ?x ?$HH?H?yH?H?H?H?$0H? _??H?H?H?WH? I?A?H?tNH?tIH?tDH? L?? H?$0??xH?t?u ?u? ???3H?t3??????? ??$8H?$@H? _???$H?$H?$ WH?0I? I?H?H?? A?rew? ?M??H?H?t+H?$PL?A? H?$(H?H??$ ??????? ??xH? ?H?t 3??? ??H?& H?$@H?$HH?$X?H?0_?H?H?H?H? UATAUAVAWH???P H????H3??@E3??f?? L?$xL??D???$hH?? H?H?? E??rewA? A?D?A??]??D?A?A?H?H?$p?F??H?H?$`H?? H?? A?uI?? ??? L?$hH?? A? H?????x H?$h????H?$h???L?$h?L?! D?A?? ?ú??I?I?8A? H?t,A?A?fD91t H?I+?? ??uM??M?L+? L?? ???H?? H?t+?( H?A??fD91t H?H????uI?? H+?H????H?eH?? H??K??3????H?,??H??H??? x ?????x*? ?? ? L?? D??????? H?$`H?$pH?t 3??????H?t 3??????H?$hH?t ?-??L?$hH??H?t3????H?$xH?t????? E3????A?s??????y L?~ ? D???????????? ??y L?? ?A? A;? L?? ? ?????E3?"???E3?}???0 ?L??E? L???????HcE?i???H???????E????$xH?$PL?$HL?$@L?$8L?$0H????L???$(?$ ??????y D?L?_ ? ??)??????A;? L?? ?,???H?$p? 3???7??H?$pE3???Px?( `fD?A?A????H?8A? ??0A?L;?G?;???9I?A?H+????? f?t f?H?I????uH?A?H?$pfD? ?yD?L? ?,???? H?XH;?G?;???:M?8? A?L+????A?f?t f?H?H????uH?A?fD? ?yD?L?? ???H?$`? 3??D????H???$pH?$8?PxH?$xH????3??$0H?$(E3?3??$ ?????x.A;?)D?0E?yL?? ? ??~??A?E3????D?L?? ?? ????? ??@H3?d??L?$P I?8I?@I?HI?A_A^A]A\]??H?$H?$WH?pH? ??H3??$`3?L?$HH? ????E3?D$ ???????x-9|$Ht'?$0H? ??E3?3?3?|$(H?$ ?X???I??$@H? G??E3?3?????xLH?$@3??$PH?$PH?$X?????t!H?$@H?$PE3?3??$ ?????x??$@?l??? ??E??$`H3?M??L?$pI?I?I?_??H?$H?$ UH?H?`3?H?? Hc????????? ?? H H??E?0 H??E? H????????x9????u Hi???H? H??L? LE?3???H???????L?$`I?I?(I?]??H?$ UVWATAUAVAWH?H?`L?H?? ??$ & H??? ???H??? I?H?HH?\???f??H? o??A? H?5b??E??3??)H????<??H????3?[???u1H?(H? H?u?0 A?rewA??????H?H?u? ?H?HH? ? L?3?????M?? H?A?L+????H?tA?f?t f?H?I+???u H?? ?fD?9?y 3???x??? H?HH? H?>?yL?? D?A?A????? L?@H? 3??L?@L?P?????? H?@H?? ? H?HH???E3?t$(H?$ ?????xRH?@H?tIL?PD?I??#????xrL9}@tlH?PH?HD?H??3?t$(H?$ ??????xL9}@u L? ? L?? A?A??$ ?G??H?PH?t????H?@H?t*?????"M?L?? ?L? D?A?A?????H?$? H?`A_A^A]A\_^]??3????????ERKERNELHOST: WerLiveKernelCancelReportExt: invalid context. ?ERKERNELHOST: WerLiveKernelCancelReport returned status 0x%X ?ERKERNELHOST: WerLiveKernelCancelReportExt returns 0x%X ???WERKERNELHOST: WerLiveKernelCloseReportExt: invalid context. ?WERKERNELHOST: Deleting WerContext %p ?????ERKERNELHOST: WerLiveKernelCreateReportExt: Invalid parameter WERKERNELHOST: WerLiveKernelCreateReportExt: Reports not initialized ?????WERKERNELHOST: Key key length exceeded ????WERKERNELHOST: CheckPolicy failed, status 0x%X WERKERNELHOST: CheckPolicy throttled dump creation for Component ???????ERKERNELHOST: RtlStringCchCopyW failed to copy ComponentName, status 0x%X ??ERKERNELHOST: Could not create report ID, error 0x%X ?????ERKERNELHOST: WerKernelCreateReport failed, status 0x%X ???WERKERNELHOST: WerLiveKernelCreateReport: returning reportHandle %p Policy %i ?ERKERNELHOST: WerLiveKernelOpenDumpFileExt: Invalid parameter ????????ERKERNELHOST: WerLiveKernelOpenDumpFileExt: invalid context. ?ERKERNELHOST: WepCreateDumpFile failed, status 0x%x ?????WERKERNELHOST: WerLiveKernelOpenDumpFileExt: returning dump handle %p, report reportHandle %p ?ERKERNELHOST: WerLiveKernelSubmitReportExt: Invalid report handle passed %p ?WERKERNELHOST: WerLiveKernelSubmitReport failed with status 0x%X ???????WERKERNELHOST: Invalid params ?ERKERNELHOST: NtAllocateVirtualMemory failed ?ERKERNELHOST: RtlInitializeSid failed ????WERKERNELHOST: Could not open root dump directory, status 0x%X WERKERNELHOST: Failed to retrieve disk free space, status 0x%X WERKERNELHOST: Failed to calcalate BytesPerAllocationUnit ???ERKERNELHOST: Failed to calcalate DiskTotalFreeSpaceInBytes ?WERKERNELHOST: Free disk space is below minimum allowed by policy ???????ERKERNELHOST: Invalid handle passed to WerpCancelReport ???B u s y ???WERKERNELHOST: ZwDeleteKey failed with 0x%x ??ERKERNELHOST: ZwQueryKey failed while determining the size with 0x%x ?????ERKERNELHOST: Out of memory. ?ERKERNELHOST: ZwQueryKey failed with 0x%x ??WERKERNELHOST: Live kernel queue size exceeded WERKERNELHOST: WerpCheckSpaceAvailableFull: ZwEnumerateKey returned status 0x%X ????????ERKERNELHOST: WerpCheckSpaceAvailableFull: Failed to open key %ws ??????WERKERNELHOST: WerpCheckSpaceAvailableFull: ZwQueryKey failed while determining the size with 0x%x ??????WERKERNELHOST: WerpCheckSpaceAvailableFull: Out of memory ???ERKERNELHOST: Full live kernel queue size exceeded ??????ERKERNELHOST: WerpCheckPolicy: invalid parameter ???????ERKERNELHOST: WerpCheckPolicy: Requested Policy is %i ????ERKERNELHOST: WerpCheckPolicy: Requested Policy %i is higher than highest allowed %i ?????ERKERNELHOST: WerpCheckPolicy: Requested Policy %i is higher than granted %i ?ERKERNELHOST: WerpCheckPolicy: Granting requested policy %i ?WERKERNELHOST: WerpCloseHandle: NULL handle ??ERKERNELHOST: WerpCloseHandle: ZwClose(%p) returned 0x%X ???ERKERNELHOST: WerpCreateDumpFile: Invalid parameter ?????WERKERNELHOST: A dump file has already been opened. Filename %ws ???????WERKERNELHOST: WerpSetDumpFileNameMini failed with status 0x%X. ????????ERKERNELHOST: Failed to create report directory, status 0x%X ?ERKERNELHOST: WerpSetDumpFileNameKernel failed with status 0x%X. ???????ERKERNELHOST: Could not create file %ws, status 0x%X ?????ERKERNELHOST: WerpCreateDumpFile - created file handle %p, name %ws ?????WERKERNELHOST: ZwCreateKey failed with scode 0x%x ???????ERKERNELHOST: Key id length exceeded ????? ??????WERKERNELHOST: Failed to initialize report directory ReportType, status 0x%X ?\ R e g i s t r y \ M a c h i n e \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ W i n d o w s E r r o r R e p o r t i n g \ F u l l L i v e K e r n e l R e p o r t s ?????WERKERNELHOST: ZwCreateKey failed with scode 0x%x for the root WERKERNELHOST: WerpCheckSpaceAvailable returned no more space available ????ERKERNELHOST: ZwCreateKey failed with scode 0x%x for the report type ?????ERKERNELHOST: ZwCreateKey failed with scode 0x%x for the report id ??????ERKERNELHOST: Report id %S already exists ??% w s - % 0 4 u % 0 2 u % 0 2 u - % 0 2 u % 0 2 u . d m p ??WERKERNELHOST: RtlStringCbPrintfW failed for wszReportId, status 0x%X. ????\ R e g i s t r y \ M a c h i n e \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ W i n d o w s E r r o r R e p o r t i n g \ L i v e K e r n e l R e p o r t s ?WERKERNELHOST: WerpDeleteDumpFile No dump file to delete. ??WERKERNELHOST: Component %ws: Threshold time is not met. Threshold time %lli, Current time %lli ????????ERKERNELHOST: Component %ws: Threshold time is met. Threshold time %lli, Current time %lli ??ERKERNELHOST: System threshold time is not met. Threshold time %lli, Current time %lli ????ERKERNELHOST: System threshold time is met. Threshold time %lli, Current time %lli ??????ERKERNELHOST: ZwOpenKey failed with scode 0x%x ????????ERKERNELHOST: WerpGetRegistryKey failed for the busy key 0x%X \ W i n d o w s E r r o r R e p o r t i n g S e r v i c e P o r t ??????WERKERNELHOST: WerStartSystemErrorHandler failed with 0x%x. Continuing submission. ??????WERKERNELHOST: ZwQuerySysInfo(ErrorPortTimeouts) failed with 0x%x ???????ERKERNELHOST: WerWaitForSystemErrorHandler failed with 0x%x ?WERKERNELHOST: WerWaitForSystemErrorHandler timed out ?????ERKERNELHOST: ZwAlpcConnectPort failed with 0x%x ???????ERKERNELHOST: ZwAlpcConnectPort timed out ??WERKERNELHOST: StringCchCopy failed for key with 0x%x ?????ERKERNELHOST: StringCchCopy failed for id with 0x%x ?????WERKERNELHOST: ZwAlpcSendWaitReceivePort failed, status 0x%X ?WERKERNELHOST: Service returned failure, ReplyMsg->u.status 0x%X ???????\ K e r n e l O b j e c t s \ S y s t e m E r r o r P o r t R e a d y ????% w Z \ % w s WERKERNELHOST: RtlStringCbPrintfW failed for wszFileName, status 0x%X. ????% w Z \ % w s \ % w s ????L a s t F u l l L i v e R e p o r t ?????WERKERNELHOST: Could not set LastFullLiveReport in memory, status 0x%X ????WERKERNELHOST: Could not open NT_FULL_LIVE_KERNEL_REG_KEY_PATH, status 0x%X ??ERKERNELHOST: Could not set value %ws, status 0x%X ??????ERKERNELHOST: Could not open report type key %ws, status 0x%X WERKERNELHOST: WER context signature validation failed! ?R n? (? D? `? w P ? (Q ? ? ? ? ? ? ? ? ? ? WerLiveKernelApi.dll DllUnload WerLiveKernelCancelReport WerLiveKernelCloseHandle WerLiveKernelCreateReport WerLiveKernelInitSystem WerLiveKernelOpenDumpFile WerLiveKernelSubmitReport H?$H?$UWAVH?$??? 3??? L?H??H? L?H?????g? ?$( ??( * H?'?? ?0 H? ?/@ H?7H???$ ?op???x ??? ????H?gH?H?u#?p??? ??$? I?(I?0I?A^_]???? E3??$PH?$HD?$@?$8 H??$0E3?3??$(H?$ ????@??H?AI????H?g?????t?? ??y L? D?A?? ??????????& ??y L? ????? D?5????3????USVWATAUAVAWH?$??? H? ?6 H? ???H???9 D?????Z 3????} ??$ & ??$ & ??. 0 ??4 6 H??d??E3??oH?? A? 3??oE?????y3H? ?? ?&~?? H?~??H? @?(? H?~??3?e H?oL? ???H??? ???H?oL? ???H??? ?;??H?oL? ???H??A? ?!??H????H9???}#? L?? ??Dn??H?}}??H?~}??H?oL? c}??H??^???8 ???H?H?u ? ?? L?H?gH?=P}??H?$(E?L?w?$ H??3?M ?? A?A;?D?A?? A??? ??? ? L?L?wH?A? I?fD?FH?o?????y4? L?s M???om??H?wH?? ?m??L?w? H?wL?H??????L?M?tw?0 ?#??H?H?u? ?^3??D?0?b??L+?E3? H?H???H?tA?f?t f?H?H????uH?H??D?L? H?8H?(H???wE3??t ?dl??L?w?x4H?gA?H?$(?$ 6 H?oL?E3?????= ????A?H?oH?t?l??M?tI?????H?? A_A^A]A\_^[]? L?? D???&l???H?H?H? WH?03?@?* , @85 {???H?H?/ H?$(t3?? L?$HH?E A? 3?57{??H?58{??????xxH?$HL?$@H?$ ????H?$H??Vk??H?$@?xNH?tI?uC?? w8???H????H?t'?f?????D?f? ???H? H??]???H?????????: < H????H?tH?????H?$PH?$XH?0_?? ??H????H?tH?2?-?+ H;? H?H????? ?)????????ERKERNELHOST: WerpInitRootPath failed with status 0x%X ????ERKERNELHOST: WerpInitThrottlePolicy failed with status 0x%X ? a s t F u l l L i v e R e p o r t ?????F u l l L i v e R e p o r t s M a x ?????S y s t e m T h r o t t l e T h r e s h o l d C o m p o n e n t T h r o t t l e T h r e s h o l d ?????\ R e g i s t r y \ M a c h i n e \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ W i n d o w s E r r o r R e p o r t i n g \ F u l l L i v e K e r n e l R e p o r t s ?????WERKERNELHOST: Registry PerComponentThreshold cannot be shorter than SystemThreshold. ?????ERKERNELHOST: WerpInitThrottlePolicy: ZwEnumerateKey returned status 0x%X ??WERKERNELHOST: WerpInitThrottlePolicy: Failed to open key %ws ? i v e K e r n e l R e p o r t s P a t h ??\ R e g i s t r y \ M a c h i n e \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ W i n d o w s E r r o r R e p o r t i n g \ L i v e K e r n e l R e p o r t s ?\ S y s t e m R o o t \ S y s t e m 3 2 ???w e r s v c . d l l ?? z? ? ? ? ? ? ? 8? F? Z? n? ? ? ? ? ? ? ? ? ,? >? J? b? z? ? ? ? ? ? ? ? $? 2? @? N? `? n? ?ZwOpenEvent PRtlSubAuthoritySid ?RtlLengthRequiredSid ? ExAllocatePoolWithTag n EtwUnregister @ZwAlpcSendWaitReceivePort TZwCreateKey ? ExFreePoolWithTag 3ZwAlpcConnectPort ?RtlInitUnicodeString @IoCreateFile ?ZwSetValueKey k EtwRegister ?ZwQuerySystemInformation i EtwEventEnabled |RtlEqualUnicodeString ZwWaitForSingleObject ? ExSystemTimeToLocalTime ?ZwQueryValueKey o EtwWrite ZwUpdateWnfStateData ?ZwQueryDirectoryFile - _vsnwprintf HZwClose ?ZwQueryWnfStateNameInformation ?ZwQueryVolumeInformationFile qZwFlushKey YRtlTimeToTimeFields ?RtlInitializeSid KRtlCopyUnicodeString ?ZwOpenFile aZwDeleteKey U DbgPrintEx kZwEnumerateKey ?ZwQueryKey ?ZwOpenKey ntoskrnl.exe ? 0 ? H `? ? ?4 V S _ V E R S I O N _ I N F O ?? @?% @?%? S t r i n g F i l e I n f o ? 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n t & F i l e D e s c r i p t i o n W i n d o w s E r r o r R e p o r t i n g K e r n e l D r i v e r r ) F i l e V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 ( w i n b l u e _ r t m . 1 3 0 8 2 1 - 1 6 2 3 ) < I n t e r n a l N a m e w e r k e r n e l . s y s ? . L e g a l C o p y r i g h t ? M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . D O r i g i n a l F i l e n a m e w e r k e r n e l . s y s j % P r o d u c t N a m e M i c r o s o f t ? W i n d o w s ? O p e r a t i n g S y s t e m B P r o d u c t V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 D V a r F i l e I n f o $ T r a n s l a t i o n ? ??0? `! 0?!N *?? ?!?0?!;10 `?e 0\ +?7?0L0 +?70 ??? 010 `?e ?0\T?%n?9D??p?"??^?C?i?? ?0?0??3 $? h?? $0 *?? 0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110 130617214338Z 140917214338Z0p1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation10UMicrosoft Windows0?"0 *?? ? 0? ? ?b?\E?F??:??,??x???????4?D??K?_?????<}]???S?? AB???irSSO?x??1??#\t?&???}??`0D??;?? ???O? ???(?:?h?it?q^i" ?+?CT???Sb?<??v ????;ph??????+??'??'??? ^???? T?5E& ?0?{0 U %0+ +?7 0 U ?IS? iC(?(&o?3s?&?0QU J0H?0D1 0 U MOPR1301U*31612+09a6d5f3-8125-416a-b9b1-447d2c25afa90 U #0??)9??x??O?|U?0TU M0K0I???http://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl0a+U0S0Q+0?http://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt0 U ?0 0 *?? ? x&?C&??2?!e??'? k????Hj??V??w3???i??W?34p;*?;0X????????0?/? ?9<8????.?+?:?;?h?D??????"06?$?94GK??G???(???F?$??{<?IF? ??Vbd?GXY?!?F?eUQC{?!/=;/?S??O?/ ? ?z'J?? +G%??'"? ??=-???-0??0?? avV 0 *?? 0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 111019184142Z 261019185142Z0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110?"0 *?? ? 0? ? ? ??. ???? !?33?????? ???8??-|by???5 p????6u?1?p?7?F?([?#,?G??'???? ;S5|??'? ??# o??n?<A???]jM? %(\6?? ????['?'x0?* k"?`,? S?I?a?h sD]}?+???5]l +\??#?n?&?6??'?2;A?,???TN? ??ú?w?$? ?C0??0 +?7 0 U ?)9??x??O?|U?0 +?7 S u b C A0 U ?0U ?0?0 U #0??V??\bh?=?[???0VU O0M0K???http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0?>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0 *?? ? ?qQ???9>?<Rn+?s?h??4M?&?1F?y?8.Ek??(? ?? ?? 6fj?????@26v?Z???????TlP0X?|?????W?!s4Z???? ???~?? ???? rS???=1e????=??B??T ??? G??NA???*???!(??9_>?`?? ???Q?G??=?*hw?Lb{??z?4Kbz???7?-?| ?=?Z???:???!7??ug?W^)9?-??s[????X????5???$?5? u?V?x,??????~,c??#!?xl?6+???-??@?E??k>??* j?G?c 2??6 *pZ?YqKW???!<? ?????? ????b?c ?w}=?????o3??? Y~1??0??0?0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20113 $? h?? $0 `?e ??0 *?? 1 +?70 +?7 10 +?70/ *?? 1" ?(r?om<?h??=I- '?V??=?/r?0Z +?7 1L0J?$?" M i c r o s o f t W i n d o w s?"? http://www.microsoft.com/windows0 *?? ? a??y??%???Xc????i? ?Y+? ??9?E ? ?3;?_?2:U?'_??w??t???Y?u? ??j? ? `? ?Q?U???*?s? ?{????].N8? ^yD#t????/?$q?7?g??/?rD???I?,N??+?9???2?? ?>?9???+?Q??f?/D??9? ? ??? MC ???-[uzrQ@????J0?F +?71?60?2 *?? ?#0? 10 `?e 0?= *?? ?,?(0?$ +? 010 `?e 8??"??B?5_ ??z?? a1? Q?C?W20130822123956.196Z0?????0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:C0F4-3086-DEF81%0#U Microsoft Time-Stamp Service??0?q0?Y? a ?* 0 *?? 0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 100701213655Z 250701214655Z0|1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100?"0 *?? ? 0? ? ? ??: ???i?tT? ??|hK,_????>f+[?S'1 A? ? ?a0Y?0D??TC ??8???s0W&?E ????$`2X`F?G?2? tag??????]?n(????a??' $gr!?Kd?b?? =?u??M@Q??>g???~?K????z* 1?N??5? ??<?/D??d?? ????]^?O"M ??0??0 +?7 0 U ?:\?1?C{|F?3hZ?U0 +?7 S u b C A0 U ?0U ?0?0 U #0??V??\bh?=?[???0VU O0M0K???http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0?>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0?U ??0?0? +?7.0?0=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+04 2 L e g a l _ P o l i c y _ S t a t e m e n t . 0 *?? ? ?Q ????=??!o???1???Wm0?????x??%??kTW+Q??S????@A?\?\?5?$VKt?????7}Z? ?yJ? ?8?/y?????? oK0D$"<???)????2J'??/??3?_?W@??f??jb?J ?&?9?Jqc?!m??<?}????? ?8??? ????B???"8 ?%???~cY%z.9Wv????????G????}??;q ?t?"a?P o?? ?1?:?Gx????~akow?? ?9????? ?? ???*T9?? U??;?-??3.)?/T'!???(??????AM??*?f0?t2K?{??/?!???<?q??U????0??M? ?O? 8/?X.? ?5? ' ?~5 ?6?_?t?0??0??3 (???<nf (0 *?? 0|1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100 130327201313Z 140627201313Z0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:C0F4-3086-DEF81%0#U Microsoft Time-Stamp Service0?"0 *?? ? 0? ? ?H?H?!?k?-?c???????1?f??gZ?"?gR??7E??3?s?!?}?/??????M V?/??_????2L? R??<it??h?U??g?D?3?s]?(?_R-D/?x?;/???;/???J?2 V?KZ?&' C`??@ `?A?s????U'?M?}l?#?|l?? Rx?P?:???'r!u ?0?0 U ????G????S?0 U #0??:\?1?C{|F?3hZ?U0VU O0M0K???http://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z+N0L0J+0?>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0 U ?0 0U % 0 +0 *?? ? ?"?=d~K?&???N ?V?Z??A ?2??Ev?`$???T)??{???13?z;???<?????>? ?r ?1 E?H??E????? veY/?B?????Ip???!?`S~???? <??Qt??r??)?? ???LT?2??*nt?D???0y??: ???'???4?'7??"?H*??v0?^0????0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:C0F4-3086-DEF81%0#U Microsoft Time-Stamp Service?% 0 + ?? ?;fNe?S?? D??0???0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1 0 U MOPR1'0%U nCipher NTS ESN:B027-C6F8-1D881+0)U"Microsoft Time Source Master Clock0 *?? ?u?0"20130822113521Z20130823113521Z0t0: +? 1,0*0 ?u? 0 ?0 ?0 ?? 06 +? 1(0&0 +? ? 0 ?? 0 ? 0 *?? ? ?U+w?TZ?R??8??OH?p ?1???[??3??%???g?????_u(??i?7?y??X???%?t ? ??c?/w ?l?7J?spb?#9z???H?d???M??? ??|PV?U?X??????g?!;?k?_]G}?'^?.u?p??&???df?8?p/=??A?JS*'{?8?0?i?!??01??0??0?0|1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20103 (???<nf (0 `?e ?20 *?? 1 *?? 0/ *?? 1" ?#??;?t? ?????,`$???0? *?? 1?0?0?0??? ?;fNe?S?? D0?0??0|1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20103 (???<nf (0???5H?| ????N0 *?? ? d???d??k !?e6?k? ?0???? V???(??xG????6;???4? _y?I? ?u?.??Wx?&bE??)?z3???>? ??#???3? ?fpHA?>??k?+??(?/?N??v!?G?;g!C???? M?$????^o?^?3c?Q?*?d???6?6pT?5???1?z?S? UA~?? ??E?n[?U$
Ms-Dos/Windows
Unix
Write backup
jsp File Browser version 1.2 by
www.vonloesch.de