Log created: 2008-01-11T18:12:57.714931000Z Executable: /usr/lib/virtualbox/VirtualBox Arg[0]: /usr/lib/virtualbox/VirtualBox Arg[1]: -comment Arg[2]: XP Arg[3]: -startvm Arg[4]: 52b96835-b4a0-4bb6-bd97-d439f65b6b0c The mappings are FLOATING. ea800000 - eaffffff Hypervisor Memory Area Virtual handlers: WRITE 00168000-00168fff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 0080a000-0080afff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 0080b000-0080bfff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 0080d000-0080dfff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 00813000-00813fff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 00824000-00824fff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 00829000-00829fff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 0082a000-0082afff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 00832000-00832fff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 0083e000-0083efff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 00862000-00862fff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 00991000-00991fff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 06793000-06793fff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 06798000-06798fff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 067a1000-067a1fff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 067ca000-067cafff size 00001000 CSAM-REM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 8003f000-8003f3ff size 00000400 Guest GDT write access handler Physical page 00000 0003f000 WRITE 8003f400-8003fbff size 00000800 Guest IDT write access handler Physical page 00000 0003f400 WRITE 80042000-80042087 size 00000088 Guest TSS write access handler Physical page 00000 00042000 WRITE 80155000-80155fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00155000 WRITE 80156000-80156fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00156000 WRITE 80157000-80157fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00157000 WRITE 8015b000-8015bfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0015b000 WRITE 8015c000-8015cfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0015c000 WRITE 8015d000-8015dfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0015d000 WRITE 80168000-80168fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00168000 WRITE 8016a000-8016afff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 ffffffff WRITE 80170000-80170fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00170000 WRITE 80172000-80172fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00172000 WRITE 80806000-80806fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00806000 WRITE 80807000-80807fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00807000 WRITE 80808000-80808fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00808000 WRITE 80809000-80809fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00809000 WRITE 8080a000-8080afff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0080a000 WRITE 8080b000-8080bfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0080b000 WRITE 8080c000-8080cfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0080c000 WRITE 8080d000-8080dfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0080d000 WRITE 8080e000-8080efff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0080e000 WRITE 8080f000-8080ffff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0080f000 WRITE 80811000-80811fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00811000 WRITE 80812000-80812fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00812000 WRITE 80813000-80813fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00813000 WRITE 80814000-80814fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00814000 WRITE 80815000-80815fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00815000 WRITE 80816000-80816fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00816000 WRITE 80817000-80817fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00817000 WRITE 80818000-80818fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00818000 WRITE 80824000-80824fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00824000 WRITE 8082a000-8082afff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0082a000 WRITE 80833000-80833fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00833000 WRITE 80834000-80834fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00834000 WRITE 80836000-80836fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00836000 WRITE 8083c000-8083cfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0083c000 WRITE 8083e000-8083efff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0083e000 WRITE 80844000-80844fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00844000 WRITE 80848000-80848fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00848000 WRITE 8084e000-8084efff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0084e000 WRITE 8084f000-8084ffff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0084f000 WRITE 80857000-80857fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00857000 WRITE 80865000-80865fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00865000 WRITE 80925000-80925fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 00925000 WRITE 809f0000-809f0fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 009f0000 WRITE 86793000-86793fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 06793000 WRITE 86798000-86798fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 06798000 WRITE 8679b000-8679bfff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 0679b000 WRITE 867ca000-867cafff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 067ca000 WRITEHYP ea80f090-ea80f88f size 00000800 Shadow IDT write access handler WRITEHYP ea810580-ea810607 size 00000088 Shadow TSS write access handler WRITEHYP eab9d000-eabacfff size 00010000 Shadow GDT write access handler WRITEHYP eabad000-eabbdfff size 00011000 Shadow LDT write access handler WRITE f7691000-f7691fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 06b5a000 WRITE f7756000-f7756fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 06993000 WRITE f7759000-f7759fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 06996000 WRITE f775a000-f775afff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 06997000 WRITE f7ac0000-f7ac0fff size 00001000 CSAM-PATM self-modifying code monitor handler Physical page 00000 06a4a000 Physical handlers: (PhysHandlers=273472 (0x42c40)) From - To (incl) HandlerHC UserHC HandlerHC UserHC HandlerGC UserGC Type Description 00039000 - 00039fff b5dc29c0 b3c05fd4 f8d8a520 b3c05fd4 eade8210 ea963fd4 Write Guest Paging Access Handler 0003a000 - 0003afff b5dc29c0 b3c0604c f8d8a520 b3c0604c eade8210 ea96404c Write Guest Paging Access Handler 0003b000 - 0003bfff b5dc29c0 b3c05ae8 f8d8a520 b3c05ae8 eade8210 ea963ae8 Write Guest Paging Access Handler 0003c000 - 0003cfff b5dc29c0 b3c05cc8 f8d8a520 b3c05cc8 eade8210 ea963cc8 Write Guest Paging Access Handler 0003d000 - 0003dfff b5dc29c0 b3c05c14 f8d8a520 b3c05c14 eade8210 ea963c14 Write Guest Paging Access Handler 0003e000 - 0003efff b5dc29c0 b3c060c4 f8d8a520 b3c060c4 eade8210 ea9640c4 Write Guest Paging Access Handler 0004f000 - 0004ffff b5dc29c0 b3c06010 f8d8a520 b3c06010 eade8210 ea964010 Write Guest Paging Access Handler 000a0000 - 000bffff 00000000 b3cec2b0 00000000 b3cec2b0 eadc97d0 ea8282b0 MMIO VGA - VGA Video Buffer 000c0000 - 000c7fff 00000000 00000000 00000000 00000000 eade2100 00000000 Write VGA BIOS 000e0000 - 000e0fff 00000000 00000000 00000000 00000000 eade2100 00000000 Write ACPI RSDP 000e1000 - 000e1fff 00000000 00000000 00000000 00000000 eade2100 00000000 Write DMI tables 000e2000 - 000ecfff 00000000 00000000 00000000 00000000 eade2100 00000000 Write Net Boot ROM 000f0000 - 000fffff 00000000 00000000 00000000 00000000 eade2100 00000000 Write PC BIOS - 0xfffff 01030000 - 01030fff b5dc29c0 b3c059f8 f8d8a520 b3c059f8 eade8210 ea9639f8 Write Guest Paging Access Handler 01031000 - 01031fff b5dc29c0 b3c05c50 f8d8a520 b3c05c50 eade8210 ea963c50 Write Guest Paging Access Handler 01032000 - 01032fff b5dc29c0 b3c05f20 f8d8a520 b3c05f20 eade8210 ea963f20 Write Guest Paging Access Handler 01033000 - 01033fff b5dc29c0 b3c05bd8 f8d8a520 b3c05bd8 eade8210 ea963bd8 Write Guest Paging Access Handler 06800000 - 06800fff b5dc29c0 b3c05f98 f8d8a520 b3c05f98 eade8210 ea963f98 Write Guest Paging Access Handler 06801000 - 06801fff b5dc29c0 b3c05b24 f8d8a520 b3c05b24 eade8210 ea963b24 Write Guest Paging Access Handler 06815000 - 06815fff b5dc29c0 b3c05b60 f8d8a520 b3c05b60 eade8210 ea963b60 Write Guest Paging Access Handler 06900000 - 06900fff b5dc29c0 b3c05b9c f8d8a520 b3c05b9c eade8210 ea963b9c Write Guest Paging Access Handler 06dff000 - 06dfffff b5dc29c0 b3c05d04 f8d8a520 b3c05d04 eade8210 ea963d04 Write Guest Paging Access Handler 06ec8000 - 06ec8fff b5dc29c0 b3c05d40 f8d8a520 b3c05d40 eade8210 ea963d40 Write Guest Paging Access Handler 06f00000 - 06f00fff b5dc29c0 b3c05c8c f8d8a520 b3c05c8c eade8210 ea963c8c Write Guest Paging Access Handler 06f01000 - 06f01fff b5dc29c0 b3c05db8 f8d8a520 b3c05db8 eade8210 ea963db8 Write Guest Paging Access Handler 06f3a000 - 06f3afff b5dc29c0 b3c05aac f8d8a520 b3c05aac eade8210 ea963aac Write Guest Paging Access Handler 06fc0000 - 06fc0fff b5dc29c0 b3c05d7c f8d8a520 b3c05d7c eade8210 ea963d7c Write Guest Paging Access Handler 070fb000 - 070fbfff b5dc29c0 b3c05f5c f8d8a520 b3c05f5c eade8210 ea963f5c Write Guest Paging Access Handler 071aa000 - 071aafff b5dc29c0 b3c05ee4 f8d8a520 b3c05ee4 eade8210 ea963ee4 Write Guest Paging Access Handler 071b6000 - 071b6fff b5dc29c0 b3c06088 f8d8a520 b3c06088 eade8210 ea964088 Write Guest Paging Access Handler 071b7000 - 071b7fff b5dc29c0 b3c05980 f8d8a520 b3c05980 eade8210 ea963980 Write Guest Paging Access Handler 07225000 - 07225fff b5dc29c0 b3c05a34 f8d8a520 b3c05a34 eade8210 ea963a34 Write Guest Paging Access Handler 07259000 - 07259fff b5dc29c0 b3c059bc f8d8a520 b3c059bc eade8210 ea9639bc Write Guest Paging Access Handler 0725b000 - 0725bfff b5dc29c0 b3c05a70 f8d8a520 b3c05a70 eade8210 ea963a70 Write Guest Paging Access Handler 07260000 - 07260fff b5dc29c0 b3c05944 f8d8a520 b3c05944 eade8210 ea963944 Write Guest Paging Access Handler 075a4000 - 075a4fff b5dc29c0 b3c05908 f8d8a520 b3c05908 eade8210 ea963908 Write Guest Paging Access Handler e0000000 - e7ffffff b34d4a80 b2f2a060 00000000 b2f2a060 eae0a180 eae16060 Write VGA LFB f0000000 - f0000fff 00000000 b3d21490 00000000 b3d21490 eadc97d0 ea85d490 MMIO PCNet fec00000 - fec00fff 00000000 b3ceadc0 00000000 b3ceadc0 eadc97d0 ea826dc0 MMIO I/O APIC Memory fee00000 - fee00fff 00000000 b3ceaaf0 00000000 b3ceaaf0 eadc97d0 ea826af0 MMIO APIC Memory ffff0000 - ffffffff 00000000 00000000 00000000 00000000 eade2100 00000000 Write PC BIOS - 0xffffffff