You have clicked on 
"Centennial Discovery(R)" made by "Centennial Software Limited"
Measures you can take regarding this program:
"Centennial Discovery(R)" made by "Centennial Software Limited" Measures you can take regarding this program:
Technical information: |
|
| Icon status | No tray icon |
| Icon setting | Not in the system tray |
| Executable file | C:\CENTENN.IAL\AUDIT\xferwan.exe |
| Version | 4.53 |
| Parent process | C:\WINNT\SYSTEM32\services.exe |
| Can be uninstalled | No |
| Encrypted | Yes |
| Size on disk | 72 Kb |
| Minimum recorded memory usage | 812 Kb |
| Average recorded memory usage | 812 Kb |
| Maximum recorded memory usage | 812 Kb |
| Date when maximum memory usage occured | 1/20/2012 1:21:40 PM |
| Minimum recorded CPU usage | 0% |
| Average recorded CPU usage | 0% |
| Maximum recorded CPU usage | 2% |
| Date when maximum CPU usage occured | 1/20/2012 1:22:45 PM |
| Started at | 1/20/2012 1:04:25 PM |
| Total CPU time | 0 seconds |
| Imported functions | [-] Imported from CServi32.dll ??0LocalDatSession@@QAE@XZ ?entry_msg_address@LocalDatSession@@2PBD... ?section_cagent@LocalDatSession@@2PBDB ??1LocalDatSession@@UAE@XZ ?lock@DataFileSession@@QAEHXZ ?writenum@DataFileSession@@QAEXPBD0J@Z ?unlock@DataFileSession@@QAEXXZ ?writestring@DataFileSession@@QAEXPBD00@... ??0DataFileSession@@QAE@PBD@Z ??1DataFileSession@@UAE@XZ ?readnum@DataFileSession@@QAEJPBD0J@Z ?section_comms@ClientDatSession@@2PBDB ?readstring@DataFileSession@@QAEGPBD00PA... ??0ClientDatSession@@QAE@XZ ?entry_forceasapp@ClientDatSession@@2PBD... ?readbool@DataFileSession@@QAEHPBD0H@Z ??1ClientDatSession@@UAE@XZ [-] Imported from KERNEL32.dll FindFirstFileA FindClose FlushFileBuffers ReadFile DeleteFileA CreateFileA SetFilePointer GetTimeFormatA GetDateFormatA OutputDebugStringA Sleep ReleaseMutex CreateThread CreateMutexA GetLocalTime CompareFileTime InterlockedExchange GetSystemTimeAsFileTime GetCurrentThreadId GetTickCount QueryPerformanceCounter VirtualQuery GetSystemInfo VirtualProtect GetLocaleInfoA MoveFileA IsBadCodePtr LoadLibraryA FreeLibrary WaitForSingleObject CreateIoCompletionPort PostQueuedCompletionStatus GetQueuedCompletionStatus GetModuleFileNameA GetCurrentProcessId OpenProcess TerminateProcess GetLastError WideCharToMultiByte GetModuleHandleA GetProcAddress lstrcpyA lstrlenA CloseHandle GetCurrentProcess GetCurrentThread DuplicateHandle GetVersionExA WriteFile RtlUnwind HeapReAlloc HeapAlloc HeapFree GetFileType GetStartupInfoA GetCommandLineA HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr LCMapStringA MultiByteToWideChar LCMapStringW ExitProcess HeapSize SetStdHandle SetHandleCount GetStdHandle SetEndOfFile UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetUnhandledExceptionFilter IsBadReadPtr GetStringTypeA GetStringTypeW GetACP GetOEMCP GetCPInfo [-] Imported from USER32.dll wsprintfA EnumWindows GetWindowThreadProcessId GetWindowTextA PostMessageA PeekMessageA MsgWaitForMultipleObjects TranslateMessage DispatchMessageA [-] Imported from ADVAPI32.dll RegQueryValueExA RegOpenKeyExA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken DeregisterEventSource CloseServiceHandle OpenServiceA OpenSCManagerA CreateServiceA RegSetValueExA StartServiceA ControlService DeleteService RegDeleteKeyA RegDeleteValueA StartServiceCtrlDispatcherA RegisterServiceCtrlHandlerA RevertToSelf SetServiceStatus RegCloseKey |
| Some relevant texts from the exe file | [-] Click here to hide details !This program cannot be run in DOS mode. CAgent::CAgent - m_dwPlatformId = /forceasapp CAgent::Run() - Running as Service CAgent::Run() - Quit Message Received CAgent::Run() - Running as App CAgentService::OnInit() Process32First CreateToolhelp32Snapshot KERNEL32.DLL id process AdjustTokenPrivileges failed with LookupPrivilegeValue failed with SeDebugPrivilege OpenProcessToken failed with IsInstalled() returns Install failed: OpenSCManager error Install failed: CreateService error Software\Microsoft\Windows\CurrentVersion\Run /forceasapp Start() returns Start failed: OpenSCManager error Start failed: OpenService error xferwan.exe TypesSupported EventMessageFile Uninstall() CNTService::SetStatus( SERVICE_STOP_PENDING SERVICE_CONTINUE_PENDING SERVICE_PAUSED SERVICE_PAUSE_PENDING SERVICE_RUNNING SERVICE_STOPPED SERVICE_START_PENDING Leaving CNTService::Initialize() Entering CNTService::Initialize() Leaving CNTService::MainRun() Entering CNTService::MainRun() CNTService::Handler( SERVICE_CONTROL_INTERROGATE SERVICE_CONTROL_SHUTDOWN SERVICE_CONTROL_STOP SERVICE_CONTROL_CONTINUE SERVICE_CONTROL_PAUSE CNTService::OnInit() CNTService::OnStop() CNTService::OnInterrogate() CNTService::OnPause() CNTService::OnContinue() CNTService::OnShutdown() CNTService::OnUserControl( CNTService::OnExit() calling StopApp() Request to Stop Request to Start Command Line Leaving CNTService::ServiceMain() Entering CNTService::ServiceMain() Returned from StartServiceCtrlDispatcher() Calling StartServiceCtrlDispatcher() CNTService::StartService() WSOCK32.DLL RtlInitUnicodeString NtDeviceIoControlFile NtCreateFile IcmpSendEcho IcmpCloseHandle IcmpCreateFile ICMP no route table RasEnumConnectionsA ICMP RASAPI32 end RASAPI32.DLL cannot ping ICMP disabled ICMP Enabled ioctlsocket WSACleanup gethostbyname gethostbyaddr WSAGetLastError xferwan0.log xferwan.log Socket Thread terminated Socket Thread started XferWanServerMessagesToViewer XferWanServerLogSize Software\Centennial\Discovery\1.0\Agent Unable to connect to server. Retry count = Unable to connect to server. Waiting d seconds until next attempt... OnTimeSlice() LogMessagesToViewer OnExit() called Unable to create Server Mutex error: Unable to create Client Mutex error: Server Mutex already exists Client Mutex already exists ServerXferWanMutex ClientXferWanMutex CentennialIPTransferServer CentennialIPTransferAgent Server URL 2 set to Server URL 1 set to ld: Unable to reach s probably no route ld: Connection to s has timed out ld: The connection has been closed by ld: The network is down to s has performed an operation on a nonsocket s has blocked freeSessions() = s - Cannot rename file from Unable to find free session in createsession s - Failed to read data to send from file s - Sent command Update the info.RP0 file on the client s Client ID allocated from info.rp0 is Server Message directory is XferWanServerAllowZeroSessions XferWanServerMaximumSessions XferWanServerPort CommsExcludeEnd = CommsExcludeStart = CommsExcludeEnd CommsExcludeStart CommsTimeEnd = CommsTimeStart = CommsTimeEnd CommsTimeStart AllowZeroSessions MaximumSessions Client Message directory is AgentRetries = AgentStartInterval = AgentInterval = AgentRetries AgentStartInterval AgentInterval :\CENTENN.IAL s - Failed to write ld bytes of data to file s - Header received was invalid ( s - Failed to create file d; sizeof_header = s - pSession->nAmount s - pSession->nReceiveCommand s - msgAddress is s - Header is 4.41 s - Header is 4.4 s - Header is pre 4.4 s - Failed to read data on server from file s - Unable to open file s - Unable to rename s - No INFO.RP0 available yet listen socket waiting on port listen socket allocated s - REQ command is unexpected for client session s - Receive of file s - Failed to append file s - END command is unexpected for server session d was unexpected during receive s - Send of file s failed, will retry later d was unexpected during send s - FD_CLOSE notification Socket invalid notification d - Cannot locate matching client respondToMessage( Number of sessions is d Socket accepted Outside Comms Window: Inside Comms Exclude Window: No Client Address in local.dat s] to server name Client Address read from local.dat is s - Failed to read data on client from file Failed to open file swapping szServerURL1 Found a zero length file Unable to rename file from CorExitProcess mscoree.dll runtime error SING error DOMAIN error Please contact the application s support team for more information. - unable to initialize heap - not enough space for lowio initialization - not enough space for stdio initialization - pure virtual function call - not enough space for _onexit/atexit table - unable to open console device - unexpected heap error - unexpected multithread lock error - not enough space for thread data - not enough space for environment - not enough space for arguments - floating point not loaded Microsoft Visual C++ Runtime Library Runtime Error! <program name unknown> now be terminated. Buffer overrun detected! corrupted the program s internal state. The program cannot safely continue execution and must now be terminated. Unknown security failure detected! GetProcessWindowStation GetUserObjectInformationA GetLastActivePopup GetActiveWindow MessageBoxA user32.dll ??1ClientDatSession@@UAE@XZ ?readbool@DataFileSession@@QAEHPBD0H@Z ?entry_forceasapp@ClientDatSession@@2PBDB ??0ClientDatSession@@QAE@XZ ?readstring@DataFileSession@@QAEGPBD00PADG@Z ?section_comms@ClientDatSession@@2PBDB ?readnum@DataFileSession@@QAEJPBD0J@Z ??1DataFileSession@@UAE@XZ ??0DataFileSession@@QAE@PBD@Z ?writestring@DataFileSession@@QAEXPBD00@Z ?unlock@DataFileSession@@QAEXXZ ?writenum@DataFileSession@@QAEXPBD0J@Z ?lock@DataFileSession@@QAEHXZ ??1LocalDatSession@@UAE@XZ ?section_cagent@LocalDatSession@@2PBDB ?entry_msg_address@LocalDatSession@@2PBDB ??0LocalDatSession@@QAE@XZ CServi32.dll GetVersionExA DuplicateHandle GetCurrentThread GetCurrentProcess CloseHandle GetProcAddress GetModuleHandleA WideCharToMultiByte GetLastError TerminateProcess GetCurrentProcessId GetModuleFileNameA GetQueuedCompletionStatus PostQueuedCompletionStatus CreateIoCompletionPort WaitForSingleObject FreeLibrary LoadLibraryA IsBadCodePtr DeleteFileA FindFirstFileA FlushFileBuffers CreateFileA SetFilePointer GetTimeFormatA GetDateFormatA OutputDebugStringA ReleaseMutex CreateMutexA GetLocalTime CompareFileTime DispatchMessageA MsgWaitForMultipleObjects PostMessageA GetWindowTextA GetWindowThreadProcessId EnumWindows RegQueryValueExA RegOpenKeyExA AdjustTokenPrivileges LookupPrivilegeValueA DeregisterEventSource CloseServiceHandle OpenServiceA OpenSCManagerA CreateServiceA RegSetValueExA StartServiceA ControlService RegDeleteValueA SetServiceStatus RegisterServiceCtrlHandlerA StartServiceCtrlDispatcherA ADVAPI32.dll HeapReAlloc GetStartupInfoA GetCommandLineA HeapDestroy VirtualFree VirtualAlloc IsBadWritePtr MultiByteToWideChar ExitProcess SetHandleCount SetEndOfFile UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetUnhandledExceptionFilter IsBadReadPtr GetStringTypeA GetLocaleInfoA VirtualProtect GetSystemInfo VirtualQuery QueryPerformanceCounter GetTickCount GetCurrentThreadId GetSystemTimeAsFileTime InterlockedExchange VS_VERSION_INFO StringFileInfo CompanyName Centennial Software Limited FileDescription Centennial Discovery(R) FileVersion InternalName LegalCopyright OriginalFilename PrivateBuild ProductName ProductVersion SpecialBuild VarFileInfo Translation Revision: explode returned t allocate memory! MemExpReadIt m_nCompressedPosition = m_nOriginalPosition = m_nCompressedBufSize = |