Want to do a deep scan on C:\ for documents. Start scan, proceeds nicely until about 58% on the bar, about 10,000 files found. Suddenly the program just quits, no notice, no error message, no error log. There are three .dmp files, about 125,000KB "Recuva.exe_22-12-2008_16-50-46.dmp" is one, "....20-30-57.dmp" is another.
here is debug info:
Microsoft ® Windows Debugger Version 6.10.0003.233 X86
Copyright © Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Program Files\Recuva\Recuva.exe_21-12-2008_20-30-57.dmp]
User Mini Dump File with Full Memory: Only application data is available
Symbol search path is: C:\WINDOWS\Symbols
Executable search path is:
Windows XP Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Sun Dec 21 15:51:19.000 2008 (GMT-5)
System Uptime: 0 days 0:29:14.921
Process Uptime: 0 days 0:20:23.000
..........................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(86c.60c): Stack overflow - code c00000fd (first/second chance not available)
eax=099d0000 ebx=032f1608 ecx=00000007 edx=7c90e4f4 esi=032f15e0 edi=032f1638
eip=7c90e4f4 esp=01be20c4 ebp=01be20d4 iopl=0 nv up ei pl zr na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
ntdll!KiFastSystemCallRet:
7c90e4f4 c3 ret
0:002> .ecxr
eax=01be3028 ebx=01cdf8bc ecx=0664ed1c edx=041d2f6c esi=01be3050 edi=0664ed1c
eip=00477d8c esp=01be2fec ebp=01be3080 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010202
*** ERROR: Module load completed but symbols could not be loaded for Recuva.exe
Recuva+0x77d8c:
00477d8c 53 push ebx