EurekaLog 6.1.03 Application: ------------------------------------------------------ 1.1 Start Date : Tue, 4 Feb 2014 15:31:29 +0400 1.2 Name/Description: SASPlanet.Debug.exe 1.3 Version Number : 14.2.2.783 1.4 Parameters : 1.5 Compilation Date: Sun, 2 Feb 2014 23:06:04 +0400 1.6 Up Time : 3 minutes, 49 seconds Exception: ------------------------------------------------------------------------------- 2.1 Date : Tue, 4 Feb 2014 15:35:19 +0400 2.2 Address : 74E56C04 2.3 Module Name : KERNELBASE.dll - (Библиотека клиента Windows NT BASE API) 2.4 Module Version: 6.1.7601.18229 2.5 Type : EFrozenApplication 2.6 Message : The application seems to be frozen. 2.7 ID : 7316 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.5 Privileges: SeLockMemoryPrivilege - OFF SeIncreaseQuotaPrivilege - OFF SeSecurityPrivilege - ON SeTakeOwnershipPrivilege - OFF SeLoadDriverPrivilege - OFF SeSystemProfilePrivilege - OFF SeSystemtimePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeCreatePagefilePrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeShutdownPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeChangeNotifyPrivilege - ON SeRemoteShutdownPrivilege - OFF SeUndockPrivilege - OFF SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON SeIncreaseWorkingSetPrivilege - OFF SeTimeZonePrivilege - OFF SeCreateSymbolicLinkPrivilege - OFF Computer: ----------------------------------------------------------------------------- 5.3 Free Memory : 12949 Mb 5.5 Free Disk : 1653,09 Gb 5.7 Processor : Intel(R) Core(TM) i7-3820 CPU @ 3.60GHz 5.8 Display Mode: 1366 x 768, 32 bit 5.9 Display DPI : 96 5.10 Video Card : NVIDIA GeForce GT 640 (driver 9.18.13.1422 - RAM 1023 MB) Operating System: -------------------------------------------- 6.1 Type : Microsoft Windows 7 (64 bit) 6.2 Build # : 7601 6.3 Update : Service Pack 1 6.4 Language: Russian 6.5 Charset : 204 Call Stack Information: --------------------------------------------------------------------------------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method |Line | --------------------------------------------------------------------------------------------------------------------------------------------------------------- |*Exception Thread: ID=1396; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |74E56C04|KERNELBASE.dll | | | | | |74E4EADD|KERNELBASE.dll | | |LCMapStringEx | | |74E4E9B2|KERNELBASE.dll | | |LCMapStringEx | | |74E42E85|KERNELBASE.dll | | |LCMapStringW | | |755FFC80|USER32.dll | | |CharUpperBuffW | | |755FFC5D|USER32.dll | | |CharUpperBuffW | | |755FFEB1|USER32.dll | | |CharUpperBuffA | | |0057003D|SASPlanet.Debug.exe|u_SimpleInterfaceList.pas |TSimpleInterfaceList |Create |135[1] | |597E1B1D|CityHash.dll | | |CityHash64 | | |0056B3DB|SASPlanet.Debug.exe|u_BaseInterfacedObjectDebug.pas |TBaseInterfacedObjectDebug |_AddRef |91[4] | |0056B3F2|SASPlanet.Debug.exe|u_BaseInterfacedObjectDebug.pas |TBaseInterfacedObjectDebug |_AddRef |92[5] | |755FFE47|USER32.dll | | |CharUpperBuffA | | |006449AA|SASPlanet.Debug.exe|u_HtmlToHintTextConverterStuped.pas |THtmlToHintTextConverterStuped |HTML2Txt |212[41] | |00644734|SASPlanet.Debug.exe|u_HtmlToHintTextConverterStuped.pas |THtmlToHintTextConverterStuped |HTML2Txt |171[0] | |006444EC|SASPlanet.Debug.exe|u_HtmlToHintTextConverterStuped.pas |THtmlToHintTextConverterStuped |Convert |108[20] | |0056B3F2|SASPlanet.Debug.exe|u_BaseInterfacedObjectDebug.pas |TBaseInterfacedObjectDebug |_AddRef |92[5] | |00642877|SASPlanet.Debug.exe|u_VectorDataItemBase.pas |TVectorDataItemBase |GetHintText |107[8] | |008B8C07|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |mapMouseMove |5891[150]| |0055D7B6|SASPlanet.Debug.exe|GR32_Image.pas |TCustomImage32 |MouseMove |1744[1] | |0055D6D0|SASPlanet.Debug.exe|GR32_Image.pas |TCustomImage32 |MouseMove |1716[7] | |7739E565|ntdll.dll | | |RtlMultiByteToUnicodeN | | |7739E01E|ntdll.dll | | |RtlFreeHeap | | |7739DFA5|ntdll.dll | | |RtlFreeHeap | | |7739E6A3|ntdll.dll | | |RtlDeleteBoundaryDescriptor| | |75602630|USER32.dll | | |ClientToScreen | | |75606285|USER32.dll | | |CallNextHookEx | | |005D4312|SASPlanet.Debug.exe|TB2Hook.pas | |GetMessageHook |138[9] | |75607B96|USER32.dll | | |GetPropA | | |75607B5A|USER32.dll | | |GetPropA | | |755F7BC5|USER32.dll | | |DispatchMessageA | | |755F7BBB|USER32.dll | | |DispatchMessageA | | |008C3C83|SASPlanet.Debug.exe|SASPlanet.dpr | | |1212[29] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=4772; Priority=0; Class=TGarbageCollectorThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00692F72|SASPlanet.Debug.exe|u_TileRequestProcessorPool.pas |TTileRequestProcessorPool |OnTTLTrim |182[18] | |74E31405|KERNELBASE.dll | | |WaitForSingleObjectEx | | |006FCB3D|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |128[2] | |006FCB34|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |127[1] | |006FCAEE|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Execute |115[10] | |74E2EF19|KERNELBASE.dll | | |VirtualQueryEx | | |74E30DCE|KERNELBASE.dll | | |SetEvent | | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=1396; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |006FC9D1|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |85[14] | |006FC930|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |71[0] | |00812C50|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |748[307] | |00811EA4|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |441[0] | |008C3B38|SASPlanet.Debug.exe|SASPlanet.dpr | | |1188[5] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3596; Priority=-15; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |74E314E9|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |006D482A|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |127[5] | |006920CA|SASPlanet.Debug.exe|u_ThreadWithExceptions.pas |TThreadWithExceptions |Execute |72[4] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=1396; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00692660|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |204[3] | |00692648|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |201[0] | |00692599|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |160[6] | |00813CC0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1100[2] | |00813CA8|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1098[0] | |008A8941|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1420[196]| |75606175|USER32.dll | | |SendMessageA | | |7560612E|USER32.dll | | |SendMessageA | | |75602175|USER32.dll | | |SetFocus | | |75600DFB|USER32.dll | | |ShowWindow | | |77392280|ntdll.dll | | |RtlLeaveCriticalSection | | |773A020B|ntdll.dll | | |LdrGetProcedureAddressEx | | |773A01FD|ntdll.dll | | |LdrGetProcedureAddress | | |74E31E5E|KERNELBASE.dll | | |GetProcAddress | | |75603181|USER32.dll | | |MonitorFromWindow | | |7560319D|USER32.dll | | |MonitorFromWindow | | |008C3C83|SASPlanet.Debug.exe|SASPlanet.dpr | | |1212[29] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=2096; Priority=0; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |006EDF88|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |PrepareTileMatrix |463[33] | |74E314E9|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |006EDB74|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |OnPrepareTileMatrix |364[46] | |006D482A|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |127[5] | |006920CA|SASPlanet.Debug.exe|u_ThreadWithExceptions.pas |TThreadWithExceptions |Execute |72[4] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=1396; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00692660|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |204[3] | |00692648|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |201[0] | |00692599|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |160[6] | |006EE812|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |666[2] | |006EE800|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |664[0] | |00841194|SASPlanet.Debug.exe|u_MapLayerBitmapMaps.pas |TMapLayerBitmapMaps |StartThreads |206[2] | |006EC286|SASPlanet.Debug.exe|u_WindowLayerBasic.pas |TWindowLayerAbstract |OnAppStarted |112[1] | |005717FE|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |00587402|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |51[7] | |005BE3DA|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |00813CB5|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1099[1] | |00813CA8|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1098[0] | |008A8941|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1420[196]| |75606175|USER32.dll | | |SendMessageA | | |7560612E|USER32.dll | | |SendMessageA | | |75602175|USER32.dll | | |SetFocus | | |75600DFB|USER32.dll | | |ShowWindow | | |77392280|ntdll.dll | | |RtlLeaveCriticalSection | | |773A020B|ntdll.dll | | |LdrGetProcedureAddressEx | | |773A01FD|ntdll.dll | | |LdrGetProcedureAddress | | |74E31E5E|KERNELBASE.dll | | |GetProcAddress | | |75603181|USER32.dll | | |MonitorFromWindow | | |7560319D|USER32.dll | | |MonitorFromWindow | | |008C3C83|SASPlanet.Debug.exe|SASPlanet.dpr | | |1212[29] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3580; Priority=0; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |006ED88C|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |GetTileMatrix |287[0] | |006ED97A|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |OnPrepareTileMatrix |322[4] | |006EDB74|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |OnPrepareTileMatrix |364[46] | |006D482A|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |127[5] | |006920CA|SASPlanet.Debug.exe|u_ThreadWithExceptions.pas |TThreadWithExceptions |Execute |72[4] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=1396; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00692660|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |204[3] | |00692648|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |201[0] | |00692599|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |160[6] | |006EE812|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |666[2] | |006EE800|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |664[0] | |00836935|SASPlanet.Debug.exe|u_MapLayerGrids.pas |TMapLayerGrids |StartThreads |219[1] | |006EC286|SASPlanet.Debug.exe|u_WindowLayerBasic.pas |TWindowLayerAbstract |OnAppStarted |112[1] | |005717FE|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |00587402|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |51[7] | |005BE3DA|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |00813CB5|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1099[1] | |00813CA8|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1098[0] | |008A8941|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1420[196]| |75606175|USER32.dll | | |SendMessageA | | |7560612E|USER32.dll | | |SendMessageA | | |75602175|USER32.dll | | |SetFocus | | |75600DFB|USER32.dll | | |ShowWindow | | |77392280|ntdll.dll | | |RtlLeaveCriticalSection | | |773A020B|ntdll.dll | | |LdrGetProcedureAddressEx | | |773A01FD|ntdll.dll | | |LdrGetProcedureAddress | | |74E31E5E|KERNELBASE.dll | | |GetProcAddress | | |75603181|USER32.dll | | |MonitorFromWindow | | |7560319D|USER32.dll | | |MonitorFromWindow | | |008C3C83|SASPlanet.Debug.exe|SASPlanet.dpr | | |1212[29] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=4620; Priority=-2; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |006ED88C|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |GetTileMatrix |287[0] | |006ED97A|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |OnPrepareTileMatrix |322[4] | |006EDB74|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |OnPrepareTileMatrix |364[46] | |006D482A|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |127[5] | |006920CA|SASPlanet.Debug.exe|u_ThreadWithExceptions.pas |TThreadWithExceptions |Execute |72[4] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=1396; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00692660|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |204[3] | |00692648|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |201[0] | |00692599|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |160[6] | |006EE812|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |666[2] | |006EE800|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |664[0] | |006F43B1|SASPlanet.Debug.exe|u_MapLayerVectorMaps.pas |TMapLayerVectorMaps |StartThreads |389[1] | |006EC286|SASPlanet.Debug.exe|u_WindowLayerBasic.pas |TWindowLayerAbstract |OnAppStarted |112[1] | |005717FE|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |00587402|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |51[7] | |005BE3DA|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |00813CB5|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1099[1] | |00813CA8|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1098[0] | |008A8941|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1420[196]| |75606175|USER32.dll | | |SendMessageA | | |7560612E|USER32.dll | | |SendMessageA | | |75602175|USER32.dll | | |SetFocus | | |75600DFB|USER32.dll | | |ShowWindow | | |77392280|ntdll.dll | | |RtlLeaveCriticalSection | | |773A020B|ntdll.dll | | |LdrGetProcedureAddressEx | | |773A01FD|ntdll.dll | | |LdrGetProcedureAddress | | |74E31E5E|KERNELBASE.dll | | |GetProcAddress | | |75603181|USER32.dll | | |MonitorFromWindow | | |7560319D|USER32.dll | | |MonitorFromWindow | | |008C3C83|SASPlanet.Debug.exe|SASPlanet.dpr | | |1212[29] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=5024; Priority=-2; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |74E314E9|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |006EF792|SASPlanet.Debug.exe|u_VectorItemSubsetChangeableForVectorLayers.pas|TVectorItemSubsetChangeableForVectorLayers|OnPrepareSubset |465[48] | --------------------------------------------------------------------------------------------------------------------------------------------------------------- Modules Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Handle |Name |Description |Version |Size |Modified |Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |003D0000|zlib1.dll |zlib data compression library |1.2.7.0 |66048 |2014-02-02 17:41:26|D:\Temp\SACS.Planet.Nightly.140202.783 | |00400000|SASPlanet.Debug.exe | |14.2.2.783 |6050816 |2014-02-02 23:06:08|D:\Temp\SACS.Planet.Nightly.140202.783 | |05280000|VsaEmbeddedHttpd.dll | |1.0.0.3 |113152 |2014-02-02 17:41:26|D:\Temp\SACS.Planet.Nightly.140202.783 | |10000000|FreeImage.dll |FreeImage library |3.15.3.0 |322560 |2014-02-02 17:41:26|D:\Temp\SACS.Planet.Nightly.140202.783 | |59300000|msxml4.dll |MSXML 4.0 SP3 |4.30.2117.0 |1402312 |2012-11-08 11:29:12|C:\Windows\SysWOW64 | |59490000|jpeg62.dll | | |244736 |2014-02-02 17:41:26|D:\Temp\SACS.Planet.Nightly.140202.783 | |59610000|libpng15.dll |PNG image compression library |1.5.12.0 |135680 |2014-02-02 17:41:26|D:\Temp\SACS.Planet.Nightly.140202.783 | |597E0000|CityHash.dll | | |14336 |2014-02-02 17:41:24|D:\Temp\SACS.Planet.Nightly.140202.783 | |59BD0000|PortableDeviceApi.dll |Компоненты API для переносных устройств Windows |6.1.7601.17514 |547840 |2010-11-21 07:25:12|C:\Windows\system32 | |59C60000|NetworkExplorer.dll |Сетевой проводник |6.1.7601.17514 |1661440 |2010-11-21 07:24:16|C:\Windows\system32 | |59E50000|FunDisc.dll |DLL обнаружения функции |6.1.7600.16385 |167424 |2009-07-14 05:15:22|C:\Windows\SysWOW64 | |59E80000|FirewallAPI.dll |API брандмауэра Windows |6.1.7600.16385 |462848 |2009-07-14 05:15:22|C:\Windows\system32 | |59F00000|SearchFolder.dll |SearchFolder |6.1.7601.17514 |646144 |2010-11-21 07:23:56|C:\Windows\system32 | |5A030000|LINKINFO.dll |Windows Volume Tracking |6.1.7600.16385 |22016 |2009-07-14 05:15:38|C:\Windows\system32 | |5A040000|SHDOCVW.dll |Библиотека объектов документов и элементов управления оболочки |6.1.7601.18222 |180224 |2013-07-26 05:56:00|C:\Windows\system32 | |5A070000|GrooveIntlResource.dll |Модуль международных ресурсов для Microsoft SharePoint Workspace |14.0.7007.1000 |8878696 |2012-12-14 14:34:08|C:\Program Files (x86)\Microsoft Office\Office14\1049 | |5AA00000|olepro32.dll | |6.1.7601.17514 |90112 |2010-11-21 07:24:04|C:\Windows\system32 | |5AB10000|ntshrui.dll |Расширения оболочки, обеспечивающие доступ к ресурсам |6.1.7601.17755 |442880 |2012-01-04 12:58:42|C:\Windows\system32 | |5AC00000|EhStorShell.dll |Библиотека DLL расширения оболочки Windows Enhanced Storage |6.1.7600.16385 |189952 |2009-07-14 05:15:16|C:\Windows\system32 | |5AC60000|slc.dll |Software Licensing Client DLL |6.1.7600.16385 |27136 |2009-07-14 05:16:16|C:\Windows\system32 | |5AC70000|cscapi.dll |Offline Files Win32 API |6.1.7601.17514 |34816 |2010-11-21 07:24:04|C:\Windows\system32 | |5ACC0000|pshook.dll |Punto Switcher hook module |3.2.9.240 |25424 |2013-07-09 13:32:34|h:\program\start\punto switcher | |5ACE0000|browcli.dll |Browser Service Client DLL |6.1.7601.17887 |41984 |2012-07-05 01:14:36|C:\Windows\system32 | |5ACF0000|fdWNet.dll |Function Discovery WNet Provider Dll |6.1.7600.16385 |24576 |2009-07-14 05:15:22|C:\Windows\SysWOW64 | |5B170000|wcnapi.dll |Windows Connect Now - API Helper DLL |6.1.7600.16385 |86528 |2009-07-14 05:16:20|C:\Windows\System32 | |5B190000|EhStorAPI.dll |Windows Enhanced Storage API |6.1.7601.17514 |128512 |2010-11-21 07:24:10|C:\Windows\system32 | |5B540000|dfscli.dll |Windows NT Distributed File System Client DLL |6.1.7600.16385 |43008 |2009-07-14 05:15:12|C:\Windows\system32 | |5B600000|msxml6.dll |MSXML 6.0 SP3 |6.30.7601.17988 |1389568 |2012-11-01 08:47:56|C:\Windows\System32 | |5BFD0000|ATL90.DLL |ATL Module for Windows (Unicode) |9.0.30729.6161 |159048 |2013-05-14 16:25:44|C:\Windows\WinSxS\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19b | |5C000000|GROOVEEX.DLL |Microsoft SharePoint Workspace Extensions |14.0.7011.1000 |4171464 |2013-03-09 00:10:30|C:\Program Files (x86)\Microsoft Office\Office14 | |5C950000|actxprxy.dll |ActiveX Interface Marshaling Library |6.1.7601.17514 |309760 |2010-11-21 07:24:02|C:\Windows\SysWOW64 | |5C9A0000|DUI70.dll |Подсистема DirectUI Windows |6.1.7600.16385 |717824 |2009-07-14 05:15:14|C:\Windows\system32 | |5CA60000|DUser.dll |Windows DirectUser Engine |6.1.7600.16385 |181248 |2009-07-14 05:15:14|C:\Windows\system32 | |5CB40000|explorerframe.dll |ExplorerFrame |6.1.7601.17514 |1493504 |2010-11-21 07:24:24|C:\Windows\system32 | |5F450000|WindowsCodecs.dll |Microsoft Windows Codecs Library |6.2.9200.16583 |1230336 |2013-04-17 11:02:08|C:\Windows\system32 | |69050000|fdwcn.dll |Windows Connect Now - Config Function Discovery Provider DLL |6.1.7600.16385 |81920 |2009-07-14 05:15:22|C:\Windows\System32 | |696E0000|OFFICE.ODF | |14.0.7109.5000 |4300456 |2013-09-05 00:14:10|C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures | |69E00000|MSVCP90.dll |Microsoft® C++ Runtime Library |9.0.30729.6161 |569680 |2013-05-14 16:25:58|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57 | |69F50000|msimg32.dll |GDIEXT Client DLL |6.1.7600.16385 |4608 |2009-07-14 05:15:46|C:\Windows\system32 | |6A2F0000|DAVHLPR.dll |DAV Helper DLL |6.1.7600.16385 |19456 |2009-07-14 05:15:10|C:\Windows\System32 | |6A300000|davclnt.dll |Web DAV Client DLL |6.1.7601.18201 |81920 |2013-12-02 15:49:24|C:\Windows\System32 | |6ABE0000|fdproxy.dll |Function Discovery Proxy Dll |6.1.7600.16385 |27136 |2009-07-14 05:15:22|C:\Windows\SysWOW64 | |6ABF0000|IconCodecService.dll |Converts a PNG part of the icon to a legacy bmp icon |6.1.7600.16385 |9728 |2009-07-14 05:15:28|C:\Windows\system32 | |6ADB0000|NETMSG.DLL |Библиотека сетевых сообщений |6.1.7600.16385 |2048 |2009-07-14 05:07:58|C:\Windows\system32 | |6ADC0000|ieproxy.dll |IE ActiveX Interface Marshaling Library |10.0.9200.16750 |257536 |2013-10-25 08:43:40|C:\Program Files (x86)\Internet Explorer | |6AE10000|StructuredQuery.dll |Structured Query |7.0.7601.17514 |363520 |2010-11-21 07:24:22|C:\Windows\System32 | |6AEA0000|ATL.DLL |ATL Module for Windows XP (Unicode) |3.5.2284.0 |70144 |2009-07-14 05:14:58|C:\Windows\SysWOW64 | |6AF20000|dtsh.dll |Библиотека API состояния общего доступа и обнаружения |6.1.7600.16385 |32256 |2009-07-14 05:15:14|C:\Windows\system32 | |6AF30000|ntlanman.dll |Microsoft® LAN Manager |6.1.7601.17514 |69120 |2010-11-21 07:24:02|C:\Windows\System32 | |6AF50000|XmlLite.dll |Microsoft XmlLite Library |1.3.1001.0 |180224 |2011-06-16 08:33:20|C:\Windows\system32 | |6C710000|MSVCR90.dll |Microsoft® C Runtime Library |9.0.30729.6161 |653136 |2013-05-14 16:25:58|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57 | |716B0000|NetworkItemFactory.dll |Фабрика сетевых элементов |6.1.7600.16385 |40960 |2009-07-14 05:16:04|C:\Windows\system32 | |716C0000|drprov.dll |Служба доступа к сети для сервера, обслуживающего сеансы подключения к удаленному рабочему столу (Майкрософт)|6.1.7600.16385 |18944 |2009-07-14 05:15:14|C:\Windows\System32 | |71C80000|dhcpcsvc6.DLL |Клиент DHCPv6 |6.1.7601.17970 |44032 |2012-10-09 21:40:32|C:\Windows\system32 | |71D70000|apphelp.dll |Клиентская библиотека совместимости приложений |6.1.7601.17514 |295936 |2010-11-21 07:24:16|C:\Windows\system32 | |71E20000|npmproxy.dll |Network List Manager Proxy |6.1.7600.16385 |16896 |2009-07-14 05:16:12|C:\Windows\System32 | |71E30000|netprofm.dll |Диспетчер списка сетей |6.1.7600.16385 |360448 |2009-07-14 05:16:04|C:\Windows\System32 | |71E90000|PROPSYS.dll |Система страниц свойств (Microsoft) |7.0.7601.17514 |988160 |2010-11-21 07:24:10|C:\Windows\system32 | |71F90000|NTDSAPI.dll |Active Directory Domain Services API |6.1.7600.16385 |90112 |2009-07-14 05:16:12|C:\Windows\system32 | |71FB0000|fastprox.dll |WMI Custom Marshaller |6.1.7601.17514 |606208 |2010-11-21 07:24:26|C:\Windows\system32\wbem | |72050000|wbemsvc.dll |WMI |6.1.7600.16385 |47616 |2009-07-14 05:16:18|C:\Windows\system32\wbem | |72060000|RpcRtRemote.dll |Remote RPC Extension |6.1.7601.17514 |46080 |2010-11-21 07:24:16|C:\Windows\system32 | |72070000|wbemcomn.dll |WMI |6.1.7601.17514 |363008 |2010-11-21 07:24:10|C:\Windows\system32 | |720D0000|wbemprox.dll |WMI |6.1.7600.16385 |29184 |2009-07-14 05:16:18|C:\Windows\system32\wbem | |72220000|dhcpcsvc.DLL |Служба DHCP-клиента |6.1.7600.16385 |61952 |2009-07-14 05:15:12|C:\Windows\system32 | |72300000|rsaenh.dll |Microsoft Enhanced Cryptographic Provider |6.1.7600.16385 |242936 |2009-07-14 05:17:56|C:\Windows\system32 | |72340000|CRYPTSP.dll |Cryptographic Service Provider API |6.1.7600.16385 |78848 |2009-07-14 05:15:08|C:\Windows\system32 | |726F0000|winmm.dll |MCI API DLL |6.1.7601.17514 |194048 |2010-11-21 07:24:18|C:\Windows\system32 | |72740000|uxtheme.dll |Библиотека тем UxTheme (Microsoft) |6.1.7600.16385 |245760 |2009-07-14 05:11:26|C:\Windows\system32 | |72A90000|DWMAPI.DLL |Интерфейс API диспетчера окон рабочего стола (Майкрософт) |6.1.7600.16385 |67072 |2009-07-14 05:15:14|C:\Windows\system32 | |72AB0000|winspool.drv |Драйвер диспетчера очереди Windows |6.1.7601.17514 |320000 |2010-11-21 07:24:10|C:\Windows\system32 | |72B10000|WINSTA.dll |Winstation Library |6.1.7601.17514 |156672 |2010-11-21 07:23:56|C:\Windows\System32 | |730F0000|nlaapi.dll |Network Location Awareness 2 |6.1.7601.17761 |52224 |2012-01-13 11:12:04|C:\Windows\System32 | |73390000|MPR.dll |Библиотека маршрутизации для нескольких служб доступа |6.1.7600.16385 |64000 |2009-07-14 05:15:42|C:\Windows\system32 | |733B0000|profapi.dll |User Profile Basic API |6.1.7600.16385 |31744 |2009-07-14 05:16:14|C:\Windows\system32 | |73460000|wkscli.dll |Workstation Service Client DLL |6.1.7601.17514 |47104 |2010-11-21 07:23:52|C:\Windows\system32 | |73470000|srvcli.dll |Server Service Client DLL |6.1.7601.17514 |90112 |2010-11-21 07:24:18|C:\Windows\system32 | |73490000|netutils.dll |Net Win32 API Helpers DLL |6.1.7601.17514 |22528 |2010-11-21 07:24:18|C:\Windows\system32 | |73560000|fwpuclnt.dll |API пользовательского режима FWP/IPsec |6.1.7601.18283 |216576 |2013-10-12 06:01:26|C:\Windows\System32 | |736A0000|wsock32.dll |Windows Socket 32-Bit DLL |6.1.7600.16385 |15360 |2009-07-14 05:16:22|C:\Windows\system32 | |736B0000|rasadhlp.dll |Remote Access AutoDial Helper |6.1.7600.16385 |11776 |2009-07-14 05:16:14|C:\Windows\system32 | |736C0000|WINNSI.DLL |Network Store Information RPC interface |6.1.7600.16385 |16896 |2009-07-14 05:16:20|C:\Windows\system32 | |736D0000|IPHLPAPI.DLL |IP Helper API |6.1.7601.17514 |103936 |2010-11-21 07:24:34|C:\Windows\system32 | |736F0000|DNSAPI.dll |Динамическая библиотека API DNS-клиента |6.1.7601.17570 |270336 |2011-03-03 09:38:02|C:\Windows\system32 | |73740000|ntmarta.dll |Поставщик Windows NT MARTA |6.1.7600.16385 |121856 |2009-07-14 05:16:12|C:\Windows\system32 | |73770000|wship6.dll |Библиотека DLL помощника Winsock2 (TL/IPv6) |6.1.7600.16385 |10752 |2009-07-14 05:16:22|C:\Windows\System32 | |73780000|wshtcpip.dll |Библиотека DLL помощника службы Winsock2 (TL/IPv4) |6.1.7600.16385 |9216 |2009-07-14 05:16:22|C:\Windows\System32 | |73790000|comctl32.dll |Библиотека элементов управления взаимодействия с пользователем |6.10.7601.17514 |1680896 |2010-11-21 07:23:56|C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2| |73930000|mswsock.dll |Расширение поставщика службы API Microsoft Windows Sockets 2.0 |6.1.7601.18254 |231424 |2013-12-02 15:50:06|C:\Windows\system32 | |73B60000|thumbcache.dll |Кэш эскизов Майкрософт |6.1.7601.17514 |82944 |2010-11-21 07:24:10|C:\Windows\SysWOW64 | |73C60000|api-ms-win-downlevel-shell32-l1-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |3072 |2013-01-14 01:11:08|C:\Windows\system32 | |73D50000|api-ms-win-downlevel-advapi32-l2-1-0.dll|ApiSet Stub DLL |6.2.9200.16492 |3584 |2013-01-14 01:12:48|C:\Windows\system32 | |73D60000|version.dll |Version Checking and File Installation Libraries |6.1.7600.16385 |21504 |2009-07-14 05:16:18|C:\Windows\system32 | |73E10000|ieframe.DLL |Браузер |10.0.9200.16750 |13761536|2013-10-25 08:43:40|C:\Windows\system32 | |74B90000|api-ms-win-downlevel-shlwapi-l2-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |5632 |2013-01-14 01:11:08|C:\Windows\system32 | |74BB0000|Secur32.dll |Security Support Provider Interface |6.1.7601.18270 |22016 |2013-09-25 05:57:28|C:\Windows\system32 | |74DB0000|CRYPTBASE.dll |Base cryptographic API DLL |6.1.7600.16385 |36864 |2009-07-14 05:15:08|C:\Windows\syswow64 | |74DC0000|SspiCli.dll |Security Support Provider Interface |6.1.7601.18270 |96768 |2013-09-25 05:58:18|C:\Windows\syswow64 | |74E20000|KERNELBASE.dll |Библиотека клиента Windows NT BASE API |6.1.7601.18229 |274944 |2013-08-02 05:50:44|C:\Windows\syswow64 | |74E70000|SETUPAPI.dll |Windows Setup API |6.1.7601.17514 |1667584 |2010-11-21 07:23:52|C:\Windows\syswow64 | |75010000|WININET.dll |Расширения Интернета для Win32 |10.0.9200.16750 |1767936 |2013-10-25 08:45:12|C:\Windows\syswow64 | |751D0000|ole32.dll |Microsoft OLE для Windows |6.1.7601.17514 |1414144 |2010-11-21 07:24:02|C:\Windows\syswow64 | |75330000|kernel32.dll |Библиотека клиента Windows NT BASE API |6.1.7601.18229 |1114112 |2013-08-02 05:50:42|C:\Windows\syswow64 | |75440000|PSAPI.DLL |Process Status Helper |6.1.7600.16385 |6144 |2009-07-14 05:16:14|C:\Windows\syswow64 | |75450000|URLMON.DLL |Расширения OLE32 для Win32 |10.0.9200.16750 |1140736 |2013-10-25 08:45:00|C:\Windows\syswow64 | |75580000|imm32.dll |Multi-User Windows IMM32 API Client DLL |6.1.7601.17514 |119808 |2010-11-21 07:24:26|C:\Windows\syswow64 | |755E0000|USER32.dll |Многопользовательская библиотека клиента USER API Windows |6.1.7601.17514 |833024 |2010-11-21 07:24:22|C:\Windows\syswow64 | |756E0000|WS2_32.dll |32-разрядная библиотека Windows Socket 2.0 |6.1.7601.17514 |206848 |2010-11-21 07:23:56|C:\Windows\syswow64 | |75720000|oleaut32.dll | |6.1.7601.17676 |571904 |2011-08-27 08:26:28|C:\Windows\syswow64 | |757B0000|api-ms-win-downlevel-version-l1-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |3072 |2013-01-14 01:11:08|C:\Windows\syswow64 | |757C0000|api-ms-win-downlevel-advapi32-l1-1-0.dll|ApiSet Stub DLL |6.2.9200.16492 |10752 |2013-01-14 01:16:44|C:\Windows\syswow64 | |757D0000|WLDAP32.dll |Win32 LDAP API DLL |6.1.7601.17514 |269824 |2010-11-21 07:24:18|C:\Windows\syswow64 | |75820000|imagehlp.dll |Windows NT Image Helper |6.1.7601.18288 |159232 |2013-10-19 05:37:00|C:\Windows\syswow64 | |75850000|GDI32.dll |GDI Client DLL |6.1.7601.18275 |311808 |2013-10-03 06:00:46|C:\Windows\syswow64 | |758E0000|ADVAPI32.dll |Расширенная библиотека API Windows 32 |6.1.7601.18247 |640512 |2013-12-02 15:49:50|C:\Windows\syswow64 | |75980000|RPCRT4.dll |Библиотека удаленного вызова процедур |6.1.7601.18205 |663552 |2013-07-09 08:52:34|C:\Windows\syswow64 | |75A70000|SHLWAPI.dll |Библиотека небольших программ оболочки |6.1.7601.17514 |350208 |2010-11-21 07:23:50|C:\Windows\syswow64 | |75B30000|api-ms-win-downlevel-ole32-l1-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |5632 |2013-01-14 01:11:10|C:\Windows\syswow64 | |75B40000|comdlg32.dll |Библиотека общих диалоговых окон |6.1.7601.17514 |485888 |2010-11-21 07:23:50|C:\Windows\syswow64 | |75BC0000|NSI.dll |NSI User-mode interface DLL |6.1.7600.16385 |8704 |2009-07-14 05:16:12|C:\Windows\syswow64 | |75BD0000|shell32.dll |Общая библиотека оболочки Windows |6.1.7601.18222 |12872704|2013-07-26 05:56:00|C:\Windows\syswow64 | |76820000|USP10.dll |Uniscribe Unicode script processor |1.626.7601.18009 |626688 |2012-11-22 08:45:04|C:\Windows\syswow64 | |768C0000|LPK.dll |Language Pack |6.1.7601.18177 |25600 |2013-06-06 08:57:02|C:\Windows\syswow64 | |768D0000|iertutil.dll |Run time utility for Internet Explorer |10.0.9200.16750 |2049024 |2013-10-25 08:43:40|C:\Windows\syswow64 | |76AD0000|sechost.dll |Host for SCM/SDDL/LSA Lookup APIs |6.1.7600.16385 |92160 |2009-07-14 05:16:14|C:\Windows\SysWOW64 | |76AF0000|MSCTF.dll |Серверная библиотека MSCTF |6.1.7600.16385 |828928 |2009-07-14 05:15:44|C:\Windows\syswow64 | |76BC0000|msvcrt.dll |Windows NT CRT DLL |7.0.7601.17744 |690688 |2011-12-16 11:53:00|C:\Windows\syswow64 | |76C70000|api-ms-win-downlevel-user32-l1-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |4096 |2013-01-14 01:11:22|C:\Windows\syswow64 | |76C80000|normaliz.DLL |Unicode Normalization DLL |6.1.7600.16385 |2048 |2009-07-14 05:09:02|C:\Windows\syswow64 | |76C90000|CRYPT32.dll |API32 криптографии |6.1.7601.18277 |1168384 |2013-10-05 23:57:26|C:\Windows\syswow64 | |76DB0000|WINTRUST.dll |Microsoft Trust Verification APIs |6.1.7601.18205 |175104 |2013-07-09 08:52:12|C:\Windows\syswow64 | |76DE0000|DEVOBJ.dll |Device Information Set DLL |6.1.7601.17621 |64512 |2011-05-24 14:40:06|C:\Windows\syswow64 | |76E00000|CFGMGR32.dll |Configuration Manager DLL |6.1.7601.17621 |145920 |2011-05-24 14:39:40|C:\Windows\syswow64 | |76E30000|api-ms-win-downlevel-normaliz-l1-1-0.dll|ApiSet Stub DLL |6.2.9200.16492 |2560 |2013-01-14 01:17:04|C:\Windows\syswow64 | |76E40000|api-ms-win-downlevel-shlwapi-l1-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |9728 |2013-01-14 01:17:04|C:\Windows\syswow64 | |76EE0000|CLBCatQ.DLL |COM+ Configuration Catalog |2001.12.8530.16385|522240 |2009-07-14 05:15:04|C:\Windows\syswow64 | |77340000|MSASN1.dll |ASN.1 Runtime APIs |6.1.7601.17514 |34304 |2010-11-21 07:23:50|C:\Windows\syswow64 | |77370000|ntdll.dll |Системная библиотека NT |6.1.7601.18247 |1292192 |2013-12-02 15:49:50|C:\Windows\SysWOW64 | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Processes Information: ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory|Priority |Threads|Path | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |0 |[System Process] | | |0 | |4 | | |4 |System | | |0 |Normal |138 | | |120 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |36 | | |284 |smss.exe | | |0 |Above-Normal|2 | | |296 |IAStorDataMgrSvc.exe | | |0 |Normal |10 | | |472 |csrss.exe | | |0 |High |9 | | |536 |audiodg.exe | | |0 |Normal |7 | | |540 |csrss.exe | | |0 |High |11 | | |548 |wininit.exe |Автозагрузка приложений Windows |6.1.7600.16385|0 |High |3 | | |584 |winlogon.exe | | |0 |High |3 | | |648 |services.exe | | |0 |Normal |11 | | |656 |lsass.exe | | |0 |Normal |9 | | |660 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |6 | | |668 |lsm.exe | | |0 |Normal |10 | | |756 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |11 | | |832 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |8 | | |908 |CmRcService.exe | | |0 |Normal |9 | | |920 |TeamViewer_Service.exe| | |0 |Normal |9 | | |928 |SCNotification.exe |SCNotification |5.0.7804.1000 |0 |Normal |7 |C:\Windows\CCM | |936 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |22 | | |976 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |19 | | |1004|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |17 | | |1100|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |17 | | |1240|spoolsv.exe | | |0 |Normal |21 | | |1288|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |12 | | |1336|IAStorIcon.exe |IAStorIcon |3.5.1.1008 |0 |Normal |7 |C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise| |1372|WmiPrvSE.exe |WMI Provider Host |6.1.7601.17514|0 |Normal |7 | | |1480|DTSU2PAuSrv64.exe | | |0 |Normal |13 | | |1564|ekrn.exe | | |0 |Normal |26 | | |1588|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |24 | | |1604|totalcmd.exe |Total Commander 32 bit |8.0.1.0 |0 |Normal |9 |H:\program\TC | |1616|HeciServer.exe |Intel(R) Capability Licensing Service Interface |1.26.242.3 |0 |Normal |5 | | |1660|IPROSetMonitor.exe | | |0 |Normal |5 | | |1688|Jhi_service.exe |Intel(R) Dynamic Application Loader Host Interface|8.1.10.1286 |0 |Normal |5 | | |1732|oodag.exe | | |0 |Normal |14 | | |1904|WmiPrvSE.exe |WMI Provider Host |6.1.7601.17514|0 |Normal |8 | | |1912|WmiPrvSE.exe |WMI Provider Host |6.1.7601.17514|0 |Normal |5 | | |1916|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |4 | | |1944|StarWindServiceAE.exe | | |0 |Normal |6 | | |1964|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |7 | | |1996|TeamViewer_Service.exe| | |0 |Normal |8 | | |2316|WmiPrvSE.exe |WMI Provider Host |6.1.7601.17514|0 |Normal |11 | | |2496|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |6 | | |2796|WmiPrvSE.exe |WMI Provider Host |6.1.7601.17514|0 |Normal |6 | | |2920|CcmExec.exe | | |0 |Normal |18 | | |2924|qip.exe |QIP 2012 |4.0.0.9354 |0 |Normal |44 |h:\program\start\qip | |2932|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |14 | | |3400|taskhost.exe | | |0 |Normal |12 | | |3556|explorer.exe |Проводник |6.1.7601.17567|0 |Normal |24 | | |3568|ps64ldr.exe | | |0 |Normal |2 | | |3732|AkelPad.exe | |4.8.7.0 |0 |Normal |2 |H:\Program\TC\Plugins\exe | |3736|punto.exe |Punto Switcher |3.2.9.240 |0 |Normal |3 |h:\program\start\punto switcher | |3784|egui.exe | | |0 |Normal |9 | | |3860|OUTLOOK.EXE |Microsoft Outlook |14.0.7109.5000|0 |Normal |26 |C:\Program Files (x86)\Microsoft Office\Office14 | |4024|SASPlanet.Debug.exe | |14.2.2.783 |0 |Normal |33 |D:\Temp\SACS.Planet.Nightly.140202.783 | |4088|OSPPSVC.EXE | | |0 |Normal |4 | | |4416|opera.exe |Opera Internet Browser |12.16.1860.0 |0 |Normal |26 |H:\Program\Opera | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: ------------------------------------------------------------ 74E56BE7 mov eax, edx 74E56BE9 shr eax, $08 74E56BEC movzx eax, al 74E56BEF movzx eax, word ptr [esi+eax*2] 74E56BF3 movzx ecx, dl 74E56BF6 mov ebx, ecx 74E56BF8 shr ebx, $04 74E56BFB add eax, ebx 74E56BFD movzx eax, word ptr [esi+eax*2] 74E56C01 and ecx, +$0F 74E56C04 add eax, ecx ; <-- EXCEPTION 74E56C06 mov ax, word ptr [esi+eax*2] 74E56C0A add ax, dx 74E56C0D mov [edi], ax 74E56C10 inc edi 74E56C11 inc edi 74E56C12 dec dword ptr [ebp+$0C] 74E56C15 jnz -$3A 74E56C17 mov eax, [ebp+$14] 74E56C1A jmp +$09 74E56C1C push $57 Registers: ----------------------------- EAX: 00000000 EDI: 0291FFEC EBX: 00405DD8 ESI: 773A9F45 ECX: 00000000 ESP: 00000000 EDX: 024E11B0 EIP: 00000000 Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0018F620: 00000800 096386F0: 03 C1 66 8B 04 46 66 03 C2 66 89 07 47 47 FF 4D ..f..Ff..f..GG.M 0018F624: 00000200 09638700: 0C 75 C6 8B 45 14 EB 09 6A 57 E8 36 0C FD FF 33 .u..E...jW.6...3 0018F628: 00000200 09638710: C0 5F 5E 5B 5D C2 20 00 CC CC CC CC CC 8B FF 55 ._^[]. ........U 0018F62C: 0018F658 09638720: 8B EC 83 7D 10 00 74 48 83 7D 18 00 74 42 8B 45 ...}..tH.}..tB.E 0018F630: 74E56A16 09638730: 0C A9 C0 EF FC A7 75 31 8B C8 83 E1 E2 49 23 C8 ......u1.....I#. 0018F634: 00000000 09638740: F6 C1 22 75 24 8B C8 83 E1 F1 49 23 C8 F6 C1 11 .."u$.....I#.... 0018F638: 00000020 09638750: 75 17 83 E0 11 50 FF 75 1C FF 75 18 FF 75 14 FF u....P.u..u..u.. 0018F63C: 0018F70E 09638760: 75 10 E8 43 C1 FE FF EB 10 68 EC 03 00 00 EB 02 u..C.....h...... 0018F640: 00000024 09638770: 6A 57 E8 CE 0B FD FF 33 C0 5D C2 20 00 CC CC CC jW.....3.]. .... 0018F644: 0018F704 09638780: CC CC 8B FF 55 8B EC 53 8B 5D 14 83 FB FF 0F 8C ....U..S.]...... 0018F648: 00000024 09638790: B6 00 00 00 83 7D 10 00 0F 84 AC 00 00 00 83 7D .....}.........} 0018F64C: 00000000 096387A0: 1C FF 0F 8C A2 00 00 00 83 7D 18 00 0F 84 98 00 .........}...... 0018F650: 00000000 096387B0: 00 00 8B 45 0C B9 00 00 F0 00 85 C1 75 05 0D 00 ...E........u... 0018F654: 0018F704 096387C0: 00 40 00 A9 C8 FF 0C F7 75 79 8B D0 81 E2 00 00 .@......uy...... 0018F658: 0018F690 096387D0: F0 FF 4A 23 D0 85 D1 75 6A 8B D0 83 E2 E2 4A 23 ..J#...uj.....J# 0018F65C: 74E4EAE2 096387E0: D0 F6 C2 22 75 5D 8B D0 83 E2 F1 4A 23 D0 F6 C2 ..."u].....J#...