EurekaLog 6.1.03 Application: ------------------------------------------------------ 1.1 Start Date : Sun, 9 Mar 2014 01:53:09 +0300 1.2 Name/Description: SASPlanet.Debug.exe 1.3 Version Number : 14.3.8.7943 1.4 Parameters : 1.5 Compilation Date: Sat, 8 Mar 2014 23:19:38 +0300 1.6 Up Time : 3 seconds Exception: ------------------------------------------------------------------------------------------------------------ 2.1 Date : Sun, 9 Mar 2014 01:53:12 +0300 2.2 Address : 0BFA8B05 2.3 Module Name : TimeZone.dll - (Based on tzdata.2013h (2013-10-25) and tz_world_mp (2013-10-08)) 2.4 Module Version: 1.0.3.0 2.5 Type : ELocalTimeInvalid 2.6 Message : Local date/time value 09.03.2014 1:53:12 is invalid (does not exist in the time zone). 2.7 ID : 006C 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.5 Privileges: SeChangeNotifyPrivilege - ON SeSecurityPrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeSystemtimePrivilege - OFF SeShutdownPrivilege - OFF SeRemoteShutdownPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeSystemProfilePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeLoadDriverPrivilege - ON SeCreatePagefilePrivilege - OFF SeIncreaseQuotaPrivilege - OFF SeUndockPrivilege - ON SeManageVolumePrivilege - OFF SeCreateGlobalPrivilege - ON SeImpersonatePrivilege - ON Computer: -------------------------------------------------------------------- 5.3 Free Memory : 1105 Mb 5.5 Free Disk : 165 Gb 5.7 Processor : Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz 5.8 Display Mode: 1920 x 1080, 32 bit 5.9 Display DPI : 96 5.10 Video Card : Radeon X1950 Pro (driver 8.591.0.0 - RAM 256 MB) Operating System: ------------------------------------ 6.1 Type : Microsoft Windows XP 6.2 Build # : 2600 6.3 Update : Service Pack 2 6.4 Language: Russian 6.5 Charset : 204 Call Stack Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------ |Address |Module |Unit |Class |Procedure/Method |Line | ------------------------------------------------------------------------------------------------------------------------------------------------------------ |*Exception Thread: ID=64692; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |0BFA8B05|TimeZone.dll | | | | | |0BFB8A6E|TimeZone.dll | | |LonLatToTimeZoneTime | | |005B7204|SASPlanet.Debug.exe|u_TimeZoneInfo.pas |TTimeZoneInfo |GetStatusBarTzInfoNew |185[0] | |005B7017|SASPlanet.Debug.exe|u_TimeZoneInfo.pas |TTimeZoneInfo |GetStatusBarTzInfo |120[1] | |005B7008|SASPlanet.Debug.exe|u_TimeZoneInfo.pas |TTimeZoneInfo |GetStatusBarTzInfo |119[0] | |0081D121|SASPlanet.Debug.exe|u_LayerStatBar.pas |TLayerStatBar |DoUpdateBitmapDraw |413[64] | |00673C39|SASPlanet.Debug.exe|u_WindowLayerWithPos.pas |TWindowLayerWithBitmapBase |DoViewUpdate |239[31] | |0081D953|SASPlanet.Debug.exe|u_FullMapMouseCursorLayer.pas |TFullMapMouseCursorLayer |OnTimerEvent |163[32] | |0056CF3F|SASPlanet.Debug.exe|u_BaseInterfacedObjectDebug.pas |TBaseInterfacedObjectDebug |_AddRef |107[4] | |0067367E|SASPlanet.Debug.exe|u_WindowLayerBasic.pas |TWindowLayerAbstract |ViewUpdateUnlock |151[4] | |00673650|SASPlanet.Debug.exe|u_WindowLayerBasic.pas |TWindowLayerAbstract |ViewUpdateUnlock |147[0] | |0081CC81|SASPlanet.Debug.exe|u_LayerStatBar.pas |TLayerStatBar |OnTimerEvent |286[5] | |005716EA|SASPlanet.Debug.exe|u_ListenerTime.pas |TListenerTimeCheck |Notification |124[4] | |005B07A2|SASPlanet.Debug.exe|u_NotifierTime.pas |TNotifierTime |Notify |100[12] | |007F9D9C|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |OnGUISyncronizedTimer |997[4] | |77D3BCC7|USER32.dll | | |DispatchMessageA | | |77D3BCBD|USER32.dll | | |DispatchMessageA | | |008ABBA5|SASPlanet.Debug.exe|SASPlanet.dpr | | |1213[30] | |7C90E64C|ntdll.dll | | |NtSetInformationThread | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=64412; Priority=0; Class=TGarbageCollectorThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |7C90E9BE|ntdll.dll | | |NtWaitForSingleObject | | |7C802550|kernel32.dll | | |WaitForSingleObjectEx | | |7C80253D|kernel32.dll | | |WaitForSingleObject | | |7C802530|kernel32.dll | | |WaitForSingleObject | | |0068541D|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |130[2] | |00685414|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |129[1] | |006853CE|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Execute |117[10] | |7C90E21D|ntdll.dll | | |ZwQueryVirtualMemory | | |7C80B83F|kernel32.dll | | |VirtualQueryEx | | |7C809737|kernel32.dll | | |GetCurrentThreadId | | |7C90E57A|ntdll.dll | | |NtSetEvent | | |7C809C32|kernel32.dll | | |SetEvent | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=64692; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |006852A9|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |85[14] | |00685208|SASPlanet.Debug.exe|vsagps_public_tracks.pas | |Get_TrackType_By_Ext |219[8] | |007F893C|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |579[183] | |007F7E10|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |396[0] | |008ABA4C|SASPlanet.Debug.exe|SASPlanet.dpr | | |1188[5] | |7C90E64C|ntdll.dll | | |NtSetInformationThread | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=64424; Priority=-15; Class=TThread4InterfacedThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |7C90E9A9|ntdll.dll | | |ZwWaitForMultipleObjects| | |7C80952A|kernel32.dll | | |WaitForMultipleObjectsEx| | |7C809C81|kernel32.dll | | |WaitForMultipleObjects | | |7C809C6E|kernel32.dll | | |WaitForMultipleObjects | | |0063D4A2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |0063D10F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=64692; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |0063D150|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |0063D138|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |0063CFD9|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |007F98E2|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |902[5] | |007F9890|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |897[0] | |0088FAC6|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1429[192]| |7C90D9BF|ntdll.dll | | |NtFindAtom | | |77D3EE72|USER32.dll | | |GetPropA | | |77D3DFB9|USER32.dll | | |DefWindowProcA | | |77D3DFCD|USER32.dll | | |DefWindowProcA | | |77D3E2F2|USER32.dll | | |SendMessageA | | |77D3E2AE|USER32.dll | | |SendMessageA | | |77D3E5E6|USER32.dll | | |SetFocus | | |77D3E5DC|USER32.dll | | |SetFocus | | |77D3DFB9|USER32.dll | | |DefWindowProcA | | |77D3DFCD|USER32.dll | | |DefWindowProcA | | |77D3B56B|USER32.dll | | |GetClientRect | | |77D3D4E8|USER32.dll | | |ShowWindow | | |77D3D4DE|USER32.dll | | |ShowWindow | | |7C9010ED|ntdll.dll | | |RtlLeaveCriticalSection | | |77D3D9BB|USER32.dll | | |MonitorFromWindow | | |77D3D9CE|USER32.dll | | |MonitorFromWindow | | |008ABBA5|SASPlanet.Debug.exe|SASPlanet.dpr | | |1213[30] | |7C90E64C|ntdll.dll | | |NtSetInformationThread | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=65156; Priority=0; Class=TThread4InterfacedThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |7C90E9A9|ntdll.dll | | |ZwWaitForMultipleObjects| | |0063E2E6|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |PrepareTileMatrixItems |413[24] | |7C80952A|kernel32.dll | | |WaitForMultipleObjectsEx| | |7C809C81|kernel32.dll | | |WaitForMultipleObjects | | |7C809C6E|kernel32.dll | | |WaitForMultipleObjects | | |0063D4A2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |0063D10F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=64692; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |0063D150|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |0063D138|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |0063CFD9|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |0063DC14|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnAppStarted |225[2] | |00571D4E|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |00586FF2|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |87[10] | |005B031E|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007F98B0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |898[1] | |007F9890|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |897[0] | |0088FAC6|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1429[192]| |7C90D9BF|ntdll.dll | | |NtFindAtom | | |77D3EE72|USER32.dll | | |GetPropA | | |77D3DFB9|USER32.dll | | |DefWindowProcA | | |77D3DFCD|USER32.dll | | |DefWindowProcA | | |77D3E2F2|USER32.dll | | |SendMessageA | | |77D3E2AE|USER32.dll | | |SendMessageA | | |77D3E5E6|USER32.dll | | |SetFocus | | |77D3E5DC|USER32.dll | | |SetFocus | | |77D3DFB9|USER32.dll | | |DefWindowProcA | | |77D3DFCD|USER32.dll | | |DefWindowProcA | | |77D3B56B|USER32.dll | | |GetClientRect | | |77D3D4E8|USER32.dll | | |ShowWindow | | |77D3D4DE|USER32.dll | | |ShowWindow | | |7C9010ED|ntdll.dll | | |RtlLeaveCriticalSection | | |77D3D9BB|USER32.dll | | |MonitorFromWindow | | |77D3D9CE|USER32.dll | | |MonitorFromWindow | | |008ABBA5|SASPlanet.Debug.exe|SASPlanet.dpr | | |1213[30] | |7C90E64C|ntdll.dll | | |NtSetInformationThread | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=65424; Priority=0; Class=TThread4InterfacedThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |7C90E9A9|ntdll.dll | | |ZwWaitForMultipleObjects| | |0063E2E6|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |PrepareTileMatrixItems |413[24] | |7C80952A|kernel32.dll | | |WaitForMultipleObjectsEx| | |7C809C81|kernel32.dll | | |WaitForMultipleObjects | | |7C809C6E|kernel32.dll | | |WaitForMultipleObjects | | |0063D4A2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |0063D10F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=64692; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |0063D150|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |0063D138|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |0063CFD9|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |0063DC14|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnAppStarted |225[2] | |00571D4E|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |00586FF2|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |87[10] | |005B031E|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007F98B0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |898[1] | |007F9890|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |897[0] | |0088FAC6|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1429[192]| |7C90D9BF|ntdll.dll | | |NtFindAtom | | |77D3EE72|USER32.dll | | |GetPropA | | |77D3DFB9|USER32.dll | | |DefWindowProcA | | |77D3DFCD|USER32.dll | | |DefWindowProcA | | |77D3E2F2|USER32.dll | | |SendMessageA | | |77D3E2AE|USER32.dll | | |SendMessageA | | |77D3E5E6|USER32.dll | | |SetFocus | | |77D3E5DC|USER32.dll | | |SetFocus | | |77D3DFB9|USER32.dll | | |DefWindowProcA | | |77D3DFCD|USER32.dll | | |DefWindowProcA | | |77D3B56B|USER32.dll | | |GetClientRect | | |77D3D4E8|USER32.dll | | |ShowWindow | | |77D3D4DE|USER32.dll | | |ShowWindow | | |7C9010ED|ntdll.dll | | |RtlLeaveCriticalSection | | |77D3D9BB|USER32.dll | | |MonitorFromWindow | | |77D3D9CE|USER32.dll | | |MonitorFromWindow | | |008ABBA5|SASPlanet.Debug.exe|SASPlanet.dpr | | |1213[30] | |7C90E64C|ntdll.dll | | |NtSetInformationThread | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=64924; Priority=-2; Class=TThread4InterfacedThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |7C90E9A9|ntdll.dll | | |ZwWaitForMultipleObjects| | |0067EDF7|SASPlanet.Debug.exe|u_VectorItemSubsetChangeableForVectorLayers.pas|TVectorItemSubsetChangeableForVectorLayers|PrepareSubset |615[23] | |7C809737|kernel32.dll | | |GetCurrentThreadId | | |0056A757|SASPlanet.Debug.exe|u_InternalPerformanceCounter.pas |TInternalPerformanceCounter |FinishOperation |113[9] | |7C80952A|kernel32.dll | | |WaitForMultipleObjectsEx| | |7C809C81|kernel32.dll | | |WaitForMultipleObjects | | |7C809C6E|kernel32.dll | | |WaitForMultipleObjects | | |0063D4A2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |0063D10F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=64692; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |0063D150|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |0063D138|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |0063CFD9|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |0067DFE8|SASPlanet.Debug.exe|u_VectorItemSubsetChangeableForVectorLayers.pas|TVectorItemSubsetChangeableForVectorLayers|OnAppStarted |258[2] | |00571D4E|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |00586FF2|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |87[10] | |005B031E|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007F98B0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |898[1] | |007F9890|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |897[0] | |0088FAC6|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1429[192]| |7C90D9BF|ntdll.dll | | |NtFindAtom | | |77D3EE72|USER32.dll | | |GetPropA | | |77D3DFB9|USER32.dll | | |DefWindowProcA | | |77D3DFCD|USER32.dll | | |DefWindowProcA | | |77D3E2F2|USER32.dll | | |SendMessageA | | |77D3E2AE|USER32.dll | | |SendMessageA | | |77D3E5E6|USER32.dll | | |SetFocus | | |77D3E5DC|USER32.dll | | |SetFocus | | |77D3DFB9|USER32.dll | | |DefWindowProcA | | |77D3DFCD|USER32.dll | | |DefWindowProcA | | |77D3B56B|USER32.dll | | |GetClientRect | | |77D3D4E8|USER32.dll | | |ShowWindow | | |77D3D4DE|USER32.dll | | |ShowWindow | | |7C9010ED|ntdll.dll | | |RtlLeaveCriticalSection | | |77D3D9BB|USER32.dll | | |MonitorFromWindow | | |77D3D9CE|USER32.dll | | |MonitorFromWindow | | |008ABBA5|SASPlanet.Debug.exe|SASPlanet.dpr | | |1213[30] | |7C90E64C|ntdll.dll | | |NtSetInformationThread | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=65176; Priority=-2; Class=TThread4InterfacedThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |7C90E9A9|ntdll.dll | | |ZwWaitForMultipleObjects| | |7C8097AD|kernel32.dll | | |InterlockedExchange | | |00571245|SASPlanet.Debug.exe|u_SimpleFlagWithInterlock.pas |TSimpleFlagWithInterlock |CheckFlagAndReset |64[1] | |7C80952A|kernel32.dll | | |WaitForMultipleObjectsEx| | |7C809C81|kernel32.dll | | |WaitForMultipleObjects | | |7C809C6E|kernel32.dll | | |WaitForMultipleObjects | | |0063D4A2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |0063D10F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | ------------------------------------------------------------------------------------------------------------------------------------------------------------ Modules Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |Handle |Name |Description |Version |Size |Modified |Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |00340000|jpeg62.dll | | |244736 |2013-05-19 03:01:10|G:\SASPlanet_131111 | |003A0000|FreeImage.dll |FreeImage library |3.15.3.0 |322560 |2013-05-19 03:01:08|G:\SASPlanet_131111 | |00400000|SASPlanet.Debug.exe| |14.3.8.7943 |5912576|2014-03-08 23:19:42|G:\SASPlanet_131111 | |00A40000|libpng15.dll |PNG image compression library |1.5.12.0 |135680 |2013-05-19 03:01:10|G:\SASPlanet_131111 | |00A80000|zlib1.dll |zlib data compression library |1.2.7.0 |66048 |2013-05-19 03:01:10|G:\SASPlanet_131111 | |01D60000|TileStorage_GC.dll | |1.0.1.0 |163840 |2012-11-18 21:41:14|G:\SASPlanet_131111 | |01EE0000|f1ct.dll |Google Earth terrain reader |1.0.2.0 |165376 |2013-01-19 15:43:52|G:\SASPlanet_131111 | |0BF80000|TimeZone.dll |Based on tzdata.2013h (2013-10-25) and tz_world_mp (2013-10-08)|1.0.3.0 |6733824|2013-11-07 21:32:04|G:\SASPlanet_131111 | |0D6D0000|libdb51.dll |Berkeley DB 5.1 DLL |5.0.1.29 |1088000|2013-07-31 13:56:06|G:\SASPlanet_131111 | |0D7E0000|libge.dll | |2013.11.7.0 |720896 |2013-11-07 14:56:56|G:\SASPlanet_131111 | |0D8A0000|leveldb.dll |LevelDB 1.12.0 for win32 |1.12.0.0 |221184 |2013-07-22 18:01:24|G:\SASPlanet_131111 | |0FFD0000|rsaenh.dll |Microsoft Enhanced Cryptographic Provider |5.1.2600.2161 |152576 |2004-08-03 22:31:44|C:\WINDOWS\system32 | |10000000|CityHash.dll | | |14336 |2013-08-12 03:01:08|G:\SASPlanet_131111 | |20000000|xpsp2res.dll |Сообщения пакета обновления 2 |5.1.2600.2180 |2929664|2004-08-17 16:03:34|C:\WINDOWS\system32 | |5B260000|uxtheme.dll |Библиотека тем UxTheme (Microsoft) |6.0.2900.2180 |219648 |2004-08-17 16:04:34|C:\WINDOWS\system32 | |5BD50000|NETAPI32.dll |Net Win32 API DLL |5.1.2600.2180 |332288 |2004-08-17 16:04:28|C:\WINDOWS\system32 | |5F2F0000|olepro32.dll | |5.1.2600.2180 |83456 |2004-08-17 16:04:28|C:\WINDOWS\system32 | |71A30000|mswsock.dll |Расширение поставщика службы API Microsoft Windows Sockets 2.0 |5.1.2600.2180 |247296 |2004-08-17 16:04:26|C:\WINDOWS\system32 | |71A80000|WS2HELP.dll |Модуль поддержки Windows Socket 2.0 для Windows NT |5.1.2600.2180 |19968 |2004-08-17 16:04:36|C:\WINDOWS\system32 | |71A90000|WS2_32.dll |Windows Socket 2.0 32-Bit DLL |5.1.2600.2180 |82944 |2004-08-17 16:04:36|C:\WINDOWS\system32 | |71AB0000|wsock32.dll |32-разрядная библиотека Windows Socket |5.1.2600.2180 |24576 |2004-08-17 16:04:36|C:\WINDOWS\system32 | |72FC0000|winspool.drv |Драйвер диспетчера очереди Windows |5.1.2600.2180 |146944 |2004-08-17 16:05:16|C:\WINDOWS\system32 | |75E60000|SXS.DLL |Fusion 2.5 |5.1.2600.2180 |714240 |2004-08-17 16:04:32|C:\WINDOWS\system32 | |76350000|msimg32.dll |GDIEXT Client DLL |5.1.2600.2180 |4608 |2004-08-17 16:04:22|C:\WINDOWS\system32 | |76360000|imm32.dll |Windows XP IMM32 API Client DLL |5.1.2600.2180 |110080 |2004-08-17 16:04:18|C:\WINDOWS\system32 | |76380000|comdlg32.dll |Библиотека общих диалоговых окон |6.0.2900.2180 |278528 |2004-08-17 16:04:12|C:\WINDOWS\system32 | |76650000|CRYPTUI.dll |Интерфейс поставщика доверия |5.131.2600.2180 |514560 |2004-08-17 16:04:12|C:\WINDOWS\system32 | |769A0000|USERENV.dll |Userenv |5.1.2600.2180 |726016 |2004-08-17 16:04:34|C:\WINDOWS\system32 | |76B20000|winmm.dll |MCI API DLL |5.1.2600.2180 |177152 |2004-08-17 16:04:36|C:\WINDOWS\system32 | |76BE0000|PSAPI.DLL |Process Status Helper |5.1.2600.2180 |23040 |2004-08-17 16:04:28|C:\WINDOWS\system32 | |76C20000|WINTRUST.dll |Интерфейсы проверки доверия (Microsoft) |5.131.2600.2180 |176640 |2004-08-17 16:04:36|C:\WINDOWS\system32 | |76C80000|IMAGEHLP.dll |Windows NT Image Helper |5.1.2600.2180 |144384 |2004-08-17 16:04:18|C:\WINDOWS\system32 | |76D50000|iphlpapi.dll |API модуля поддержки IP |5.1.2600.2180 |95744 |2004-08-17 16:04:20|C:\WINDOWS\system32 | |76E70000|rtutils.dll |Routing Utilities |5.1.2600.2180 |44032 |2004-08-17 16:04:30|C:\WINDOWS\system32 | |76E80000|rasman.dll |Remote Access Connection Manager |5.1.2600.2180 |61440 |2004-08-17 16:04:30|C:\WINDOWS\system32 | |76EA0000|TAPI32.dll |Библиотека API телефонии Microsoft® Windows™ |5.1.2600.2180 |181760 |2004-08-17 16:04:34|C:\WINDOWS\system32 | |76ED0000|RASAPI32.DLL |API удаленного доступа |5.1.2600.2180 |236544 |2004-08-17 16:04:30|C:\WINDOWS\system32 | |76F50000|WLDAP32.dll |Win32 LDAP API DLL |5.1.2600.2180 |172544 |2004-08-17 16:04:36|C:\WINDOWS\system32 | |76FC0000|CLBCATQ.DLL | |2001.12.4414.258|501248 |2004-08-17 16:04:12|C:\WINDOWS\system32 | |77040000|COMRes.dll | |2001.12.4414.258|797696 |2004-08-17 16:04:12|C:\WINDOWS\system32 | |77110000|oleaut32.dll | |5.1.2600.2180 |553472 |2004-08-17 16:04:28|C:\WINDOWS\system32 | |771A0000|wininet.dll |Расширения Интернета для Win32 |6.0.2900.2180 |656896 |2004-08-17 16:04:36|C:\WINDOWS\system32 | |77250000|URLMON.DLL |Расширения OLE32 для Win32 |6.0.2900.2180 |600576 |2004-08-17 16:04:34|C:\WINDOWS\system32 | |773C0000|comctl32.dll |User Experience Controls Library |6.0.2900.2180 |1050624|2004-08-17 16:01:56|C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9| |774D0000|ole32.dll |Microsoft OLE для Windows |5.1.2600.2180 |1281024|2004-08-17 16:04:28|C:\WINDOWS\system32 | |77750000|shdocvw.dll |Библиотека объектов документов и элементов управления оболочки |6.0.2900.2180 |1483264|2004-08-17 16:04:30|C:\WINDOWS\System32 | |77A70000|CRYPT32.dll |API32 криптографии |5.131.2600.2180 |600576 |2004-08-17 16:04:12|C:\WINDOWS\system32 | |77B10000|MSASN1.dll |ASN.1 Runtime APIs |5.1.2600.2180 |57344 |2004-08-17 16:04:22|C:\WINDOWS\system32 | |77BF0000|version.dll |Version Checking and File Installation Libraries |5.1.2600.2180 |18944 |2004-08-17 16:04:34|C:\WINDOWS\system32 | |77C00000|msvcrt.dll |Windows NT CRT DLL |7.0.2600.2180 |343040 |2004-08-17 16:04:24|C:\WINDOWS\system32 | |77C60000|msv1_0.dll |Microsoft Authentication Package v1.0 |5.1.2600.2180 |129536 |2004-08-17 16:04:24|C:\WINDOWS\system32 | |77D30000|USER32.dll |Библиотека клиента USER API Windows XP |5.1.2600.2180 |577536 |2004-08-17 16:04:34|C:\WINDOWS\system32 | |77DC0000|ADVAPI32.dll |Расширенная библиотека API Windows 32 |5.1.2600.2180 |687104 |2004-08-17 16:04:10|C:\WINDOWS\system32 | |77E70000|RPCRT4.dll |Remote Procedure Call Runtime |5.1.2600.2180 |581120 |2004-08-17 16:04:30|C:\WINDOWS\system32 | |77F10000|GDI32.dll |GDI Client DLL |5.1.2600.2180 |278016 |2004-08-17 16:04:16|C:\WINDOWS\system32 | |77F60000|SHLWAPI.dll |Библиотека небольших программ оболочки |6.0.2900.2180 |473600 |2004-08-17 16:04:30|C:\WINDOWS\system32 | |77FE0000|Secur32.dll |Security Support Provider Interface |5.1.2600.2180 |55808 |2004-08-17 16:04:30|C:\WINDOWS\system32 | |78480000|MSVCP90.dll |Microsoft® C++ Runtime Library |9.0.30729.6161 |569680 |2011-04-18 22:51:18|C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43 | |78520000|MSVCR90.dll |Microsoft® C Runtime Library |9.0.30729.6161 |653136 |2011-04-18 22:51:18|C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43 | |7C800000|kernel32.dll |Библиотека клиента Windows NT BASE API |5.1.2600.2180 |989696 |2004-08-17 16:04:20|C:\WINDOWS\system32 | |7C900000|ntdll.dll |Системная библиотека NT |5.1.2600.2180 |712192 |2004-08-17 16:04:06|C:\WINDOWS\system32 | |7C9C0000|shell32.dll |Общая библиотека оболочки Windows |6.0.2900.2180 |8401408|2004-08-17 16:04:30|C:\WINDOWS\system32 | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ Processes Information: --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory |Priority|Threads|Path | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |4 |System | | |57344 |Normal |120 | | |388 |hasplms.exe |Sentinel HASP License Manager Service |12.50.1.16926|6397952 |Normal |8 |C:\WINDOWS\system32 | |468 |devldr32.exe |DevLdr32 |1.0.0.22 |253952 |Normal |1 |C:\WINDOWS\system32 | |604 |svchost.exe |Generic Host Process for Win32 Services |5.1.2600.2180|1437696 |Normal |7 |C:\WINDOWS\System32 | |724 |smss.exe | | |57344 |Normal |3 |\SystemRoot\System32 | |844 |winlogon.exe | | |1691648 |High |25 |C:\WINDOWS\system32 | |888 |services.exe |Приложение служб и контроллеров |5.1.2600.2180|1429504 |Normal |15 |C:\WINDOWS\system32 | |908 |lsass.exe |LSA Shell (Export Version) |5.1.2600.2180|1445888 |Normal |20 |C:\WINDOWS\system32 | |932 |Alcohol.exe |Alcohol 120% |1.9.5.3105 |712704 |Normal |1 |C:\Program Files\Alcohol Soft\Alcohol 120 | |1084 |Ati2evxx.exe |ATI External Event Utility EXE Module |6.14.10.4222 |479232 |Normal |4 |C:\WINDOWS\system32 | |1116 |svchost.exe |Generic Host Process for Win32 Services |5.1.2600.2180|647168 |Normal |17 |C:\WINDOWS\system32 | |1348 |svchost.exe |Generic Host Process for Win32 Services |5.1.2600.2180|5492736 |Normal |56 |C:\WINDOWS\System32 | |1408 |svchost.exe |Generic Host Process for Win32 Services |5.1.2600.2180|122880 |Normal |5 |C:\WINDOWS\system32 | |1456 |Ati2evxx.exe |ATI External Event Utility EXE Module |6.14.10.4222 |1093632 |Normal |6 |C:\WINDOWS\system32 | |1824 |prkiller.exe |Process Killer |1.4.1.0 |2547712 |High |2 |C:\Program Files\Utilitary\Some\Process Killer | |1968 |Explorer.EXE |Проводник |6.0.2900.2180|17055744 |Normal |20 |C:\WINDOWS | |2832 |Runit.exe |RUNit - Program Launcher for Windows 95/98 and Windows NT|3.5.0.0 |528384 |Normal |1 |C:\Program Files\RunIt | |2884 |rapimgr.exe |ActiveSync RAPI Manager |4.5.5096.0 |241664 |Normal |6 |C:\PROGRA~1\Microsoft ActiveSync | |3296 |ccc.exe |Catalyst Control Centre: Host application |2.0.0.0 |4349952 |Normal |18 |C:\Program Files\ATI Technologies\ATI.ACE\Core-Static| |34596 |svchost.exe |Generic Host Process for Win32 Services |5.1.2600.2180|212992 |Normal |8 |C:\WINDOWS\System32 | |46384 |plugin-container.exe|Plugin Container for Firefox |25.0.0.5046 |32542720 |Normal |8 |C:\Program Files\Mozilla Firefox | |64184 |SASPlanet.Debug.exe | |14.3.8.7943 |200056832|Normal |15 |G:\SASPlanet_131111 | |278664 |VirtualDub.exe |VirtualDub |1.10.0.0 |8372224 |Normal |4 |C:\Program Files\VirtualDub-1.10.0 | |581748 |wcescomm.exe |ActiveSync Connection Manager |4.5.5096.0 |229376 |Normal |4 |C:\Program Files\Microsoft ActiveSync | |688800 |firefox.exe |Firefox |25.0.0.5046 |358100992|Normal |50 |C:\Program Files\Mozilla Firefox | |756160 |getright.exe |GetRight® www.getright.com |4.5.4.1 |10756096 |Normal |6 |C:\Program Files\GetRight | |1042444|Explorer.EXE |Проводник |6.0.2900.2180|15319040 |High |17 |C:\WINDOWS | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: --------------------------------------------------------------------- 0BFA8AE4 mov eax, [ebp-$0C] 0BFA8AE7 mov [ebp-$2C], eax 0BFA8AEA mov byte ptr [ebp-$28], $0B 0BFA8AEE lea eax, [ebp-$2C] 0BFA8AF1 push eax 0BFA8AF2 push $00 0BFA8AF4 mov ecx, $0BF9EFBC ; 'р.].њя' 0BFA8AF9 mov dl, $01 0BFA8AFB mov eax, dword ptr [ELocalTimeInvalid] 0BFA8B00 call -$0001DFC1 0BFA8B05 call -$00024D9E ; <-- EXCEPTION 0BFA8B0A jmp +$1D 0BFA8B0C cmp byte ptr [ebp-$21], $01 0BFA8B10 jz +$0B 0BFA8B12 cmp byte ptr [ebp-$21], $02 0BFA8B16 setz al 0BFA8B19 test al, bl 0BFA8B1B jz +$0C 0BFA8B1D mov eax, [ebp-$20] 0BFA8B20 mov edx, [ebp-$1C] 0BFA8B23 add [ebp-$18], eax Registers: ----------------------------- EAX: 05246B20 EDI: 0012FB9C EBX: 0000007E ESI: 00000000 ECX: 00000000 ESP: 0012FA5C EDX: 00416D4D EIP: 00416D48 Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0012FA5C: 0EEDFADE 011BAC90: E8 62 B2 FD FF EB 1D 80 7D DF 01 74 0B 80 7D DF .b......}..t..}. 0012FA60: 00000001 011BACA0: 02 0F 94 C0 84 D8 74 0C 8B 45 E0 8B 55 E4 01 45 ......t..E..U..E 0012FA64: 00000007 011BACB0: E8 11 55 EC 33 C0 5A 59 59 64 89 10 68 4B 8B FA ..U.3.ZYYd..hK.. 0012FA68: 0012FA6C 011BACC0: 0B 8D 45 F4 BA 03 00 00 00 E8 8D B8 FD FF C3 E9 ..E............. 0012FA6C: 0BFA8B0A 011BACD0: 43 B1 FD FF EB EB 8B 45 E8 8B 55 EC 5E 5B 8B E5 C......E..U.^[.. 0012FA70: 0C714E90 011BACE0: 5D C2 08 00 8D 40 00 55 8B EC 83 C4 D0 53 33 D2 ]....@.U.....S3. 0012FA74: 00000000 011BACF0: 89 55 FC 89 55 F8 8B D8 33 C0 55 68 2C 8C FA 0B .U..U...3.Uh,... 0012FA78: 0C714E70 011BAD00: 64 FF 30 64 89 20 FF 75 0C FF 75 08 8D 45 DF 50 d.0d. .u..u..E.P 0012FA7C: 0BABE5D8 011BAD10: 8D 45 FC E8 1F B8 FD FF 50 8D 45 F8 E8 16 B8 FD .E......P.E..... 0012FA80: 0012FAC8 011BAD20: FF 50 8D 4D E0 8D 55 E8 8B C3 E8 34 02 00 00 FF .P.M..U....4.... 0012FA84: 0012FA88 011BAD30: 75 0C FF 75 08 FF 75 EC FF 75 E8 E8 33 54 FF FF u..u..u..u..3T.. 0012FA88: 0012FB00 011BAD40: DD 5D D0 9B FF 75 D4 FF 75 D0 8D 45 DF 50 8D 45 .]...u..u..E.P.E 0012FA8C: 0BF83D0C 011BAD50: FC E8 E1 B7 FD FF 50 8D 45 F8 E8 D8 B7 FD FF 50 ......P.E......P 0012FA90: 0012FAC8 011BAD60: 8D 4D E0 8D 55 E8 8B C3 E8 F6 01 00 00 80 7D DF .M..U.........}. 0012FA94: 0BABE5C8 011BAD70: 03 74 06 80 7D DF 01 75 17 FF 75 D4 FF 75 D0 FF .t..}..u..u..u.. 0012FA98: 0C714E70 011BAD80: 75 E4 FF 75 E0 E8 E9 53 FF FF DD 5D F0 9B EB 0C u..u...S...]....