EurekaLog 6.1.03 Application: ------------------------------------------------------- 1.1 Start Date : Sat, 19 Jul 2014 18:17:34 +0400 1.2 Name/Description: SASPlanet.Debug.exe 1.3 Version Number : 14.7.5.8102 1.4 Parameters : 1.5 Compilation Date: Sat, 5 Jul 2014 22:26:25 +0400 1.6 Up Time : 1 minute, 41 seconds Exception: --------------------------------------------------------------------------------------------------------------------- 2.1 Date : Sat, 19 Jul 2014 18:19:16 +0400 2.2 Address : 00654B55 2.3 Module Name : SASPlanet.Debug.exe 2.4 Module Version: 14.7.5.8102 2.5 Type : EAccessViolation 2.6 Message : Access violation at address 00654B55 in module 'SASPlanet.Debug.exe'. Read of address 00000000. 2.7 ID : FC43 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.5 Privileges: SeIncreaseQuotaPrivilege - OFF SeSecurityPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeLoadDriverPrivilege - OFF SeSystemProfilePrivilege - OFF SeSystemtimePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeCreatePagefilePrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeShutdownPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeChangeNotifyPrivilege - ON SeRemoteShutdownPrivilege - OFF SeUndockPrivilege - OFF SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON SeIncreaseWorkingSetPrivilege - OFF SeTimeZonePrivilege - OFF SeCreateSymbolicLinkPrivilege - OFF Computer: ---------------------------------------------------------------------------- 5.3 Free Memory : 5044 Mb 5.5 Free Disk : 3,89 Gb 5.7 Processor : AMD Athlon(tm) II X4 651 Quad-Core Processor 5.8 Display Mode: 1280 x 1024, 32 bit 5.9 Display DPI : 96 5.10 Video Card : NVIDIA GeForce GT 440 (driver 9.18.13.2723 - RAM 512 MB) Operating System: -------------------------------------------- 6.1 Type : Microsoft Windows 7 (64 bit) 6.2 Build # : 7601 6.3 Update : Service Pack 1 6.4 Language: Russian 6.5 Charset : 204 Call Stack Information: --------------------------------------------------------------------------------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method |Line | --------------------------------------------------------------------------------------------------------------------------------------------------------------- |*Exception Thread: ID=9504; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00654B55|SASPlanet.Debug.exe|u_RegionProcessProgressInfoDownload.pas |TRegionProcessProgressInfoDownload |SaveState |381[2] | |00633241|SASPlanet.Debug.exe|u_ConfigDataWriteProviderByIniFile.pas |TConfigDataWriteProviderByIniFile |GetOrCreateSubItem |115[1] | |0086CBD1|SASPlanet.Debug.exe|frm_ProgressDownload.pas |TfrmProgressDownload |btnSaveClick |333[12] | |7781E0ED|ntdll.dll | | |RtlAllocateHeap | | |76B07027|USER32.dll | | |GetWindowLongW | | |76B07033|USER32.dll | | |GetWindowLongW | | |7781E565|ntdll.dll | | |RtlMultiByteToUnicodeN | | |7781E01E|ntdll.dll | | |RtlFreeHeap | | |7781DFA5|ntdll.dll | | |RtlFreeHeap | | |7781E6A3|ntdll.dll | | |RtlDeleteBoundaryDescriptor| | |76B17945|USER32.dll | | |CallWindowProcA | | |76B1792F|USER32.dll | | |CallWindowProcA | | |76B10F8C|USER32.dll | | |GetParent | | |76B096C0|USER32.dll | | |SendMessageW | | |76B17945|USER32.dll | | |CallWindowProcA | | |76B1792F|USER32.dll | | |CallWindowProcA | | |76B12ABC|USER32.dll | | |GetCapture | | |76B12AAC|USER32.dll | | |GetCapture | | |76B07BC5|USER32.dll | | |DispatchMessageA | | |76B07BBB|USER32.dll | | |DispatchMessageA | | |008AEB75|SASPlanet.Debug.exe|SASPlanet.dpr | | |1275[30] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=9932; Priority=0; Class=TGarbageCollectorThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |75451413|KERNELBASE.dll | | |WaitForSingleObjectEx | | |0068DF21|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |130[2] | |0068DF18|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |129[1] | |0068DED2|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Execute |117[10] | |7544EF27|KERNELBASE.dll | | |VirtualQueryEx | | |75450DDC|KERNELBASE.dll | | |SetEvent | | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=9504; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |0068DDAD|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |85[14] | |0068DD0C|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |71[0] | |007DECAF|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |607[192] | |007DDFF4|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |415[0] | |008AEA1C|SASPlanet.Debug.exe|SASPlanet.dpr | | |1250[5] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=8796; Priority=-15; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |754514F7|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |006490D6|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00573747|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=9504; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00573788|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00573770|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00573611|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |007DFD46|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |950[5] | |007DFCF4|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |945[0] | |008932D2|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1489[195]| |76B16175|USER32.dll | | |SendMessageA | | |76B1612E|USER32.dll | | |SendMessageA | | |76B12175|USER32.dll | | |SetFocus | | |76B07027|USER32.dll | | |GetWindowLongW | | |76B07033|USER32.dll | | |GetWindowLongW | | |77812280|ntdll.dll | | |RtlLeaveCriticalSection | | |76B10DFB|USER32.dll | | |ShowWindow | | |76B13181|USER32.dll | | |MonitorFromWindow | | |76B1319D|USER32.dll | | |MonitorFromWindow | | |008AEB75|SASPlanet.Debug.exe|SASPlanet.dpr | | |1275[30] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=9532; Priority=0; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |754514F7|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |00649BCB|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnPrepareTileMatrix |328[73] | |006490D6|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00573747|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=9504; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00573788|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00573770|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00573611|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |006498A0|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnAppStarted |225[2] | |005718BA|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |0056FF22|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |107[10] | |005708B2|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007DFD14|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |946[1] | |007DFCF4|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |945[0] | |008932D2|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1489[195]| |76B16175|USER32.dll | | |SendMessageA | | |76B1612E|USER32.dll | | |SendMessageA | | |76B12175|USER32.dll | | |SetFocus | | |76B07027|USER32.dll | | |GetWindowLongW | | |76B07033|USER32.dll | | |GetWindowLongW | | |77812280|ntdll.dll | | |RtlLeaveCriticalSection | | |76B10DFB|USER32.dll | | |ShowWindow | | |76B13181|USER32.dll | | |MonitorFromWindow | | |76B1319D|USER32.dll | | |MonitorFromWindow | | |008AEB75|SASPlanet.Debug.exe|SASPlanet.dpr | | |1275[30] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=8992; Priority=0; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |754514F7|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |00649B50|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnPrepareTileMatrix |312[57] | |00649BCB|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnPrepareTileMatrix |328[73] | |006490D6|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00573747|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=9504; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00573788|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00573770|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00573611|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |006498A0|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnAppStarted |225[2] | |005718BA|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |0056FF22|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |107[10] | |005708B2|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007DFD14|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |946[1] | |007DFCF4|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |945[0] | |008932D2|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1489[195]| |76B16175|USER32.dll | | |SendMessageA | | |76B1612E|USER32.dll | | |SendMessageA | | |76B12175|USER32.dll | | |SetFocus | | |76B07027|USER32.dll | | |GetWindowLongW | | |76B07033|USER32.dll | | |GetWindowLongW | | |77812280|ntdll.dll | | |RtlLeaveCriticalSection | | |76B10DFB|USER32.dll | | |ShowWindow | | |76B13181|USER32.dll | | |MonitorFromWindow | | |76B1319D|USER32.dll | | |MonitorFromWindow | | |008AEB75|SASPlanet.Debug.exe|SASPlanet.dpr | | |1275[30] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=4432; Priority=-2; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |0068897F|SASPlanet.Debug.exe|u_VectorItemSubsetChangeableForVectorLayers.pas|TVectorItemSubsetChangeableForVectorLayers|PrepareSubset |635[23] | |754514F7|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |00688417|SASPlanet.Debug.exe|u_VectorItemSubsetChangeableForVectorLayers.pas|TVectorItemSubsetChangeableForVectorLayers|OnPrepareSubset |490[48] | |006490D6|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00573747|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=9504; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00573788|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00573770|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00573611|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |00687B70|SASPlanet.Debug.exe|u_VectorItemSubsetChangeableForVectorLayers.pas|TVectorItemSubsetChangeableForVectorLayers|OnAppStarted |278[2] | |005718BA|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |0056FF22|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |107[10] | |005708B2|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007DFD14|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |946[1] | |007DFCF4|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |945[0] | |008932D2|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1489[195]| |76B16175|USER32.dll | | |SendMessageA | | |76B1612E|USER32.dll | | |SendMessageA | | |76B12175|USER32.dll | | |SetFocus | | |76B07027|USER32.dll | | |GetWindowLongW | | |76B07033|USER32.dll | | |GetWindowLongW | | |77812280|ntdll.dll | | |RtlLeaveCriticalSection | | |76B10DFB|USER32.dll | | |ShowWindow | | |76B13181|USER32.dll | | |MonitorFromWindow | | |76B1319D|USER32.dll | | |MonitorFromWindow | | |008AEB75|SASPlanet.Debug.exe|SASPlanet.dpr | | |1275[30] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=9472; Priority=-2; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |754514F7|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |00649B50|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnPrepareTileMatrix |312[57] | |00649BCB|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnPrepareTileMatrix |328[73] | |006490D6|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00573747|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=9504; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00573788|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00573770|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00573611|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |006498A0|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnAppStarted |225[2] | |005718BA|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |0056FF22|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |107[10] | |005708B2|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007DFD14|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |946[1] | |007DFCF4|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |945[0] | |008932D2|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1489[195]| --------------------------------------------------------------------------------------------------------------------------------------------------------------- Modules Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |Handle |Name |Description |Version |Size |Modified |Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |002F0000|RocketDock.dll | | |69632 |2007-09-02 13:57:36|C:\Program Files (x86)\RocketDock | |00400000|SASPlanet.Debug.exe | |14.7.5.8102 |5925376 |2014-07-05 22:26:28|S:\ | |0F000000|detoured.dll |Marks process affected by Microsoft Research Detours Package |2.1.0.207 |9800 |2010-06-01 10:13:54|C:\Program Files (x86)\Crypto Pro\CSP | |10000000|FreeImage.dll |FreeImage library |3.15.3.0 |322560 |2013-08-02 16:12:56|S:\ | |5EE30000|actxprxy.dll |ActiveX Interface Marshaling Library |6.1.7601.17514 |309760 |2010-11-21 07:24:02|C:\Windows\SysWOW64 | |5EE80000|SHDOCVW.dll |Библиотека объектов документов и элементов управления оболочки |6.1.7601.18222 |180224 |2013-07-26 05:56:00|C:\Windows\system32 | |60900000|sqlite3.dll | | |573100 |2012-02-04 21:31:16|S:\ | |61080000|cpadvai.dll |Модуль исправления функционирования advapi32 |3.6.4581.0 |83528 |2010-08-13 00:33:06|C:\Program Files (x86)\Crypto Pro\CSP | |611D0000|cpcrypt.dll |Модуль исправления функционирования crypt32 |3.6.4439.0 |77896 |2010-08-13 00:33:58|C:\Program Files (x86)\Crypto Pro\CSP | |617F0000|cpwinet.dll |Модуль исправления функционирования wininet.dll |3.6.4289.0 |67656 |2010-08-03 00:35:22|C:\Program Files (x86)\Crypto Pro\CSP | |62E80000|zlib1.dll |zlib data compression library |1.2.8.0 |107520 |2014-02-14 02:04:10|S:\ | |695A0000|ieframe.dll |Интернет-обозреватель |8.0.7601.18487 |10992640|2014-05-28 13:51:26|C:\Windows\SysWOW64 | |6C2D0000|EhStorAPI.dll |Windows Enhanced Storage API |6.1.7601.17514 |128512 |2010-11-21 07:24:10|C:\Windows\system32 | |6C300000|NetworkExplorer.dll |Сетевой проводник |6.1.7601.17514 |1661440 |2010-11-21 07:24:16|C:\Windows\system32 | |6C4B0000|PortableDeviceApi.dll|Компоненты API для переносных устройств Windows |6.1.7601.17514 |547840 |2010-11-21 07:25:12|C:\Windows\system32 | |6C640000|SearchFolder.dll |SearchFolder |6.1.7601.17514 |646144 |2010-11-21 07:23:56|C:\Windows\system32 | |6C9B0000|explorerframe.dll |ExplorerFrame |6.1.7601.17514 |1493504 |2010-11-21 07:24:24|C:\Windows\system32 | |6D630000|StructuredQuery.dll |Structured Query |7.0.7601.17514 |363520 |2010-11-21 07:24:22|C:\Windows\System32 | |6D690000|DUI70.dll |Подсистема DirectUI Windows |6.1.7600.16385 |717824 |2009-07-14 05:15:14|C:\Windows\system32 | |6D7E0000|rtutils.dll |Routing Utilities |6.1.7601.17514 |37376 |2010-11-21 07:24:02|C:\Windows\system32 | |6D7F0000|davclnt.dll |Web DAV Client DLL |6.1.7601.18201 |81920 |2013-07-04 15:51:06|C:\Windows\System32 | |6D810000|ntlanman.dll |Microsoft® LAN Manager |6.1.7601.17514 |69120 |2010-11-21 07:24:02|C:\Windows\System32 | |6D830000|xmllite.dll |Microsoft XmlLite Library |1.3.1001.0 |180224 |2011-06-16 08:33:20|C:\Windows\system32 | |6D860000|msls31.dll |Microsoft Line Services library file |3.10.349.0 |157184 |2009-07-14 05:15:46|C:\Windows\system32 | |6D9D0000|DUser.dll |Windows DirectUser Engine |6.1.7600.16385 |181248 |2009-07-14 05:15:14|C:\Windows\system32 | |6DB10000|tiptsf.dll |Инфраструктура текстовой службы панели ввода планшетного ПК |6.1.7601.18512 |348672 |2014-06-18 05:52:10|C:\Program Files (x86)\Common Files\microsoft shared\ink | |6DB70000|jpeg62.dll | | |244736 |2013-08-02 16:12:56|S:\ | |6DBC0000|SAMLIB.dll |SAM Library DLL |6.1.7600.16385 |60928 |2009-07-14 05:16:14|C:\Windows\system32 | |6DBE0000|ieproxy.dll |IE ActiveX Interface Marshaling Library |8.0.7601.18487 |163328 |2014-05-28 13:51:26|C:\Program Files (x86)\Internet Explorer | |6DCF0000|samcli.dll |Security Accounts Manager Client DLL |6.1.7601.17514 |51200 |2010-11-21 07:23:56|C:\Windows\system32 | |6DDC0000|libpng15.dll |PNG image compression library |1.5.12.0 |135680 |2013-08-02 16:12:56|S:\ | |6DE40000|thumbcache.dll |Кэш эскизов Майкрософт |6.1.7601.17514 |82944 |2010-11-21 07:24:10|C:\Windows\SysWOW64 | |6DE60000|olepro32.dll | |6.1.7601.17514 |90112 |2010-11-21 07:24:04|C:\Windows\system32 | |6EC80000|pshook.dll |Punto Switcher hook module |3.3.1.364 |25400 |2014-04-24 18:17:12|C:\Program Files (x86)\Yandex\Punto Switcher | |6EC90000|LINKINFO.dll |Windows Volume Tracking |6.1.7600.16385 |22016 |2009-07-14 05:15:38|C:\Windows\system32 | |6ECB0000|DAVHLPR.dll |DAV Helper DLL |6.1.7600.16385 |19456 |2009-07-14 05:15:10|C:\Windows\System32 | |6ECE0000|CityHash.dll | | |14336 |2013-08-25 11:29:28|S:\ | |6ECF0000|drprov.dll |Служба доступа к сети для сервера, обслуживающего сеансы подключения к удаленному рабочему столу (Майкрософт)|6.1.7600.16385 |18944 |2009-07-14 05:15:14|C:\Windows\System32 | |6EE90000|ntshrui.dll |Расширения оболочки, обеспечивающие доступ к ресурсам |6.1.7601.17755 |442880 |2012-01-04 12:58:42|C:\Windows\system32 | |6EF70000|EhStorShell.dll |Библиотека DLL расширения оболочки Windows Enhanced Storage |6.1.7600.16385 |189952 |2009-07-14 05:15:16|C:\Windows\system32 | |6EFF0000|mcse32_00.dll | | |171008 |2014-07-19 12:30:36|C:\Users\Dima\AppData\Local\Temp | |6F0A0000|RASAPI32.dll |Remote Access API |6.1.7600.16385 |325120 |2009-07-14 05:16:14|C:\Windows\system32 | |6FC60000|MSVCP90.dll |Microsoft® C++ Runtime Library |9.0.30729.6161 |569680 |2013-08-04 19:48:00|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57 | |6FCF0000|rasman.dll |Remote Access Connection Manager |6.1.7600.16385 |76800 |2009-07-14 05:16:14|C:\Windows\system32 | |6FD10000|OLEACC.dll |Active Accessibility Core Component |7.0.0.0 |233472 |2011-08-27 08:26:28|C:\Windows\SysWOW64 | |712F0000|CRYPTSP.dll |Cryptographic Service Provider API |6.1.7600.16385 |78848 |2009-07-14 05:15:08|C:\Windows\system32 | |71980000|slc.dll |Software Licensing Client DLL |6.1.7600.16385 |27136 |2009-07-14 05:16:16|C:\Windows\system32 | |71A80000|rsaenh.dll |Microsoft Enhanced Cryptographic Provider |6.1.7600.16385 |242936 |2009-07-14 05:17:56|C:\Windows\system32 | |71AC0000|cscapi.dll |Offline Files Win32 API |6.1.7601.17514 |34816 |2010-11-21 07:24:04|C:\Windows\system32 | |71AD0000|sensapi.dll |SENS Connectivity API DLL |6.1.7600.16385 |10752 |2009-07-14 05:16:14|C:\Windows\system32 | |71CD0000|dwmapi.dll |Интерфейс API диспетчера окон рабочего стола (Майкрософт) |6.1.7600.16385 |67072 |2009-07-14 05:15:14|C:\Windows\system32 | |71E80000|uxtheme.dll |Библиотека тем UxTheme (Microsoft) |6.1.7600.16385 |245760 |2009-07-14 05:11:26|C:\Windows\system32 | |720A0000|comctl32.dll |Библиотека элементов управления взаимодействия с пользователем |6.10.7601.17514 |1680896 |2010-11-21 07:23:56|C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2| |722D0000|winmm.dll |MCI API DLL |6.1.7601.17514 |194048 |2010-11-21 07:24:18|C:\Windows\system32 | |72340000|wkscli.dll |Workstation Service Client DLL |6.1.7601.17514 |47104 |2010-11-21 07:23:52|C:\Windows\system32 | |72350000|srvcli.dll |Server Service Client DLL |6.1.7601.17514 |90112 |2010-11-21 07:24:18|C:\Windows\system32 | |72370000|netutils.dll |Net Win32 API Helpers DLL |6.1.7601.17514 |22528 |2010-11-21 07:24:18|C:\Windows\system32 | |723B0000|WINNSI.DLL |Network Store Information RPC interface |6.1.7600.16385 |16896 |2009-07-14 05:16:20|C:\Windows\system32 | |723C0000|iphlpapi.DLL |IP Helper API |6.1.7601.17514 |103936 |2010-11-21 07:24:34|C:\Windows\system32 | |728C0000|MPR.dll |Библиотека маршрутизации для нескольких служб доступа |6.1.7600.16385 |64000 |2009-07-14 05:15:42|C:\Windows\system32 | |72900000|RpcRtRemote.dll |Remote RPC Extension |6.1.7601.17514 |46080 |2010-11-21 07:24:16|C:\Windows\system32 | |72910000|profapi.dll |User Profile Basic API |6.1.7600.16385 |31744 |2009-07-14 05:16:14|C:\Windows\system32 | |72C80000|wshtcpip.dll |Библиотека DLL помощника службы Winsock2 (TL/IPv4) |6.1.7600.16385 |9216 |2009-07-14 05:16:22|C:\Windows\System32 | |72C90000|mswsock.dll |Расширение поставщика службы API Microsoft Windows Sockets 2.0 |6.1.7601.18254 |231424 |2013-09-08 06:04:00|C:\Windows\system32 | |72CD0000|wsock32.dll |Windows Socket 32-Bit DLL |6.1.7600.16385 |15360 |2009-07-14 05:16:22|C:\Windows\system32 | |72D70000|Secur32.dll |Security Support Provider Interface |6.1.7601.18496 |22016 |2014-06-05 18:27:00|C:\Windows\System32 | |73010000|MSVCR90.dll |Microsoft® C Runtime Library |9.0.30729.6161 |653136 |2013-08-04 19:48:00|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57 | |73880000|WindowsCodecs.dll |Microsoft Windows Codecs Library |6.2.9200.16809 |1230336 |2014-02-04 06:04:24|C:\Windows\system32 | |739C0000|wship6.dll |Библиотека DLL помощника Winsock2 (TL/IPv6) |6.1.7600.16385 |10752 |2009-07-14 05:16:22|C:\Windows\System32 | |739D0000|tv_w32.dll |TeamViewer 9 |9.0.29947.0 |246592 |2014-07-02 13:30:04|C:\Program Files (x86)\TeamViewer\Version9 | |73C20000|PROPSYS.dll |Система страниц свойств (Microsoft) |7.0.7601.17514 |988160 |2010-11-21 07:24:10|C:\Windows\system32 | |73D20000|msimg32.dll |GDIEXT Client DLL |6.1.7600.16385 |4608 |2009-07-14 05:15:46|C:\Windows\system32 | |74780000|WINSTA.dll |Winstation Library |6.1.7601.17514 |156672 |2010-11-21 07:23:56|C:\Windows\System32 | |74830000|rasadhlp.dll |Remote Access AutoDial Helper |6.1.7600.16385 |11776 |2009-07-14 05:16:14|C:\Windows\system32 | |74840000|fwpuclnt.dll |API пользовательского режима FWP/IPsec |6.1.7601.18283 |216576 |2013-10-12 06:01:26|C:\Windows\System32 | |74880000|winrnr.dll |LDAP RnR Provider DLL |6.1.7600.16385 |20992 |2009-07-14 05:16:20|C:\Windows\System32 | |74890000|dnsapi.DLL |Динамическая библиотека API DNS-клиента |6.1.7601.17570 |270336 |2011-03-03 09:38:02|C:\Windows\system32 | |748E0000|pnrpnsp.dll |Поставщик пространства имен PNRP |6.1.7600.16385 |65024 |2009-07-14 05:16:14|C:\Windows\system32 | |74900000|napinsp.dll |Поставщик оболочки совместимости для имен электронной почты |6.1.7600.16385 |52224 |2009-07-14 05:16:04|C:\Windows\system32 | |74910000|NLAapi.dll |Network Location Awareness 2 |6.1.7601.17761 |52224 |2012-01-13 11:12:04|C:\Windows\system32 | |749C0000|SXS.DLL |Fusion 2.5 |6.1.7601.17514 |380416 |2010-11-21 07:24:18|C:\Windows\system32 | |74A20000|apphelp.dll |Клиентская библиотека совместимости приложений |6.1.7601.17514 |295936 |2010-11-21 07:24:16|C:\Windows\system32 | |751E0000|ntmarta.dll |Поставщик Windows NT MARTA |6.1.7600.16385 |121856 |2009-07-14 05:16:12|C:\Windows\system32 | |75210000|winspool.drv |Драйвер диспетчера очереди Windows |6.1.7601.17514 |320000 |2010-11-21 07:24:10|C:\Windows\system32 | |75270000|version.dll |Version Checking and File Installation Libraries |6.1.7600.16385 |21504 |2009-07-14 05:16:18|C:\Windows\system32 | |75340000|CRYPTBASE.dll |Base cryptographic API DLL |6.1.7600.16385 |36864 |2009-07-14 05:15:08|C:\Windows\syswow64 | |75350000|SspiCli.dll |Security Support Provider Interface |6.1.7601.18496 |96768 |2014-06-05 18:25:50|C:\Windows\syswow64 | |753B0000|comdlg32.dll |Библиотека общих диалоговых окон |6.1.7601.17514 |485888 |2010-11-21 07:23:50|C:\Windows\syswow64 | |75430000|PSAPI.DLL |Process Status Helper |6.1.7600.16385 |6144 |2009-07-14 05:16:14|C:\Windows\syswow64 | |75440000|KERNELBASE.dll |Библиотека клиента Windows NT BASE API |6.1.7601.18409 |274944 |2014-03-04 13:16:20|C:\Windows\syswow64 | |75490000|imagehlp.dll |Windows NT Image Helper |6.1.7601.18288 |159232 |2013-10-19 05:37:00|C:\Windows\syswow64 | |754C0000|WINTRUST.dll |Microsoft Trust Verification APIs |6.1.7601.18205 |175104 |2013-07-09 08:52:12|C:\Windows\syswow64 | |754F0000|shell32.dll |Общая библиотека оболочки Windows |6.1.7601.18429 |12874240|2014-03-25 06:09:56|C:\Windows\syswow64 | |76140000|GDI32.dll |GDI Client DLL |6.1.7601.18275 |311808 |2013-10-03 06:00:46|C:\Windows\syswow64 | |761D0000|SHLWAPI.dll |Библиотека небольших программ оболочки |6.1.7601.17514 |350208 |2010-11-21 07:23:50|C:\Windows\syswow64 | |76230000|WS2_32.dll |32-разрядная библиотека Windows Socket 2.0 |6.1.7601.17514 |206848 |2010-11-21 07:23:56|C:\Windows\syswow64 | |76270000|iertutil.dll |Run time utility for Internet Explorer |8.0.7601.18487 |2078208 |2014-05-28 13:51:26|C:\Windows\syswow64 | |76470000|LPK.dll |Language Pack |6.1.7601.18177 |25600 |2013-06-06 08:57:02|C:\Windows\syswow64 | |76490000|CLBCatQ.DLL |COM+ Configuration Catalog |2001.12.8530.16385|522240 |2009-07-14 05:15:04|C:\Windows\syswow64 | |76520000|NSI.dll |NSI User-mode interface DLL |6.1.7600.16385 |8704 |2009-07-14 05:16:12|C:\Windows\syswow64 | |76530000|USP10.dll |Uniscribe Unicode script processor |1.626.7601.18454 |626688 |2014-04-25 06:06:18|C:\Windows\syswow64 | |76630000|CFGMGR32.dll |Configuration Manager DLL |6.1.7601.17621 |145920 |2011-05-24 14:39:40|C:\Windows\syswow64 | |76660000|WLDAP32.dll |Win32 LDAP API DLL |6.1.7601.17514 |269824 |2010-11-21 07:24:18|C:\Windows\syswow64 | |766B0000|WININET.dll |Расширения Интернета для Win32 |8.0.7601.18487 |981504 |2014-05-28 13:51:52|C:\Windows\syswow64 | |767B0000|CRYPT32.dll |API32 криптографии |6.1.7601.18277 |1168384 |2013-10-05 23:57:26|C:\Windows\syswow64 | |768D0000|ole32.dll |Microsoft OLE для Windows |6.1.7601.17514 |1414144 |2010-11-21 07:24:02|C:\Windows\syswow64 | |76A30000|ADVAPI32.dll |Расширенная библиотека API Windows 32 |6.1.7601.18247 |640512 |2013-08-29 05:48:18|C:\Windows\syswow64 | |76AD0000|DEVOBJ.dll |Device Information Set DLL |6.1.7601.17621 |64512 |2011-05-24 14:40:06|C:\Windows\syswow64 | |76AF0000|USER32.dll |Многопользовательская библиотека клиента USER API Windows |6.1.7601.17514 |833024 |2010-11-21 07:24:22|C:\Windows\syswow64 | |76BF0000|oleaut32.dll | |6.1.7601.17676 |571904 |2011-08-27 08:26:28|C:\Windows\syswow64 | |76C80000|msvcrt.dll |Windows NT CRT DLL |7.0.7601.17744 |690688 |2011-12-16 11:53:00|C:\Windows\syswow64 | |76D30000|MSCTF.dll |Серверная библиотека MSCTF |6.1.7600.16385 |828928 |2009-07-14 05:15:44|C:\Windows\syswow64 | |76E00000|URLMON.DLL |Расширения OLE32 для Win32 |8.0.7601.18487 |1234432 |2014-05-28 13:51:40|C:\Windows\syswow64 | |76F40000|SETUPAPI.dll |Windows Setup API |6.1.7601.17514 |1667584 |2010-11-21 07:23:52|C:\Windows\syswow64 | |770E0000|kernel32.dll |Библиотека клиента Windows NT BASE API |6.1.7601.18409 |1114112 |2014-03-04 13:16:18|C:\Windows\syswow64 | |771F0000|RPCRT4.dll |Библиотека удаленного вызова процедур |6.1.7601.18205 |663552 |2013-07-09 08:52:34|C:\Windows\syswow64 | |772E0000|sechost.dll |Host for SCM/SDDL/LSA Lookup APIs |6.1.7600.16385 |92160 |2009-07-14 05:16:14|C:\Windows\SysWOW64 | |77390000|imm32.dll |Multi-User Windows IMM32 API Client DLL |6.1.7601.17514 |119808 |2010-11-21 07:24:26|C:\Windows\syswow64 | |777C0000|MSASN1.dll |ASN.1 Runtime APIs |6.1.7601.17514 |34304 |2010-11-21 07:23:50|C:\Windows\syswow64 | |777F0000|ntdll.dll |Системная библиотека NT |6.1.7601.18247 |1292192 |2013-08-29 05:50:32|C:\Windows\SysWOW64 | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ Processes Information: -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory|Priority |Threads|Path | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |0 |[System Process] | | |0 | |4 | | |4 |System | | |0 |Normal |177 | | |252 |nvvsvc.exe | | |0 |Normal |6 | | |436 |smss.exe | | |0 |Above-Normal|2 | | |480 |nvSCPAPISvr.exe | | |0 |Normal |6 | | |492 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |10 | | |676 |csrss.exe | | |0 |High |10 | | |736 |wininit.exe |Автозагрузка приложений Windows |6.1.7600.16385|0 |High |3 | | |772 |csrss.exe | | |0 |High |12 | | |808 |services.exe | | |0 |Normal |12 | | |844 |winlogon.exe | | |0 |High |3 | | |872 |lsass.exe | | |0 |Normal |12 | | |880 |lsm.exe | | |0 |Normal |11 | | |972 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |10 | | |1036 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |23 | | |1084 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |26 | | |1116 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |15 | | |1140 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |41 | | |1176 |PnkBstrA.exe | | |0 |Normal |4 | | |1184 |taskhost.exe | | |0 |Normal |9 | | |1224 |dwm.exe | | |0 |High |5 | | |1276 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |6 | | |1396 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |23 | | |1488 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |20 | | |1600 |spoolsv.exe | | |0 |Normal |12 | | |1636 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |4 | | |1656 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |17 | | |1740 |nvxdsync.exe | | |0 |Normal |12 | | |1748 |nvvsvc.exe | | |0 |Normal |5 | | |1896 |armsvc.exe | | |0 |Normal |4 | | |1920 |avp.exe | | |0 |Normal |86 | | |1948 |TeamViewer.exe |TeamViewer 9 |9.0.29947.0 |0 |Normal |26 |C:\Program Files (x86)\TeamViewer\Version9 | |2072 |PsiService_2.exe | | |0 |Normal |4 | | |2108 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |6 | | |2152 |TeamViewer_Service.exe| | |0 |Normal |16 | | |2224 |explorer.exe |Проводник |6.1.7601.17567|0 |Normal |44 | | |2412 |rundll32.exe |Хост-процесс Windows (Rundll32) |6.1.7600.16385|0 |Normal |3 |C:\Windows\SysWOW64 | |2776 |RAVCpl64.exe | | |0 |Normal |11 | | |3128 |wmdc.exe | | |0 |Normal |5 | | |3168 |acrotray.exe |AcroTray |11.0.3.37 |0 |Normal |3 |C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat | |3212 |nvtray.exe | | |0 |Normal |5 | | |3256 |HotFixQ0306270.exe |HotFix Q0306270 |3.0.0.3 |0 |Normal |2 |C:\Windows\SysWOW64 | |3272 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |13 | | |3280 |LanICQ.exe |LanICQ-Sonic! |4.5.0.0 |0 |Normal |9 |C:\Program Files (x86)\LanICQ-Sonic! | |3304 |RocketDock.exe | | |0 |Normal |5 |C:\Program Files (x86)\RocketDock | |3440 |SearchIndexer.exe |Индексатор службы Microsoft Windows Search|7.0.7601.17610|0 |Normal |14 | | |3640 |daemonu.exe | | |0 |Normal |7 | | |3676 |YandexDiskStarter.exe | |1.2.5.4575 |0 |Normal |2 |C:\Users\Dima\AppData\Roaming\Yandex\YandexDisk\wow64| |3680 |YandexDisk.exe | | |0 |Normal |23 | | |3768 |avp.exe | | |0 |Normal |21 | | |3780 |ACDSeeInTouch2.exe |ACDSee InTouch |1.0.32.0 |0 |Normal |4 |C:\Program Files (x86)\ACD Systems\ACDSee\14.0 | |3856 |tv_w32.exe | | |0 |Normal |2 | | |3864 |tv_x64.exe | | |0 |Normal |2 | | |3920 |YandexDiskStarter.exe | | |0 |Normal |2 | | |4004 |Cloud.exe |Mail.Ru Cloud |15.1.9.0 |0 |Normal |13 |C:\Users\Dima\AppData\Local\Mail.Ru\Cloud | |4012 |punto.exe |Punto Switcher |3.3.1.364 |0 |Normal |6 |C:\Program Files (x86)\Yandex\Punto Switcher | |4064 |BCResident.exe |BCResident |2.11.8.0 |0 |Normal |2 |C:\Program Files (x86)\Jetico\BestCrypt | |4076 |acdIDInTouch2.exe |acdID InTouch2 |4.0.31.0 |0 |Normal |4 |C:\Program Files (x86)\ACD Systems\ACDSee\16.0 | |4112 |SASPlanet.exe | |14.7.5.8102 |0 |Normal |25 |S:\ | |4232 |ps64ldr.exe | | |0 |Normal |2 | | |5552 |EXCEL.EXE |Microsoft Office Excel |12.0.6683.5002|0 |Normal |8 |C:\Program Files (x86)\Microsoft Office\Office12 | |7292 |SASPlanet.Debug.exe | |14.7.5.8102 |0 |Normal |25 |S:\ | |7988 |firefox.exe |Firefox |30.0.0.5269 |0 |Normal |46 |C:\Program Files (x86)\Mozilla Firefox | |8504 |SASPlanet.Debug.exe | |14.7.5.8102 |0 |Normal |35 |S:\ | |8920 |dllhost.exe |COM Surrogate |6.1.7600.16385|0 |Normal |6 | | |9232 |SearchFilterHost.exe |Microsoft Windows Search Filter Host |7.0.7601.17610|0 |Low |5 | | |9428 |audiodg.exe | | |0 |Normal |6 | | |9604 |SearchProtocolHost.exe|Microsoft Windows Search Protocol Host |7.0.7601.17610|0 |Low |8 | | |9712 |taskeng.exe |Обработчик планировщика заданий |6.1.7601.17514|0 |Normal |6 | | |9860 |taskeng.exe |Обработчик планировщика заданий |6.1.7601.17514|0 |Below-Normal|4 | | |10052|WINWORD.EXE |Microsoft Office Word |12.0.6700.5000|0 |Normal |6 |C:\Program Files (x86)\Microsoft Office\Office12 | |10072|splwow64.exe |Print driver host for 32bit applications |6.1.7601.17777|0 |Normal |6 | | |10196|TheBat.exe |T |6.4.6.0 |0 |Normal |15 |C:\Program Files (x86)\The Bat! | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: -------------------------------------------------------------------------------------------------------------------------------- ; u_RegionProcessProgressInfoDownload.TRegionProcessProgressInfoDownload.SaveState (Line=379 - Offset=0) ; ------------------------------------------------------------------------------------------------------ 00654B36 xor eax, eax 00654B38 push ebp 00654B39 push $00654DC8 ; 'йУ.ЫялР^[‹е]Г' 00654B3E push dword ptr fs:[eax] 00654B41 mov fs:[eax], esp ; ; Line=380 - Offset=1 ; ------------------- 00654B44 lea eax, [ebp-$04] 00654B47 call -$0024EC60 ; ; Line=381 - Offset=2 ; ------------------- 00654B4C lea edx, [ebp-$14] 00654B4F mov eax, [ebp-$08] 00654B52 mov eax, [eax+$38] 00654B55 mov ecx, [eax] ; <-- EXCEPTION 00654B57 call dword ptr [ecx+$0C] 00654B5A cmp dword ptr [ebp-$14], +$00 00654B5E jz u_RegionProcessProgressInfoDownload.TRegionProcessProgressInfoDownload.SaveState (Line=384) ; ; Line=382 - Offset=3 ; ------------------- 00654B60 lea edx, [ebp-$18] 00654B63 mov eax, [ebp-$08] 00654B66 mov eax, [eax+$38] 00654B69 mov ecx, [eax] 00654B6B call dword ptr [ecx+$0C] 00654B6E mov eax, [ebp-$18] 00654B71 lea edx, [ebp-$04] Registers: ----------------------------- EAX: 00000000 EDI: 0018F644 EBX: 0CDF0FE0 ESI: 004A8E8C ECX: 00000000 ESP: 0018F43C EDX: 0018F464 EIP: 00654B55 Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0018F43C: 0018F480 0CDF2570: 8B 08 FF 51 0C 83 7D EC 00 74 19 8D 55 E8 8B 45 ...Q..}..t..U..E 0018F440: 00405720 0CDF2580: F8 8B 40 38 8B 08 FF 51 0C 8B 45 E8 8D 55 FC 8B ..@8...Q..E..U.. 0018F444: 0018F478 0CDF2590: 08 FF 51 14 8D 55 E4 8B 45 F8 83 C0 20 E8 A5 87 ..Q..U..E... ... 0018F448: 004A8E8C 0CDF25A0: DB FF 8B 4D E4 BA E0 4D 65 00 8B C3 8B 30 FF 56 ...M...Me....0.V 0018F44C: 00633030 0CDF25B0: 50 8D 55 E0 8B 45 F8 8B 40 3C 8B 08 FF 51 14 8B P.U..E..@<...Q.. 0018F450: 0CFB56B0 0CDF25C0: 4D E0 BA F0 4D 65 00 8B C3 8B 30 FF 56 50 8B 4D M...Me....0.VP.M 0018F454: 00000000 0CDF25D0: FC BA 08 4E 65 00 8B C3 8B 30 FF 56 50 8B 45 F8 ...Ne....0.VP.E. 0018F458: 00000000 0CDF25E0: 8B 40 38 8B 10 FF 52 10 8B C8 BA 20 4E 65 00 8B .@8...R.... Ne.. 0018F45C: 00000000 0CDF25F0: C3 8B 30 FF 56 5C 8B 45 F8 0F B6 48 30 41 BA 3C ..0.V\.E...H0A.< 0018F460: 00000000 0CDF2600: 4E 65 00 8B C3 8B 30 FF 56 58 8B 45 F8 0F B6 48 Ne....0.VX.E...H 0018F464: 00000000 0CDF2610: 41 BA 4C 4E 65 00 8B C3 8B 30 FF 56 5C 8B 45 F8 A.LNe....0.V\.E. 0018F468: 0CDF0FE0 0CDF2620: 0F B6 48 42 BA 68 4E 65 00 8B C3 8B 30 FF 56 5C ..HB.hNe....0.V\ 0018F46C: 00633246 0CDF2630: 8B 45 F8 0F B6 48 43 BA 84 4E 65 00 8B C3 8B 30 .E...HC..Ne....0 0018F470: 0351A450 0CDF2640: FF 56 5C 8B 45 F8 FF 70 4C FF 70 48 BA A0 4E 65 .V\.E..pL.pH..Ne 0018F474: 00000000 0CDF2650: 00 8B C3 8B 08 FF 51 60 8B 45 F8 0F B6 48 40 BA ......Q`.E...H@. 0018F478: 0018F4A4 0CDF2660: B8 4E 65 00 8B C3 8B 30 FF 56 5C 8B 45 F8 8B 40 .Ne....0.V\.E..@ EurekaLog 6.1.03 Application: ------------------------------------------------------- 1.1 Start Date : Sat, 19 Jul 2014 18:17:34 +0400 1.2 Name/Description: SASPlanet.Debug.exe 1.3 Version Number : 14.7.5.8102 1.4 Parameters : 1.5 Compilation Date: Sat, 5 Jul 2014 22:26:25 +0400 1.6 Up Time : 2 minutes, 6 seconds Exception: --------------------------------------------------------------------------------------------------------------------- 2.1 Date : Sat, 19 Jul 2014 18:19:41 +0400 2.2 Address : 00654B55 2.3 Module Name : SASPlanet.Debug.exe 2.4 Module Version: 14.7.5.8102 2.5 Type : EAccessViolation 2.6 Message : Access violation at address 00654B55 in module 'SASPlanet.Debug.exe'. Read of address 00000000. 2.7 ID : FC43 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.5 Privileges: SeIncreaseQuotaPrivilege - OFF SeSecurityPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeLoadDriverPrivilege - OFF SeSystemProfilePrivilege - OFF SeSystemtimePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeCreatePagefilePrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeShutdownPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeChangeNotifyPrivilege - ON SeRemoteShutdownPrivilege - OFF SeUndockPrivilege - OFF SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON SeIncreaseWorkingSetPrivilege - OFF SeTimeZonePrivilege - OFF SeCreateSymbolicLinkPrivilege - OFF Computer: ---------------------------------------------------------------------------- 5.3 Free Memory : 5036 Mb 5.5 Free Disk : 3,89 Gb 5.7 Processor : AMD Athlon(tm) II X4 651 Quad-Core Processor 5.8 Display Mode: 1280 x 1024, 32 bit 5.9 Display DPI : 96 5.10 Video Card : NVIDIA GeForce GT 440 (driver 9.18.13.2723 - RAM 512 MB) Operating System: -------------------------------------------- 6.1 Type : Microsoft Windows 7 (64 bit) 6.2 Build # : 7601 6.3 Update : Service Pack 1 6.4 Language: Russian 6.5 Charset : 204 Call Stack Information: --------------------------------------------------------------------------------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method |Line | --------------------------------------------------------------------------------------------------------------------------------------------------------------- |*Exception Thread: ID=9504; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00654B55|SASPlanet.Debug.exe|u_RegionProcessProgressInfoDownload.pas |TRegionProcessProgressInfoDownload |SaveState |381[2] | |00633241|SASPlanet.Debug.exe|u_ConfigDataWriteProviderByIniFile.pas |TConfigDataWriteProviderByIniFile |GetOrCreateSubItem |115[1] | |0086CBD1|SASPlanet.Debug.exe|frm_ProgressDownload.pas |TfrmProgressDownload |btnSaveClick |333[12] | |7781E0ED|ntdll.dll | | |RtlAllocateHeap | | |76B07027|USER32.dll | | |GetWindowLongW | | |76B07033|USER32.dll | | |GetWindowLongW | | |7781E565|ntdll.dll | | |RtlMultiByteToUnicodeN | | |7781E01E|ntdll.dll | | |RtlFreeHeap | | |7781DFA5|ntdll.dll | | |RtlFreeHeap | | |7781E6A3|ntdll.dll | | |RtlDeleteBoundaryDescriptor| | |76B17945|USER32.dll | | |CallWindowProcA | | |76B1792F|USER32.dll | | |CallWindowProcA | | |76B10F8C|USER32.dll | | |GetParent | | |76B096C0|USER32.dll | | |SendMessageW | | |76B17945|USER32.dll | | |CallWindowProcA | | |76B1792F|USER32.dll | | |CallWindowProcA | | |76B12ABC|USER32.dll | | |GetCapture | | |76B12AAC|USER32.dll | | |GetCapture | | |76B07BC5|USER32.dll | | |DispatchMessageA | | |76B07BBB|USER32.dll | | |DispatchMessageA | | |008AEB75|SASPlanet.Debug.exe|SASPlanet.dpr | | |1275[30] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=9932; Priority=0; Class=TGarbageCollectorThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |75451413|KERNELBASE.dll | | |WaitForSingleObjectEx | | |0068DF21|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |130[2] | |0068DF18|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |129[1] | |0068DED2|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Execute |117[10] | |7544EF27|KERNELBASE.dll | | |VirtualQueryEx | | |75450DDC|KERNELBASE.dll | | |SetEvent | | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=9504; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |0068DDAD|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |85[14] | |0068DD0C|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |71[0] | |007DECAF|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |607[192] | |007DDFF4|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |415[0] | |008AEA1C|SASPlanet.Debug.exe|SASPlanet.dpr | | |1250[5] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=8796; Priority=-15; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |754514F7|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |006490D6|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00573747|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=9504; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00573788|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00573770|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00573611|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |007DFD46|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |950[5] | |007DFCF4|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |945[0] | |008932D2|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1489[195]| |76B16175|USER32.dll | | |SendMessageA | | |76B1612E|USER32.dll | | |SendMessageA | | |76B12175|USER32.dll | | |SetFocus | | |76B07027|USER32.dll | | |GetWindowLongW | | |76B07033|USER32.dll | | |GetWindowLongW | | |77812280|ntdll.dll | | |RtlLeaveCriticalSection | | |76B10DFB|USER32.dll | | |ShowWindow | | |76B13181|USER32.dll | | |MonitorFromWindow | | |76B1319D|USER32.dll | | |MonitorFromWindow | | |008AEB75|SASPlanet.Debug.exe|SASPlanet.dpr | | |1275[30] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=9532; Priority=0; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |754514F7|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |00649BCB|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnPrepareTileMatrix |328[73] | |006490D6|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00573747|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=9504; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00573788|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00573770|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00573611|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |006498A0|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnAppStarted |225[2] | |005718BA|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |0056FF22|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |107[10] | |005708B2|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007DFD14|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |946[1] | |007DFCF4|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |945[0] | |008932D2|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1489[195]| |76B16175|USER32.dll | | |SendMessageA | | |76B1612E|USER32.dll | | |SendMessageA | | |76B12175|USER32.dll | | |SetFocus | | |76B07027|USER32.dll | | |GetWindowLongW | | |76B07033|USER32.dll | | |GetWindowLongW | | |77812280|ntdll.dll | | |RtlLeaveCriticalSection | | |76B10DFB|USER32.dll | | |ShowWindow | | |76B13181|USER32.dll | | |MonitorFromWindow | | |76B1319D|USER32.dll | | |MonitorFromWindow | | |008AEB75|SASPlanet.Debug.exe|SASPlanet.dpr | | |1275[30] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=8992; Priority=0; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |754514F7|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |00649B50|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnPrepareTileMatrix |312[57] | |00649BCB|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnPrepareTileMatrix |328[73] | |006490D6|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00573747|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=9504; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00573788|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00573770|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00573611|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |006498A0|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnAppStarted |225[2] | |005718BA|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |0056FF22|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |107[10] | |005708B2|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007DFD14|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |946[1] | |007DFCF4|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |945[0] | |008932D2|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1489[195]| |76B16175|USER32.dll | | |SendMessageA | | |76B1612E|USER32.dll | | |SendMessageA | | |76B12175|USER32.dll | | |SetFocus | | |76B07027|USER32.dll | | |GetWindowLongW | | |76B07033|USER32.dll | | |GetWindowLongW | | |77812280|ntdll.dll | | |RtlLeaveCriticalSection | | |76B10DFB|USER32.dll | | |ShowWindow | | |76B13181|USER32.dll | | |MonitorFromWindow | | |76B1319D|USER32.dll | | |MonitorFromWindow | | |008AEB75|SASPlanet.Debug.exe|SASPlanet.dpr | | |1275[30] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=4432; Priority=-2; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |0068897F|SASPlanet.Debug.exe|u_VectorItemSubsetChangeableForVectorLayers.pas|TVectorItemSubsetChangeableForVectorLayers|PrepareSubset |635[23] | |754514F7|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |00688417|SASPlanet.Debug.exe|u_VectorItemSubsetChangeableForVectorLayers.pas|TVectorItemSubsetChangeableForVectorLayers|OnPrepareSubset |490[48] | |006490D6|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00573747|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=9504; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00573788|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00573770|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00573611|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |00687B70|SASPlanet.Debug.exe|u_VectorItemSubsetChangeableForVectorLayers.pas|TVectorItemSubsetChangeableForVectorLayers|OnAppStarted |278[2] | |005718BA|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |0056FF22|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |107[10] | |005708B2|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007DFD14|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |946[1] | |007DFCF4|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |945[0] | |008932D2|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1489[195]| |76B16175|USER32.dll | | |SendMessageA | | |76B1612E|USER32.dll | | |SendMessageA | | |76B12175|USER32.dll | | |SetFocus | | |76B07027|USER32.dll | | |GetWindowLongW | | |76B07033|USER32.dll | | |GetWindowLongW | | |77812280|ntdll.dll | | |RtlLeaveCriticalSection | | |76B10DFB|USER32.dll | | |ShowWindow | | |76B13181|USER32.dll | | |MonitorFromWindow | | |76B1319D|USER32.dll | | |MonitorFromWindow | | |008AEB75|SASPlanet.Debug.exe|SASPlanet.dpr | | |1275[30] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=9472; Priority=-2; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |754514F7|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |00649B50|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnPrepareTileMatrix |312[57] | |00649BCB|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnPrepareTileMatrix |328[73] | |006490D6|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00573747|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=9504; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00573788|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00573770|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00573611|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |006498A0|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnAppStarted |225[2] | |005718BA|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |0056FF22|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |107[10] | |005708B2|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007DFD14|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |946[1] | |007DFCF4|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |945[0] | |008932D2|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1489[195]| --------------------------------------------------------------------------------------------------------------------------------------------------------------- Modules Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |Handle |Name |Description |Version |Size |Modified |Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |002F0000|RocketDock.dll | | |69632 |2007-09-02 13:57:36|C:\Program Files (x86)\RocketDock | |00400000|SASPlanet.Debug.exe | |14.7.5.8102 |5925376 |2014-07-05 22:26:28|S:\ | |0F000000|detoured.dll |Marks process affected by Microsoft Research Detours Package |2.1.0.207 |9800 |2010-06-01 10:13:54|C:\Program Files (x86)\Crypto Pro\CSP | |10000000|FreeImage.dll |FreeImage library |3.15.3.0 |322560 |2013-08-02 16:12:56|S:\ | |5EE30000|actxprxy.dll |ActiveX Interface Marshaling Library |6.1.7601.17514 |309760 |2010-11-21 07:24:02|C:\Windows\SysWOW64 | |5EE80000|SHDOCVW.dll |Библиотека объектов документов и элементов управления оболочки |6.1.7601.18222 |180224 |2013-07-26 05:56:00|C:\Windows\system32 | |60900000|sqlite3.dll | | |573100 |2012-02-04 21:31:16|S:\ | |61080000|cpadvai.dll |Модуль исправления функционирования advapi32 |3.6.4581.0 |83528 |2010-08-13 00:33:06|C:\Program Files (x86)\Crypto Pro\CSP | |611D0000|cpcrypt.dll |Модуль исправления функционирования crypt32 |3.6.4439.0 |77896 |2010-08-13 00:33:58|C:\Program Files (x86)\Crypto Pro\CSP | |617F0000|cpwinet.dll |Модуль исправления функционирования wininet.dll |3.6.4289.0 |67656 |2010-08-03 00:35:22|C:\Program Files (x86)\Crypto Pro\CSP | |62E80000|zlib1.dll |zlib data compression library |1.2.8.0 |107520 |2014-02-14 02:04:10|S:\ | |695A0000|ieframe.dll |Интернет-обозреватель |8.0.7601.18487 |10992640|2014-05-28 13:51:26|C:\Windows\SysWOW64 | |6C2D0000|EhStorAPI.dll |Windows Enhanced Storage API |6.1.7601.17514 |128512 |2010-11-21 07:24:10|C:\Windows\system32 | |6C300000|NetworkExplorer.dll |Сетевой проводник |6.1.7601.17514 |1661440 |2010-11-21 07:24:16|C:\Windows\system32 | |6C4B0000|PortableDeviceApi.dll|Компоненты API для переносных устройств Windows |6.1.7601.17514 |547840 |2010-11-21 07:25:12|C:\Windows\system32 | |6C640000|SearchFolder.dll |SearchFolder |6.1.7601.17514 |646144 |2010-11-21 07:23:56|C:\Windows\system32 | |6C9B0000|explorerframe.dll |ExplorerFrame |6.1.7601.17514 |1493504 |2010-11-21 07:24:24|C:\Windows\system32 | |6D630000|StructuredQuery.dll |Structured Query |7.0.7601.17514 |363520 |2010-11-21 07:24:22|C:\Windows\System32 | |6D690000|DUI70.dll |Подсистема DirectUI Windows |6.1.7600.16385 |717824 |2009-07-14 05:15:14|C:\Windows\system32 | |6D7E0000|rtutils.dll |Routing Utilities |6.1.7601.17514 |37376 |2010-11-21 07:24:02|C:\Windows\system32 | |6D7F0000|davclnt.dll |Web DAV Client DLL |6.1.7601.18201 |81920 |2013-07-04 15:51:06|C:\Windows\System32 | |6D810000|ntlanman.dll |Microsoft® LAN Manager |6.1.7601.17514 |69120 |2010-11-21 07:24:02|C:\Windows\System32 | |6D830000|xmllite.dll |Microsoft XmlLite Library |1.3.1001.0 |180224 |2011-06-16 08:33:20|C:\Windows\system32 | |6D860000|msls31.dll |Microsoft Line Services library file |3.10.349.0 |157184 |2009-07-14 05:15:46|C:\Windows\system32 | |6D9D0000|DUser.dll |Windows DirectUser Engine |6.1.7600.16385 |181248 |2009-07-14 05:15:14|C:\Windows\system32 | |6DB10000|tiptsf.dll |Инфраструктура текстовой службы панели ввода планшетного ПК |6.1.7601.18512 |348672 |2014-06-18 05:52:10|C:\Program Files (x86)\Common Files\microsoft shared\ink | |6DB70000|jpeg62.dll | | |244736 |2013-08-02 16:12:56|S:\ | |6DBC0000|SAMLIB.dll |SAM Library DLL |6.1.7600.16385 |60928 |2009-07-14 05:16:14|C:\Windows\system32 | |6DBE0000|ieproxy.dll |IE ActiveX Interface Marshaling Library |8.0.7601.18487 |163328 |2014-05-28 13:51:26|C:\Program Files (x86)\Internet Explorer | |6DCF0000|samcli.dll |Security Accounts Manager Client DLL |6.1.7601.17514 |51200 |2010-11-21 07:23:56|C:\Windows\system32 | |6DDC0000|libpng15.dll |PNG image compression library |1.5.12.0 |135680 |2013-08-02 16:12:56|S:\ | |6DE40000|thumbcache.dll |Кэш эскизов Майкрософт |6.1.7601.17514 |82944 |2010-11-21 07:24:10|C:\Windows\SysWOW64 | |6DE60000|olepro32.dll | |6.1.7601.17514 |90112 |2010-11-21 07:24:04|C:\Windows\system32 | |6EC80000|pshook.dll |Punto Switcher hook module |3.3.1.364 |25400 |2014-04-24 18:17:12|C:\Program Files (x86)\Yandex\Punto Switcher | |6EC90000|LINKINFO.dll |Windows Volume Tracking |6.1.7600.16385 |22016 |2009-07-14 05:15:38|C:\Windows\system32 | |6ECB0000|DAVHLPR.dll |DAV Helper DLL |6.1.7600.16385 |19456 |2009-07-14 05:15:10|C:\Windows\System32 | |6ECE0000|CityHash.dll | | |14336 |2013-08-25 11:29:28|S:\ | |6ECF0000|drprov.dll |Служба доступа к сети для сервера, обслуживающего сеансы подключения к удаленному рабочему столу (Майкрософт)|6.1.7600.16385 |18944 |2009-07-14 05:15:14|C:\Windows\System32 | |6EE90000|ntshrui.dll |Расширения оболочки, обеспечивающие доступ к ресурсам |6.1.7601.17755 |442880 |2012-01-04 12:58:42|C:\Windows\system32 | |6EF70000|EhStorShell.dll |Библиотека DLL расширения оболочки Windows Enhanced Storage |6.1.7600.16385 |189952 |2009-07-14 05:15:16|C:\Windows\system32 | |6EFF0000|mcse32_00.dll | | |171008 |2014-07-19 12:30:36|C:\Users\Dima\AppData\Local\Temp | |6F0A0000|RASAPI32.dll |Remote Access API |6.1.7600.16385 |325120 |2009-07-14 05:16:14|C:\Windows\system32 | |6FC60000|MSVCP90.dll |Microsoft® C++ Runtime Library |9.0.30729.6161 |569680 |2013-08-04 19:48:00|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57 | |6FCF0000|rasman.dll |Remote Access Connection Manager |6.1.7600.16385 |76800 |2009-07-14 05:16:14|C:\Windows\system32 | |6FD10000|OLEACC.dll |Active Accessibility Core Component |7.0.0.0 |233472 |2011-08-27 08:26:28|C:\Windows\SysWOW64 | |71010000|dhcpcsvc.DLL |Служба DHCP-клиента |6.1.7600.16385 |61952 |2009-07-14 05:15:12|C:\Windows\system32 | |712F0000|CRYPTSP.dll |Cryptographic Service Provider API |6.1.7600.16385 |78848 |2009-07-14 05:15:08|C:\Windows\system32 | |71980000|slc.dll |Software Licensing Client DLL |6.1.7600.16385 |27136 |2009-07-14 05:16:16|C:\Windows\system32 | |71A80000|rsaenh.dll |Microsoft Enhanced Cryptographic Provider |6.1.7600.16385 |242936 |2009-07-14 05:17:56|C:\Windows\system32 | |71AC0000|cscapi.dll |Offline Files Win32 API |6.1.7601.17514 |34816 |2010-11-21 07:24:04|C:\Windows\system32 | |71AD0000|sensapi.dll |SENS Connectivity API DLL |6.1.7600.16385 |10752 |2009-07-14 05:16:14|C:\Windows\system32 | |71CD0000|dwmapi.dll |Интерфейс API диспетчера окон рабочего стола (Майкрософт) |6.1.7600.16385 |67072 |2009-07-14 05:15:14|C:\Windows\system32 | |71E80000|uxtheme.dll |Библиотека тем UxTheme (Microsoft) |6.1.7600.16385 |245760 |2009-07-14 05:11:26|C:\Windows\system32 | |720A0000|comctl32.dll |Библиотека элементов управления взаимодействия с пользователем |6.10.7601.17514 |1680896 |2010-11-21 07:23:56|C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2| |722D0000|winmm.dll |MCI API DLL |6.1.7601.17514 |194048 |2010-11-21 07:24:18|C:\Windows\system32 | |72340000|wkscli.dll |Workstation Service Client DLL |6.1.7601.17514 |47104 |2010-11-21 07:23:52|C:\Windows\system32 | |72350000|srvcli.dll |Server Service Client DLL |6.1.7601.17514 |90112 |2010-11-21 07:24:18|C:\Windows\system32 | |72370000|netutils.dll |Net Win32 API Helpers DLL |6.1.7601.17514 |22528 |2010-11-21 07:24:18|C:\Windows\system32 | |723B0000|WINNSI.DLL |Network Store Information RPC interface |6.1.7600.16385 |16896 |2009-07-14 05:16:20|C:\Windows\system32 | |723C0000|iphlpapi.DLL |IP Helper API |6.1.7601.17514 |103936 |2010-11-21 07:24:34|C:\Windows\system32 | |728C0000|MPR.dll |Библиотека маршрутизации для нескольких служб доступа |6.1.7600.16385 |64000 |2009-07-14 05:15:42|C:\Windows\system32 | |72900000|RpcRtRemote.dll |Remote RPC Extension |6.1.7601.17514 |46080 |2010-11-21 07:24:16|C:\Windows\system32 | |72910000|profapi.dll |User Profile Basic API |6.1.7600.16385 |31744 |2009-07-14 05:16:14|C:\Windows\system32 | |72C80000|wshtcpip.dll |Библиотека DLL помощника службы Winsock2 (TL/IPv4) |6.1.7600.16385 |9216 |2009-07-14 05:16:22|C:\Windows\System32 | |72C90000|mswsock.dll |Расширение поставщика службы API Microsoft Windows Sockets 2.0 |6.1.7601.18254 |231424 |2013-09-08 06:04:00|C:\Windows\system32 | |72CD0000|wsock32.dll |Windows Socket 32-Bit DLL |6.1.7600.16385 |15360 |2009-07-14 05:16:22|C:\Windows\system32 | |72D70000|Secur32.dll |Security Support Provider Interface |6.1.7601.18496 |22016 |2014-06-05 18:27:00|C:\Windows\System32 | |73010000|MSVCR90.dll |Microsoft® C Runtime Library |9.0.30729.6161 |653136 |2013-08-04 19:48:00|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57 | |73880000|WindowsCodecs.dll |Microsoft Windows Codecs Library |6.2.9200.16809 |1230336 |2014-02-04 06:04:24|C:\Windows\system32 | |739C0000|wship6.dll |Библиотека DLL помощника Winsock2 (TL/IPv6) |6.1.7600.16385 |10752 |2009-07-14 05:16:22|C:\Windows\System32 | |739D0000|tv_w32.dll |TeamViewer 9 |9.0.29947.0 |246592 |2014-07-02 13:30:04|C:\Program Files (x86)\TeamViewer\Version9 | |73A40000|dhcpcsvc6.DLL |Клиент DHCPv6 |6.1.7601.17970 |44032 |2012-10-09 21:40:32|C:\Windows\system32 | |73C20000|PROPSYS.dll |Система страниц свойств (Microsoft) |7.0.7601.17514 |988160 |2010-11-21 07:24:10|C:\Windows\system32 | |73D20000|msimg32.dll |GDIEXT Client DLL |6.1.7600.16385 |4608 |2009-07-14 05:15:46|C:\Windows\system32 | |74780000|WINSTA.dll |Winstation Library |6.1.7601.17514 |156672 |2010-11-21 07:23:56|C:\Windows\System32 | |74830000|rasadhlp.dll |Remote Access AutoDial Helper |6.1.7600.16385 |11776 |2009-07-14 05:16:14|C:\Windows\system32 | |74840000|fwpuclnt.dll |API пользовательского режима FWP/IPsec |6.1.7601.18283 |216576 |2013-10-12 06:01:26|C:\Windows\System32 | |74880000|winrnr.dll |LDAP RnR Provider DLL |6.1.7600.16385 |20992 |2009-07-14 05:16:20|C:\Windows\System32 | |74890000|dnsapi.DLL |Динамическая библиотека API DNS-клиента |6.1.7601.17570 |270336 |2011-03-03 09:38:02|C:\Windows\system32 | |748E0000|pnrpnsp.dll |Поставщик пространства имен PNRP |6.1.7600.16385 |65024 |2009-07-14 05:16:14|C:\Windows\system32 | |74900000|napinsp.dll |Поставщик оболочки совместимости для имен электронной почты |6.1.7600.16385 |52224 |2009-07-14 05:16:04|C:\Windows\system32 | |74910000|NLAapi.dll |Network Location Awareness 2 |6.1.7601.17761 |52224 |2012-01-13 11:12:04|C:\Windows\system32 | |749C0000|SXS.DLL |Fusion 2.5 |6.1.7601.17514 |380416 |2010-11-21 07:24:18|C:\Windows\system32 | |74A20000|apphelp.dll |Клиентская библиотека совместимости приложений |6.1.7601.17514 |295936 |2010-11-21 07:24:16|C:\Windows\system32 | |751E0000|ntmarta.dll |Поставщик Windows NT MARTA |6.1.7600.16385 |121856 |2009-07-14 05:16:12|C:\Windows\system32 | |75210000|winspool.drv |Драйвер диспетчера очереди Windows |6.1.7601.17514 |320000 |2010-11-21 07:24:10|C:\Windows\system32 | |75270000|version.dll |Version Checking and File Installation Libraries |6.1.7600.16385 |21504 |2009-07-14 05:16:18|C:\Windows\system32 | |75340000|CRYPTBASE.dll |Base cryptographic API DLL |6.1.7600.16385 |36864 |2009-07-14 05:15:08|C:\Windows\syswow64 | |75350000|SspiCli.dll |Security Support Provider Interface |6.1.7601.18496 |96768 |2014-06-05 18:25:50|C:\Windows\syswow64 | |753B0000|comdlg32.dll |Библиотека общих диалоговых окон |6.1.7601.17514 |485888 |2010-11-21 07:23:50|C:\Windows\syswow64 | |75430000|PSAPI.DLL |Process Status Helper |6.1.7600.16385 |6144 |2009-07-14 05:16:14|C:\Windows\syswow64 | |75440000|KERNELBASE.dll |Библиотека клиента Windows NT BASE API |6.1.7601.18409 |274944 |2014-03-04 13:16:20|C:\Windows\syswow64 | |75490000|imagehlp.dll |Windows NT Image Helper |6.1.7601.18288 |159232 |2013-10-19 05:37:00|C:\Windows\syswow64 | |754C0000|WINTRUST.dll |Microsoft Trust Verification APIs |6.1.7601.18205 |175104 |2013-07-09 08:52:12|C:\Windows\syswow64 | |754F0000|shell32.dll |Общая библиотека оболочки Windows |6.1.7601.18429 |12874240|2014-03-25 06:09:56|C:\Windows\syswow64 | |76140000|GDI32.dll |GDI Client DLL |6.1.7601.18275 |311808 |2013-10-03 06:00:46|C:\Windows\syswow64 | |761D0000|SHLWAPI.dll |Библиотека небольших программ оболочки |6.1.7601.17514 |350208 |2010-11-21 07:23:50|C:\Windows\syswow64 | |76230000|WS2_32.dll |32-разрядная библиотека Windows Socket 2.0 |6.1.7601.17514 |206848 |2010-11-21 07:23:56|C:\Windows\syswow64 | |76270000|iertutil.dll |Run time utility for Internet Explorer |8.0.7601.18487 |2078208 |2014-05-28 13:51:26|C:\Windows\syswow64 | |76470000|LPK.dll |Language Pack |6.1.7601.18177 |25600 |2013-06-06 08:57:02|C:\Windows\syswow64 | |76490000|CLBCatQ.DLL |COM+ Configuration Catalog |2001.12.8530.16385|522240 |2009-07-14 05:15:04|C:\Windows\syswow64 | |76520000|NSI.dll |NSI User-mode interface DLL |6.1.7600.16385 |8704 |2009-07-14 05:16:12|C:\Windows\syswow64 | |76530000|USP10.dll |Uniscribe Unicode script processor |1.626.7601.18454 |626688 |2014-04-25 06:06:18|C:\Windows\syswow64 | |76630000|CFGMGR32.dll |Configuration Manager DLL |6.1.7601.17621 |145920 |2011-05-24 14:39:40|C:\Windows\syswow64 | |76660000|WLDAP32.dll |Win32 LDAP API DLL |6.1.7601.17514 |269824 |2010-11-21 07:24:18|C:\Windows\syswow64 | |766B0000|WININET.dll |Расширения Интернета для Win32 |8.0.7601.18487 |981504 |2014-05-28 13:51:52|C:\Windows\syswow64 | |767B0000|CRYPT32.dll |API32 криптографии |6.1.7601.18277 |1168384 |2013-10-05 23:57:26|C:\Windows\syswow64 | |768D0000|ole32.dll |Microsoft OLE для Windows |6.1.7601.17514 |1414144 |2010-11-21 07:24:02|C:\Windows\syswow64 | |76A30000|ADVAPI32.dll |Расширенная библиотека API Windows 32 |6.1.7601.18247 |640512 |2013-08-29 05:48:18|C:\Windows\syswow64 | |76AD0000|DEVOBJ.dll |Device Information Set DLL |6.1.7601.17621 |64512 |2011-05-24 14:40:06|C:\Windows\syswow64 | |76AF0000|USER32.dll |Многопользовательская библиотека клиента USER API Windows |6.1.7601.17514 |833024 |2010-11-21 07:24:22|C:\Windows\syswow64 | |76BF0000|oleaut32.dll | |6.1.7601.17676 |571904 |2011-08-27 08:26:28|C:\Windows\syswow64 | |76C80000|msvcrt.dll |Windows NT CRT DLL |7.0.7601.17744 |690688 |2011-12-16 11:53:00|C:\Windows\syswow64 | |76D30000|MSCTF.dll |Серверная библиотека MSCTF |6.1.7600.16385 |828928 |2009-07-14 05:15:44|C:\Windows\syswow64 | |76E00000|URLMON.DLL |Расширения OLE32 для Win32 |8.0.7601.18487 |1234432 |2014-05-28 13:51:40|C:\Windows\syswow64 | |76F40000|SETUPAPI.dll |Windows Setup API |6.1.7601.17514 |1667584 |2010-11-21 07:23:52|C:\Windows\syswow64 | |770E0000|kernel32.dll |Библиотека клиента Windows NT BASE API |6.1.7601.18409 |1114112 |2014-03-04 13:16:18|C:\Windows\syswow64 | |771F0000|RPCRT4.dll |Библиотека удаленного вызова процедур |6.1.7601.18205 |663552 |2013-07-09 08:52:34|C:\Windows\syswow64 | |772E0000|sechost.dll |Host for SCM/SDDL/LSA Lookup APIs |6.1.7600.16385 |92160 |2009-07-14 05:16:14|C:\Windows\SysWOW64 | |77390000|imm32.dll |Multi-User Windows IMM32 API Client DLL |6.1.7601.17514 |119808 |2010-11-21 07:24:26|C:\Windows\syswow64 | |777C0000|MSASN1.dll |ASN.1 Runtime APIs |6.1.7601.17514 |34304 |2010-11-21 07:23:50|C:\Windows\syswow64 | |777F0000|ntdll.dll |Системная библиотека NT |6.1.7601.18247 |1292192 |2013-08-29 05:50:32|C:\Windows\SysWOW64 | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ Processes Information: -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory|Priority |Threads|Path | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |0 |[System Process] | | |0 | |4 | | |4 |System | | |0 |Normal |179 | | |252 |nvvsvc.exe | | |0 |Normal |6 | | |436 |smss.exe | | |0 |Above-Normal|2 | | |480 |nvSCPAPISvr.exe | | |0 |Normal |6 | | |492 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |10 | | |676 |csrss.exe | | |0 |High |10 | | |736 |wininit.exe |Автозагрузка приложений Windows |6.1.7600.16385|0 |High |3 | | |772 |csrss.exe | | |0 |High |12 | | |808 |services.exe | | |0 |Normal |12 | | |844 |winlogon.exe | | |0 |High |3 | | |872 |lsass.exe | | |0 |Normal |12 | | |880 |lsm.exe | | |0 |Normal |11 | | |972 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |11 | | |1036 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |23 | | |1084 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |26 | | |1116 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |12 | | |1140 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |41 | | |1176 |PnkBstrA.exe | | |0 |Normal |4 | | |1184 |taskhost.exe | | |0 |Normal |9 | | |1224 |dwm.exe | | |0 |High |5 | | |1276 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |6 | | |1396 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |23 | | |1488 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |20 | | |1600 |spoolsv.exe | | |0 |Normal |13 | | |1636 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |4 | | |1656 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |17 | | |1740 |nvxdsync.exe | | |0 |Normal |10 | | |1748 |nvvsvc.exe | | |0 |Normal |5 | | |1896 |armsvc.exe | | |0 |Normal |4 | | |1920 |avp.exe | | |0 |Normal |89 | | |1948 |TeamViewer.exe |TeamViewer 9 |9.0.29947.0 |0 |Normal |27 |C:\Program Files (x86)\TeamViewer\Version9 | |2072 |PsiService_2.exe | | |0 |Normal |4 | | |2108 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |6 | | |2152 |TeamViewer_Service.exe| | |0 |Normal |16 | | |2224 |explorer.exe |Проводник |6.1.7601.17567|0 |Normal |39 | | |2412 |rundll32.exe |Хост-процесс Windows (Rundll32) |6.1.7600.16385|0 |Normal |3 |C:\Windows\SysWOW64 | |2776 |RAVCpl64.exe | | |0 |Normal |11 | | |3128 |wmdc.exe | | |0 |Normal |5 | | |3168 |acrotray.exe |AcroTray |11.0.3.37 |0 |Normal |3 |C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat | |3212 |nvtray.exe | | |0 |Normal |5 | | |3256 |HotFixQ0306270.exe |HotFix Q0306270 |3.0.0.3 |0 |Normal |2 |C:\Windows\SysWOW64 | |3272 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |13 | | |3280 |LanICQ.exe |LanICQ-Sonic! |4.5.0.0 |0 |Normal |8 |C:\Program Files (x86)\LanICQ-Sonic! | |3304 |RocketDock.exe | | |0 |Normal |5 |C:\Program Files (x86)\RocketDock | |3440 |SearchIndexer.exe |Индексатор службы Microsoft Windows Search|7.0.7601.17610|0 |Normal |14 | | |3640 |daemonu.exe | | |0 |Normal |7 | | |3676 |YandexDiskStarter.exe | |1.2.5.4575 |0 |Normal |2 |C:\Users\Dima\AppData\Roaming\Yandex\YandexDisk\wow64| |3680 |YandexDisk.exe | | |0 |Normal |23 | | |3768 |avp.exe | | |0 |Normal |21 | | |3780 |ACDSeeInTouch2.exe |ACDSee InTouch |1.0.32.0 |0 |Normal |4 |C:\Program Files (x86)\ACD Systems\ACDSee\14.0 | |3856 |tv_w32.exe | | |0 |Normal |2 | | |3864 |tv_x64.exe | | |0 |Normal |2 | | |3920 |YandexDiskStarter.exe | | |0 |Normal |2 | | |4004 |Cloud.exe |Mail.Ru Cloud |15.1.9.0 |0 |Normal |13 |C:\Users\Dima\AppData\Local\Mail.Ru\Cloud | |4012 |punto.exe |Punto Switcher |3.3.1.364 |0 |Normal |6 |C:\Program Files (x86)\Yandex\Punto Switcher | |4064 |BCResident.exe |BCResident |2.11.8.0 |0 |Normal |2 |C:\Program Files (x86)\Jetico\BestCrypt | |4076 |acdIDInTouch2.exe |acdID InTouch2 |4.0.31.0 |0 |Normal |4 |C:\Program Files (x86)\ACD Systems\ACDSee\16.0 | |4112 |SASPlanet.exe | |14.7.5.8102 |0 |Normal |24 |S:\ | |4232 |ps64ldr.exe | | |0 |Normal |2 | | |5552 |EXCEL.EXE |Microsoft Office Excel |12.0.6683.5002|0 |Normal |8 |C:\Program Files (x86)\Microsoft Office\Office12 | |7292 |SASPlanet.Debug.exe | |14.7.5.8102 |0 |Normal |26 |S:\ | |7988 |firefox.exe |Firefox |30.0.0.5269 |0 |Normal |58 |C:\Program Files (x86)\Mozilla Firefox | |8504 |SASPlanet.Debug.exe | |14.7.5.8102 |0 |Normal |35 |S:\ | |9232 |SearchFilterHost.exe |Microsoft Windows Search Filter Host |7.0.7601.17610|0 |Low |5 | | |9428 |audiodg.exe | | |0 |Normal |5 | | |9604 |SearchProtocolHost.exe|Microsoft Windows Search Protocol Host |7.0.7601.17610|0 |Low |8 | | |9712 |taskeng.exe |Обработчик планировщика заданий |6.1.7601.17514|0 |Normal |7 | | |9860 |taskeng.exe |Обработчик планировщика заданий |6.1.7601.17514|0 |Below-Normal|4 | | |10052|WINWORD.EXE |Microsoft Office Word |12.0.6700.5000|0 |Normal |7 |C:\Program Files (x86)\Microsoft Office\Office12 | |10072|splwow64.exe |Print driver host for 32bit applications |6.1.7601.17777|0 |Normal |6 | | |10196|TheBat.exe |T |6.4.6.0 |0 |Normal |15 |C:\Program Files (x86)\The Bat! | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: -------------------------------------------------------------------------------------------------------------------------------- ; u_RegionProcessProgressInfoDownload.TRegionProcessProgressInfoDownload.SaveState (Line=379 - Offset=0) ; ------------------------------------------------------------------------------------------------------ 00654B36 xor eax, eax 00654B38 push ebp 00654B39 push $00654DC8 ; 'йУ.ЫялР^[‹е]Г' 00654B3E push dword ptr fs:[eax] 00654B41 mov fs:[eax], esp ; ; Line=380 - Offset=1 ; ------------------- 00654B44 lea eax, [ebp-$04] 00654B47 call -$0024EC60 ; ; Line=381 - Offset=2 ; ------------------- 00654B4C lea edx, [ebp-$14] 00654B4F mov eax, [ebp-$08] 00654B52 mov eax, [eax+$38] 00654B55 mov ecx, [eax] ; <-- EXCEPTION 00654B57 call dword ptr [ecx+$0C] 00654B5A cmp dword ptr [ebp-$14], +$00 00654B5E jz u_RegionProcessProgressInfoDownload.TRegionProcessProgressInfoDownload.SaveState (Line=384) ; ; Line=382 - Offset=3 ; ------------------- 00654B60 lea edx, [ebp-$18] 00654B63 mov eax, [ebp-$08] 00654B66 mov eax, [eax+$38] 00654B69 mov ecx, [eax] 00654B6B call dword ptr [ecx+$0C] 00654B6E mov eax, [ebp-$18] 00654B71 lea edx, [ebp-$04] Registers: ----------------------------- EAX: 00000000 EDI: 0018F644 EBX: 0CDF33E0 ESI: 004A8E8C ECX: 00000000 ESP: 0018F43C EDX: 0018F464 EIP: 00654B55 Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0018F43C: 0018F480 0CDF03B0: 8B 08 FF 51 0C 83 7D EC 00 74 19 8D 55 E8 8B 45 ...Q..}..t..U..E 0018F440: 00405720 0CDF03C0: F8 8B 40 38 8B 08 FF 51 0C 8B 45 E8 8D 55 FC 8B ..@8...Q..E..U.. 0018F444: 0018F478 0CDF03D0: 08 FF 51 14 8D 55 E4 8B 45 F8 83 C0 20 E8 A5 87 ..Q..U..E... ... 0018F448: 004A8E8C 0CDF03E0: DB FF 8B 4D E4 BA E0 4D 65 00 8B C3 8B 30 FF 56 ...M...Me....0.V 0018F44C: 00633030 0CDF03F0: 50 8D 55 E0 8B 45 F8 8B 40 3C 8B 08 FF 51 14 8B P.U..E..@<...Q.. 0018F450: 0CFCE470 0CDF0400: 4D E0 BA F0 4D 65 00 8B C3 8B 30 FF 56 50 8B 4D M...Me....0.VP.M 0018F454: 00000000 0CDF0410: FC BA 08 4E 65 00 8B C3 8B 30 FF 56 50 8B 45 F8 ...Ne....0.VP.E. 0018F458: 00000000 0CDF0420: 8B 40 38 8B 10 FF 52 10 8B C8 BA 20 4E 65 00 8B .@8...R.... Ne.. 0018F45C: 00000000 0CDF0430: C3 8B 30 FF 56 5C 8B 45 F8 0F B6 48 30 41 BA 3C ..0.V\.E...H0A.< 0018F460: 00000000 0CDF0440: 4E 65 00 8B C3 8B 30 FF 56 58 8B 45 F8 0F B6 48 Ne....0.VX.E...H 0018F464: 00000000 0CDF0450: 41 BA 4C 4E 65 00 8B C3 8B 30 FF 56 5C 8B 45 F8 A.LNe....0.V\.E. 0018F468: 0CDF33E0 0CDF0460: 0F B6 48 42 BA 68 4E 65 00 8B C3 8B 30 FF 56 5C ..HB.hNe....0.V\ 0018F46C: 00633246 0CDF0470: 8B 45 F8 0F B6 48 43 BA 84 4E 65 00 8B C3 8B 30 .E...HC..Ne....0 0018F470: 0351A450 0CDF0480: FF 56 5C 8B 45 F8 FF 70 4C FF 70 48 BA A0 4E 65 .V\.E..pL.pH..Ne 0018F474: 00000000 0CDF0490: 00 8B C3 8B 08 FF 51 60 8B 45 F8 0F B6 48 40 BA ......Q`.E...H@. 0018F478: 0018F4A4 0CDF04A0: B8 4E 65 00 8B C3 8B 30 FF 56 5C 8B 45 F8 8B 40 .Ne....0.V\.E..@