EurekaLog 6.1.03 Application: ------------------------------------------------------ 1.1 Start Date : Wed, 4 Feb 2015 22:16:26 +0300 1.2 Name/Description: SASPlanet.Debug.exe 1.3 Version Number : 15.2.2.8465 1.4 Parameters : 1.5 Compilation Date: Mon, 2 Feb 2015 17:20:18 +0300 1.6 Up Time : 17 seconds Exception: --------------------------------------------------------------------------------------------------------------------- 2.1 Date : Wed, 4 Feb 2015 22:16:43 +0300 2.2 Address : 00696C03 2.3 Module Name : SASPlanet.Debug.exe 2.4 Module Version: 15.2.2.8465 2.5 Type : EAccessViolation 2.6 Message : Access violation at address 00696C03 in module 'SASPlanet.Debug.exe'. Read of address 00000000. 2.7 ID : 85D6 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.5 Privileges: SeLockMemoryPrivilege - OFF SeIncreaseQuotaPrivilege - OFF SeSecurityPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeLoadDriverPrivilege - OFF SeSystemProfilePrivilege - OFF SeSystemtimePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeCreatePagefilePrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeShutdownPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeChangeNotifyPrivilege - ON SeRemoteShutdownPrivilege - OFF SeUndockPrivilege - OFF SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON SeIncreaseWorkingSetPrivilege - OFF SeTimeZonePrivilege - OFF SeCreateSymbolicLinkPrivilege - OFF Computer: ----------------------------------------------------------------------------- 5.3 Free Memory : 803 Mb 5.5 Free Disk : 12,13 Gb 5.7 Processor : Intel(R) Core(TM)2 Duo CPU E8400 @ 3.00GHz 5.8 Display Mode: 1366 x 768, 32 bit 5.9 Display DPI : 96 5.10 Video Card : NVIDIA GeForce 9600 GT (driver 9.18.13.3165 - RAM 512 MB) Operating System: ----------------------------------- 6.1 Type : Microsoft Windows 7 6.2 Build # : 7600 6.3 Update : 6.4 Language: Russian 6.5 Charset : 204 Call Stack Information: ---------------------------------------------------------------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method |Line | ---------------------------------------------------------------------------------------------------------------------------------------------- |*Exception Thread: ID=3872; Priority=-2; Class=TThreadDeleteTiles | |--------------------------------------------------------------------------------------------------------------------------------------------| |00696C03|SASPlanet.Debug.exe|u_PredicateByStaticSampleList.pas |TPredicateByStaticSampleList |Check |150[2] | |006A3396|SASPlanet.Debug.exe|u_PredicateByTileInfoBase.pas |TPredicateByTileInfoExistsTileCheckData|Check |263[2] | |006A324A|SASPlanet.Debug.exe|u_PredicateByTileInfoBase.pas |TPredicateByTileInfoAbstract |Check |147[24] | |006D302C|SASPlanet.Debug.exe|u_ThreadDeleteTiles.pas |TThreadDeleteTiles |ProcessRegion |122[18] | |006C1636|SASPlanet.Debug.exe|u_ThreadRegionProcessAbstract.pas |TThreadRegionProcessAbstract |Execute |122[3] | |75E41172|kernel32.dll | | |BaseThreadInitThunk | | |--------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=3984; Priority=1; Class=; [Main] | |--------------------------------------------------------------------------------------------------------------------------------------------| |00564A8C|SASPlanet.Debug.exe|GR32.pas |TNotifiablePersistent |Changed |1837[0] | |005689E0|SASPlanet.Debug.exe|GR32.pas |TCustomBitmap32 |Changed |5380[5] | |77797690|USER32.dll | | |SendMessageW | | |777B41F4|USER32.dll | | |CallWindowProcA | | |777B41DE|USER32.dll | | |CallWindowProcA | | |75E2D7BD|kernel32.dll | | |CreateDirectoryA | | |00630E66|SASPlanet.Debug.exe|EwbCore.pas |TCustomEmbeddedWB |Authenticate |1970[15] | |7778CCC7|USER32.dll | | |CallNextHookEx | | |7778CC8F|USER32.dll | | |CallNextHookEx | | |00605148|SASPlanet.Debug.exe|SynEdit.pas | |GetMsgProc |11296[27]| |7778BBB3|USER32.dll | | |GetCapture | | |777993BF|USER32.dll | | |KillTimer | | |77793573|USER32.dll | | |DispatchMessageA | | |77793569|USER32.dll | | |DispatchMessageA | | |008F5D31|SASPlanet.Debug.exe|SASPlanet.dpr | | |1280[32] | |75E41172|kernel32.dll | | |BaseThreadInitThunk | | |--------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3984; Priority=1; Class=; [Main] | |--------------------------------------------------------------------------------------------------------------------------------------------| |777993F1|USER32.dll | | |WaitMessage | | |777993E7|USER32.dll | | |WaitMessage | | |008F5D31|SASPlanet.Debug.exe|SASPlanet.dpr | | |1280[32] | |75E41172|kernel32.dll | | |BaseThreadInitThunk | | |--------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3424; Priority=0; Class=TGarbageCollectorThread | |--------------------------------------------------------------------------------------------------------------------------------------------| |77665E6A|ntdll.dll | | |NtWaitForSingleObject | | |758D1730|KERNELBASE.dll | | |WaitForSingleObjectEx | | |75E3EFFE|kernel32.dll | | |WaitForSingleObjectEx | | |75E3EFC0|kernel32.dll | | |WaitForSingleObjectEx | | |75E3EFAD|kernel32.dll | | |Sleep | | |75E3EFA0|kernel32.dll | | |Sleep | | |006F460D|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |130[2] | |006F4604|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |129[1] | |006F45BE|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Execute |117[10] | |776656AA|ntdll.dll | | |ZwQueryVirtualMemory | | |758D853D|KERNELBASE.dll | | |VirtualQueryEx | | |75E3F212|kernel32.dll | | |GetCurrentThreadId | | |77665A2A|ntdll.dll | | |ZwSetEvent | | |758D67A4|KERNELBASE.dll | | |GetCurrentThreadId | | |75E41172|kernel32.dll | | |BaseThreadInitThunk | | |--------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=3984; Priority=1; Class=; [Main] | |--------------------------------------------------------------------------------------------------------------------------------------------| |006F4499|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |85[14] | |006F43F8|SASPlanet.Debug.exe|vsagps_public_tracks.pas | |Get_TrackType_By_Ext |219[8] | |00825E00|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |631[206] | |00825024|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |425[0] | |008F5BE4|SASPlanet.Debug.exe|SASPlanet.dpr | | |1254[6] | |75E41172|kernel32.dll | | |BaseThreadInitThunk | | |--------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3712; Priority=0; Class=TThread4InterfacedThread | |--------------------------------------------------------------------------------------------------------------------------------------------| |77665E4A|ntdll.dll | | |NtWaitForMultipleObjects| | |758D686C|KERNELBASE.dll | | |GetProcessHeap | | |758D68C6|KERNELBASE.dll | | |WaitForMultipleObjectsEx| | |75E3F15B|kernel32.dll | | |InterlockedDecrement | | |75E3F09C|kernel32.dll | | |TlsGetValue | | |75E3F299|kernel32.dll | | |GetCurrentThreadId | | |75E3F286|kernel32.dll | | |GetCurrentThreadId | | |006B267E|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |137[5] | |0065BCC3|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |232[7] | |75E41172|kernel32.dll | | |BaseThreadInitThunk | | |--------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=3984; Priority=1; Class=; [Main] | |--------------------------------------------------------------------------------------------------------------------------------------------| |0065BD04|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[3] | |0065BCEC|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[0] | |0065BB8D|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |180[6] | |007719CE|SASPlanet.Debug.exe|u_MarkSystemImplChangeable.pas |TMarkSystemImplChangeable |OnAppStarted |190[2] | |005807F6|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |155[1] | |00649CFA|SASPlanet.Debug.exe|EmbeddedWB.pas | |Finalization |3554[2] | |0064A5E2|SASPlanet.Debug.exe|EmbeddedWB.pas | |Finalization |3554[2] | |00827140|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1009[1] | |00827120|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1008[0] | |008D9859|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1650[202]| |7778CC6C|USER32.dll | | |SendMessageA | | |7778CC28|USER32.dll | | |SendMessageA | | |7778CBB3|USER32.dll | | |SetFocus | | |7778CBA9|USER32.dll | | |SetFocus | | |7778E133|USER32.dll | | |DefWindowProcA | | |7779729A|USER32.dll | | |DefWindowProcW | | |77666B40|ntdll.dll | | |RtlLeaveCriticalSection | | |77791484|USER32.dll | | |ShowWindow | | |7779147A|USER32.dll | | |ShowWindow | | |7779F006|USER32.dll | | |IntersectRect | | |7779593C|USER32.dll | | |MonitorFromWindow | | |77795952|USER32.dll | | |MonitorFromWindow | | |008F5D31|SASPlanet.Debug.exe|SASPlanet.dpr | | |1280[32] | |75E41172|kernel32.dll | | |BaseThreadInitThunk | | |--------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3992; Priority=-15; Class=TThread4InterfacedThread | |--------------------------------------------------------------------------------------------------------------------------------------------| |77665E4A|ntdll.dll | | |NtWaitForMultipleObjects| | |758D686C|KERNELBASE.dll | | |GetProcessHeap | | |758D68C6|KERNELBASE.dll | | |WaitForMultipleObjectsEx| | |75E3F09C|kernel32.dll | | |TlsGetValue | | |75E3F299|kernel32.dll | | |GetCurrentThreadId | | |75E3F286|kernel32.dll | | |GetCurrentThreadId | | |006B267E|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |137[5] | |0065BCC3|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |232[7] | |75E41172|kernel32.dll | | |BaseThreadInitThunk | | |--------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=3984; Priority=1; Class=; [Main] | |--------------------------------------------------------------------------------------------------------------------------------------------| |0065BD04|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[3] | |0065BCEC|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[0] | |0065BB8D|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |180[6] | |00827172|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1013[5] | |00827120|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1008[0] | |008D9859|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1650[202]| |7778CC6C|USER32.dll | | |SendMessageA | | |7778CC28|USER32.dll | | |SendMessageA | | |7778CBB3|USER32.dll | | |SetFocus | | |7778CBA9|USER32.dll | | |SetFocus | | |7778E133|USER32.dll | | |DefWindowProcA | | |7779729A|USER32.dll | | |DefWindowProcW | | |77666B40|ntdll.dll | | |RtlLeaveCriticalSection | | |77791484|USER32.dll | | |ShowWindow | | |7779147A|USER32.dll | | |ShowWindow | | |7779F006|USER32.dll | | |IntersectRect | | |7779593C|USER32.dll | | |MonitorFromWindow | | |77795952|USER32.dll | | |MonitorFromWindow | | |008F5D31|SASPlanet.Debug.exe|SASPlanet.dpr | | |1280[32] | |75E41172|kernel32.dll | | |BaseThreadInitThunk | | |--------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=2768; Priority=0; Class=TThread4InterfacedThread | |--------------------------------------------------------------------------------------------------------------------------------------------| |77665E4A|ntdll.dll | | |NtWaitForMultipleObjects| | |758D686C|KERNELBASE.dll | | |GetProcessHeap | | |006B36A4|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas|TTileMatrixChangeableWithThread |PrepareTileMatrixItems |429[27] | |758D68C6|KERNELBASE.dll | | |WaitForMultipleObjectsEx| | |006B320F|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas|TTileMatrixChangeableWithThread |OnPrepareTileMatrix |338[73] | |75E3F09C|kernel32.dll | | |TlsGetValue | | |75E3F299|kernel32.dll | | |GetCurrentThreadId | | |75E3F286|kernel32.dll | | |GetCurrentThreadId | | |006B267E|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |137[5] | |0065BCC3|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |232[7] | |75E41172|kernel32.dll | | |BaseThreadInitThunk | | |--------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=3984; Priority=1; Class=; [Main] | |--------------------------------------------------------------------------------------------------------------------------------------------| |0065BD04|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[3] | |0065BCEC|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[0] | |0065BB8D|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |180[6] | |006B2EE4|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas|TTileMatrixChangeableWithThread |OnAppStarted |235[2] | |005807F6|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |155[1] | |00649CFA|SASPlanet.Debug.exe|EmbeddedWB.pas | |Finalization |3554[2] | |0064A5E2|SASPlanet.Debug.exe|EmbeddedWB.pas | |Finalization |3554[2] | |00827140|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1009[1] | |00827120|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1008[0] | |008D9859|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1650[202]| |7778CC6C|USER32.dll | | |SendMessageA | | |7778CC28|USER32.dll | | |SendMessageA | | |7778CBB3|USER32.dll | | |SetFocus | | |7778CBA9|USER32.dll | | |SetFocus | | |7778E133|USER32.dll | | |DefWindowProcA | | |7779729A|USER32.dll | | |DefWindowProcW | | |77666B40|ntdll.dll | | |RtlLeaveCriticalSection | | |77791484|USER32.dll | | |ShowWindow | | |7779147A|USER32.dll | | |ShowWindow | | |7779F006|USER32.dll | | |IntersectRect | | |7779593C|USER32.dll | | |MonitorFromWindow | | |77795952|USER32.dll | | |MonitorFromWindow | | |008F5D31|SASPlanet.Debug.exe|SASPlanet.dpr | | |1280[32] | |75E41172|kernel32.dll | | |BaseThreadInitThunk | | |--------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=1008; Priority=0; Class=TThread4InterfacedThread | |--------------------------------------------------------------------------------------------------------------------------------------------| |77665E4A|ntdll.dll | | |NtWaitForMultipleObjects| | |758D686C|KERNELBASE.dll | | |GetProcessHeap | | |006B36A4|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas|TTileMatrixChangeableWithThread |PrepareTileMatrixItems |429[27] | |758D68C6|KERNELBASE.dll | | |WaitForMultipleObjectsEx| | |006B320F|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas|TTileMatrixChangeableWithThread |OnPrepareTileMatrix |338[73] | |75E3F09C|kernel32.dll | | |TlsGetValue | | |75E3F299|kernel32.dll | | |GetCurrentThreadId | | |75E3F286|kernel32.dll | | |GetCurrentThreadId | | |006B267E|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |137[5] | |0065BCC3|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |232[7] | |75E41172|kernel32.dll | | |BaseThreadInitThunk | | |--------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=3984; Priority=1; Class=; [Main] | |--------------------------------------------------------------------------------------------------------------------------------------------| |0065BD04|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[3] | |0065BCEC|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[0] | |0065BB8D|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |180[6] | |006B2EE4|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas|TTileMatrixChangeableWithThread |OnAppStarted |235[2] | |005807F6|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |155[1] | |00649CFA|SASPlanet.Debug.exe|EmbeddedWB.pas | |Finalization |3554[2] | |0064A5E2|SASPlanet.Debug.exe|EmbeddedWB.pas | |Finalization |3554[2] | |00827140|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1009[1] | |00827120|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1008[0] | |008D9859|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1650[202]| |7778CC6C|USER32.dll | | |SendMessageA | | |7778CC28|USER32.dll | | |SendMessageA | | |7778CBB3|USER32.dll | | |SetFocus | | |7778CBA9|USER32.dll | | |SetFocus | | |7778E133|USER32.dll | | |DefWindowProcA | | |7779729A|USER32.dll | | |DefWindowProcW | | |77666B40|ntdll.dll | | |RtlLeaveCriticalSection | | |77791484|USER32.dll | | |ShowWindow | | |7779147A|USER32.dll | | |ShowWindow | | ---------------------------------------------------------------------------------------------------------------------------------------------- Modules Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |Handle |Name |Description |Version |Size |Modified |Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |00400000|SASPlanet.Debug.exe| |15.2.2.8465 |6269952 |2015-02-02 17:20:20|G:\GoogleMV | |02E20000|TileStorage_GC.dll | |1.0.1.0 |163840 |2012-11-18 21:41:14|G:\GoogleMV | |02FA0000|f1ct.dll |Google Earth terrain reader |1.0.2.0 |165376 |2013-01-19 15:43:52|G:\GoogleMV | |10000000|FreeImage.dll |FreeImage library |3.15.3.0 |322560 |2013-08-02 15:12:56|G:\GoogleMV | |5E170000|TimeZone.dll |Based on tzdata.2014i (2014-10-21) and tz_world_mp (2013-11-26)|1.0.5.0 |6730752 |2014-10-24 12:01:18|G:\GoogleMV | |60900000|sqlite3.dll | | |573100 |2012-02-04 20:31:16|G:\GoogleMV | |62E80000|zlib1.dll |zlib data compression library |1.2.8.0 |107520 |2014-02-14 01:04:10|G:\GoogleMV | |64C60000|MSVCP90.dll |Microsoft® C++ Runtime Library |9.0.30729.4926 |569664 |2009-06-11 00:14:56|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4926_none_508ed732bcbc0e5a | |64E40000|libpng15.dll |PNG image compression library |1.5.12.0 |135680 |2013-08-02 15:12:56|G:\GoogleMV | |64E70000|jpeg62.dll | | |244736 |2013-08-02 15:12:56|G:\GoogleMV | |670E0000|geodesic.dll | | |27648 |2013-11-28 09:06:52|G:\GoogleMV | |69E80000|CityHash.dll | | |14336 |2013-08-25 10:29:28|G:\GoogleMV | |69EE0000|olepro32.dll | |6.1.7600.16385 |90112 |2009-07-14 04:16:14|C:\Windows\system32 | |69F00000|MSVCR90.dll |Microsoft® C Runtime Library |9.0.30729.4926 |652608 |2009-06-11 00:14:58|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4926_none_508ed732bcbc0e5a | |6A7C0000|sensapi.dll |SENS Connectivity API DLL |6.1.7600.16385 |10752 |2009-07-14 04:16:14|C:\Windows\system32 | |6C840000|libimagequant.dll | | |221776 |2014-05-17 22:32:50|G:\GoogleMV | |6D980000|winmm.dll |MCI API DLL |6.1.7600.16385 |194048 |2009-07-14 04:16:20|C:\Windows\system32 | |71CB0000|wsock32.dll |Windows Socket 32-Bit DLL |6.1.7600.16385 |15360 |2009-07-14 04:16:22|C:\Windows\system32 | |726C0000|ieframe.dll |Интернет-обозреватель |8.0.7600.16385 |10973696|2009-07-14 04:15:30|C:\Windows\System32 | |73600000|msimg32.dll |GDIEXT Client DLL |6.1.7600.16385 |4608 |2009-07-14 04:15:46|C:\Windows\system32 | |736A0000|OLEACC.dll |Active Accessibility Core Component |7.0.0.0 |233472 |2009-07-14 04:16:14|C:\Windows\System32 | |73710000|rtutils.dll |Routing Utilities |6.1.7600.16385 |37376 |2009-07-14 04:16:14|C:\Windows\system32 | |73720000|rasman.dll |Remote Access Connection Manager |6.1.7600.16385 |76800 |2009-07-14 04:16:14|C:\Windows\system32 | |73740000|RASAPI32.dll |Remote Access API |6.1.7600.16385 |325120 |2009-07-14 04:16:14|C:\Windows\system32 | |73BF0000|WINNSI.DLL |Network Store Information RPC interface |6.1.7600.16385 |16896 |2009-07-14 04:16:20|C:\Windows\system32 | |73C00000|iphlpapi.DLL |IP Helper API |6.1.7600.16385 |103936 |2009-07-14 04:15:34|C:\Windows\system32 | |740C0000|uxtheme.dll |Библиотека тем UxTheme (Microsoft) |6.1.7600.16385 |249856 |2009-07-14 04:16:18|C:\Windows\system32 | |744E0000|comctl32.dll |Библиотека элементов управления взаимодействия с пользователем |6.10.7600.16385 |1680896 |2009-07-14 04:03:52|C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc| |74D10000|winspool.drv |Драйвер диспетчера очереди Windows |6.1.7600.16385 |319488 |2009-07-14 04:14:10|C:\Windows\system32 | |74D70000|version.dll |Version Checking and File Installation Libraries |6.1.7600.16385 |21504 |2009-07-14 04:16:18|C:\Windows\system32 | |750A0000|dnsapi.DLL |Динамическая библиотека API DNS-клиента |6.1.7600.16385 |269824 |2009-07-14 04:15:14|C:\Windows\system32 | |751E0000|mswsock.dll |Расширение поставщика службы API Microsoft Windows Sockets 2.0 |6.1.7600.16385 |232448 |2009-07-14 04:15:52|C:\Windows\system32 | |75680000|SspiCli.dll |Security Support Provider Interface |6.1.7600.16385 |99840 |2009-07-14 04:16:16|C:\Windows\system32 | |756F0000|CRYPTBASE.dll |Base cryptographic API DLL |6.1.7600.16385 |36864 |2009-07-14 04:15:08|C:\Windows\system32 | |75700000|SXS.DLL |Fusion 2.5 |6.1.7600.16385 |380416 |2009-07-14 04:16:16|C:\Windows\system32 | |75770000|profapi.dll |User Profile Basic API |6.1.7600.16385 |31744 |2009-07-14 04:16:14|C:\Windows\system32 | |757E0000|MSASN1.dll |ASN.1 Runtime APIs |6.1.7600.16385 |33280 |2009-07-14 04:15:44|C:\Windows\system32 | |758D0000|KERNELBASE.dll |Библиотека клиента Windows NT BASE API |6.1.7600.16385 |288256 |2009-07-14 04:15:36|C:\Windows\system32 | |75920000|CRYPT32.dll |API32 криптографии |6.1.7600.16385 |1151488 |2009-07-14 04:15:08|C:\Windows\system32 | |75C10000|ole32.dll |Microsoft OLE для Windows |6.1.7600.16385 |1412608 |2009-07-14 04:16:14|C:\Windows\system32 | |75DC0000|sechost.dll |Host for SCM/SDDL/LSA Lookup APIs |6.1.7600.16385 |92160 |2009-07-14 04:16:14|C:\Windows\SYSTEM32 | |75DE0000|LPK.dll |Language Pack |6.1.7600.16385 |26624 |2009-07-14 04:15:38|C:\Windows\system32 | |75DF0000|kernel32.dll |Библиотека клиента Windows NT BASE API |6.1.7600.16385 |857088 |2009-07-14 04:15:36|C:\Windows\system32 | |75ED0000|URLMON.DLL |Расширения OLE32 для Win32 |8.0.7600.16385 |1224704 |2009-07-14 04:16:18|C:\Windows\system32 | |76010000|MSCTF.dll |Серверная библиотека MSCTF |6.1.7600.16385 |828928 |2009-07-14 04:15:44|C:\Windows\system32 | |760E0000|PSAPI.DLL |Process Status Helper |6.1.7600.16385 |6144 |2009-07-14 04:16:14|C:\Windows\system32 | |760F0000|RPCRT4.dll |Библиотека удаленного вызова процедур |6.1.7600.16385 |652288 |2009-07-14 04:16:14|C:\Windows\system32 | |761A0000|msvcrt.dll |Windows NT CRT DLL |7.0.7600.16385 |690688 |2009-07-14 04:15:52|C:\Windows\system32 | |76250000|WS2_32.dll |32-разрядная библиотека Windows Socket 2.0 |6.1.7600.16385 |206336 |2009-07-14 04:16:22|C:\Windows\system32 | |762F0000|imm32.dll |Multi-User Windows IMM32 API Client DLL |6.1.7600.16385 |118272 |2009-07-14 04:15:34|C:\Windows\system32 | |76310000|SHLWAPI.dll |Библиотека небольших программ оболочки |6.1.7600.16385 |350208 |2009-07-14 04:16:16|C:\Windows\system32 | |76370000|iertutil.dll |Run time utility for Internet Explorer |8.0.7600.16385 |2058240 |2009-07-14 04:15:30|C:\Windows\system32 | |76570000|shell32.dll |Общая библиотека оболочки Windows |6.1.7600.16385 |12866560|2009-07-14 04:16:16|C:\Windows\system32 | |771F0000|CLBCatQ.DLL |COM+ Configuration Catalog |2001.12.8530.16385|522240 |2009-07-14 04:15:04|C:\Windows\system32 | |77280000|wininet.dll |Расширения Интернета для Win32 |8.0.7600.16385 |977920 |2009-07-14 04:16:20|C:\Windows\system32 | |77380000|oleaut32.dll | |6.1.7600.16385 |571904 |2009-07-14 04:16:14|C:\Windows\system32 | |77410000|USP10.dll |Uniscribe Unicode script processor |1.626.7600.16385 |627200 |2009-07-14 04:16:18|C:\Windows\system32 | |774B0000|GDI32.dll |GDI Client DLL |6.1.7600.16385 |304640 |2009-07-14 04:15:24|C:\Windows\system32 | |77500000|advapi32.dll |Расширенная библиотека API Windows 32 |6.1.7600.16385 |640000 |2009-07-14 04:14:54|C:\Windows\system32 | |775A0000|comdlg32.dll |Библиотека общих диалоговых окон |6.1.7600.16385 |486912 |2009-07-14 04:15:08|C:\Windows\system32 | |77620000|ntdll.dll |Системная библиотека NT |6.1.7600.16385 |1286144 |2009-07-14 04:17:52|C:\Windows\SYSTEM32 | |77760000|Normaliz.dll |Unicode Normalization DLL |6.1.7600.16385 |2048 |2009-07-14 04:09:02|C:\Windows\system32 | |77770000|NSI.dll |NSI User-mode interface DLL |6.1.7600.16385 |8704 |2009-07-14 04:16:12|C:\Windows\system32 | |77780000|USER32.dll |Многопользовательская библиотека клиента USER API Windows |6.1.7600.16385 |811520 |2009-07-14 04:16:18|C:\Windows\system32 | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ Processes Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory|Priority |Threads|Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |0 |[System Process] | | |0 | |2 | | |4 |System | | |0 |Normal |108 | | |264 |smss.exe |Диспетчер сеанса Windows |6.1.7600.16385|0 |Above-Normal|3 | | |328 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |14 | | |392 |csrss.exe |Процесс исполнения клиент-сервер |6.1.7600.16385|0 |High |9 | | |468 |wininit.exe |Автозагрузка приложений Windows |6.1.7600.16385|0 |High |3 | | |480 |csrss.exe |Процесс исполнения клиент-сервер |6.1.7600.16385|0 |High |12 | | |524 |services.exe |Приложение служб и контроллеров |6.1.7600.16385|0 |Normal |13 | | |540 |lsass.exe |Local Security Authority Process |6.1.7600.16385|0 |Normal |8 | | |548 |lsm.exe |Служба диспетчера локальных сеансов |6.1.7600.16385|0 |Normal |9 | | |660 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |12 | | |716 |nvSCPAPISvr.exe | | |0 |Normal |6 | | |752 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |7 | | |812 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |19 | | |856 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |22 | | |880 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |29 | | |976 |winlogon.exe |Программа входа в систему Windows |6.1.7600.16385|0 |High |3 | | |1096|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |9 | | |1188|dwengine.exe | | |0 |Normal |27 | | |1236|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |15 | | |1260|cmd.exe |Обработчик команд Windows |6.1.7600.16385|0 |Normal |1 |C:\Windows\system32 | |1388|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |20 | | |1452|spoolsv.exe |Диспетчер очереди печати |6.1.7600.16385|0 |Normal |16 | | |1528|dwarkdaemon.exe | | |0 |Normal |5 | | |1564|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |10 | | |1572|conhost.exe |Окно консоли узла |6.1.7600.16385|0 |Normal |2 |C:\Windows\system32 | |1588|cvpnd.exe | | |0 |Normal |6 | | |1668|dwservice.exe | | |0 |Normal |21 | | |1704|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |9 | | |1736|SMSvcHost.exe | | |0 |Normal |10 | | |1784|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |6 | | |1860|TeamViewer_Service.exe | | |0 |Normal |15 | | |1884|UsbService.exe | | |0 |Normal |7 | | |1916|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |18 | | |2212|SearchFilterHost.exe |Microsoft Windows Search Filter Host |7.0.7600.16385|0 |Low |6 |C:\Windows\system32 | |2304|infium.exe | |9.0.4.1 |0 |Normal |47 |D:\Programs\QIP Infium | |2372|CNAB4RPK.EXE |Canon Advanced Printing Technology RPC Server Process|3.2.0.5 |0 |Normal |4 | | |2520|dwengine.exe | | |0 |Normal |3 | | |2608|SASPlanet.Debug.exe | |15.2.2.8465 |0 |Normal |22 |G:\GoogleMV | |2840|taskhost.exe |Хост-процесс для задач Windows |6.1.7600.16385|0 |Normal |9 |C:\Windows\system32 | |2856|SearchProtocolHost.exe |Microsoft Windows Search Protocol Host |7.0.7600.16385|0 |Low |7 | | |2896|TeamViewer.exe |TeamViewer 9 |9.0.32494.0 |0 |Normal |14 |C:\Program Files\TeamViewer\Version9 | |2944|Dwm.exe |Диспетчер окон рабочего стола |6.1.7600.16385|0 |Normal |3 |C:\Windows\system32 | |2980|Explorer.EXE |Проводник |6.1.7600.16385|0 |Normal |25 |C:\Windows | |3028|opera.exe |Opera Internet Browser |12.17.1863.0 |0 |Normal |24 |C:\Program Files\Opera | |3096|tv_w32.exe | | |0 |Normal |2 | | |3260|TiltWheelMouse.exe |pximouse |1.0.0.2 |0 |Normal |2 |C:\Windows\System32 | |3272|spideragent.exe |SpIDer Agent for Windows |8.1.1.5122 |0 |Normal |16 |C:\Program Files\DrWeb | |3292|TortoiseHgOverlayServer.exe|TortoiseHg Overlay Icon Server |3.2.4.0 |0 |Normal |3 |C:\Program Files\TortoiseHg | |3352|uTorrent.exe |µTorrent |3.4.2.37754 |0 |Normal |65 |C:\Users\Дом\AppData\Roaming\uTorrent| |3492|ndn.exe | | |0 |Normal |6 |C:\NDN_W32 | |3564|audiodg.exe |Изоляция графов аудиоустройств Windows |6.1.7600.16385|0 |Normal |7 | | |3860|SearchIndexer.exe |Индексатор службы Microsoft Windows Search |7.0.7600.16385|0 |Normal |15 | | |4044|w3wp.exe |IIS Worker Process |7.5.7600.16385|0 |Normal |11 |c:\windows\system32\inetsrv | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: ---------------------------------------------------------------------------------------- ; u_PredicateByStaticSampleList.TPredicateByStaticSampleList.Check (Line=148 - Offset=0) ; -------------------------------------------------------------------------------------- 00696BEA push edi 00696BEB mov esi, edx 00696BED mov ebx, eax 00696BEF xor eax, eax 00696BF1 push ebp 00696BF2 push $00696D1C ; 'й›йЦялН.¶Eл_^[‹е]Г' 00696BF7 push dword ptr fs:[eax] 00696BFA mov fs:[eax], esp ; ; Line=149 - Offset=1 ; ------------------- 00696BFD mov byte ptr [ebp-$15], $00 ; ; Line=150 - Offset=2 ; ------------------- 00696C01 mov eax, esi 00696C03 mov edx, [eax] ; <-- EXCEPTION 00696C05 call dword ptr [edx+$10] 00696C08 mov edx, eax 00696C0A lea ecx, [ebp-$04] 00696C0D mov eax, [ebx+$20] 00696C10 mov edi, [eax] 00696C12 call dword ptr [edi+$14] ; ; Line=151 - Offset=3 ; ------------------- 00696C15 lea eax, [ebp-$0C] 00696C18 call -$0028E9BD 00696C1D mov ecx, eax 00696C1F mov edx, $00696D30 ; '–rГљЖГrBЁ)хЫ=p#‚ц.1ИѓIчLџлЈкЇ`µЈ'... Registers: ----------------------------- EAX: 00000000 EDI: 1682B0D8 EBX: 161AF100 ESI: 00000000 ECX: 00000000 ESP: 17ECFDD4 EDX: 00000000 EIP: 00696C03 Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 17ECFDD4: 17ECFE1C 187C0660: 8B 10 FF 52 10 8B D0 8D 4D FC 8B 43 20 8B 38 FF ...R....M..C .8. 17ECFDD8: 0040573C 187C0670: 57 14 8D 45 F4 E8 43 16 D7 FF 8B C8 BA 30 6D 69 W..E..C......0mi 17ECFDDC: 17ECFE10 187C0680: 00 8B 45 FC E8 38 09 D8 FF 84 C0 0F 84 AF 00 00 ..E..8.......... 17ECFDE0: 1682B0D8 187C0690: 00 8B D6 8B C3 E8 BF FE FF FF 89 45 E4 8D 4D F8 ...........E..M. 17ECFDE4: 16603950 187C06A0: 8B 55 E4 8B 45 F4 8B 38 FF 57 14 83 7D F8 00 0F .U..E..8.W..}... 17ECFDE8: 0000000C 187C06B0: 84 8B 00 00 00 8D 45 EC E8 00 16 D7 FF 8B C8 BA ......E......... 17ECFDEC: 00000000 187C06C0: 40 6D 69 00 8B 45 F8 E8 F5 08 D8 FF 84 C0 74 11 @mi..E........t. 17ECFDF0: 00000000 187C06D0: 8B 4D EC 8B D6 8B C3 E8 55 FD FF FF 88 45 EB EB .M......U....E.. 17ECFDF4: 00000000 187C06E0: 5F 8D 45 F0 E8 D4 15 D7 FF 8B C8 BA 50 6D 69 00 _.E.........Pmi. 17ECFDF8: 00000000 187C06F0: 8B 45 F8 E8 C9 08 D8 FF 84 C0 74 44 8B 45 F0 8B .E........tD.E.. 17ECFDFC: 00000000 187C0700: 10 FF 52 0C 48 85 C0 7C 37 40 89 45 DC C7 45 E0 ..R.H..|7@.E..E. 17ECFE00: 00000000 187C0710: 00 00 00 00 8D 4D EC 8B 55 E0 8B 45 F0 8B 38 FF .....M..U..E..8. 17ECFE04: 00000000 187C0720: 57 10 8B 4D EC 8B D6 8B C3 E8 03 FD FF FF 84 C0 W..M............ 17ECFE08: 00000000 187C0730: 74 06 C6 45 EB 01 EB 08 FF 45 E0 FF 4D DC 75 D4 t..E.....E..M.u. 17ECFE0C: 00000000 187C0740: 33 C0 5A 59 59 64 89 10 68 23 6D 69 00 8D 45 EC 3.ZYYd..h#mi..E. 17ECFE10: 17ECFE70 187C0750: E8 68 15 D7 FF 8D 45 F0 E8 60 15 D7 FF 8D 45 F4 .h....E..`....E.