EurekaLog 6.1.03 Application: ------------------------------------------------------- 1.1 Start Date : Fri, 29 May 2015 14:52:34 +0300 1.2 Name/Description: SASPlanet.Debug.exe 1.3 Version Number : 15.5.28.8771 1.4 Parameters : 1.5 Compilation Date: Thu, 28 May 2015 11:12:00 +0300 1.6 Up Time : 29 seconds Exception: ----------------------------------------------------- 2.1 Date : Fri, 29 May 2015 14:53:03 +0300 2.2 Address : 00405FD8 2.3 Module Name : SASPlanet.Debug.exe 2.4 Module Version: 15.5.28.8771 2.5 Type : EOutOfMemory 2.6 Message : Out of memory. 2.7 ID : 0AD9 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.5 Privileges: SeLockMemoryPrivilege - OFF SeIncreaseQuotaPrivilege - OFF SeSecurityPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeLoadDriverPrivilege - OFF SeSystemProfilePrivilege - OFF SeSystemtimePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeCreatePagefilePrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeShutdownPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeChangeNotifyPrivilege - ON SeRemoteShutdownPrivilege - OFF SeUndockPrivilege - OFF SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON SeIncreaseWorkingSetPrivilege - OFF SeTimeZonePrivilege - OFF SeCreateSymbolicLinkPrivilege - OFF Computer: ----------------------------------------------------------------------------- 5.3 Free Memory : 8868 Mb 5.5 Free Disk : 1589,97 Gb 5.7 Processor : Intel(R) Core(TM) i7-3820 CPU @ 3.60GHz 5.8 Display Mode: 1366 x 768, 32 bit 5.9 Display DPI : 96 5.10 Video Card : NVIDIA GeForce GT 640 (driver 9.18.13.1422 - RAM 1023 MB) Operating System: -------------------------------------------- 6.1 Type : Microsoft Windows 7 (64 bit) 6.2 Build # : 7601 6.3 Update : Service Pack 1 6.4 Language: Russian 6.5 Charset : 204 Call Stack Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------ |Address |Module |Unit |Class |Procedure/Method |Line | ------------------------------------------------------------------------------------------------------------------------------------------------------------ |*Exception Thread: ID=1316; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |00405FD8|SASPlanet.Debug.exe| | | | | |0054C834|SASPlanet.Debug.exe|u_IdListBase.pas |TIdListBase |CompareId |158[1] | |0054C994|SASPlanet.Debug.exe|u_IdListBase.pas |TIdListBase |Find |217[6] | |00551130|SASPlanet.Debug.exe|u_InternalPerformanceCounterListForDebug.pas |TInternalPerformanceCounterListForDebug |GetCounterByClass |95[20] | |76F0EF27|KERNELBASE.dll | | |VirtualQueryEx | | |76F0EF10|KERNELBASE.dll | | |VirtualQueryEx | | |76F0EFF4|KERNELBASE.dll | | |VirtualQuery | | |007F777C|SASPlanet.Debug.exe|ALXmlDoc.pas |TALXmlElementNode |Create |2864[0] | |007F7764|SASPlanet.Debug.exe|ALXmlDoc.pas |TALXmlElementNode |Create |2864[0] | |007F5A44|SASPlanet.Debug.exe|ALXmlDoc.pas | |ALCreateXmlNode |936[2] | |007F59E8|SASPlanet.Debug.exe|ALXmlDoc.pas | |ALCreateXmlNode |934[0] | |007F64C3|SASPlanet.Debug.exe|ALXmlDoc.pas |TALXMLNode |AddChild |2197[1] | |007F64B0|SASPlanet.Debug.exe|ALXmlDoc.pas |TALXMLNode |AddChild |2196[0] | |007F9D9E|SASPlanet.Debug.exe|u_ExportMarks2KML.pas |TExportMarks2KML |AddMark |418[156] | |007F9174|SASPlanet.Debug.exe|u_ExportMarks2KML.pas |TExportMarks2KML |AddMark |262[0] | |007F8EAE|SASPlanet.Debug.exe|u_ExportMarks2KML.pas |TExportMarks2KML |AddMarks |202[5] | |007F8E6C|SASPlanet.Debug.exe|u_ExportMarks2KML.pas |TExportMarks2KML |AddMarks |197[0] | |007F906F|SASPlanet.Debug.exe|u_ExportMarks2KML.pas |TExportMarks2KML |AddTree |236[20] | |007F9033|SASPlanet.Debug.exe|u_ExportMarks2KML.pas |TExportMarks2KML |AddTree |230[14] | |007F8F00|SASPlanet.Debug.exe|u_ExportMarks2KML.pas |TExportMarks2KML |AddTree |216[0] | |007F8E38|SASPlanet.Debug.exe|u_ExportMarks2KML.pas |TExportMarks2KML |ExportTreeToKML |182[4] | |007F8DF4|SASPlanet.Debug.exe|u_ExportMarks2KML.pas |TExportMarks2KML |ExportTreeToKML |178[0] | |007FA715|SASPlanet.Debug.exe|u_VectorItemTreeExporterKmlKmz.pas |TVectorItemTreeExporterKmlKmz |ProcessExport |73[3] | |0068AD09|SASPlanet.Debug.exe|u_MarkDbGUIHelper.pas |TMarkDbGUIHelper |ExportCategoryList |552[12] | |0068AC0C|SASPlanet.Debug.exe|u_MarkDbGUIHelper.pas |TMarkDbGUIHelper |ExportCategoryList |540[0] | |0089406C|SASPlanet.Debug.exe|frm_MarksExplorer.pas |TfrmMarksExplorer |btnExportClick |552[7] | |0073AA5C|SASPlanet.Debug.exe|TBXControls.pas |TTBXCustomButton |Click |1954[14] | |77190C62|USER32.dll | | |GetClientRect | | |77196285|USER32.dll | | |CallNextHookEx | | |0066D774|SASPlanet.Debug.exe|SynEdit.pas | |GetMsgProc |11296[27]| |77192ABC|USER32.dll | | |GetCapture | | |77192AAC|USER32.dll | | |GetCapture | | |77196285|USER32.dll | | |CallNextHookEx | | |00609B2A|SASPlanet.Debug.exe|TB2Hook.pas | |GetMessageHook |138[9] | |77187BC5|USER32.dll | | |DispatchMessageA | | |77187BBB|USER32.dll | | |DispatchMessageA | | |0091DD31|SASPlanet.Debug.exe|SASPlanet.dpr | | |1338[32] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3520; Priority=0; Class=TGarbageCollectorThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |76F11413|KERNELBASE.dll | | |WaitForSingleObjectEx | | |007469ED|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |130[2] | |007469E4|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |129[1] | |0074699E|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Execute |117[10] | |76F0EF27|KERNELBASE.dll | | |VirtualQueryEx | | |76F10DDC|KERNELBASE.dll | | |SetEvent | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=1316; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |00746879|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |85[14] | |007467D8|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |71[0] | |00830DC0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |638[208] | |0082FFD0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |430[0] | |0091DBE4|SASPlanet.Debug.exe|SASPlanet.dpr | | |1312[6] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=2736; Priority=0; Class=TThread4InterfacedThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |76F114F7|KERNELBASE.dll | | |WaitForMultipleObjectsEx| | |0056FAD2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |142[5] | |0056E6D3|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |232[7] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=1316; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |0056E714|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[3] | |0056E6FC|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[0] | |0056E59D|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |180[6] | |007BDC5E|SASPlanet.Debug.exe|u_MarkSystemImplChangeable.pas |TMarkSystemImplChangeable |OnAppStarted |190[2] | |0056E03A|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |155[1] | |0056EB86|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |106[11] | |0056F46E|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |180[10] | |00832100|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1016[1] | |008320E0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1015[0] | |00900950|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1707[204]| |77196175|USER32.dll | | |SendMessageA | | |7719612E|USER32.dll | | |SendMessageA | | |77192175|USER32.dll | | |SetFocus | | |77DA22D0|ntdll.dll | | |RtlLeaveCriticalSection | | |77190DFB|USER32.dll | | |ShowWindow | | |77193181|USER32.dll | | |MonitorFromWindow | | |7719319D|USER32.dll | | |MonitorFromWindow | | |0091DD31|SASPlanet.Debug.exe|SASPlanet.dpr | | |1338[32] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=4196; Priority=-15; Class=TThread4InterfacedThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |76F114F7|KERNELBASE.dll | | |WaitForMultipleObjectsEx| | |0056FAD2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |142[5] | |0056E6D3|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |232[7] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=1316; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |0056E714|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[3] | |0056E6FC|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[0] | |0056E59D|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |180[6] | |00832132|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1020[5] | |008320E0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1015[0] | |00900950|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1707[204]| |77196175|USER32.dll | | |SendMessageA | | |7719612E|USER32.dll | | |SendMessageA | | |77192175|USER32.dll | | |SetFocus | | |77DA22D0|ntdll.dll | | |RtlLeaveCriticalSection | | |77190DFB|USER32.dll | | |ShowWindow | | |77193181|USER32.dll | | |MonitorFromWindow | | |7719319D|USER32.dll | | |MonitorFromWindow | | |0091DD31|SASPlanet.Debug.exe|SASPlanet.dpr | | |1338[32] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=4204; Priority=0; Class=TThread4InterfacedThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |0055152A|SASPlanet.Debug.exe|u_BaseInterfacedObjectDebug.pas |TBaseInterfacedObjectDebug |FreeInstance |143[7] | |76F114F7|KERNELBASE.dll | | |WaitForMultipleObjectsEx| | |0056FAD2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |142[5] | |0056E6D3|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |232[7] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=1316; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |0056E714|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[3] | |0056E6FC|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[0] | |0056E59D|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |180[6] | |008CC14F|SASPlanet.Debug.exe|u_BitmapTileMatrixChangeableWithThread.pas |TBitmapTileMatrixChangeableWithThread |OnAppStarted |250[1] | |0056E03A|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |155[1] | |0056EB86|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |106[11] | |0056F46E|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |180[10] | |00832100|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1016[1] | |008320E0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1015[0] | |00900950|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1707[204]| |77196175|USER32.dll | | |SendMessageA | | |7719612E|USER32.dll | | |SendMessageA | | |77192175|USER32.dll | | |SetFocus | | |77DA22D0|ntdll.dll | | |RtlLeaveCriticalSection | | |77190DFB|USER32.dll | | |ShowWindow | | |77193181|USER32.dll | | |MonitorFromWindow | | |7719319D|USER32.dll | | |MonitorFromWindow | | |0091DD31|SASPlanet.Debug.exe|SASPlanet.dpr | | |1338[32] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=2488; Priority=0; Class=TThread4InterfacedThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |0054F8C0|SASPlanet.Debug.exe|u_ReadWriteSyncSRW.pas |TSynchronizerSRW |EndRead |186[1] | |0059CD45|SASPlanet.Debug.exe|u_ConfigDataElementBase.pas |TConfigDataElementWithStaticBase |GetStaticInternal |245[5] | |0059D7A0|SASPlanet.Debug.exe|u_BitmapLayerProviderChangeableBase.pas |TBitmapLayerProviderChangeableBase |GetStatic |75[1] | |76F114F7|KERNELBASE.dll | | |WaitForMultipleObjectsEx| | |0056FAD2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |142[5] | |0056E6D3|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |232[7] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=1316; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |0056E714|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[3] | |0056E6FC|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[0] | |0056E59D|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |180[6] | |008CC14F|SASPlanet.Debug.exe|u_BitmapTileMatrixChangeableWithThread.pas |TBitmapTileMatrixChangeableWithThread |OnAppStarted |250[1] | |0056E03A|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |155[1] | |0056EB86|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |106[11] | |0056F46E|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |180[10] | |00832100|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1016[1] | |008320E0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1015[0] | |00900950|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1707[204]| |77196175|USER32.dll | | |SendMessageA | | |7719612E|USER32.dll | | |SendMessageA | | |77192175|USER32.dll | | |SetFocus | | |77DA22D0|ntdll.dll | | |RtlLeaveCriticalSection | | |77190DFB|USER32.dll | | |ShowWindow | | |77193181|USER32.dll | | |MonitorFromWindow | | |7719319D|USER32.dll | | |MonitorFromWindow | | |0091DD31|SASPlanet.Debug.exe|SASPlanet.dpr | | |1338[32] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=4428; Priority=-2; Class=TThread4InterfacedThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |76F114F7|KERNELBASE.dll | | |WaitForMultipleObjectsEx| | |0056FAD2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |142[5] | |0056E6D3|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |232[7] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=1316; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |0056E714|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[3] | |0056E6FC|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[0] | |0056E59D|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |180[6] | |008F1F2F|SASPlanet.Debug.exe|u_VectorTileMatrixChangeableForVectorLayers.pas|TVectorTileMatrixChangeableForVectorLayers|OnAppStarted |252[1] | ------------------------------------------------------------------------------------------------------------------------------------------------------------ Modules Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Handle |Name |Description |Version |Size |Modified |Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |00400000|SASPlanet.Debug.exe | |15.5.28.8771 |6473216 |2015-05-28 11:12:02|D:\Temp\SAS.Planet.Nightly.150528.8771 | |08C30000|ieframe.dll |Браузер |11.0.9600.17801 |12828672|2015-04-21 18:17:48|C:\Windows\SysWOW64 | |10000000|FreeImage.dll |FreeImage library |3.15.3.0 |322560 |2013-08-02 15:12:56|D:\Temp\SAS.Planet.Nightly.150528.8771 | |5DA80000|wcnapi.dll |Windows Connect Now - API Helper DLL |6.1.7600.16385 |86528 |2009-07-14 04:16:20|C:\Windows\System32 | |5DAA0000|fdwcn.dll |Windows Connect Now - Config Function Discovery Provider DLL |6.1.7600.16385 |81920 |2009-07-14 04:15:22|C:\Windows\System32 | |5DAC0000|FunDisc.dll |DLL обнаружения функции |6.1.7600.16385 |167424 |2009-07-14 04:15:22|C:\Windows\SysWOW64 | |5DAF0000|EhStorAPI.dll |Windows Enhanced Storage API |6.1.7601.17514 |128512 |2010-11-21 06:24:10|C:\Windows\system32 | |5DB20000|NetworkExplorer.dll |Сетевой проводник |6.1.7601.17514 |1661440 |2010-11-21 06:24:16|C:\Windows\system32 | |5DCC0000|browcli.dll |Browser Service Client DLL |6.1.7601.17887 |41984 |2012-07-05 00:14:36|C:\Windows\system32 | |5DD50000|FirewallAPI.dll |API брандмауэра Windows |6.1.7600.16385 |462848 |2009-07-14 04:15:22|C:\Windows\system32 | |5DDD0000|PortableDeviceApi.dll |Компоненты API для переносных устройств Windows |6.1.7601.17514 |547840 |2010-11-21 06:25:12|C:\Windows\system32 | |5DE60000|ntlanman.dll |Microsoft® LAN Manager |6.1.7601.17514 |69120 |2010-11-21 06:24:02|C:\Windows\System32 | |5DE80000|SearchFolder.dll |SearchFolder |6.1.7601.17514 |646144 |2010-11-21 06:23:56|C:\Windows\system32 | |5DF20000|ieproxy.dll |IE ActiveX Interface Marshaling Library |11.0.9600.17801 |285696 |2015-04-21 17:53:32|C:\Program Files (x86)\Internet Explorer | |5DF70000|StructuredQuery.dll |Structured Query |7.0.7601.17514 |363520 |2010-11-21 06:24:22|C:\Windows\System32 | |5DFD0000|xmllite.dll |Microsoft XmlLite Library |1.3.1001.0 |180224 |2011-06-16 07:33:20|C:\Windows\system32 | |5E000000|libpng15.dll |PNG image compression library |1.5.12.0 |135680 |2013-08-02 15:12:56|D:\Temp\SAS.Planet.Nightly.150528.8771 | |5E700000|dfscli.dll |Windows NT Distributed File System Client DLL |6.1.7600.16385 |43008 |2009-07-14 04:15:12|C:\Windows\system32 | |5F4C0000|fdWNet.dll |Function Discovery WNet Provider Dll |6.1.7600.16385 |24576 |2009-07-14 04:15:22|C:\Windows\SysWOW64 | |5F4F0000|fdproxy.dll |Function Discovery Proxy Dll |6.1.7600.16385 |27136 |2009-07-14 04:15:22|C:\Windows\SysWOW64 | |5F540000|dtsh.dll |Библиотека API состояния общего доступа и обнаружения |6.1.7600.16385 |32256 |2009-07-14 04:15:14|C:\Windows\system32 | |60600000|NetworkItemFactory.dll |Фабрика сетевых элементов |6.1.7600.16385 |40960 |2009-07-14 04:16:04|C:\Windows\system32 | |60900000|sqlite3.dll | | |573100 |2012-02-04 20:31:16|D:\Temp\SAS.Planet.Nightly.150528.8771 | |60AE0000|npmproxy.dll |Network List Manager Proxy |6.1.7600.16385 |16896 |2009-07-14 04:16:12|C:\Windows\System32 | |60C20000|SHDOCVW.dll |Библиотека объектов документов и элементов управления оболочки |6.1.7601.18222 |180224 |2013-07-26 04:56:00|C:\Windows\system32 | |60E80000|thumbcache.dll |Кэш эскизов Майкрософт |6.1.7601.17514 |82944 |2010-11-21 06:24:10|C:\Windows\SysWOW64 | |60EA0000|CityHash.dll | | |14336 |2013-08-25 10:29:28|D:\Temp\SAS.Planet.Nightly.150528.8771 | |61280000|ATL.DLL |ATL Module for Windows XP (Unicode) |3.5.2284.0 |70144 |2009-07-14 04:14:58|C:\Windows\SysWOW64 | |612A0000|drprov.dll |Служба доступа к сети для сервера, обслуживающего сеансы подключения к удаленному рабочему столу (Майкрософт)|6.1.7600.16385 |18944 |2009-07-14 04:15:14|C:\Windows\System32 | |612C0000|LINKINFO.dll |Windows Volume Tracking |6.1.7600.16385 |22016 |2009-07-14 04:15:38|C:\Windows\system32 | |61CD0000|pshook.dll |Punto Switcher hook module |3.4.9.414 |25912 |2015-02-04 13:35:42|h:\program\start\punto switcher | |61CF0000|ntshrui.dll |Расширения оболочки, обеспечивающие доступ к ресурсам |6.1.7601.17755 |442880 |2012-01-04 11:58:42|C:\Windows\system32 | |61D60000|GrooveIntlResource.dll |Модуль международных ресурсов для Microsoft SharePoint Workspace |14.0.7007.1000 |8878696 |2012-12-14 13:34:08|C:\Program Files (x86)\Microsoft Office\Office14\1049 | |62E80000|zlib1.dll |zlib data compression library |1.2.8.0 |107520 |2014-02-14 01:04:10|D:\Temp\SAS.Planet.Nightly.150528.8771 | |63230000|EhStorShell.dll |Библиотека DLL расширения оболочки Windows Enhanced Storage |6.1.7600.16385 |189952 |2009-07-14 04:15:16|C:\Windows\system32 | |63380000|api-ms-win-downlevel-shlwapi-l2-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |5632 |2013-01-14 00:11:08|C:\Windows\system32 | |63390000|slc.dll |Software Licensing Client DLL |6.1.7600.16385 |27136 |2009-07-14 04:16:16|C:\Windows\system32 | |633A0000|cscapi.dll |Offline Files Win32 API |6.1.7601.17514 |34816 |2010-11-21 06:24:04|C:\Windows\system32 | |633B0000|api-ms-win-downlevel-shell32-l1-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |3072 |2013-01-14 00:11:08|C:\Windows\SysWOW64 | |633C0000|WindowsCodecs.dll |Microsoft Windows Codecs Library |6.2.9200.17251 |1230848 |2015-02-03 06:12:44|C:\Windows\system32 | |63520000|msxml6.dll |MSXML 6.0 SP3 |6.30.7601.18431 |1389056 |2014-06-19 14:17:56|C:\Windows\System32 | |644F0000|ATL90.DLL |ATL Module for Windows (Unicode) |9.0.30729.6161 |159048 |2013-05-14 15:25:44|C:\Windows\WinSxS\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19b | |64520000|GROOVEEX.DLL |Microsoft SharePoint Workspace Extensions |14.0.7113.5005 |4171480 |2013-12-18 23:41:02|C:\Program Files (x86)\Microsoft Office\Office14 | |64980000|SXS.DLL |Fusion 2.5 |6.1.7601.17514 |380416 |2010-11-21 06:24:18|C:\Windows\system32 | |64D40000|actxprxy.dll |ActiveX Interface Marshaling Library |6.1.7601.17514 |309760 |2010-11-21 06:24:02|C:\Windows\SysWOW64 | |64D90000|DUI70.dll |Подсистема DirectUI Windows |6.1.7600.16385 |717824 |2009-07-14 04:15:14|C:\Windows\system32 | |64E50000|DUser.dll |Windows DirectUser Engine |6.1.7600.16385 |181248 |2009-07-14 04:15:14|C:\Windows\system32 | |64E80000|explorerframe.dll |ExplorerFrame |6.1.7601.17514 |1493504 |2010-11-21 06:24:24|C:\Windows\system32 | |673D0000|WINSTA.dll |Winstation Library |6.1.7601.18540 |157696 |2014-07-17 04:40:04|C:\Windows\System32 | |67400000|NTDSAPI.dll |Active Directory Domain Services API |6.1.7600.16385 |90112 |2009-07-14 04:16:12|C:\Windows\system32 | |67420000|uxtheme.dll |Библиотека тем UxTheme (Microsoft) |6.1.7600.16385 |245760 |2009-07-14 04:11:26|C:\Windows\system32 | |674A0000|fastprox.dll |WMI Custom Marshaller |6.1.7601.17514 |606208 |2010-11-21 06:24:26|C:\Windows\system32\wbem | |67540000|wbemsvc.dll |WMI |6.1.7600.16385 |47616 |2009-07-14 04:16:18|C:\Windows\system32\wbem | |67650000|wbemcomn.dll |WMI |6.1.7601.17514 |363008 |2010-11-21 06:24:10|C:\Windows\system32 | |676B0000|oleacc.dll |Active Accessibility Core Component |7.0.0.0 |233472 |2011-08-27 07:26:28|C:\Windows\SysWOW64 | |676F0000|DWMAPI.DLL |Интерфейс API диспетчера окон рабочего стола (Майкрософт) |6.1.7601.18796 |67584 |2015-05-18 13:16:28|C:\Windows\system32 | |67710000|olepro32.dll | |6.1.7601.17514 |90112 |2010-11-21 06:24:04|C:\Windows\system32 | |6AD80000|jpeg62.dll | | |506464 |2015-05-27 07:49:30|D:\Temp\SAS.Planet.Nightly.150528.8771 | |72AB0000|wbemprox.dll |WMI |6.1.7600.16385 |29184 |2009-07-14 04:16:18|C:\Windows\system32\wbem | |72E00000|api-ms-win-downlevel-advapi32-l2-1-0.dll|ApiSet Stub DLL |6.2.9200.16492 |3584 |2013-01-14 00:12:48|C:\Windows\system32 | |72E10000|RpcRtRemote.dll |Remote RPC Extension |6.1.7601.17514 |46080 |2010-11-21 06:24:16|C:\Windows\system32 | |72E20000|version.dll |Version Checking and File Installation Libraries |6.1.7600.16385 |21504 |2009-07-14 04:16:18|C:\Windows\system32 | |72EA0000|dhcpcsvc.DLL |Служба DHCP-клиента |6.1.7600.16385 |61952 |2009-07-14 04:15:12|C:\Windows\system32 | |72EC0000|dhcpcsvc6.DLL |Клиент DHCPv6 |6.1.7601.17970 |44032 |2012-10-09 20:40:32|C:\Windows\system32 | |72EF0000|apphelp.dll |Клиентская библиотека совместимости приложений |6.1.7601.18777 |295936 |2015-05-18 13:16:18|C:\Windows\system32 | |73000000|rsaenh.dll |Microsoft Enhanced Cryptographic Provider |6.1.7600.16385 |242936 |2009-07-14 04:17:56|C:\Windows\system32 | |73040000|CRYPTSP.dll |Cryptographic Service Provider API |6.1.7601.18741 |81408 |2015-02-03 06:12:16|C:\Windows\system32 | |73060000|PROPSYS.dll |Система страниц свойств (Microsoft) |7.0.7601.17514 |988160 |2010-11-21 06:24:10|C:\Windows\system32 | |73160000|comctl32.dll |Библиотека элементов управления взаимодействия с пользователем |6.10.7601.18807 |1680896 |2015-03-30 06:02:22|C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_41e554362bd82458| |73670000|fwpuclnt.dll |API пользовательского режима FWP/IPsec |6.1.7601.18283 |216576 |2013-10-12 05:01:26|C:\Windows\System32 | |736B0000|rasadhlp.dll |Remote Access AutoDial Helper |6.1.7600.16385 |11776 |2009-07-14 04:16:14|C:\Windows\system32 | |737B0000|ntmarta.dll |Поставщик Windows NT MARTA |6.1.7600.16385 |121856 |2009-07-14 04:16:12|C:\Windows\system32 | |737F0000|DNSAPI.dll |Динамическая библиотека API DNS-клиента |6.1.7601.17570 |270336 |2011-03-03 08:38:02|C:\Windows\system32 | |73860000|wship6.dll |Библиотека DLL помощника Winsock2 (TL/IPv6) |6.1.7600.16385 |10752 |2009-07-14 04:16:22|C:\Windows\System32 | |73870000|MPR.dll |Библиотека маршрутизации для нескольких служб доступа |6.1.7600.16385 |64000 |2009-07-14 04:15:42|C:\Windows\system32 | |73890000|wshtcpip.dll |Библиотека DLL помощника службы Winsock2 (TL/IPv4) |6.1.7600.16385 |9216 |2009-07-14 04:16:22|C:\Windows\System32 | |738A0000|mswsock.dll |Расширение поставщика службы API Microsoft Windows Sockets 2.0 |6.1.7601.18254 |231424 |2013-12-02 14:50:06|C:\Windows\system32 | |73960000|wkscli.dll |Workstation Service Client DLL |6.1.7601.17514 |47104 |2010-11-21 06:23:52|C:\Windows\system32 | |73970000|srvcli.dll |Server Service Client DLL |6.1.7601.17514 |90112 |2010-11-21 06:24:18|C:\Windows\system32 | |73990000|netutils.dll |Net Win32 API Helpers DLL |6.1.7601.17514 |22528 |2010-11-21 06:24:18|C:\Windows\system32 | |73E70000|IPHLPAPI.DLL |IP Helper API |6.1.7601.17514 |103936 |2010-11-21 06:24:34|C:\Windows\system32 | |73E90000|wsock32.dll |Windows Socket 32-Bit DLL |6.1.7600.16385 |15360 |2009-07-14 04:16:22|C:\Windows\system32 | |73EA0000|msimg32.dll |GDIEXT Client DLL |6.1.7600.16385 |4608 |2009-07-14 04:15:46|C:\Windows\system32 | |73EC0000|winspool.drv |Драйвер диспетчера очереди Windows |6.1.7601.17514 |320000 |2010-11-21 06:24:10|C:\Windows\system32 | |73F30000|winmm.dll |MCI API DLL |6.1.7601.17514 |194048 |2010-11-21 06:24:18|C:\Windows\system32 | |74250000|OFFICE.ODF | |14.0.7109.5000 |4300456 |2013-09-04 23:14:10|C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures | |74DE0000|DAVHLPR.dll |DAV Helper DLL |6.1.7600.16385 |19456 |2009-07-14 04:15:10|C:\Windows\System32 | |74F60000|davclnt.dll |Web DAV Client DLL |6.1.7601.18201 |81920 |2013-12-02 14:49:24|C:\Windows\System32 | |750B0000|MSVCP90.dll |Microsoft® C++ Runtime Library |9.0.30729.6161 |569680 |2013-05-14 15:25:58|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57 | |75140000|MSVCR90.dll |Microsoft® C Runtime Library |9.0.30729.6161 |653136 |2013-05-14 15:25:58|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57 | |75490000|WINNSI.DLL |Network Store Information RPC interface |6.1.7600.16385 |16896 |2009-07-14 04:16:20|C:\Windows\system32 | |754B0000|Secur32.dll |Security Support Provider Interface |6.1.7601.18839 |22016 |2015-05-18 13:15:28|C:\Windows\system32 | |756F0000|CRYPTBASE.dll |Base cryptographic API DLL |6.1.7600.16385 |36864 |2009-07-14 04:15:08|C:\Windows\syswow64 | |75700000|SspiCli.dll |Security Support Provider Interface |6.1.7601.18839 |96768 |2015-05-18 13:15:28|C:\Windows\syswow64 | |75760000|shell32.dll |Общая библиотека оболочки Windows |6.1.7601.18762 |12875264|2015-02-13 08:26:20|C:\Windows\syswow64 | |763B0000|SETUPAPI.dll |Windows Setup API |6.1.7601.17514 |1667584 |2010-11-21 06:23:52|C:\Windows\syswow64 | |76550000|imm32.dll |Multi-User Windows IMM32 API Client DLL |6.1.7601.17514 |119808 |2010-11-21 06:24:26|C:\Windows\syswow64 | |765B0000|CLBCatQ.DLL |COM+ Configuration Catalog |2001.12.8530.16385|522240 |2009-07-14 04:15:04|C:\Windows\syswow64 | |76640000|profapi.dll |User Profile Basic API |6.1.7600.16385 |31744 |2009-07-14 04:16:14|C:\Windows\syswow64 | |76650000|api-ms-win-downlevel-shlwapi-l1-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |9728 |2013-01-14 00:17:04|C:\Windows\syswow64 | |76660000|GDI32.dll |GDI Client DLL |6.1.7601.18778 |311808 |2015-03-05 07:05:08|C:\Windows\syswow64 | |766F0000|iertutil.dll |Run time utility for Internet Explorer |11.0.9600.17801 |2278400 |2015-04-21 19:04:38|C:\Windows\syswow64 | |76930000|MSCTF.dll |Серверная библиотека MSCTF |6.1.7601.18731 |828928 |2015-01-17 05:30:44|C:\Windows\syswow64 | |76A00000|WS2_32.dll |32-разрядная библиотека Windows Socket 2.0 |6.1.7601.17514 |206848 |2010-11-21 06:23:56|C:\Windows\syswow64 | |76A40000|WINTRUST.dll |Microsoft Trust Verification APIs |6.1.7601.18741 |179200 |2015-02-03 06:12:50|C:\Windows\syswow64 | |76A70000|imagehlp.dll |Windows NT Image Helper |6.1.7601.18288 |159232 |2013-10-19 04:37:00|C:\Windows\syswow64 | |76AA0000|oleaut32.dll | |6.1.7601.18679 |571904 |2015-05-18 13:14:36|C:\Windows\syswow64 | |76B30000|DEVOBJ.dll |Device Information Set DLL |6.1.7601.17621 |64512 |2011-05-24 13:40:06|C:\Windows\syswow64 | |76B50000|api-ms-win-downlevel-advapi32-l1-1-0.dll|ApiSet Stub DLL |6.2.9200.16492 |10752 |2013-01-14 00:16:44|C:\Windows\syswow64 | |76B60000|WLDAP32.dll |Win32 LDAP API DLL |6.1.7601.17514 |269824 |2010-11-21 06:24:18|C:\Windows\syswow64 | |76BB0000|URLMON.DLL |Расширения OLE32 для Win32 |11.0.9600.17801 |1310208 |2015-04-21 17:58:16|C:\Windows\syswow64 | |76D00000|sechost.dll |Host for SCM/SDDL/LSA Lookup APIs |6.1.7601.18839 |92160 |2015-05-18 13:15:28|C:\Windows\SysWOW64 | |76D20000|WININET.dll |Расширения Интернета для Win32 |11.0.9600.17801 |1882112 |2015-04-21 18:02:02|C:\Windows\syswow64 | |76F00000|KERNELBASE.dll |Библиотека клиента Windows NT BASE API |6.1.7601.18839 |274944 |2015-05-18 13:15:28|C:\Windows\syswow64 | |76F50000|CRYPT32.dll |API32 криптографии |6.1.7601.18741 |1174528 |2015-02-03 06:12:16|C:\Windows\syswow64 | |77080000|RPCRT4.dll |Библиотека удаленного вызова процедур |6.1.7601.18532 |664064 |2014-09-19 15:28:20|C:\Windows\syswow64 | |77170000|USER32.dll |Многопользовательская библиотека клиента USER API Windows |6.1.7601.17514 |833024 |2010-11-21 06:24:22|C:\Windows\syswow64 | |77300000|MSASN1.dll |ASN.1 Runtime APIs |6.1.7601.17514 |34304 |2010-11-21 06:23:50|C:\Windows\syswow64 | |77310000|USP10.dll |Uniscribe Unicode script processor |1.626.7601.18454 |626688 |2014-06-19 14:18:20|C:\Windows\syswow64 | |773B0000|api-ms-win-downlevel-version-l1-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |3072 |2013-01-14 00:11:08|C:\Windows\syswow64 | |77420000|ole32.dll |Microsoft OLE для Windows |6.1.7601.17514 |1414144 |2010-11-21 06:24:02|C:\Windows\syswow64 | |77580000|ADVAPI32.dll |Расширенная библиотека API Windows 32 |6.1.7601.18839 |641536 |2015-05-18 13:15:28|C:\Windows\syswow64 | |77630000|comdlg32.dll |Библиотека общих диалоговых окон |6.1.7601.17514 |485888 |2010-11-21 06:23:50|C:\Windows\syswow64 | |776B0000|msvcrt.dll |Windows NT CRT DLL |7.0.7601.17744 |690688 |2011-12-16 10:53:00|C:\Windows\syswow64 | |77760000|kernel32.dll |Библиотека клиента Windows NT BASE API |6.1.7601.18839 |1114112 |2015-05-18 13:15:28|C:\Windows\syswow64 | |77870000|SHLWAPI.dll |Библиотека небольших программ оболочки |6.1.7601.17514 |350208 |2010-11-21 06:23:50|C:\Windows\syswow64 | |778D0000|PSAPI.DLL |Process Status Helper |6.1.7600.16385 |6144 |2009-07-14 04:16:14|C:\Windows\syswow64 | |778E0000|normaliz.DLL |Unicode Normalization DLL |6.1.7600.16385 |2048 |2009-07-14 04:09:02|C:\Windows\syswow64 | |778F0000|api-ms-win-downlevel-user32-l1-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |4096 |2013-01-14 00:11:22|C:\Windows\syswow64 | |77900000|LPK.dll |Language Pack |6.1.7601.18768 |25600 |2015-02-20 07:12:52|C:\Windows\syswow64 | |77910000|CFGMGR32.dll |Configuration Manager DLL |6.1.7601.17621 |145920 |2011-05-24 13:39:40|C:\Windows\syswow64 | |77940000|NSI.dll |NSI User-mode interface DLL |6.1.7600.16385 |8704 |2009-07-14 04:16:12|C:\Windows\syswow64 | |77950000|USERENV.dll |Userenv |6.1.7601.17514 |81920 |2010-11-21 06:24:18|C:\Windows\syswow64 | |77970000|api-ms-win-downlevel-normaliz-l1-1-0.dll|ApiSet Stub DLL |6.2.9200.16492 |2560 |2013-01-14 00:17:04|C:\Windows\syswow64 | |77D50000|api-ms-win-downlevel-ole32-l1-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |5632 |2013-01-14 00:11:10|C:\Windows\syswow64 | |77D80000|ntdll.dll |Системная библиотека NT |6.1.7601.18839 |1310744 |2015-05-18 13:15:26|C:\Windows\SysWOW64 | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Processes Information: ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory|Priority |Threads|Path | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |0 |[System Process] | | |0 | |4 | | |4 |System | | |0 |Normal |137 | | |116 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |73 | | |288 |smss.exe | | |0 |Above-Normal|2 | | |476 |csrss.exe | | |0 |High |9 | | |544 |csrss.exe | | |0 |High |10 | | |548 |audiodg.exe | | |0 |Normal |4 | | |552 |wininit.exe |Автозагрузка приложений Windows |6.1.7600.16385|0 |High |3 | | |588 |winlogon.exe | | |0 |High |4 | | |652 |services.exe | | |0 |Normal |11 | | |660 |lsass.exe | | |0 |Normal |10 | | |672 |lsm.exe | | |0 |Normal |10 | | |728 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |5 | | |764 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |11 | | |844 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |10 | | |940 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |20 | | |980 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |21 | | |1004|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |42 | | |1108|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |16 | | |1128|SASPlanet.Debug.exe | |15.5.28.8771 |0 |Normal |40 |D:\Temp\SAS.Planet.Nightly.150528.8771 | |1228|spoolsv.exe | | |0 |Normal |26 | | |1264|qip.exe |QIP 2012 |4.0.0.9380 |0 |Normal |42 |h:\program\start\qip | |1272|SCNotification.exe |SCNotification |5.0.7804.1000 |0 |Normal |8 |C:\Windows\CCM | |1280|Totalcmd.exe |Total Commander 32 bit |8.5.1.1 |0 |Normal |10 |h:\Program\TC | |1300|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |13 | | |1396|DTSU2PAuSrv64.exe | | |0 |Normal |12 | | |1472|ekrn.exe | | |0 |Normal |28 | | |1560|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |28 | | |1588|imdsksvc.exe | | |0 |Normal |4 | | |1616|HeciServer.exe |Intel(R) Capability Licensing Service Interface |1.26.242.3 |0 |Normal |4 | | |1656|IPROSetMonitor.exe | | |0 |Normal |5 | | |1720|Jhi_service.exe |Intel(R) Dynamic Application Loader Host Interface|8.1.10.1286 |0 |Normal |5 | | |1776|oodag.exe | | |0 |Normal |13 | | |1924|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |4 | | |1944|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |6 | | |2004|TeamViewer_Service.exe| | |0 |Normal |19 | | |2068|punto.exe |Punto Switcher |3.4.9.414 |0 |Normal |3 |h:\program\start\punto switcher | |2104|OUTLOOK.EXE |Microsoft Outlook |14.0.7149.5000|0 |Normal |25 |C:\Program Files (x86)\Microsoft Office\Office14 | |2112|taskhost.exe | | |0 |Normal |12 | | |2196|IAStorIcon.exe |IAStorIcon |3.5.1.1008 |0 |Normal |7 |C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise| |2324|explorer.exe |Проводник |6.1.7601.17567|0 |Normal |27 | | |2524|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |6 | | |2580|WmiPrvSE.exe |WMI Provider Host |6.1.7601.17514|0 |Normal |9 | | |2876|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |12 | | |3028|egui.exe | | |0 |Normal |8 | | |3184|CmRcService.exe | | |0 |Normal |9 | | |3204|IAStorDataMgrSvc.exe | | |0 |Normal |9 | | |3236|Opera.exe |Opera Internet Browser |12.17.1863.0 |0 |Normal |34 |H:\Program\Opera | |3316|ps64ldr.exe | | |0 |Normal |2 | | |3384|WmiPrvSE.exe |WMI Provider Host |6.1.7601.17514|0 |Normal |8 | | |3468|taskhost.exe | | |0 |Normal |9 | | |3476|OSPPSVC.EXE | | |0 |Normal |4 | | |3928|WmiPrvSE.exe |WMI Provider Host |6.1.7601.17514|0 |Normal |7 | | |3968|CcmExec.exe | | |0 |Normal |17 | | |4020|WmiPrvSE.exe |WMI Provider Host |6.1.7601.17514|0 |Normal |5 | | |4040|WmiPrvSE.exe |WMI Provider Host |6.1.7601.17514|0 |Normal |5 | | |4740|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |6 | | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: ----------------------------------------------------------------- 00405FC0 lea eax, [edx-$08] 00405FC3 call -$00002EAC 00405FC8 ret 00405FC9 lea eax, [eax+$00] 00405FCC test eax, eax 00405FCE jle +$24 00405FD0 push eax 00405FD1 add eax, +$0A 00405FD4 and eax, -$02 00405FD7 push eax 00405FD8 call -$00002EDD ; <-- EXCEPTION 00405FDD pop edx 00405FDE mov word ptr [edx+eax-$02], $0000 00405FE5 add eax, +$08 00405FE8 pop edx 00405FE9 mov [eax-$04], edx 00405FEC mov dword ptr [eax-$08], $00000001 ; ''... Registers: ----------------------------- EAX: 0273C5F0 EDI: 0000000C EBX: 00405FDD ESI: 00405FDD ECX: 00000000 ESP: 0018F5EC EDX: 00405FDD EIP: 00405FD8 Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0018F5EC: 00000001 1B859270: E8 23 D1 FF FF 5A 66 C7 44 02 FE 00 00 83 C0 08 .#...Zf.D....... 0018F5F0: 004032A8 1B859280: 5A 89 50 FC C7 40 F8 01 00 00 00 C3 31 C0 C3 90 Z.P..@......1... 0018F5F4: 0018F63D 1B859290: 53 56 57 89 C3 89 D6 89 CF 89 F8 E8 C4 FF FF FF SVW............. 0018F5F8: 0018F73C 1B8592A0: 89 F9 89 C7 85 F6 74 09 89 C2 89 F0 E8 4B D4 FF ......t......K.. 0018F5FC: 00405FDD 1B8592B0: FF 89 D8 E8 E8 FE FF FF 89 3B 5F 5E 5B C3 8B C0 .........;_^[... 0018F600: 00000016 1B8592C0: 55 8B EC 6A 00 6A 00 52 50 8B 45 08 50 51 6A 00 U..j.j.RP.E.PQj. 0018F604: 0000000C 1B8592D0: A1 C0 A5 93 00 50 E8 29 B5 FF FF 5D C2 04 00 90 .....P.)...].... 0018F608: 00406008 1B8592E0: 55 8B EC 52 50 8B 45 08 50 51 6A 00 A1 C0 A5 93 U..RP.E.PQj..... 0018F60C: 00464388 1B8592F0: 00 50 E8 E5 B4 FF FF 5D C2 04 00 90 53 56 57 55 .P.....]....SVWU 0018F610: 0040C81C 1B859300: 81 C4 04 F0 FF FF 50 83 C4 FC 8B F1 89 14 24 8B ......P.......$. 0018F614: 00000000 1B859310: F8 85 F6 7F 09 8B C7 E8 84 FE FF FF EB 5F 8D 6E ............._.n 0018F618: 004642AD 1B859320: 01 81 FD FF 07 00 00 7D 28 56 8D 44 24 08 8B 4C .......}(V.D$..L 0018F61C: 0018F75C 1B859330: 24 04 BA FF 0F 00 00 E8 84 FF FF FF 8B D8 85 DB $............... 0018F620: 0040573C 1B859340: 7C 0F 8D 54 24 04 8B C7 8B CB E8 41 FF FF FF EB |..T$......A.... 0018F624: 0018F744 1B859350: 2C 8B DD 03 DB 8B C7 8B D3 E8 8E 05 00 00 56 8B ,.............V. 0018F628: 00000008 1B859360: 07 8B 4C 24 04 8B D3 E8 54 FF FF FF 8B D8 85 DB ..L$....T.......