Capture Machine Overview

Dump started on 6/7/2014 at 14:58:49.994 (Coordinated Universal Time)

Operating system:        Microsoft Windows 7 Ultimate (build 7600), 64-bit

User name:               VV-Ef
Member of:               None, Все, Debugger Users, HomeUsers, Администраторы, Пользователи, 
                         ИНТЕРАКТИВНЫЕ, КОНСОЛЬНЫЙ ВХОД, Прошедшие проверку, Данная организация, 
                         <name lookup failed>, ЛОКАЛЬНЫЕ, Проверка подлинности NTLM, Высокий обязательный уровень
Computer name:           VV-EF-ПК
IE version:              9.0.8112.16421
Drives:                  Drive C: Fixed NTFS serial 2158645812 [x80AA5234], 93,171 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
                         Drive D: <data unavailable>
                         Drive E: Fixed NTFS serial 3905639356 [xE8CB53BC], 4,980 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
                         Drive F: Fixed NTFS serial 1213667427 [x48571863], 39,421 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
                         Drive G: Fixed NTFS serial 945585418 [x385C7D0A], 92,854 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
                         Drive H: Fixed NTFS serial 2957843768 [xB04D1D38], 89,827 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
                         Drive I: Fixed NTFS serial 942549858 [x382E2B62], 27,133 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
                         Drive J: Fixed NTFS serial 3359613555 [xC83FA273], 17,985 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
                         Drive K: Fixed NTFS serial 2292094980 [x889E9804], 46,866 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
                         Drive L: Fixed NTFS serial 3235310842 [xC0D6ECFA], 41,122 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
                         Drive M: Fixed NTFS serial 2057674768 [x7AA5A010], 8,632 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
                         Drive N: Fixed NTFS serial 880305841 [x347866B1], 18,112 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
                         Drive O: Fixed NTFS serial 1544387539 [x5C0D7BD3], 2,805 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
                         Drive P: Fixed NTFS serial 2161206751 [x80D165DF], 7,143 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
                         Drive Q: Fixed NTFS serial 1749043237 [x68404825], 12,729 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
                         Drive R: Fixed NTFS serial 546899520 [x20990640], 2,668 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
                         Drive S: Fixed NTFS serial 887683328 [x34E8F900], 196,470 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
                         Drive T: Fixed NTFS serial 604829177 [x240CF5F9], 89,122 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
                         Drive V: Removable NTFS serial 2693813748 [xA09055F4], 3,468 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS SUPPORTS_TRANSACTIONS 
Working dir:             c:\Program Files (x86)\VMware\VMware ThinApp
ADO version:             6.1.7600.16385
Terminal services:       Not running
Remote session:          No
LUA enabled:             No
LOCALE_SYSTEM_DEFAULT:   0419 RUS
LOCALE_USER_DEFAULT:     0419 RUS
Installed apps
    System-wide 32-bit:  AddressBook, Adobe Flash Player 13 ActiveX, Adobe Flash Player 13 Plugin, 
                         AVerMedia A707 PCIe Dual Hybrid Analog/DVBT/DVBS 1.3.64.77, AVerMedia Media Center Plug-ins 2.0.8.0, 
                         Connection Manager, DirectDrawEx, EasyBCD 2.0, Fontcore, Google Chrome, 
                         Guard@Mail.Ru, IE40, IE4Data, IE5BAKEX, IEData, InstallShield Uninstall Information, 
                         VIA Диспетчер устройств платформы, AVer Media Center, 
                         MobileOptionPack, Mozilla Firefox 19.0 (x86 ru), Mozilla Maintenance Service, 
                         NVIDIA Stereoscopic 3D Driver, Opera Stable 15.0.1147.148, Plugins for Opera, 
                         SchedulingAgent, Search and Replace, WIC, Архиватор WinRAR, 
                         Lizardtech DjVu Control, Platform, 
                         Intel(R) USB 3.0 eXtensible Host Controller Driver, Данные 2ГИС г.Новосибирск 01.06.2014, 
                         Skype™ 6.5, Intel(R) Management Engine Components, 
                         2ГИС 3.14.6.0, CustomerResearchQFolder, 
                         DICTER 3.50.0.0, Realtek Ethernet Controller Driver, 
                         hppQFolderP2050, hppusgP2050, 
                         Microsoft Office - профессиональный выпуск версии 2003, Пакет обеспечения совместимости для выпуска 2007 системы Microsoft Office, 
                         Microsoft Office File Validation Add-In, Microsoft Office FrontPage 2003, 
                         hppFonts, Google Update Helper, 
                         RealSpeaker, Adobe Reader XI (11.0.07), 
                         WebReg, AVer Media Center, 
                         MarketResearch, Punto Switcher 3.2.9, 
                         Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219, {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757, 
                         {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173, {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860, 
                         {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655, {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743, 
                         {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063, {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573, 
                         VMware ThinApp, UltraEdit 14.20, 
                         
    System-wide 64-bit:  AddressBook, Connection Manager, DirectDrawEx, DXM_Runtime, 
                         Fontcore, HP Customer Participation Program 10.0, IE40, IE4Data, IE5BAKEX, 
                         IEData, Microsoft .NET Framework 4 Client Profile, Языковой пакет клиентского профиля Microsoft.NET Framework 4 - RUS, 
                         Microsoft .NET Framework 4 Extended, Языковой пакет расширенной версии Microsoft.NET Framework 4 - RUS, 
                         MobileOptionPack, MPlayer2, Copy path to Clipboard 1.0.7 (Remove only), SchedulingAgent, 
                         TNod User & Password Finder, Total Commander 64-bit (Remove or Repair), WIC, Intel® Trusted Connect Service Client, 
                         Microsoft .NET Framework 4 Client Profile RUS Language Pack, HP LaserJet P2050 Series 6.0, 
                         ESET Smart Security, Microsoft .NET Framework 4 Extended, 
                         NVIDIA Драйвер 3D Vision 306.97, 
                         Панель управления NVIDIA 306.97, 
                         NVIDIA Графический драйвер 306.97, Обновления NVIDIA 1.10.8, 
                         NVIDIA Install Application, NVIDIA Update Components, 
                         Microsoft .NET Framework 4 Extended RUS Language Pack, 64 Bit HP CIO Components Installer, 
                         Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319, Microsoft .NET Framework 4 Client Profile, 
                         Classic Shell, 

    Per-user 32-bit:     <unavailable>

    Per-user 64-bit:     <unavailable>

Environment strings:     =::=::\
                         ALLUSERSPROFILE=C:\ProgramData
                         APPDATA=C:\Users\VV-Ef\AppData\Roaming
                         COMMANDER_DRIVE=C:
                         COMMANDER_EXE=C:\totalcmd\TOTALCMD64.EXE
                         COMMANDER_INI=C:\Users\VV-Ef\AppData\Roaming\GHISLER\wincmd.ini
                         COMMANDER_PATH=C:\totalcmd
                         CommonProgramFiles=C:\Program Files\Common Files
                         CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files
                         CommonProgramW6432=C:\Program Files\Common Files
                         COMPUTERNAME=VV-EF-ПК
                         ComSpec=C:\Windows\system32\cmd.exe
                         FP_NO_HOST_CHECK=NO
                         HOMEDRIVE=C:
                         HOMEPATH=\Users\VV-Ef
                         LOCALAPPDATA=C:\Users\VV-Ef\AppData\Local
                         LOGONSERVER=\\VV-EF-ПК
                         NUMBER_OF_PROCESSORS=4
                         OS=Windows_NT
                         Path=C:\Program Files (x86)\VMware\VMware ThinApp;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\IDM Computer Solutions\UltraEdit\
                         PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
                         PROCESSOR_ARCHITECTURE=AMD64
                         PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
                         PROCESSOR_LEVEL=6
                         PROCESSOR_REVISION=3a09
                         ProgramData=C:\ProgramData
                         ProgramFiles=C:\Program Files
                         ProgramFiles(x86)=C:\Program Files (x86)
                         ProgramW6432=C:\Program Files
                         PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Modules\
                         PUBLIC=C:\Users\Public
                         SESSIONNAME=Console
                         SystemDrive=C:
                         SystemRoot=C:\Windows
                         TEMP=C:\Users\VV-Ef\AppData\Local\Temp
                         TMP=C:\Users\VV-Ef\AppData\Local\Temp
                         TS_ORIGIN=C:\Program Files (x86)\VMware\VMware ThinApp\Setup Capture.exe
                         TS_SVCINIT=
                         USERDOMAIN=VV-Ef-ПК
                         USERNAME=VV-Ef
                         USERPROFILE=C:\Users\VV-Ef
                         windir=C:\Windows
                         __compat_layer=RunAsInvoker

Current process: 64-bit
    Process ID: 4648
    Minimum req'd operating system ver: 5.2
    Process name: snapshot64.exe
    Full path: C:\Program Files (x86)\VMware\VMware ThinApp\snapshot64.exe


    Priority class: Normal
    Processor affinity mask: 0x0000000f
    System affinity mask: 0x0000000f
    Creation time: Sat 7 Jun 2014 14:57:34 (Coordinated Universal Time)
    Priority boost: Normal behavior

Modules:
        Base                Size        Entry

        0x0000000000400000  0x00106000  0x000000000047FDF8        snapshot64.exe  C:\Program Files (x86)\VMware\VMware ThinApp\snapshot64.exe
        0x00000000774F0000  0x001ac000  0x0000000000000000             ntdll.dll  C:\Windows\SYSTEM32\ntdll.dll
        0x0000000076E10000  0x0011f000  0x0000000076E2EDD0          kernel32.dll  C:\Windows\system32\kernel32.dll
        0x000007FEFDBA0000  0x0006c000  0x000007FEFDBA31F0        KERNELBASE.dll  C:\Windows\system32\KERNELBASE.dll
        0x000000007EEB0000  0x000f6000  0x000000007EEEC830         nt0_dll64.dll  C:\Windows\system32\nt0_dll64.dll
        0x000007FEFF660000  0x000d7000  0x000007FEFF663264          oleaut32.dll  C:\Windows\system32\oleaut32.dll
        0x000007FEFE0E0000  0x00202000  0x000007FEFE118400             ole32.dll  C:\Windows\system32\ole32.dll
        0x000007FEFF760000  0x0009f000  0x000007FEFF762590            msvcrt.dll  C:\Windows\system32\msvcrt.dll
        0x000007FEFE7D0000  0x00067000  0x000007FEFE7D5198             GDI32.dll  C:\Windows\system32\GDI32.dll
        0x0000000077290000  0x000fa000  0x00000000772ACDB8            USER32.dll  C:\Windows\system32\USER32.dll
        0x000007FEFF650000  0x0000e000  0x000007FEFF651080               LPK.dll  C:\Windows\system32\LPK.dll
        0x000007FEFE4D0000  0x000ca000  0x000007FEFE54A864             USP10.dll  C:\Windows\system32\USP10.dll
        0x000007FEFDD30000  0x0012e000  0x000007FEFDD76E30            RPCRT4.dll  C:\Windows\system32\RPCRT4.dll
        0x000007FEFDE60000  0x0002e000  0x000007FEFDE61010             IMM32.DLL  C:\Windows\system32\IMM32.DLL
        0x000007FEFDFD0000  0x00109000  0x000007FEFDFD1064             MSCTF.dll  C:\Windows\system32\MSCTF.dll
        0x000007FEFDEF0000  0x000db000  0x000007FEFDF10760          advapi32.dll  C:\Windows\system32\advapi32.dll
        0x000007FEFF740000  0x0001f000  0x000007FEFF7460E8           sechost.dll  C:\Windows\SYSTEM32\sechost.dll
        0x000000007EC90000  0x001f2000  0x000000007ECB91B0          os_exe64.dll  C:\Windows\system32\os_exe64.dll
        0x000007FEFC0E0000  0x00056000  0x000007FEFC0EBBC0           uxtheme.dll  C:\Windows\system32\uxtheme.dll
        0x000007FEFB780000  0x0000c000  0x000007FEFB783DAC          PSHook64.dll  C:\Program Files (x86)\Yandex\Punto Switcher\PSHook64.dll
        0x000007FEFE840000  0x00071000  0x000007FEFE851690           SHLWAPI.dll  C:\Windows\system32\SHLWAPI.dll
        0x000007FEFE620000  0x00019000  0x000007FEFE621070          imagehlp.dll  C:\Windows\system32\imagehlp.dll
        0x000007FEFBD00000  0x00018000  0x000007FEFBD01130            dwmapi.dll  C:\Windows\system32\dwmapi.dll
        0x000007FEFD8A0000  0x00092000  0x000007FEFD8A13B0               sxs.DLL  C:\Windows\system32\sxs.DLL
        0x000007FEFD630000  0x0000b000  0x000000007ECE69C0           secur32.dll  C:\Windows\system32\secur32.dll
        0x000007FEFD800000  0x00025000  0x000000007ECE69C0           SSPICLI.DLL  C:\Windows\system32\SSPICLI.DLL
        0x000007FEFD890000  0x0000f000  0x000000007ECE69C0         CRYPTBASE.dll  C:\Windows\system32\CRYPTBASE.dll
        0x000007FEF5790000  0x00316000  0x000000007ECE69C0               msi.dll  C:\Windows\system32\msi.dll
        0x000007FEFBA50000  0x00016000  0x000000007ECE69C0          NETAPI32.dll  C:\Windows\system32\NETAPI32.dll
        0x000007FEFBA40000  0x0000c000  0x000000007ECE69C0          netutils.dll  C:\Windows\system32\netutils.dll
        0x000007FEFD4D0000  0x00023000  0x000000007ECE69C0            srvcli.dll  C:\Windows\system32\srvcli.dll
        0x000007FEFBA20000  0x00015000  0x000000007ECE69C0            wkscli.dll  C:\Windows\system32\wkscli.dll
        0x000007FEFBA00000  0x00014000  0x000000007ECE69C0            SAMCLI.DLL  C:\Windows\system32\SAMCLI.DLL
        0x0000000180000000  0x00298000  0x000000007ECE69C0         Logging64.dll  C:\Program Files (x86)\VMware\VMware ThinApp\Logging64.dll
        0x000007FEFCAB0000  0x0000c000  0x000000007ECE69C0           VERSION.dll  C:\Windows\system32\VERSION.dll
        0x00000000776B0000  0x00007000  0x000000007ECE69C0             psapi.dll  C:\Windows\system32\psapi.dll


Running processes:
    0000 [0x0000]                                  
    0004 [0x0004]  System                          System
    0332 [0x014c]  smss.exe                        smss.exe
    0524 [0x020c]  csrss.exe                       csrss.exe
    0580 [0x0244]  wininit.exe                     wininit.exe
    0600 [0x0258]  csrss.exe                       csrss.exe
    0636 [0x027c]  services.exe                    services.exe
    0664 [0x0298]  lsass.exe                       lsass.exe
    0672 [0x02a0]  lsm.exe                         lsm.exe
    0736 [0x02e0]  winlogon.exe                    winlogon.exe
    0816 [0x0330]  svchost.exe                     svchost.exe
    0880 [0x0370]  nvvsvc.exe                      nvvsvc.exe
    0904 [0x0388]  nvSCPAPISvr.exe                 nvSCPAPISvr.exe
    0956 [0x03bc]  svchost.exe                     svchost.exe
    0168 [0x00a8]  svchost.exe                     svchost.exe
    0304 [0x0130]  svchost.exe                     svchost.exe
    0392 [0x0188]  svchost.exe                     svchost.exe
    0492 [0x01ec]  svchost.exe                     svchost.exe
    1120 [0x0460]  svchost.exe                     svchost.exe
    1212 [0x04bc]  nvxdsync.exe                    nvxdsync.exe
    1224 [0x04c8]  nvvsvc.exe                      nvvsvc.exe
    1384 [0x0568]  spoolsv.exe                     spoolsv.exe
    1420 [0x058c]  svchost.exe                     svchost.exe
    1512 [0x05e8]  armsvc.exe                      armsvc.exe
    1548 [0x060c]  AVerRemote.exe                  AVerRemote.exe
    1572 [0x0624]  AVerScheduleService.exe         AVerScheduleService.exe
    1616 [0x0650]  ekrn.exe                        ekrn.exe
    1800 [0x0708]  dwm.exe                         C:\Windows\System32\dwm.exe
    1836 [0x072c]  explorer.exe                    C:\Windows\explorer.exe
    1852 [0x073c]  taskhost.exe                    C:\Windows\System32\taskhost.exe
    2028 [0x07ec]  GuardMailRu.exe                 GuardMailRu.exe
    1172 [0x0494]  HeciServer.exe                  HeciServer.exe
    1144 [0x0478]  GuardMailRu.exe                 GuardMailRu.exe
    1432 [0x0598]  Jhi_service.exe                 Jhi_service.exe
    1764 [0x06e4]  MDM.EXE                         MDM.EXE
    1756 [0x06dc]  svchost.exe                     svchost.exe
    1504 [0x05e0]  svchost.exe                     svchost.exe
    2096 [0x0830]  ViakaraokeSrv.exe               ViakaraokeSrv.exe
    2148 [0x0864]  AVerHIDReceiver.exe             C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
    2580 [0x0a14]  egui.exe                        C:\Program Files\ESET\ESET Smart Security\egui.exe
    2600 [0x0a28]  ClassicStartMenu.exe            C:\Program Files\Classic Shell\ClassicStartMenu.exe
    2608 [0x0a30]  sidebar.exe                     C:\Program Files\Windows Sidebar\sidebar.exe
    2812 [0x0afc]  Skype.exe                       V:\SkypePortable\App\Skype.exe
    2952 [0x0b88]  nvtray.exe                      C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
    3016 [0x0bc8]  MailRuUpdater.exe               C:\Users\VV-Ef\AppData\Local\Mail.Ru\MailRuUpdater.exe
    3048 [0x0be8]  AVerQuick.exe                   C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
    2364 [0x093c]  punto.exe                       C:\Program Files (x86)\Yandex\Punto Switcher\punto.exe
    1456 [0x05b0]  VDeck.exe                       C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
    1288 [0x0508]  iusb3mon.exe                    C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
    0732 [0x02dc]  2GISTrayNotifier.exe            C:\Program Files (x86)\2gis\3.0\2GISTrayNotifier.exe
    3080 [0x0c08]  hppusg.exe                      C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe
    3168 [0x0c60]  ps64ldr.exe                     C:\Program Files (x86)\Yandex\Punto Switcher\ps64ldr.exe
    3364 [0x0d24]  svchost.exe                     svchost.exe
    3520 [0x0dc0]  svchost.exe                     svchost.exe
    3632 [0x0e30]  svchost.exe                     svchost.exe
    4060 [0x0fdc]  svchost.exe                     svchost.exe
    3100 [0x0c1c]  WUDFHost.exe                    WUDFHost.exe
    3856 [0x0f10]  SearchIndexer.exe               SearchIndexer.exe
    3756 [0x0eac]  TOTALCMD64.EXE                  C:\totalcmd\TOTALCMD64.EXE
    1316 [0x0524]  PrivacyIconClient.exe           C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
    2116 [0x0844]  LMS.exe                         LMS.exe
    4348 [0x10fc]  UNS.exe                         UNS.exe
    2688 [0x0a80]  mscorsvw.exe                    mscorsvw.exe
    3332 [0x0d04]  daemonu.exe                     daemonu.exe
    4816 [0x12d0]  svchost.exe                     svchost.exe
    4432 [0x1150]  wmpnetwk.exe                    wmpnetwk.exe
    4204 [0x106c]  setup_capture.exe               C:\Program Files (x86)\VMware\VMware ThinApp\setup_capture.exe
    4648 [0x1228]  snapshot64.exe                  C:\Program Files (x86)\VMware\VMware ThinApp\snapshot64.exe

Shell folders:
             ProgramFilesDir = C:\Program Files   
            Common StartMenu = C:\ProgramData\Microsoft\Windows\Start Menu   
                   StartMenu = C:\Users\VV-Ef\AppData\Roaming\Microsoft\Windows\Start Menu   
              Common AppData = C:\ProgramData   
               Local AppData = C:\Users\VV-Ef\AppData\Local   
                     AppData = C:\Users\VV-Ef\AppData\Roaming   
              Common Desktop = C:\Users\Public\Desktop   
                     Desktop = C:\Users\VV-Ef\Desktop   
              Common Startup = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup   [default: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp]
                     Startup = C:\Users\VV-Ef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup   [default: C:\Users\VV-Ef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartUp]
             Common Programs = C:\ProgramData\Microsoft\Windows\Start Menu\Programs   
                    Programs = C:\Users\VV-Ef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs   
            Common Favorites = C:\Users\VV-Ef\Favorites   
                   Favorites = C:\Users\VV-Ef\Favorites   
                      SendTo = C:\Users\VV-Ef\AppData\Roaming\Microsoft\Windows\SendTo   
                   Templates = C:\Users\VV-Ef\AppData\Roaming\Microsoft\Windows\Templates   
                      Recent = C:\Users\VV-Ef\AppData\Roaming\Microsoft\Windows\Recent   
                     NetHood = C:\Users\VV-Ef\AppData\Roaming\Microsoft\Windows\Network Shortcuts   
                       Fonts = C:\Windows\Fonts   
                 My Pictures = C:\Users\VV-Ef\Pictures   
                   My Videos = C:\Users\VV-Ef\Videos   
                    Personal = C:\Users\VV-Ef\Documents   
                     Profile = C:\Users\VV-Ef   
                    Profiles = <unavailable>   
                SystemSystem = C:\Windows\system32   

Device drivers:
    Kernel mode drivers:
        1394ohci   1394 OHCI Compliant Host Controller
            ACPI   Драйвер Microsoft ACPI
         AcpiPmi   ACPI Power Meter Driver
         adp94xx   adp94xx
         adpahci   adpahci
         adpu320   adpu320
             AFD   Ancillary Function Driver for Winsock
          agp440   Intel AGP Bus Filter
          aliide   aliide
          amdide   amdide
           AmdK8   AMD K8 Processor Driver
          AmdPPM   AMD Processor Driver
         amdsata   amdsata
          amdsbs   amdsbs
         amdxata   amdxata
           AppID   Драйвер AppID
             arc   arc
          arcsas   arcsas
        AsyncMac   Драйвер асинхронного носителя RAS
           atapi   Канал IDE
        AVerBDA6   AVerMedia SAA716x BDA Service
         AVerEth   AVerMedia Ethernet Adapter for MPE Service
         b06bdrv   Broadcom NetXtreme II VBD
        b57nd60a   Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0
            Beep   Beep
        blbdrive   blbdrive
        BrFiltLo   Brother USB Mass-Storage Lower Filter Driver
        BrFiltUp   Brother USB Mass-Storage Upper Filter Driver
         Brserid   Brother MFC Serial Port Interface Driver (WDM)
        BrSerWdm   Brother WDM Serial driver
        BrUsbMdm   Brother MFC USB Fax Only Modem
        BrUsbSer   Brother MFC USB Serial WDM Driver
         BthEnum   Драйвер блока запроса Bluetooth
        BTHMODEM   Bluetooth Serial Communications Driver
          BthPan   Устройства Bluetooth (личной сети)
         BTHPORT   Драйвер порта Bluetooth
          BTHUSB   Драйвер порта USB радиомодуля Bluetooth
           cdrom   Драйвер CD-ROM дисковода
        circlass   Consumer IR Devices
            CLFS   Общий журнал (CLFS)
          CmBatt   Microsoft ACPI Control Method Battery Driver
          cmdide   cmdide
             CNG   CNG
        Compbatt   Compbatt
        Composit   Драйвер перечислителя композитной шины
         crcdisk   Crcdisk Filter Driver
             CSC   Драйвер автономных файлов
        discache   System Attribute Cache
            Disk   Драйвер диска
         drmkaud   Доверенные аудиодрайверы Майкрософт
         DXGKrnl   LDDM Graphics Subsystem
           ebdrv   Broadcom NetXtreme II 10 GigE VBD
           ehdrv   ehdrv
         elxstor   elxstor
            epfw   epfw
         EpfwLWF   Epfw NDIS LightWeight Filter
         epfwwfp   epfwwfp
          ErrDev   Microsoft Hardware Error Device Driver
             fdc   Floppy Disk Controller Driver
        flpydisk   Floppy Disk Driver
          fvevol   Драйвер фильтра шифрования диска Bitlocker
        gagp30kx   Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms
        hcw85cir   Hauppauge Consumer Infrared Receiver
        HdAudAdd   Драйвер функции UAA для службы High Definition Audio (Microsoft), версия 1.1
        HDAudBus   Драйвер для шины UAA для High Definition Audio (Microsoft)
         HidBatt   HID UPS Battery Driver
          HidBth   Microsoft Bluetooth HID Miniport
           HidIr   Microsoft Infrared HID Driver
          HidUsb   Драйвер класса HID Microsoft
        HPFXBULK   HPFXBULK
          HpSAMD   HpSAMD
            HTTP   HTTP
        hwpolicy   Hardware Policy Driver
        i8042prt   Драйвер i8042-клавиатуры и мыши для порта PS/2
         iaStorV   RAID-контроллер Intel для Windows 7
           iirsp   iirsp
        intelide   intelide
        intelppm   Драйвер Intel процессора
        IpFilter   Драйвер фильтра IP-трафика
         IPMIDRV   IPMIDRV
           IPNAT   IP Network Address Translator
          IRENUM   IR Bus Enumerator
          isapnp   isapnp
        iScsiPrt   iScsiPort Driver
        iusb3hcs   Драйвер хост-контроллера и коммутатора Intel(R) USB 3.0
        iusb3hub   Драйвер концентратора Intel(R) USB 3.0
        iusb3xhc   Драйвер расширяемого хост-контроллера Intel(R) USB 3.0
        kbdclass   Драйвер класса клавиатуры
          kbdhid   Keyboard HID Driver
          KSecDD   KSecDD
         KSecPkg   KSecPkg
         ksthunk   Kernel Streaming Thunks
          lltdio   Link-Layer Topology Discovery Mapper I/O Driver
          LSI_FC   LSI_FC
         LSI_SAS   LSI_SAS
        LSI_SAS2   LSI_SAS2
        LSI_SCSI   LSI_SCSI
         megasas   megasas
          MegaSR   MegaSR
          MEIx64   Intel(R) Management Engine Interface 
           Modem   Modem
         monitor   Microsoft Monitor Class Function Driver Service
        mouclass   Драйвер класса мыши
          mouhid   Драйвер мыши HID
        mountmgr   Диспетчер точек подключения
            mpio   mpio
          mpsdrv   Драйвер авторизации брандмауэра Windows
          msahci   msahci
           msdsm   msdsm
        mshidkmd   Pass-through HID to KMDF Filter Driver
        msisadrv   msisadrv
         MSKSSRV   Представитель служб потоков Microsoft
        MSPCLOCK   Посредник синхронизации потоков Microsoft
           MSPQM   Представитель диспетчера качества потоков Microsoft
           MsRPC   MsRPC
        mssmbios   Microsoft System Management BIOS драйвер
           MSTEE   Преобразователь потоков Tee/Sink-to-Sink Microsoft
        MTConfig   Microsoft Input Configuration Driver
        NativeWi   NativeWiFi Filter
            NDIS   Системный драйвер NDIS
         NdisCap   NDIS Capture LightWeight Filter
        NdisTapi   NDIS-драйвер TAPI удаленного доступа
         Ndisuio   NDIS Usermode I/O Protocol
         NdisWan   NDIS-драйвер WAN удаленного доступа
         NDProxy   NDIS Proxy
           NetBT   NetBT
         nfrd960   nfrd960
        nsiproxy   NSI proxy service driver.
            Null   Null
        nvlddmkm   nvlddmkm
          nvraid   nvraid
          nvstor   nvstor
          nv_agp   NVIDIA nForce AGP Bus Filter
        ohci1394   1394 OHCI Compliant Host Controller (Legacy)
         Parport   Драйвер параллельного порта
         partmgr   Диспетчер разделов
             pci   Драйвер PCI шины
          pciide   pciide
          pcmcia   pcmcia
             pcw   Performance Counters for Windows Driver
          PEAUTH   PEAUTH
        PptpMini   Мини-порт WAN (PPTP)
        Processo   Processor Driver
          Psched   Планировщик пакетов QoS
          ql2300   ql2300
          ql40xx   ql40xx
        QWAVEdrv   Драйвер QWAVE
          RasAcd   Remote Access Auto Connection Driver
        RasAgile   WAN Miniport (IKEv2)
         Rasl2tp   Мини-порт WAN (L2TP)
        RasPppoe   Драйвер PPPOE удаленного доступа
         RasSstp   Мини-порт WAN (SSTP)
          rdpbus   Remote Desktop Device Redirector Bus Driver
          RDPCDD   RDPCDD
           RDPDR   Terminal Server Device Redirector Driver
        RDPENCDD   RDP Encoder Mirror Driver
        RDPREFMP   Reflector Display Driver used to gain access to graphics data
           RDPWD   RDP Winstation Driver
        rdyboost   ReadyBoost
          RFCOMM   Устройство Bluetooth (протокол RFCOMM TDI)
          rspndr   Link-Layer Topology Discovery Responder
         RTL8167   Realtek 8167 NT Driver
           s3cap   s3cap
        sbp2port   sbp2port
        scfilter   Драйвер фильтра смарт-карты класса PnP
          secdrv   Security Driver
         Serenum   Драйвер фильтра Serenum
          Serial   Драйвер последовательного порта
        sermouse   Serial Mouse Driver
         sffdisk   SFF Storage Class Driver
        sffp_mmc   SFF Storage Protocol Driver for MMC
         sffp_sd   SFF Storage Protocol Driver for SDBus
         sfloppy   High-Capacity Floppy Disk Drive
        SiSRaid2   SiSRaid2
        SiSRaid4   SiSRaid4
             Smb   Протокол сообщений TCP/IP и TCP/IPv6 (сеанс SMB)
           spldr   Security Processor Loader Driver
        stexstor   stexstor
         storflt   Диск Виртуальная машина Шина Ускорение Фильтр Драйвер
         storvsc   storvsc
          swenum   Драйвер программной шины
           Tcpip   Драйвер протокола TCP/IP
          TCPIP6   Microsoft IPv6 Protocol Driver
        tcpipreg   TCP/IP Registry Compatibility
          TDPIPE   TDPIPE
           TDTCP   TDTCP
             tdx   Драйвер поддержки NetIO Legacy TDI
          TermDD   Драйвер устройства терминала
        tssecsrv   Remote Desktop Services Security Filter Driver
          tunnel   Драйвер адаптера минипорта для туннеля Microsoft
          uagp35   Microsoft AGPv3.5 Filter
        uliagpkx   Uli AGP Bus Filter
           umbus   UMBus драйвер перечислителя
          UmPass   Microsoft UMPass Driver
        usbaudio   Аудио драйвер USB (WDM)
         usbccgp   Драйвер универсального родительского устройства USB (Microsoft)
          usbcir   eHome Infrared Receiver (USBCIR)
         usbehci   Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера
          usbhub   Драйвер стандартного концентратора USB  (Microsoft)
         usbohci   Драйвер минипорта Microsoft USB открытого хост-контроллера
        usbprint   Класс принтеров Microsoft USB
         USBSTOR   Драйвер запоминающих устройств для USB
         usbuhci   Драйвер минипорта Microsoft USB универсального хост-контроллера
        usbvideo   USB-видеоустройство (WDM)
        vdrvroot   Драйвер перечислителя виртуальных дисков (Майкрософт)
             vga   vga
         VgaSave   VgaSave
           vhdmp   vhdmp
        VIAHdAud   VIA High Definition Audio Driver Service
          viaide   viaide
           vmbus   Шина VMBus
        VMBusHID   VMBusHID
          volmgr   Драйвер диспетчера томов
         volmgrx   Диспетчер динамических томов
         volsnap   Тома запоминающих устройств
         vsmraid   vsmraid
        vwifibus   Драйвер шины Virtual WiFi
        WacomPen   Wacom Serial Pen HID Driver
          WANARP   Драйвер удаленного доступа IP ARP
        Wanarpv6   Драйвер удаленного доступа IPv6 ARP
              Wd   Wd
        Wdf01000   Служба платформ драйвера режима ядра
          WfpLwf   WFP Lightweight Filter
         WmiAcpi   Microsoft Windows Management Interface for ACPI
         ws2ifsl   Драйвер WinSock IFS
          WudfPf   User Mode Driver Frameworks Platform Driver
          WUDFRd   WUDFRd

        227 kernel mode drivers

    File system and filter drivers:
          bowser   Драйвер поддержки браузера
            cdfs   CD/DVD File System Reader
            DfsC   DFS Namespace Client Driver
          eamonm   eamonm
           exfat   exFAT File System Driver
         fastfat   FAT12/16/32 File System Driver
        FileInfo   File Information FS MiniFilter
        Filetrac   Filetrace
          FltMgr   Диспетчер фильтров
        FsDepend   File System Dependency Minifilter
           luafv   Виртуализация файла контроля учетных записей
          MRxDAV   Драйвер перенаправителя клиентов WebDav
          mrxsmb   Оболочка и модуль мини-перенаправителя SMB
        mrxsmb10   Мини-перенаправитель SMB 1.x
        mrxsmb20   Мини-перенаправитель SMB 2.0
            Msfs   Msfs
             Mup   Mup
         NetBIOS   NetBIOS Interface
            Npfs   Npfs
            Ntfs   Ntfs
           rdbss   Перенаправленная подсистема буферизации
             srv   Драйвер сервера Server SMB 1.xxx
            srv2   Драйвер сервера Server SMB 2.xxx
          srvnet   srvnet
            udfs   udfs
        WIMMount   WIMMount

        26 file system and filter drivers

    Adapter drivers:

        0 adapter drivers

    Recognizer drivers:

        0 recognizer drivers

    253 device drivers

Dump ended on 6/7/2014 at 14:58:50.84 (Coordinated Universal Time)

=========================================================================
=========================================================================

<end-of-dump>
