Petya V4sechkin, сделал.
Пишет так:
Код:
10:06:11,2191910 svchost.exe 1420 QueryOpen C:\Windows\System32\sstpsvc.dll FAST IO DISALLOWED
10:06:11,2198970 svchost.exe 1420 CreateFileMapping C:\Windows\System32\sstpsvc.dll FILE LOCKED WITH ONLY READERS SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY
10:06:11,2207385 svchost.exe 1420 QueryOpen C:\Windows\System32\sstpsvc.dll FAST IO DISALLOWED
10:06:11,2213088 svchost.exe 1420 CreateFileMapping C:\Windows\System32\sstpsvc.dll FILE LOCKED WITH ONLY READERS SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE
10:06:11,2220928 svchost.exe 1420 QueryOpen C:\Windows\System32\rtutils.dll FAST IO DISALLOWED
10:06:11,2227324 svchost.exe 1420 CreateFileMapping C:\Windows\System32\rtutils.dll FILE LOCKED WITH ONLY READERS SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE
10:06:11,3378064 svchost.exe 1212 QueryOpen C:\Windows\System32\wbem\wbemcons.dll FAST IO DISALLOWED
10:06:11,3385708 svchost.exe 1212 CreateFileMapping C:\Windows\System32\wbem\wbemcons.dll FILE LOCKED WITH ONLY READERS SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY
10:06:11,3390514 svchost.exe 1212 QueryOpen C:\Windows\System32\wbem\wbemcons.dll FAST IO DISALLOWED
10:06:11,3395782 svchost.exe 1212 CreateFileMapping C:\Windows\System32\wbem\wbemcons.dll FILE LOCKED WITH ONLY READERS SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE
10:06:11,3430508 svchost.exe 1148 QueryOpen C:\Windows\System32\services.exe FAST IO DISALLOWED
10:06:11,3436143 svchost.exe 1148 CreateFileMapping C:\Windows\System32\services.exe FILE LOCKED WITH ONLY READERS SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY
10:06:11,3440848 svchost.exe 1148 QueryOpen C:\Windows\System32\services.exe FAST IO DISALLOWED
10:06:11,3451329 svchost.exe 1148 CreateFileMapping C:\Windows\System32\services.exe FILE LOCKED WITH ONLY READERS SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY
Что это (FILE LOCKED WITH ONLY READERS) значит?
Это DEP?
