[skrnn]

Blast,
Согласен с Вами, как раз программа 1С и была виновником.

Скрытый текст

GetPointerFromAddress: unable to read from 83dad850
PROCESS 895fc200 SessionId: none Cid: 18e8 Peb: 7ffdb000 ParentCid: 1110
THREAD 87480340 Cid 18e8.1b1c Teb: 7ffdf000 Win32Thread: fe1ff008 RUNNING on processor 1
Not impersonating
GetUlongFromAddress: unable to read from 83d6c510
Owning Process 895fc200 Image: 1cv8.exe
Attached Process N/A Image: N/A
ffdf0000: Unable to get shared data
Wait Start TickCount 1387442
DirBase: d864a980 ObjectTable: db899640 HandleCount: <Data Not Accessible>
Image: 1cv8.exe
VadRoot 869ffad0 Vads 265 Clone 0 Private 4057. Modified 11. Locked 0.
DeviceMap 98d126c0
Token ddc92030
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
ffdf0000: Unable to get shared data
ElapsedTime 00:00:00.000
UserTime 00:00:00.000
KernelTime 00:00:00.000
QuotaPoolUsage[PagedPool] 315524
QuotaPoolUsage[NonPagedPool] 16268
Working Set Sizes (now,min,max) (11042, 50, 345) (44168KB, 200KB, 1380KB)
PeakWorkingSetSize 11042
VirtualSize 181 Mb
PeakVirtualSize 181 Mb
PageFaultCount 11103
MemoryPriority BACKGROUND
BasePriority 8
CommitCharge 5989
Job 86c80e10

THREAD 87480340 Cid 18e8.1b1c Teb: 7ffdf000 Win32Thread: fe1ff008 RUNNING on processor 1
*** Error in reading nt!_ETHREAD @ 871cb5e8