Имя образа PID Имя сессии № сеанса Память
========================= ====== ================ ======== ============
System Idle Process 0 Console 0 20 КБ
System 4 Console 0 60 КБ
smss.exe 688 Console 0 76 КБ
csrss.exe 824 Console 0 3 268 КБ
winlogon.exe 856 Console 0 884 КБ
services.exe 900 Console 0 1 860 КБ
lsass.exe 912 Console 0 1 388 КБ
svchost.exe 1080 Console 0 2 128 КБ
svchost.exe 1416 Console 0 10 968 КБ
svchost.exe 1540 Console 0 1 536 КБ
svchost.exe 1656 Console 0 1 360 КБ
explorer.exe 664 Console 0 13 028 КБ
mouse32a.exe 716 Console 0 1 156 КБ
ps.exe 1136 Console 0 3 036 КБ
srvany.exe 592 Console 0 116 КБ
svchost.exe 732 Console 0 1 700 КБ
resetservice.exe 740 Console 0 480 КБ
BCResident.exe 1020 Console 0 304 КБ
qip.exe 1856 Console 0 3 252 КБ
Opera.exe 1180 Console 0 45 440 КБ
bred3_2k.exe 2188 Console 0 344 КБ
outpost.exe 2404 Console 0 16 248 КБ
bred3_2k.exe 3620 Console 0 756 КБ
bred3_2k.exe 948 Console 0 652 КБ
bred3_2k.exe 3040 Console 0 748 КБ
cmd.exe 3520 Console 0 1 732 КБ
tasklist.exe 1692 Console 0 3 840 КБ
wmiprvse.exe 1024 Console 0 4 960 КБ

1181 14:23:14 explorer.exe:660 OPEN C:\trace.txt SUCCESS Options: OpenIf Access: All
1182 14:23:14 explorer.exe:660 OPEN C:\trace.txt SUCCESS Options: Open Access: All
1183 14:23:14 explorer.exe:660 QUERY INFORMATION C:\trace.txt SUCCESS FileInternalInformation
1184 14:23:14 explorer.exe:660 CLOSE C:\trace.txt SUCCESS
1185 14:23:14 explorer.exe:660 QUERY INFORMATION C:\trace.txt SUCCESS Length: 618
1186 14:23:14 explorer.exe:660 QUERY INFORMATION C:\trace.txt SUCCESS Length: 618
1187 14:23:14 explorer.exe:660 WRITE C:\trace.txt SUCCESS Offset: 618 Length: 3
1188 14:23:14 explorer.exe:660 READ C:\trace.txt SUCCESS Offset: 0 Length: 4096
1189 14:23:14 explorer.exe:660 CLOSE C:\trace.txt SUCCESS
1190 14:23:14 explorer.exe:660 OPEN C:\trace.txt:KAVICHS SUCCESS Options: Open Access: All
1191 14:23:14 explorer.exe:660 OPEN C:\trace.txt:KAVICHS SUCCESS Options: Open Access: All
1192 14:23:14 explorer.exe:660 QUERY INFORMATION C:\trace.txt:KAVICHS SUCCESS Length: 36
1193 14:23:14 explorer.exe:660 QUERY INFORMATION C:\trace.txt:KAVICHS SUCCESS Length: 36
1194 14:23:14 explorer.exe:660 READ C:\trace.txt:KAVICHS SUCCESS Offset: 0 Length: 36
1195 14:23:14 explorer.exe:660 READ C:\trace.txt:KAVICHS SUCCESS Offset: 0 Length: 4096
1196 14:23:14 explorer.exe:660 CLOSE C:\trace.txt:KAVICHS SUCCESS
1197 14:23:14 explorer.exe:660 OPEN C:\trace.txt:KAVICHS SUCCESS Options: Open Access: All
1198 14:23:14 explorer.exe:660 QUERY INFORMATION C:\trace.txt:KAVICHS SUCCESS FileInternalInformation
1199 14:23:14 explorer.exe:660 CLOSE C:\trace.txt:KAVICHS SUCCESS
1200 14:23:14 explorer.exe:660 SET INFORMATION C:\trace.txt:KAVICHS SUCCESS FileBasicInformation
1201 14:23:14 explorer.exe:660 READ C:\trace.txt:KAVICHS SUCCESS Offset: 0 Length: 4
1202 14:23:14 explorer.exe:660 CLOSE C:\trace.txt:KAVICHS SUCCESS