Перейти к содержанию

Шифровальщик - Crusis (arena)

megaandrey
 Share

Рекомендуемые сообщения

megaandrey Новичок

megaandrey

Опубликовано
Опубликовано

Просим посодействовать в восстановлении файлов. Зашифровано огромное кол-во важных файлов.

 

 

[KLAN-6896851672]

 

Присланные вами файлы были проверены в автоматическом режиме.

 

В следующих файлах обнаружен вредоносный код:

explore.exe - Trojan-Ransom.Win32.Crusis.to explore_0.exe - Trojan-Ransom.Win32.Crusis.to explore_1.exe - Trojan-Ransom.Win32.Crusis.to explore_2.exe - Trojan-Ransom.Win32.Crusis.to

 

В антивирусных базах информация по присланным вами файлам отсутствует:

vsepflt.sys

vmhgfs.dll

vmhgfs_0.dll

desktop.ini.id-CC4747B6.[payfordecrypt1@qq.com].arena

desktop.ini.id-CC4747B6.[payfordecrypt1@qq.com]_0.arena

desktop.ini.id-CC4747B6.[payfordecrypt1@qq.com]_1.arena

Google Chrome.lnk.id-CC4747B6.[payfordecrypt1@qq.com].arena

Launch Internet Explorer Browser.lnk.id-CC4747B6.[payfordecrypt1@qq.com].arena

Shows Desktop.lnk.id-CC4747B6.[payfordecrypt1@qq.com].arena

Window Switcher.lnk.id-CC4747B6.[payfordecrypt1@qq.com].arena

Ссылка на комментарий
Поделиться на другие сайты
Sandor Мудрец

Sandor

Опубликовано
Опубликовано (изменено)

Здравствуйте!

 

Файл C:\Users\andi\AppData\Roaming\Info.hta и пару зашифрованных документов упакуйте в архив и прикрепите к следующему сообщению.

 

Закройте все программы, временно выгрузите антивирус, файерволл и прочее защитное ПО.

 

Выполните скрипт в AVZ (Файл - Выполнить скрипт):

 

begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
 QuarantineFile('C:\Users\andi\AppData\Roaming\Info.hta', '');
 QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\explore.exe', '');
 QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta', '');
 QuarantineFile('C:\Users\andi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\explore.exe', '');
 QuarantineFile('C:\Users\andi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta', '');
 QuarantineFile('C:\Users\All Users\Start Menu\Programs\Startup\explore.exe', '');
 DeleteFile('C:\Users\andi\AppData\Roaming\Info.hta', '32');
 DeleteFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\explore.exe', '32');
 DeleteFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta', '32');
 DeleteFile('C:\Users\andi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\explore.exe', '32');
 DeleteFile('C:\Users\andi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta', '32');
 DeleteFile('C:\Users\All Users\Start Menu\Programs\Startup\explore.exe', '32');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','C:\Users\andi\AppData\Roaming\Info.hta');
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1804', 1);
ExecuteSysClean;
 CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
RebootWindows(true);
end.
Компьютер перезагрузится.

 

 

 

Файл quarantine.zip из папки с распакованной утилитой AVZ отправьте отправьте по адресу newvirus@kaspersky.com

 

Полученный ответ сообщите здесь (с указанием номера KLAN)

 

 

 

Повторите логи по правилам.

Изменено пользователем Sandor
Ссылка на комментарий
Поделиться на другие сайты
megaandrey Новичок

megaandrey

Опубликовано
  • Автор
Опубликовано

Выкладываю полученный ответ.

 

KLAN-6898046615

 

Благодарим за обращение в Антивирусную Лабораторию

 

Присланные вами файлы были проверены в автоматическом режиме.

 

В следующих файлах обнаружен вредоносный код:

explore.exe - Trojan-Ransom.Win32.Crusis.to explore_0.exe - Trojan-Ransom.Win32.Crusis.to explore_1.exe - Trojan-Ransom.Win32.Crusis.to

 

В антивирусных базах информация по присланным вами файлам отсутствует:

Info.hta

Info_0.hta

 

Перечисленные файлы имеют безопасный формат и не могут быть вредоносными:

image001.png

 

Файлы переданы на исследование. Если результат исследования изменится, мы дополнительно сообщим вам по электронной почте.

               

Это сообщение сформировано автоматической системой обработки писем. Пожалуйста, не отвечайте на него.

 

Антивирусная Лаборатория, Kaspersky Lab HQ

 

"Ленинградское шоссе 39A/3, Москва, 125212, Russia

Телефон/Факс: + 7 (495) 797 8700

http://www.kaspersky.com https://www.securelist.com"

Ссылка на комментарий
Поделиться на другие сайты
Sandor Мудрец

Sandor

Опубликовано
Опубликовано

"Пофиксите" в HijackThis (некоторые строки могут отсутствовать):

O4 - Global User Startup: Info.hta
O4 - Global User Startup: explore.exe    ->    (PE EXE)
O4 - HKLM\..\Run: [C:\Users\GordeevRL\AppData\Roaming\Info.hta] C:\windows\system32\mshta.exe "C:\Users\GordeevRL\AppData\Roaming\Info.hta"
O4 - HKLM\..\Run: [C:\Users\andi\AppData\Roaming\Info.hta] C:\windows\system32\mshta.exe "C:\Users\andi\AppData\Roaming\Info.hta"
O4 - HKLM\..\Run: [C:\windows\System32\Info.hta] C:\windows\system32\mshta.exe "C:\windows\System32\Info.hta"
O4 - HKLM\..\Run: [explore.exe] C:\Users\andi\AppData\Roaming\explore.exe 
O4 - User Startup: Info.hta
O4 - User Startup: explore.exe    ->    (PE EXE)
Скачайте Farbar Recovery Scan Tool (или с зеркала) и сохраните на Рабочем столе.

 

Примечание: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.

Запустите программу. Когда программа запустится, нажмите Yes для соглашения с предупреждением.

Отметьте галочкой также "Shortcut.txt".

 

Нажмите кнопку Scan.

После окончания сканирования будут созданы отчеты FRST.txt, Addition.txt, Shortcut.txt в той же папке, откуда была запущена программа. Прикрепите отчеты к своему следующему сообщению.

Подробнее читайте в этом руководстве.

Ссылка на комментарий
Поделиться на другие сайты
Sandor Мудрец

Sandor

Опубликовано
Опубликовано

  • Отключите до перезагрузки антивирус.
  • Выделите следующий код:

    Start::
CreateRestorePoint:
HKU\S-1-5-21-3299015982-1297908279-3903922542-2131\...\Policies\Explorer\DisallowRun: [1] C:\Documents and Settings\All Users\Application Data\Windows\csrss.exe
HKU\S-1-5-21-3299015982-1297908279-3903922542-2131\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
2017-10-02 10:45 - 2017-10-02 10:45 - 000013925 _____ C:\Users\andi\AppData\Roaming\Info.hta
2017-10-02 10:39 - 2017-10-02 10:39 - 000094720 _____ C:\Users\andi\AppData\Roaming\explore.exe
2017-09-30 16:35 - 2017-09-30 15:17 - 000013925 _____ C:\Users\NagovitsynSA\AppData\Roaming\Info.hta
2017-09-30 16:35 - 2017-09-30 13:32 - 000094720 _____ C:\Users\NagovitsynSA\AppData\Roaming\explore.exe
2017-09-30 15:17 - 2017-10-02 10:45 - 000000218 _____ C:\Users\andi\Desktop\FILES ENCRYPTED.txt
2017-09-30 11:14 - 2017-09-30 08:51 - 000000218 _____ C:\Users\NagovitsynSA\Desktop\FILES ENCRYPTED.txt
2017-09-30 08:51 - 2017-10-02 10:45 - 000013925 _____ C:\windows\system32\Info.hta
2017-09-30 08:51 - 2017-10-02 10:45 - 000000218 _____ C:\Users\Public\Desktop\FILES ENCRYPTED.txt
2017-09-30 08:51 - 2017-10-02 10:45 - 000000218 _____ C:\FILES ENCRYPTED.txt
2017-09-30 08:51 - 2017-09-30 08:51 - 000000218 _____ C:\Users\GordeevRL\Desktop\FILES ENCRYPTED.txt
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_10_38.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_11_52.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_13_7.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_14_22.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_15_37.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_16_52.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_18_8.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_19_26.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_1_45.dmp [196128]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_22_15.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_25_3.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_27_50.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_2_1.dmp [196152]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_2_16.dmp [184044]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_2_32.dmp [184380]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_2_48.dmp [184404]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_30_33.dmp [181872]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_33_22.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_36_13.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_39_7.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_3_20.dmp [184380]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_3_36.dmp [184020]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_3_4.dmp [184024]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_3_52.dmp [184044]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_42_0.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_44_57.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_47_57.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_4_23.dmp [184028]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_4_54.dmp [184040]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_50_58.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_54_1.dmp [181872]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_57_4.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_5_25.dmp [184020]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_5_57.dmp [184028]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_6_29.dmp [184052]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_7_2.dmp [184048]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_7_34.dmp [184024]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_8_7.dmp [184028]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_11_9_22.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_0_6.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_12_7.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_15_15.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_18_21.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_21_28.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_24_40.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_27_50.dmp [181872]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_2_58.dmp [181840]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_30_58.dmp [181880]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_34_9.dmp [181868]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_37_20.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_40_32.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_43_44.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_46_57.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_50_16.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_53_39.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_57_4.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_5_56.dmp [181872]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_12_9_2.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_0_34.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_10_48.dmp [181872]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_14_12.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_17_44.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_21_3.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_24_26.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_27_37.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_30_48.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_33_49.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_37_0.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_40_22.dmp [181872]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_43_35.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_47_0.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_4_1.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_50_15.dmp [181840]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_53_36.dmp [181872]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_56_49.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_13_7_23.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_14_0_4.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_14_10_28.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_14_14_0.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_14_17_28.dmp [181872]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_14_21_1.dmp [181872]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_14_24_36.dmp [181868]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_14_28_13.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_14_31_53.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_14_35_29.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_14_39_1.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_14_3_29.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_14_42_35.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_14_46_9.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_14_49_42.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_14_53_18.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_14_56_56.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_14_6_57.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_15_0_38.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_15_11_14.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_15_14_54.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_15_18_27.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_15_22_0.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_15_25_32.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_15_29_7.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_15_32_37.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_15_36_9.dmp [181872]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_15_39_40.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_15_43_11.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_15_46_47.dmp [181840]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_15_4_12.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_15_50_24.dmp [181872]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_15_54_3.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_15_57_38.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_15_7_39.dmp [181872]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_16_12_26.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_16_16_5.dmp [181872]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_16_19_48.dmp [181880]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_16_1_20.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_16_23_24.dmp [181868]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_16_27_3.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_16_30_41.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_16_34_19.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_16_38_0.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_16_41_40.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_16_45_19.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_16_48_53.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_16_4_53.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_16_52_31.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_16_56_13.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_16_59_55.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_16_8_40.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_17_10_57.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_17_14_34.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_17_18_9.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_17_21_48.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_17_25_30.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_17_29_16.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_17_32_52.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_17_36_25.dmp [181872]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_17_39_42.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_17_3_39.dmp [181872]
AlternateDataStreams: C:\Program Files\Infotec:_minidump_default_pid_5552_tid_xC34_2017_8_23_17_7_18.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_10_3.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_11_19.dmp [182212]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_12_33.dmp [181840]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_13_48.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_15_3.dmp [181840]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_16_18.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_17_34.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_18_50.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_20_8.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_22_58.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_25_46.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_28_30.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_31_13.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_34_4.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_36_56.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_39_50.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_42_44.dmp [181864]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_45_41.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_48_42.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_51_43.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_54_46.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_57_48.dmp [182192]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_11_8_49.dmp [184020]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_0_49.dmp [181868]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_12_53.dmp [181880]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_16_2.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_19_8.dmp [181868]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_22_15.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_25_26.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_28_36.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_31_45.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_34_56.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_38_8.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_3_41.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_41_19.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_44_31.dmp [181880]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_47_46.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_51_5.dmp [181864]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_54_30.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_57_54.dmp [181868]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_6_42.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_12_9_48.dmp [181864]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_11_38.dmp [181880]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_15_2.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_18_33.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_1_26.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_21_53.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_25_17.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_28_24.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_31_34.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_34_36.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_37_49.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_41_13.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_44_23.dmp [182220]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_47_45.dmp [181840]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_4_51.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_51_3.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_54_19.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_57_36.dmp [181892]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_13_8_13.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_14_0_53.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_14_11_20.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_14_14_51.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_14_18_20.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_14_21_54.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_14_25_29.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_14_29_7.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_14_32_48.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_14_36_21.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_14_39_53.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_14_43_28.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_14_47_1.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_14_4_21.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_14_50_37.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_14_54_10.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_14_57_51.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_14_7_48.dmp [181840]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_15_12_7.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_15_15_47.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_15_19_19.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_15_1_31.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_15_22_51.dmp [181864]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_15_26_25.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_15_30_0.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_15_33_29.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_15_37_1.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_15_40_31.dmp [182192]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_15_44_3.dmp [181868]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_15_47_40.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_15_51_18.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_15_54_56.dmp [181864]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_15_58_33.dmp [181880]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_15_5_3.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_15_8_29.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_16_13_20.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_16_17_0.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_16_20_40.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_16_24_15.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_16_27_57.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_16_2_11.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_16_31_35.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_16_35_13.dmp [181880]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_16_38_53.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_16_42_35.dmp [181864]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_16_46_11.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_16_49_46.dmp [181868]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_16_53_25.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_16_57_7.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_16_5_47.dmp [181868]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_16_9_35.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_17_0_50.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_17_11_48.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_17_15_25.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_17_19_3.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_17_22_41.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_17_26_27.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_17_30_9.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_17_33_41.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_17_37_14.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_17_4_35.dmp [181880]
AlternateDataStreams: C:\Program Files\Infotec:1_minidump_default_pid_5552_tid_xC34_2017_8_23_17_8_11.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_11_20_57.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_11_23_47.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_11_26_36.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_11_29_18.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_11_32_2.dmp [182188]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_11_34_54.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_11_37_47.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_11_40_39.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_11_43_36.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_11_46_34.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_11_49_34.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_11_52_37.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_11_55_39.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_11_58_42.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_10_42.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_13_49.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_16_56.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_1_39.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_20_2.dmp [181840]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_23_11.dmp [181844]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_26_22.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_29_32.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_32_42.dmp [182192]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_35_53.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_39_4.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_42_15.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_45_27.dmp [181868]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_48_46.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_4_32.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_52_5.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_55_30.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_58_56.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_12_7_36.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_12_39.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_16_4.dmp [182188]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_19_32.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_22_52.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_26_10.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_29_21.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_2_27.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_32_26.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_35_32.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_38_47.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_42_11.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_45_26.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_48_42.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_52_1.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_55_18.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_58_34.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_5_51.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_13_9_12.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_14_12_22.dmp [181844]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_14_15_51.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_14_19_23.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_14_1_53.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_14_22_57.dmp [182192]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_14_26_32.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_14_30_11.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_14_33_51.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_14_37_23.dmp [181868]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_14_40_56.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_14_44_30.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_14_48_5.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_14_51_40.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_14_55_14.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_14_58_57.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_14_5_22.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_14_8_50.dmp [181840]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_15_13_11.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_15_16_51.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_15_20_22.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_15_23_53.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_15_27_27.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_15_2_33.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_15_31_2.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_15_34_33.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_15_38_3.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_15_41_34.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_15_45_7.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_15_48_45.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_15_52_22.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_15_55_59.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_15_59_39.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_15_6_4.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_15_9_32.dmp [182188]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_16_10_42.dmp [181844]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_16_14_24.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_16_18_6.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_16_21_44.dmp [182192]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_16_25_19.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_16_29_2.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_16_32_39.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_16_36_19.dmp [181868]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_16_39_58.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_16_3_14.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_16_43_39.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_16_47_14.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_16_50_50.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_16_54_30.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_16_58_13.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_16_6_54.dmp [181840]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_17_12_51.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_17_16_29.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_17_1_55.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_17_20_8.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_17_23_44.dmp [181884]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_17_27_34.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_17_31_14.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_17_34_47.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_17_38_14.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_17_5_40.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:T_minidump_default_pid_5552_tid_xC34_2017_8_23_17_9_16.dmp [182188]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_11_21_47.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_11_24_37.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_11_27_24.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_11_30_6.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_11_32_54.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_11_35_46.dmp [181868]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_11_38_38.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_11_41_32.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_11_44_28.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_11_47_28.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_11_50_29.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_11_53_32.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_11_56_34.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_11_59_37.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_11_38.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_14_45.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_17_52.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_20_58.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_24_9.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_27_19.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_2_30.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_30_28.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_33_38.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_36_50.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_40_2.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_43_13.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_46_25.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_49_45.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_53_6.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_56_31.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_5_25.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_12_8_31.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_0_0.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_10_14.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_13_39.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_17_9.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_20_32.dmp [181868]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_23_54.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_27_8.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_30_18.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_33_18.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_36_31.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_39_49.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_3_28.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_43_5.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_46_27.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_49_43.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_53_3.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_56_18.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_59_33.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_13_6_51.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_14_13_26.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_14_16_54.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_14_20_27.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_14_24_2.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_14_27_38.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_14_2_56.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_14_31_18.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_14_34_55.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_14_38_27.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_14_42_1.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_14_45_36.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_14_49_9.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_14_52_45.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_14_56_20.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_14_6_24.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_14_9_54.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_15_0_4.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_15_10_40.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_15_14_18.dmp [181868]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_15_17_55.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_15_21_27.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_15_24_58.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_15_28_33.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_15_32_5.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_15_35_37.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_15_39_8.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_15_3_38.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_15_42_38.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_15_46_13.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_15_49_51.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_15_53_28.dmp [181860]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_15_57_4.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_15_7_6.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_16_0_46.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_16_11_50.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_16_15_31.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_16_19_14.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_16_22_50.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_16_26_28.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_16_30_7.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_16_33_45.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_16_37_27.dmp [181848]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_16_41_7.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_16_44_45.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_16_48_19.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_16_4_18.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_16_51_56.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_16_55_38.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_16_59_20.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_16_8_3.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_17_10_22.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_17_13_58.dmp [181868]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_17_17_34.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_17_21_14.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_17_24_53.dmp [181836]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_17_28_41.dmp [181832]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_17_32_19.dmp [181856]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_17_35_51.dmp [181852]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_17_39_12.dmp [181876]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_17_3_3.dmp [181828]
AlternateDataStreams: C:\Program Files\Infotec:w_minidump_default_pid_5552_tid_xC34_2017_8_23_17_6_45.dmp [181836]
Reboot:
End::
  • Скопируйте выделенный текст (правой кнопкой - Копировать).
  • Запустите FRST (FRST64) от имени администратора.
  • Нажмите Fix один раз (!) и подождите. Программа создаст лог-файл (Fixlog.txt). Прикрепите его к своему следующему сообщению.
Компьютер будет перезагружен автоматически.

 

Подробнее читайте в этом руководстве.

Ссылка на комментарий
Поделиться на другие сайты

Пожалуйста, войдите, чтобы комментировать

Вы сможете оставить комментарий после входа в



Войти
 Share
Перейти к списку тем

  • Похожий контент

    • Александр94
      Шифровальщик
      От Александр94
      Поймаи шифровальщик один в один как в теме  
       
      csb.log.[MJ-UE8059316472](decodehop@gmail.com ).rar csb.log.[MJ-UE8059316472](decodehop@gmail.com ).rar FRST.txt Addition.txt
    • WhySpice
      Шифровальщик cyberfear
      От WhySpice
      Утром снесло домашний сервер с открытым вне RDP. Зашифровало абсолютно все, все мои рабочие проекты, python скрипты, виртуалки vmware/virtualbox

      Зашифрованный файл: https://cloud.mail.ru/public/qDiR/yEN8ogSZJ
      Addition_06-01-2025 15.06.34.txt FRST_06-01-2025 15.01.14.txt
      README.txt
    • sater123
      Вирус шифровальщик
      От sater123
      Добрый день. Зашифровались файлы размером более 8 мегабайт (их почта datastore@cyberfear.com). Помогите пожалуйста.
      Зашифрованные файлы не могу прикрепить, так как их размер более 5Мб.
      FRST.txt Addition.txt
    • BOBO
      Шифровальщик WantToCry
      От BOBO
      Попросили создать новую тему не знаю почему ту закрыли вот создаю. Меня тоже взломали 25 числа hdd весит на роутере, smb открыт был. Покапалься в файлах были несколько оригинальных файлов и вроде шифрование AES в режиме ECB. Встал вопрос можно ли найти ключ шифрования если например нашел зашифрованный блок пробелов 16 байт. 
    • FineGad
      Шифровальщик WantToCry
      От FineGad
      26.12.24 На файловом сервере (комп с Debian) в расшареных каталогах заметил текстовый файл !want_to_cry.txt 
      Просканировал все каталоги доступные по сети (SMB) зашифрованные файлы с расширением .want_to_cry по времени создания файлов видно что шифровальщик проработал примерно с 24.12.24 20:05  по 25.12.24 03:05 после чего сервер "завис". Сейчас шифровщик не активен (новые шифрованные файлы не появляются). Доступа к сети извне нет, кроме SSH с ключом шифрования. В сети кроме моего во время активности были еще 2 компьютера под управление Windows.
       
      !want_to_cry.txt
×
×
  • Создать...