Установил regmon и смотрю за реестром. А Винда че то постоянно ищет, даже тогда когда нет запущенных программ
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
15.
16.
17.
18.
19.
20.
21.
22.
23.
24.
25.
26.
27.
28.
explorer.exe: 1956 QueryValue HKLM\SYSTEM\ControlSet001\Services\Tcpip\Linkage\Bind BUFFER OVERFLOW
17 0 . 26763123 explorer.exe: 1956 QueryValue HKLM\SYSTEM\ControlSet001\Services\Tcpip\Linkage\Bind BUFFER OVERFLOW
18 0 . 28649953 explorer.exe: 1956 QueryValue HKLM\SYSTEM\ControlSet001\Services\Tcpip\Linkage\Bind SUCCESS "\Device\{A3155166-73B5-4594-B9D5-91F28F831901}"
19 0 . 28688842 explorer.exe: 1956 OpenKey HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A3155166-73B5- 4594 -B9D5-91F28F831901} SUCCESS Access: 0x20019
20 0 . 28690434 explorer.exe: 1956 QueryValue HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A3155166-73B5- 4594 -B9D5-91F28F831901}\EnableDHCP SUCCESS 0x1
21 0 . 28692138 explorer.exe: 1956 QueryValue HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A3155166-73B5- 4594 -B9D5-91F28F831901}\LeaseObtainedTime NOT FOUND
22 0 . 28693312 explorer.exe: 1956 QueryValue HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A3155166-73B5- 4594 -B9D5-91F28F831901}\LeaseTerminatesTime NOT FOUND
23 0 . 28694400 explorer.exe: 1956 QueryValue HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A3155166-73B5- 4594 -B9D5-91F28F831901}\DhcpServer NOT FOUND
24 0 . 28696999 explorer.exe: 1956 CloseKey HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A3155166-73B5- 4594 -B9D5-91F28F831901} SUCCESS
25 0 . 28703871 explorer.exe: 1956 OpenKey HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5E9DB64C-AF06- 4110 -8DD6-1A1151C352B2} SUCCESS Access: 0x20019
26 0 . 28705212 explorer.exe: 1956 QueryValue HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5E9DB64C-AF06- 4110 -8DD6-1A1151C352B2}\EnableDHCP SUCCESS 0x0
27 0 . 28706944 explorer.exe: 1956 QueryValue HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5E9DB64C-AF06- 4110 -8DD6-1A1151C352B2}\DhcpServer SUCCESS "255.255.255.255"
28 0 . 28708258 explorer.exe: 1956 QueryValue HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5E9DB64C-AF06- 4110 -8DD6-1A1151C352B2}\DhcpServer SUCCESS "255.255.255.255"
29 0 . 28709570 explorer.exe: 1956 CloseKey HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5E9DB64C-AF06- 4110 -8DD6-1A1151C352B2} SUCCESS
30 0 . 28717366 explorer.exe: 1956 QueryValue HKLM\SYSTEM\ControlSet001\Services\Tcpip\Linkage\Bind BUFFER OVERFLOW
31 0 . 28718454 explorer.exe: 1956 QueryValue HKLM\SYSTEM\ControlSet001\Services\Tcpip\Linkage\Bind BUFFER OVERFLOW
32 0 . 28719601 explorer.exe: 1956 QueryValue HKLM\SYSTEM\ControlSet001\Services\Tcpip\Linkage\Bind SUCCESS "\Device\{A3155166-73B5-4594-B9D5-91F28F831901}"
33 0 . 28733456 explorer.exe: 1956 OpenKey HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A3155166-73B5- 4594 -B9D5-91F28F831901} SUCCESS Access: 0x20019
34 0 . 28734687 explorer.exe: 1956 QueryValue HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A3155166-73B5- 4594 -B9D5-91F28F831901}\EnableDHCP SUCCESS 0x1
35 0 . 28735748 explorer.exe: 1956 QueryValue HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A3155166-73B5- 4594 -B9D5-91F28F831901}\LeaseObtainedTime NOT FOUND
36 0 . 28736782 explorer.exe: 1956 QueryValue HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A3155166-73B5- 4594 -B9D5-91F28F831901}\LeaseTerminatesTime NOT FOUND
37 0 . 28737870 explorer.exe: 1956 QueryValue HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A3155166-73B5- 4594 -B9D5-91F28F831901}\DhcpServer NOT FOUND
38 0 . 28739014 explorer.exe: 1956 CloseKey HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A3155166-73B5- 4594 -B9D5-91F28F831901} SUCCESS
39 0 . 28743345 explorer.exe: 1956 OpenKey HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5E9DB64C-AF06- 4110 -8DD6-1A1151C352B2} SUCCESS Access: 0x20019
40 0 . 28744549 explorer.exe: 1956 QueryValue HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5E9DB64C-AF06- 4110 -8DD6-1A1151C352B2}\EnableDHCP SUCCESS 0x0
41 0 . 28745720 explorer.exe: 1956 QueryValue HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5E9DB64C-AF06- 4110 -8DD6-1A1151C352B2}\DhcpServer SUCCESS "255.255.255.255"
42 0 . 28746867 explorer.exe: 1956 QueryValue HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5E9DB64C-AF06- 4110 -8DD6-1A1151C352B2}\DhcpServer SUCCESS "255.255.255.255"
43 0 . 28748012 explorer.exe: 1956 CloseKey HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5E9DB64C-AF06- 4110 -8DD6-1A1151C352B2} SUCCESS
44 0 . 42674696 explorer.exe: 1956 QueryKey HKCU SUCCESS Name: \REGISTRY\USER\S- 1 - 5 - 21 - 602162358 - 764733703 - 1343024091 -1003_CLASSES
В чем может быть дело??