GMER 1.0.15.15641 - http://www.gmer.net Rootkit scan 2012-09-06 21:33:18 Windows 6.0.6002 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 WDC_WD1600BEVT-22ZCT0 rev.11.01A11 Running: u2mi99j0.exe; Driver: C:\Users\Renata2\AppData\Local\Temp\fwddrpow.sys ---- System - GMER 1.0.15 ---- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwAddBootEntry [0x8C47D202] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateEvent [0x8C47F7F0] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateEventPair [0x8C47F848] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateIoCompletion [0x8C47F95E] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateMutant [0x8C47F746] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateSection [0x8C47F898] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateSemaphore [0x8C47F79A] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateTimer [0x8C47F90C] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwDeleteBootEntry [0x8C47D226] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwLoadDriver [0x8C47CFF0] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwModifyBootEntry [0x8C47D24A] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwNotifyChangeKey [0x8C47FD56] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwNotifyChangeMultipleKeys [0x8C47DCDA] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenEvent [0x8C47F820] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenEventPair [0x8C47F870] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenIoCompletion [0x8C47F988] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenMutant [0x8C47F772] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenSection [0x8C47F8D8] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenSemaphore [0x8C47F7C8] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenTimer [0x8C47F936] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwQueryObject [0x8C47DBA0] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSetBootEntryOrder [0x8C47D26E] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSetBootOptions [0x8C47D292] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSetSystemInformation [0x8C47D04A] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSetSystemPowerState [0x8C47D186] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwShutdownSystem [0x8C47D162] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSystemDebugControl [0x8C47D1AA] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwVdmControl [0x8C47D2B6] ---- Kernel code sections - GMER 1.0.15 ---- .text ntkrnlpa.exe!KeSetEvent + 10D 828B77D0 4 Bytes [02, D2, 47, 8C] .text ntkrnlpa.exe!KeSetEvent + 1D1 828B7894 8 Bytes [F0, F7, 47, 8C, 48, F8, 47, ...] .text ntkrnlpa.exe!KeSetEvent + 1DD 828B78A0 4 Bytes [5E, F9, 47, 8C] .text ntkrnlpa.exe!KeSetEvent + 1F5 828B78B8 4 Bytes [46, F7, 47, 8C] .text ntkrnlpa.exe!KeSetEvent + 215 828B78D8 8 Bytes [98, F8, 47, 8C, 9A, F7, 47, ...] .text ... .text win32k.sys!EngCreateRectRgn + 4537 95CC0490 5 Bytes JMP 8C480440 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!EngCreatePalette + C20 95CD9719 5 Bytes JMP 8C480E0C \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!EngTransparentBlt + 4A1 95CDA505 5 Bytes JMP 8C480F72 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!EngTransparentBlt + 8C2F 95CE2C93 5 Bytes JMP 8C47FD8C \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!XLATEOBJ_iXlate + 616 95CE3BE9 5 Bytes JMP 8C480BD8 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!XFORMOBJ_iGetXform + 30EB 95CEF317 5 Bytes JMP 8C480316 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!XFORMOBJ_iGetXform + 455D 95CF0789 5 Bytes JMP 8C47FF34 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!EngMapFontFileFD + 11A16 95D0A305 5 Bytes JMP 8C480180 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!EngMapFontFileFD + 11A6A 95D0A359 5 Bytes JMP 8C480326 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!EngGradientFill + 377F 95D313BE 5 Bytes JMP 8C480B64 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!EngGradientFill + 60DE 95D33D1D 5 Bytes JMP 8C47FE58 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!EngMulDiv + 4D3F 95D3A66E 5 Bytes JMP 8C47FFA4 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!EngStretchBlt + 2B44 95D44B04 5 Bytes JMP 8C481014 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!EngStrokePath + 5FF 95D479EC 5 Bytes JMP 8C47FE70 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!EngNineGrid + 8C4 95D65F82 5 Bytes JMP 8C480D54 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!EngNineGrid + 6F65 95D6C623 5 Bytes JMP 8C480BAE \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!EngCopyBits + B0F 95D6FDCA 5 Bytes JMP 8C480CA2 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!STROBJ_vEnumStart + 4728 95D776E9 5 Bytes JMP 8C47FEF0 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!EngDeleteSemaphore + E80 95D95C8A 5 Bytes JMP 8C4800AE \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!CLIPOBJ_bEnum + 248 95D9B50A 5 Bytes JMP 8C480008 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!EngPlgBlt + 26D9 95D9F042 5 Bytes JMP 8C480ECA \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!EngLineTo + A15 95DBD55D 5 Bytes JMP 8C48003E \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) .text win32k.sys!EngLineTo + D27F 95DC9DC7 5 Bytes JMP 8C4800E8 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ---- User code sections - GMER 1.0.15 ---- .text C:\Windows\system32\csrss.exe[348] KERNEL32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\wininit.exe[452] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000301F8 .text C:\Windows\system32\wininit.exe[452] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000303FC .text C:\Windows\system32\wininit.exe[452] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\wininit.exe[452] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000503FC .text C:\Windows\system32\wininit.exe[452] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00050600 .text C:\Windows\system32\wininit.exe[452] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00051014 .text C:\Windows\system32\wininit.exe[452] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00050804 .text C:\Windows\system32\wininit.exe[452] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00050A08 .text C:\Windows\system32\wininit.exe[452] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00050C0C .text C:\Windows\system32\wininit.exe[452] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00050E10 .text C:\Windows\system32\wininit.exe[452] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000501F8 .text C:\Windows\system32\wininit.exe[452] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00060600 .text C:\Windows\system32\wininit.exe[452] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00060804 .text C:\Windows\system32\wininit.exe[452] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00060A08 .text C:\Windows\system32\wininit.exe[452] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000601F8 .text C:\Windows\system32\wininit.exe[452] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000603FC .text C:\Windows\system32\csrss.exe[468] KERNEL32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\services.exe[540] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\services.exe[540] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\services.exe[540] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\services.exe[540] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\services.exe[540] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\services.exe[540] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\services.exe[540] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\services.exe[540] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\services.exe[540] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\system32\services.exe[540] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\services.exe[540] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\services.exe[540] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 000C0600 .text C:\Windows\system32\services.exe[540] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 000C0804 .text C:\Windows\system32\services.exe[540] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 000C0A08 .text C:\Windows\system32\services.exe[540] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000C01F8 .text C:\Windows\system32\services.exe[540] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000C03FC .text C:\Windows\system32\lsass.exe[564] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\lsass.exe[564] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\lsass.exe[564] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\lsass.exe[564] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\lsass.exe[564] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\lsass.exe[564] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\lsass.exe[564] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\lsass.exe[564] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\lsass.exe[564] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\system32\lsass.exe[564] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\lsass.exe[564] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\lsass.exe[564] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00080600 .text C:\Windows\system32\lsass.exe[564] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00080804 .text C:\Windows\system32\lsass.exe[564] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00080A08 .text C:\Windows\system32\lsass.exe[564] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000801F8 .text C:\Windows\system32\lsass.exe[564] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000803FC .text C:\Windows\system32\lsm.exe[580] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\lsm.exe[580] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\lsm.exe[580] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\lsm.exe[580] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\lsm.exe[580] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\lsm.exe[580] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\lsm.exe[580] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\lsm.exe[580] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\lsm.exe[580] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\system32\lsm.exe[580] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\lsm.exe[580] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\winlogon.exe[812] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000701F8 .text C:\Windows\system32\winlogon.exe[812] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000703FC .text C:\Windows\system32\winlogon.exe[812] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\winlogon.exe[812] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000903FC .text C:\Windows\system32\winlogon.exe[812] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00090600 .text C:\Windows\system32\winlogon.exe[812] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00091014 .text C:\Windows\system32\winlogon.exe[812] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00090804 .text C:\Windows\system32\winlogon.exe[812] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00090A08 .text C:\Windows\system32\winlogon.exe[812] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00090C0C .text C:\Windows\system32\winlogon.exe[812] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00090E10 .text C:\Windows\system32\winlogon.exe[812] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000901F8 .text C:\Windows\system32\winlogon.exe[812] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 000A0600 .text C:\Windows\system32\winlogon.exe[812] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 000A0804 .text C:\Windows\system32\winlogon.exe[812] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 000A0A08 .text C:\Windows\system32\winlogon.exe[812] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000A01F8 .text C:\Windows\system32\winlogon.exe[812] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000A03FC .text C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe[848] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001501F8 .text C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe[848] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001503FC .text C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe[848] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe[848] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00170600 .text C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe[848] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00170804 .text C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe[848] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00170A08 .text C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe[848] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001701F8 .text C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe[848] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001703FC .text C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe[848] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001803FC .text C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe[848] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00180600 .text C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe[848] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00181014 .text C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe[848] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00180804 .text C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe[848] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00180A08 .text C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe[848] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00180C0C .text C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe[848] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00180E10 .text C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe[848] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001801F8 .text C:\Windows\system32\svchost.exe[964] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\svchost.exe[964] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\svchost.exe[964] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\svchost.exe[964] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\svchost.exe[964] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\svchost.exe[964] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\svchost.exe[964] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\svchost.exe[964] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\svchost.exe[964] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\system32\svchost.exe[964] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\svchost.exe[964] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\svchost.exe[964] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00AB0600 .text C:\Windows\system32\svchost.exe[964] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00AB0804 .text C:\Windows\system32\svchost.exe[964] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00AB0A08 .text C:\Windows\system32\svchost.exe[964] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 00AB01F8 .text C:\Windows\system32\svchost.exe[964] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 00AB03FC .text C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe[1048] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001501F8 .text C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe[1048] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001503FC .text C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe[1048] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe[1048] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001703FC .text C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe[1048] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00170600 .text C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe[1048] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00171014 .text C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe[1048] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00170804 .text C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe[1048] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00170A08 .text C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe[1048] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00170C0C .text C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe[1048] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00170E10 .text C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe[1048] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001701F8 .text C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe[1048] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00180600 .text C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe[1048] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00180804 .text C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe[1048] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00180A08 .text C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe[1048] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001801F8 .text C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe[1048] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001803FC .text C:\Windows\system32\nvvsvc.exe[1084] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001501F8 .text C:\Windows\system32\nvvsvc.exe[1084] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001503FC .text C:\Windows\system32\nvvsvc.exe[1084] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\nvvsvc.exe[1084] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00170600 .text C:\Windows\system32\nvvsvc.exe[1084] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00170804 .text C:\Windows\system32\nvvsvc.exe[1084] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00170A08 .text C:\Windows\system32\nvvsvc.exe[1084] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001701F8 .text C:\Windows\system32\nvvsvc.exe[1084] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001703FC .text C:\Windows\system32\nvvsvc.exe[1084] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001803FC .text C:\Windows\system32\nvvsvc.exe[1084] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00180600 .text C:\Windows\system32\nvvsvc.exe[1084] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00181014 .text C:\Windows\system32\nvvsvc.exe[1084] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00180804 .text C:\Windows\system32\nvvsvc.exe[1084] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00180A08 .text C:\Windows\system32\nvvsvc.exe[1084] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00180C0C .text C:\Windows\system32\nvvsvc.exe[1084] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00180E10 .text C:\Windows\system32\nvvsvc.exe[1084] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001801F8 .text C:\Windows\system32\svchost.exe[1140] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\svchost.exe[1140] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\svchost.exe[1140] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\svchost.exe[1140] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\svchost.exe[1140] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\svchost.exe[1140] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\svchost.exe[1140] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\svchost.exe[1140] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\svchost.exe[1140] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\system32\svchost.exe[1140] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\svchost.exe[1140] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\svchost.exe[1140] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00130600 .text C:\Windows\system32\svchost.exe[1140] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00130804 .text C:\Windows\system32\svchost.exe[1140] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00130A08 .text C:\Windows\system32\svchost.exe[1140] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001301F8 .text C:\Windows\system32\svchost.exe[1140] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001303FC .text C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe[1168] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001501F8 .text C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe[1168] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001503FC .text C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe[1168] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe[1168] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00170600 .text C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe[1168] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00170804 .text C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe[1168] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00170A08 .text C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe[1168] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001701F8 .text C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe[1168] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001703FC .text C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe[1168] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001803FC .text C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe[1168] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00180600 .text C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe[1168] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00181014 .text C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe[1168] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00180804 .text C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe[1168] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00180A08 .text C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe[1168] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00180C0C .text C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe[1168] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00180E10 .text C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe[1168] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001801F8 .text C:\Windows\System32\svchost.exe[1252] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\System32\svchost.exe[1252] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\System32\svchost.exe[1252] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\System32\svchost.exe[1252] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\System32\svchost.exe[1252] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\System32\svchost.exe[1252] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\System32\svchost.exe[1252] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\System32\svchost.exe[1252] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\System32\svchost.exe[1252] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\System32\svchost.exe[1252] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\System32\svchost.exe[1252] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\System32\svchost.exe[1252] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 002B0600 .text C:\Windows\System32\svchost.exe[1252] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 002B0804 .text C:\Windows\System32\svchost.exe[1252] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 002B0A08 .text C:\Windows\System32\svchost.exe[1252] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 002B01F8 .text C:\Windows\System32\svchost.exe[1252] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 002B03FC .text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1336] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001501F8 .text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1336] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001503FC .text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1336] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1336] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00170600 .text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1336] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00170804 .text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1336] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00170A08 .text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1336] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001701F8 .text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1336] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001703FC .text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1336] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001803FC .text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1336] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00180600 .text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1336] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00181014 .text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1336] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00180804 .text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1336] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00180A08 .text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1336] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00180C0C .text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1336] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00180E10 .text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1336] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001801F8 .text C:\Windows\System32\svchost.exe[1380] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\System32\svchost.exe[1380] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\System32\svchost.exe[1380] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\System32\svchost.exe[1380] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\System32\svchost.exe[1380] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\System32\svchost.exe[1380] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\System32\svchost.exe[1380] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\System32\svchost.exe[1380] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\System32\svchost.exe[1380] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\System32\svchost.exe[1380] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\System32\svchost.exe[1380] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\System32\svchost.exe[1380] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00210600 .text C:\Windows\System32\svchost.exe[1380] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00210804 .text C:\Windows\System32\svchost.exe[1380] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00210A08 .text C:\Windows\System32\svchost.exe[1380] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 002101F8 .text C:\Windows\System32\svchost.exe[1380] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 002103FC .text C:\Windows\System32\svchost.exe[1452] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\System32\svchost.exe[1452] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\System32\svchost.exe[1452] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\System32\svchost.exe[1452] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\System32\svchost.exe[1452] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\System32\svchost.exe[1452] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\System32\svchost.exe[1452] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\System32\svchost.exe[1452] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\System32\svchost.exe[1452] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\System32\svchost.exe[1452] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\System32\svchost.exe[1452] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\System32\svchost.exe[1452] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00CD0600 .text C:\Windows\System32\svchost.exe[1452] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00CD0804 .text C:\Windows\System32\svchost.exe[1452] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00CD0A08 .text C:\Windows\System32\svchost.exe[1452] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 00CD01F8 .text C:\Windows\System32\svchost.exe[1452] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 00CD03FC .text C:\Windows\system32\svchost.exe[1476] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\svchost.exe[1476] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\svchost.exe[1476] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\svchost.exe[1476] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\svchost.exe[1476] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\svchost.exe[1476] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\svchost.exe[1476] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\svchost.exe[1476] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\svchost.exe[1476] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\system32\svchost.exe[1476] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\svchost.exe[1476] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\svchost.exe[1476] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00A00600 .text C:\Windows\system32\svchost.exe[1476] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00A00804 .text C:\Windows\system32\svchost.exe[1476] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00A00A08 .text C:\Windows\system32\svchost.exe[1476] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 00A001F8 .text C:\Windows\system32\svchost.exe[1476] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 00A003FC .text C:\Windows\system32\AUDIODG.EXE[1740] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\svchost.exe[1788] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\svchost.exe[1788] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\svchost.exe[1788] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\svchost.exe[1788] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\svchost.exe[1788] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\svchost.exe[1788] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\svchost.exe[1788] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\svchost.exe[1788] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\svchost.exe[1788] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\system32\svchost.exe[1788] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\svchost.exe[1788] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\svchost.exe[1924] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\svchost.exe[1924] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\svchost.exe[1924] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\svchost.exe[1924] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\svchost.exe[1924] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\svchost.exe[1924] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\svchost.exe[1924] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\svchost.exe[1924] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\svchost.exe[1924] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\system32\svchost.exe[1924] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\svchost.exe[1924] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\svchost.exe[1924] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00CE0600 .text C:\Windows\system32\svchost.exe[1924] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00CE0804 .text C:\Windows\system32\svchost.exe[1924] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00CE0A08 .text C:\Windows\system32\svchost.exe[1924] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 00CE01F8 .text C:\Windows\system32\svchost.exe[1924] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 00CE03FC .text C:\Windows\system32\nvvsvc.exe[2044] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001501F8 .text C:\Windows\system32\nvvsvc.exe[2044] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001503FC .text C:\Windows\system32\nvvsvc.exe[2044] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\nvvsvc.exe[2044] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00170600 .text C:\Windows\system32\nvvsvc.exe[2044] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00170804 .text C:\Windows\system32\nvvsvc.exe[2044] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00170A08 .text C:\Windows\system32\nvvsvc.exe[2044] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001701F8 .text C:\Windows\system32\nvvsvc.exe[2044] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001703FC .text C:\Windows\system32\nvvsvc.exe[2044] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001803FC .text C:\Windows\system32\nvvsvc.exe[2044] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00180600 .text C:\Windows\system32\nvvsvc.exe[2044] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00181014 .text C:\Windows\system32\nvvsvc.exe[2044] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00180804 .text C:\Windows\system32\nvvsvc.exe[2044] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00180A08 .text C:\Windows\system32\nvvsvc.exe[2044] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00180C0C .text C:\Windows\system32\nvvsvc.exe[2044] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00180E10 .text C:\Windows\system32\nvvsvc.exe[2044] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001801F8 .text C:\Windows\system32\svchost.exe[2412] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\svchost.exe[2412] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\svchost.exe[2412] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\svchost.exe[2412] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\svchost.exe[2412] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\svchost.exe[2412] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\svchost.exe[2412] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\svchost.exe[2412] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\svchost.exe[2412] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\system32\svchost.exe[2412] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\svchost.exe[2412] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\svchost.exe[2412] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 002A0600 .text C:\Windows\system32\svchost.exe[2412] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 002A0804 .text C:\Windows\system32\svchost.exe[2412] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 002A0A08 .text C:\Windows\system32\svchost.exe[2412] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 002A01F8 .text C:\Windows\system32\svchost.exe[2412] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 002A03FC .text C:\Program Files\AVAST Software\Avast\AvastSvc.exe[2868] kernel32.dll!SetUnhandledExceptionFilter 7675A8C5 4 Bytes [C2, 04, 00, 90] {RET 0x4; NOP } .text C:\Program Files\AVAST Software\Avast\AvastSvc.exe[2868] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\Dwm.exe[3012] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\Dwm.exe[3012] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\Dwm.exe[3012] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\Dwm.exe[3012] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\Dwm.exe[3012] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\Dwm.exe[3012] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\Dwm.exe[3012] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\Dwm.exe[3012] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\Dwm.exe[3012] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\system32\Dwm.exe[3012] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\Dwm.exe[3012] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\Dwm.exe[3012] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00080600 .text C:\Windows\system32\Dwm.exe[3012] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00080804 .text C:\Windows\system32\Dwm.exe[3012] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00080A08 .text C:\Windows\system32\Dwm.exe[3012] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000801F8 .text C:\Windows\system32\Dwm.exe[3012] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000803FC .text C:\Windows\Explorer.EXE[3060] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\Explorer.EXE[3060] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\Explorer.EXE[3060] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\Explorer.EXE[3060] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\Explorer.EXE[3060] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\Explorer.EXE[3060] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\Explorer.EXE[3060] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\Explorer.EXE[3060] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\Explorer.EXE[3060] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\Explorer.EXE[3060] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\Explorer.EXE[3060] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\Explorer.EXE[3060] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00080600 .text C:\Windows\Explorer.EXE[3060] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00080804 .text C:\Windows\Explorer.EXE[3060] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00080A08 .text C:\Windows\Explorer.EXE[3060] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000801F8 .text C:\Windows\Explorer.EXE[3060] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000803FC .text C:\Windows\system32\taskeng.exe[3524] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\taskeng.exe[3524] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\taskeng.exe[3524] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\taskeng.exe[3524] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\taskeng.exe[3524] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\taskeng.exe[3524] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\taskeng.exe[3524] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\taskeng.exe[3524] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\taskeng.exe[3524] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\system32\taskeng.exe[3524] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\taskeng.exe[3524] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\taskeng.exe[3524] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00080600 .text C:\Windows\system32\taskeng.exe[3524] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00080804 .text C:\Windows\system32\taskeng.exe[3524] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00080A08 .text C:\Windows\system32\taskeng.exe[3524] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000801F8 .text C:\Windows\system32\taskeng.exe[3524] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000803FC .text C:\Windows\system32\taskeng.exe[3612] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000901F8 .text C:\Windows\system32\taskeng.exe[3612] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000903FC .text C:\Windows\system32\taskeng.exe[3612] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\taskeng.exe[3612] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000B03FC .text C:\Windows\system32\taskeng.exe[3612] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 000B0600 .text C:\Windows\system32\taskeng.exe[3612] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 000B1014 .text C:\Windows\system32\taskeng.exe[3612] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 000B0804 .text C:\Windows\system32\taskeng.exe[3612] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 000B0A08 .text C:\Windows\system32\taskeng.exe[3612] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 000B0C0C .text C:\Windows\system32\taskeng.exe[3612] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 000B0E10 .text C:\Windows\system32\taskeng.exe[3612] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000B01F8 .text C:\Windows\system32\taskeng.exe[3612] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 000C0600 .text C:\Windows\system32\taskeng.exe[3612] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 000C0804 .text C:\Windows\system32\taskeng.exe[3612] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 000C0A08 .text C:\Windows\system32\taskeng.exe[3612] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000C01F8 .text C:\Windows\system32\taskeng.exe[3612] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000C03FC .text C:\Windows\System32\spoolsv.exe[3908] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\System32\spoolsv.exe[3908] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\System32\spoolsv.exe[3908] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\System32\spoolsv.exe[3908] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\System32\spoolsv.exe[3908] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\System32\spoolsv.exe[3908] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\System32\spoolsv.exe[3908] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\System32\spoolsv.exe[3908] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\System32\spoolsv.exe[3908] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\System32\spoolsv.exe[3908] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\System32\spoolsv.exe[3908] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\System32\spoolsv.exe[3908] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 000D0600 .text C:\Windows\System32\spoolsv.exe[3908] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 000D0804 .text C:\Windows\System32\spoolsv.exe[3908] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 000D0A08 .text C:\Windows\System32\spoolsv.exe[3908] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000D01F8 .text C:\Windows\System32\spoolsv.exe[3908] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000D03FC .text C:\Program Files\Windows Defender\MSASCui.exe[3940] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Program Files\Windows Defender\MSASCui.exe[3940] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Program Files\Windows Defender\MSASCui.exe[3940] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\Windows Defender\MSASCui.exe[3940] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Program Files\Windows Defender\MSASCui.exe[3940] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Program Files\Windows Defender\MSASCui.exe[3940] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Program Files\Windows Defender\MSASCui.exe[3940] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Program Files\Windows Defender\MSASCui.exe[3940] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Program Files\Windows Defender\MSASCui.exe[3940] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Program Files\Windows Defender\MSASCui.exe[3940] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Program Files\Windows Defender\MSASCui.exe[3940] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Program Files\Windows Defender\MSASCui.exe[3940] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00090600 .text C:\Program Files\Windows Defender\MSASCui.exe[3940] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00090804 .text C:\Program Files\Windows Defender\MSASCui.exe[3940] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00090A08 .text C:\Program Files\Windows Defender\MSASCui.exe[3940] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000901F8 .text C:\Program Files\Windows Defender\MSASCui.exe[3940] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000903FC .text C:\Windows\system32\svchost.exe[4028] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\svchost.exe[4028] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\svchost.exe[4028] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\svchost.exe[4028] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\svchost.exe[4028] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\svchost.exe[4028] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\svchost.exe[4028] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\svchost.exe[4028] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\svchost.exe[4028] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\system32\svchost.exe[4028] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\svchost.exe[4028] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\svchost.exe[4028] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00210600 .text C:\Windows\system32\svchost.exe[4028] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00210804 .text C:\Windows\system32\svchost.exe[4028] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00210A08 .text C:\Windows\system32\svchost.exe[4028] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 002101F8 .text C:\Windows\system32\svchost.exe[4028] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 002103FC .text C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe[4220] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001501F8 .text C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe[4220] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001503FC .text C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe[4220] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe[4220] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001703FC .text C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe[4220] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00170600 .text C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe[4220] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00171014 .text C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe[4220] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00170804 .text C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe[4220] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00170A08 .text C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe[4220] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00170C0C .text C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe[4220] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00170E10 .text C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe[4220] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001701F8 .text C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe[4220] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00180600 .text C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe[4220] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00180804 .text C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe[4220] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00180A08 .text C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe[4220] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001801F8 .text C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe[4220] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001803FC .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[4240] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001401F8 .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[4240] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001403FC .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[4240] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[4240] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00160600 .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[4240] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00160804 .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[4240] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00160A08 .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[4240] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001601F8 .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[4240] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001603FC .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[4240] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001803FC .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[4240] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00180600 .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[4240] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00181014 .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[4240] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00180804 .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[4240] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00180A08 .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[4240] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00180C0C .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[4240] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00180E10 .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[4240] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001801F8 .text C:\Program Files\FSC\Wireless Utility\Wireless Selector.exe[4264] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001501F8 .text C:\Program Files\FSC\Wireless Utility\Wireless Selector.exe[4264] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001503FC .text C:\Program Files\FSC\Wireless Utility\Wireless Selector.exe[4264] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\FSC\Wireless Utility\Wireless Selector.exe[4264] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001703FC .text C:\Program Files\FSC\Wireless Utility\Wireless Selector.exe[4264] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00170600 .text C:\Program Files\FSC\Wireless Utility\Wireless Selector.exe[4264] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00171014 .text C:\Program Files\FSC\Wireless Utility\Wireless Selector.exe[4264] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00170804 .text C:\Program Files\FSC\Wireless Utility\Wireless Selector.exe[4264] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00170A08 .text C:\Program Files\FSC\Wireless Utility\Wireless Selector.exe[4264] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00170C0C .text C:\Program Files\FSC\Wireless Utility\Wireless Selector.exe[4264] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00170E10 .text C:\Program Files\FSC\Wireless Utility\Wireless Selector.exe[4264] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001701F8 .text C:\Program Files\FSC\Wireless Utility\Wireless Selector.exe[4264] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00180600 .text C:\Program Files\FSC\Wireless Utility\Wireless Selector.exe[4264] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00180804 .text C:\Program Files\FSC\Wireless Utility\Wireless Selector.exe[4264] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00180A08 .text C:\Program Files\FSC\Wireless Utility\Wireless Selector.exe[4264] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001801F8 .text C:\Program Files\FSC\Wireless Utility\Wireless Selector.exe[4264] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001803FC .text C:\Windows\RtHDVCpl.exe[4408] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001501F8 .text C:\Windows\RtHDVCpl.exe[4408] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001503FC .text C:\Windows\RtHDVCpl.exe[4408] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\RtHDVCpl.exe[4408] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001703FC .text C:\Windows\RtHDVCpl.exe[4408] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00170600 .text C:\Windows\RtHDVCpl.exe[4408] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00171014 .text C:\Windows\RtHDVCpl.exe[4408] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00170804 .text C:\Windows\RtHDVCpl.exe[4408] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00170A08 .text C:\Windows\RtHDVCpl.exe[4408] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00170C0C .text C:\Windows\RtHDVCpl.exe[4408] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00170E10 .text C:\Windows\RtHDVCpl.exe[4408] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001701F8 .text C:\Windows\RtHDVCpl.exe[4408] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00180600 .text C:\Windows\RtHDVCpl.exe[4408] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00180804 .text C:\Windows\RtHDVCpl.exe[4408] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00180A08 .text C:\Windows\RtHDVCpl.exe[4408] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001801F8 .text C:\Windows\RtHDVCpl.exe[4408] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001803FC .text C:\Windows\system32\svchost.exe[4472] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\svchost.exe[4472] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\svchost.exe[4472] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\svchost.exe[4472] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\svchost.exe[4472] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\svchost.exe[4472] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\svchost.exe[4472] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\svchost.exe[4472] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\svchost.exe[4472] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\system32\svchost.exe[4472] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\svchost.exe[4472] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\svchost.exe[4472] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00DF0600 .text C:\Windows\system32\svchost.exe[4472] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00DF0804 .text C:\Windows\system32\svchost.exe[4472] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00DF0A08 .text C:\Windows\system32\svchost.exe[4472] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 00DF01F8 .text C:\Windows\system32\svchost.exe[4472] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 00DF03FC .text C:\Windows\System32\svchost.exe[4536] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000901F8 .text C:\Windows\System32\svchost.exe[4536] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000903FC .text C:\Windows\System32\svchost.exe[4536] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\System32\svchost.exe[4536] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000B03FC .text C:\Windows\System32\svchost.exe[4536] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 000B0600 .text C:\Windows\System32\svchost.exe[4536] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 000B1014 .text C:\Windows\System32\svchost.exe[4536] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 000B0804 .text C:\Windows\System32\svchost.exe[4536] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 000B0A08 .text C:\Windows\System32\svchost.exe[4536] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 000B0C0C .text C:\Windows\System32\svchost.exe[4536] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 000B0E10 .text C:\Windows\System32\svchost.exe[4536] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000B01F8 .text C:\Windows\System32\svchost.exe[4536] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 001E0600 .text C:\Windows\System32\svchost.exe[4536] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 001E0804 .text C:\Windows\System32\svchost.exe[4536] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 001E0A08 .text C:\Windows\System32\svchost.exe[4536] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001E01F8 .text C:\Windows\System32\svchost.exe[4536] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001E03FC .text C:\Windows\System32\svchost.exe[4584] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\System32\svchost.exe[4584] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\System32\svchost.exe[4584] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\System32\svchost.exe[4584] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\System32\svchost.exe[4584] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\System32\svchost.exe[4584] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\System32\svchost.exe[4584] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\System32\svchost.exe[4584] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\System32\svchost.exe[4584] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\System32\svchost.exe[4584] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\System32\svchost.exe[4584] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\svchost.exe[4616] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\svchost.exe[4616] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\svchost.exe[4616] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\svchost.exe[4616] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000B03FC .text C:\Windows\system32\svchost.exe[4616] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 000B0600 .text C:\Windows\system32\svchost.exe[4616] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 000B1014 .text C:\Windows\system32\svchost.exe[4616] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 000B0804 .text C:\Windows\system32\svchost.exe[4616] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 000B0A08 .text C:\Windows\system32\svchost.exe[4616] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 000B0C0C .text C:\Windows\system32\svchost.exe[4616] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 000B0E10 .text C:\Windows\system32\svchost.exe[4616] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000B01F8 .text C:\Windows\system32\svchost.exe[4616] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00140600 .text C:\Windows\system32\svchost.exe[4616] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00140804 .text C:\Windows\system32\svchost.exe[4616] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00140A08 .text C:\Windows\system32\svchost.exe[4616] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001401F8 .text C:\Windows\system32\svchost.exe[4616] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001403FC .text C:\Windows\system32\svchost.exe[4672] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\svchost.exe[4672] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\svchost.exe[4672] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\svchost.exe[4672] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\svchost.exe[4672] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\svchost.exe[4672] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\svchost.exe[4672] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\svchost.exe[4672] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\svchost.exe[4672] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\system32\svchost.exe[4672] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\svchost.exe[4672] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe[4720] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001501F8 .text C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe[4720] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001503FC .text C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe[4720] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe[4720] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00180600 .text C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe[4720] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00180804 .text C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe[4720] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00180A08 .text C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe[4720] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001801F8 .text C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe[4720] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001803FC .text C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe[4720] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001903FC .text C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe[4720] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00190600 .text C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe[4720] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00191014 .text C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe[4720] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00190804 .text C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe[4720] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00190A08 .text C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe[4720] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00190C0C .text C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe[4720] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00190E10 .text C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe[4720] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001901F8 .text C:\Windows\System32\svchost.exe[4952] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\System32\svchost.exe[4952] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\System32\svchost.exe[4952] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\System32\svchost.exe[4952] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\System32\svchost.exe[4952] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\System32\svchost.exe[4952] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\System32\svchost.exe[4952] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\System32\svchost.exe[4952] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\System32\svchost.exe[4952] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\System32\svchost.exe[4952] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\System32\svchost.exe[4952] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[5512] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[5512] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[5512] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[5512] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000803FC .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[5512] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00080600 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[5512] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00081014 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[5512] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00080804 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[5512] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00080A08 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[5512] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00080C0C .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[5512] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00080E10 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[5512] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000801F8 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[5512] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00090600 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[5512] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00090804 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[5512] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00090A08 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[5512] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000901F8 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[5512] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000903FC .text C:\Program Files\AVAST Software\Avast\AvastUI.exe[5552] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\SearchIndexer.exe[5624] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\SearchIndexer.exe[5624] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\SearchIndexer.exe[5624] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\SearchIndexer.exe[5624] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\SearchIndexer.exe[5624] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\SearchIndexer.exe[5624] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\SearchIndexer.exe[5624] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\SearchIndexer.exe[5624] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\SearchIndexer.exe[5624] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\system32\SearchIndexer.exe[5624] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\SearchIndexer.exe[5624] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\SearchIndexer.exe[5624] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00080600 .text C:\Windows\system32\SearchIndexer.exe[5624] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00080804 .text C:\Windows\system32\SearchIndexer.exe[5624] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00080A08 .text C:\Windows\system32\SearchIndexer.exe[5624] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000801F8 .text C:\Windows\system32\SearchIndexer.exe[5624] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000803FC .text C:\Users\Renata2\Desktop\u2mi99j0.exe[5708] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001501F8 .text C:\Users\Renata2\Desktop\u2mi99j0.exe[5708] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001503FC .text C:\Users\Renata2\Desktop\u2mi99j0.exe[5708] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Users\Renata2\Desktop\u2mi99j0.exe[5708] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001E03FC .text C:\Users\Renata2\Desktop\u2mi99j0.exe[5708] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 001E0600 .text C:\Users\Renata2\Desktop\u2mi99j0.exe[5708] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 001E1014 .text C:\Users\Renata2\Desktop\u2mi99j0.exe[5708] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 001E0804 .text C:\Users\Renata2\Desktop\u2mi99j0.exe[5708] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 001E0A08 .text C:\Users\Renata2\Desktop\u2mi99j0.exe[5708] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 001E0C0C .text C:\Users\Renata2\Desktop\u2mi99j0.exe[5708] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 001E0E10 .text C:\Users\Renata2\Desktop\u2mi99j0.exe[5708] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001E01F8 .text C:\Users\Renata2\Desktop\u2mi99j0.exe[5708] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 001F0600 .text C:\Users\Renata2\Desktop\u2mi99j0.exe[5708] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 001F0804 .text C:\Users\Renata2\Desktop\u2mi99j0.exe[5708] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 001F0A08 .text C:\Users\Renata2\Desktop\u2mi99j0.exe[5708] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001F01F8 .text C:\Users\Renata2\Desktop\u2mi99j0.exe[5708] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001F03FC .text C:\Program Files\Internet Explorer\iexplore.exe[5752] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000401F8 .text C:\Program Files\Internet Explorer\iexplore.exe[5752] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000403FC .text C:\Program Files\Internet Explorer\iexplore.exe[5752] kernel32.dll!CreateThread 7677CB2E 5 Bytes JMP 700575E3 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\Internet Explorer\iexplore.exe[5752] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000603FC .text C:\Program Files\Internet Explorer\iexplore.exe[5752] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00060600 .text C:\Program Files\Internet Explorer\iexplore.exe[5752] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00061014 .text C:\Program Files\Internet Explorer\iexplore.exe[5752] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00060804 .text C:\Program Files\Internet Explorer\iexplore.exe[5752] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00060A08 .text C:\Program Files\Internet Explorer\iexplore.exe[5752] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00060C0C .text C:\Program Files\Internet Explorer\iexplore.exe[5752] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00060E10 .text C:\Program Files\Internet Explorer\iexplore.exe[5752] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000601F8 .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00070600 .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!CreateDialogParamW 765E72A2 5 Bytes JMP 701E9250 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!GetAsyncKeyState 765E863C 5 Bytes JMP 7003DEDD C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 700925B4 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!CallNextHookEx 765E8E3B 5 Bytes JMP 700B7FDF C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 700DECE0 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000701F8 .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000703FC .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!EnableWindow 765ECD8B 5 Bytes JMP 70099EB4 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!DefWindowProcA 765EDB88 7 Bytes JMP 7005980D C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!CreateWindowExA 765EDC2A 5 Bytes JMP 70063643 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!CreateWindowExW 765F1305 5 Bytes JMP 700C03B7 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!GetKeyState 765F8CB1 5 Bytes JMP 7003DDB3 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!DefWindowProcW 766003B4 7 Bytes JMP 700B8042 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!IsDialogMessageW 76600745 5 Bytes JMP 701E99AA C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!CreateDialogParamA 766017AA 5 Bytes JMP 701E9218 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!IsDialogMessage 76601847 5 Bytes JMP 701E9982 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!CreateDialogIndirectParamA 766026F1 5 Bytes JMP 701E9288 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!CreateDialogIndirectParamW 76609A62 5 Bytes JMP 701E92C0 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!SetKeyboardState 76610987 5 Bytes JMP 701EA273 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!DialogBoxParamW 766110B0 5 Bytes JMP 6FFF1893 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!DialogBoxIndirectParamW 76612EF5 5 Bytes JMP 701E8EE6 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!SendInput 76612F75 5 Bytes JMP 701EA21B C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!EndDialog 7661326E 5 Bytes JMP 701E9C56 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!SetCursorPos 76626FB2 5 Bytes JMP 701EA2F4 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!DialogBoxParamA 76628152 5 Bytes JMP 701E8E81 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!DialogBoxIndirectParamA 7662847D 5 Bytes JMP 701E8F4B C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!MessageBoxIndirectA 7663D4D9 5 Bytes JMP 701E8E08 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!MessageBoxIndirectW 7663D5D3 5 Bytes JMP 701E8D8F C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!MessageBoxExA 7663D639 5 Bytes JMP 701E8D2B C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!MessageBoxExW 7663D65D 5 Bytes JMP 701E8CC7 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] USER32.dll!keybd_event 7663D972 5 Bytes JMP 701EA1D8 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5752] SHELL32.dll!SHRestricted + D95 768989A8 4 Bytes [CF, 01, 92, 69] .text C:\Program Files\Internet Explorer\iexplore.exe[5752] SHELL32.dll!SHRestricted + D9D 768989B0 8 Bytes [E0, 61, 91, 69, 79, F7, 91, ...] .text C:\Program Files\Internet Explorer\iexplore.exe[5752] ole32.dll!OleLoadFromStream 77AD1E80 5 Bytes JMP 701E96B4 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe[5788] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000601F8 .text C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe[5788] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000603FC .text C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe[5788] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe[5788] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00070600 .text C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe[5788] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00070804 .text C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe[5788] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00070A08 .text C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe[5788] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000701F8 .text C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe[5788] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000703FC .text C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe[5788] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000803FC .text C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe[5788] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00080600 .text C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe[5788] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00081014 .text C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe[5788] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00080804 .text C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe[5788] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00080A08 .text C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe[5788] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00080C0C .text C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe[5788] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00080E10 .text C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe[5788] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000801F8 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[5912] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001501F8 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[5912] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001503FC .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[5912] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[5912] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00190600 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[5912] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00190804 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[5912] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00190A08 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[5912] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001901F8 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[5912] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001903FC .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[5912] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001A03FC .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[5912] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 001A0600 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[5912] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 001A1014 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[5912] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 001A0804 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[5912] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 001A0A08 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[5912] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 001A0C0C .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[5912] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 001A0E10 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[5912] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001A01F8 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[5960] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[5960] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[5960] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[5960] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[5960] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[5960] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[5960] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[5960] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[5960] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[5960] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[5960] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[5960] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00080600 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[5960] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00080804 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[5960] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00080A08 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[5960] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000801F8 .text C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[5960] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000803FC .text C:\Program Files\Internet Explorer\iexplore.exe[6052] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000401F8 .text C:\Program Files\Internet Explorer\iexplore.exe[6052] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000403FC .text C:\Program Files\Internet Explorer\iexplore.exe[6052] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\Internet Explorer\iexplore.exe[6052] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000603FC .text C:\Program Files\Internet Explorer\iexplore.exe[6052] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00060600 .text C:\Program Files\Internet Explorer\iexplore.exe[6052] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00061014 .text C:\Program Files\Internet Explorer\iexplore.exe[6052] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00060804 .text C:\Program Files\Internet Explorer\iexplore.exe[6052] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00060A08 .text C:\Program Files\Internet Explorer\iexplore.exe[6052] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00060C0C .text C:\Program Files\Internet Explorer\iexplore.exe[6052] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00060E10 .text C:\Program Files\Internet Explorer\iexplore.exe[6052] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000601F8 .text C:\Program Files\Internet Explorer\iexplore.exe[6052] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00070600 .text C:\Program Files\Internet Explorer\iexplore.exe[6052] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00070804 .text C:\Program Files\Internet Explorer\iexplore.exe[6052] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00070A08 .text C:\Program Files\Internet Explorer\iexplore.exe[6052] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000701F8 .text C:\Program Files\Internet Explorer\iexplore.exe[6052] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000703FC .text C:\Program Files\Internet Explorer\iexplore.exe[6052] USER32.dll!EnableWindow 765ECD8B 5 Bytes JMP 70099EB4 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6052] USER32.dll!DialogBoxParamW 766110B0 5 Bytes JMP 6FFF1893 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6052] USER32.dll!DialogBoxIndirectParamW 76612EF5 5 Bytes JMP 701E8EE6 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6052] USER32.dll!DialogBoxParamA 76628152 5 Bytes JMP 701E8E81 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6052] USER32.dll!DialogBoxIndirectParamA 7662847D 5 Bytes JMP 701E8F4B C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6052] USER32.dll!MessageBoxIndirectA 7663D4D9 5 Bytes JMP 701E8E08 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6052] USER32.dll!MessageBoxIndirectW 7663D5D3 5 Bytes JMP 701E8D8F C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6052] USER32.dll!MessageBoxExA 7663D639 5 Bytes JMP 701E8D2B C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6052] USER32.dll!MessageBoxExW 7663D65D 5 Bytes JMP 701E8CC7 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Windows\system32\svchost.exe[6088] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\svchost.exe[6088] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\svchost.exe[6088] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\svchost.exe[6088] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\svchost.exe[6088] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\svchost.exe[6088] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\svchost.exe[6088] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\svchost.exe[6088] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\svchost.exe[6088] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\system32\svchost.exe[6088] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\svchost.exe[6088] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\svchost.exe[6088] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00180600 .text C:\Windows\system32\svchost.exe[6088] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00180804 .text C:\Windows\system32\svchost.exe[6088] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00180A08 .text C:\Windows\system32\svchost.exe[6088] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001801F8 .text C:\Windows\system32\svchost.exe[6088] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001803FC .text C:\Program Files\Internet Explorer\iexplore.exe[6168] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000401F8 .text C:\Program Files\Internet Explorer\iexplore.exe[6168] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000403FC .text C:\Program Files\Internet Explorer\iexplore.exe[6168] kernel32.dll!CreateThread 7677CB2E 5 Bytes JMP 700575E3 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\Internet Explorer\iexplore.exe[6168] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001603FC .text C:\Program Files\Internet Explorer\iexplore.exe[6168] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00160600 .text C:\Program Files\Internet Explorer\iexplore.exe[6168] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00161014 .text C:\Program Files\Internet Explorer\iexplore.exe[6168] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00160804 .text C:\Program Files\Internet Explorer\iexplore.exe[6168] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00160A08 .text C:\Program Files\Internet Explorer\iexplore.exe[6168] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00160C0C .text C:\Program Files\Internet Explorer\iexplore.exe[6168] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00160E10 .text C:\Program Files\Internet Explorer\iexplore.exe[6168] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001601F8 .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00170600 .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!CreateDialogParamW 765E72A2 5 Bytes JMP 701E9250 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!GetAsyncKeyState 765E863C 5 Bytes JMP 7003DEDD C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 700925B4 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!CallNextHookEx 765E8E3B 5 Bytes JMP 700B7FDF C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 700DECE0 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001701F8 .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001703FC .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!EnableWindow 765ECD8B 5 Bytes JMP 70099EB4 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!DefWindowProcA 765EDB88 7 Bytes JMP 7005980D C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!CreateWindowExA 765EDC2A 5 Bytes JMP 70063643 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!CreateWindowExW 765F1305 5 Bytes JMP 700C03B7 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!GetKeyState 765F8CB1 5 Bytes JMP 7003DDB3 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!DefWindowProcW 766003B4 7 Bytes JMP 700B8042 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!IsDialogMessageW 76600745 5 Bytes JMP 701E99AA C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!CreateDialogParamA 766017AA 5 Bytes JMP 701E9218 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!IsDialogMessage 76601847 5 Bytes JMP 701E9982 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!CreateDialogIndirectParamA 766026F1 5 Bytes JMP 701E9288 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!CreateDialogIndirectParamW 76609A62 5 Bytes JMP 701E92C0 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!SetKeyboardState 76610987 5 Bytes JMP 701EA273 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!DialogBoxParamW 766110B0 5 Bytes JMP 6FFF1893 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!DialogBoxIndirectParamW 76612EF5 5 Bytes JMP 701E8EE6 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!SendInput 76612F75 5 Bytes JMP 701EA21B C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!EndDialog 7661326E 5 Bytes JMP 701E9C56 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!SetCursorPos 76626FB2 5 Bytes JMP 701EA2F4 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!DialogBoxParamA 76628152 5 Bytes JMP 701E8E81 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!DialogBoxIndirectParamA 7662847D 5 Bytes JMP 701E8F4B C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!MessageBoxIndirectA 7663D4D9 5 Bytes JMP 701E8E08 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!MessageBoxIndirectW 7663D5D3 5 Bytes JMP 701E8D8F C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!MessageBoxExA 7663D639 5 Bytes JMP 701E8D2B C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!MessageBoxExW 7663D65D 5 Bytes JMP 701E8CC7 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] USER32.dll!keybd_event 7663D972 5 Bytes JMP 701EA1D8 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[6168] SHELL32.dll!SHRestricted + D95 768989A8 4 Bytes [CF, 01, 92, 69] .text C:\Program Files\Internet Explorer\iexplore.exe[6168] SHELL32.dll!SHRestricted + D9D 768989B0 8 Bytes [E0, 61, 91, 69, 79, F7, 91, ...] .text C:\Program Files\Internet Explorer\iexplore.exe[6168] ole32.dll!OleLoadFromStream 77AD1E80 5 Bytes JMP 701E96B4 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\HP\HP Software Update\hpwuschd2.exe[6308] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001501F8 .text C:\Program Files\HP\HP Software Update\hpwuschd2.exe[6308] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001503FC .text C:\Program Files\HP\HP Software Update\hpwuschd2.exe[6308] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\HP\HP Software Update\hpwuschd2.exe[6308] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00170600 .text C:\Program Files\HP\HP Software Update\hpwuschd2.exe[6308] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00170804 .text C:\Program Files\HP\HP Software Update\hpwuschd2.exe[6308] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00170A08 .text C:\Program Files\HP\HP Software Update\hpwuschd2.exe[6308] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001701F8 .text C:\Program Files\HP\HP Software Update\hpwuschd2.exe[6308] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001703FC .text C:\Program Files\HP\HP Software Update\hpwuschd2.exe[6308] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001803FC .text C:\Program Files\HP\HP Software Update\hpwuschd2.exe[6308] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00180600 .text C:\Program Files\HP\HP Software Update\hpwuschd2.exe[6308] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00181014 .text C:\Program Files\HP\HP Software Update\hpwuschd2.exe[6308] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00180804 .text C:\Program Files\HP\HP Software Update\hpwuschd2.exe[6308] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00180A08 .text C:\Program Files\HP\HP Software Update\hpwuschd2.exe[6308] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00180C0C .text C:\Program Files\HP\HP Software Update\hpwuschd2.exe[6308] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00180E10 .text C:\Program Files\HP\HP Software Update\hpwuschd2.exe[6308] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001801F8 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[6324] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001601F8 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[6324] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001603FC .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[6324] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[6324] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001703FC .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[6324] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00170600 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[6324] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00171014 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[6324] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00170804 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[6324] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00170A08 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[6324] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00170C0C .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[6324] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00170E10 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[6324] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001701F8 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[6324] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00180600 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[6324] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00180804 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[6324] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00180A08 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[6324] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001801F8 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[6324] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001803FC .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[6388] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001301F8 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[6388] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001303FC .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[6388] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[6388] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001503FC .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[6388] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00150600 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[6388] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00151014 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[6388] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00150804 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[6388] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00150A08 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[6388] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00150C0C .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[6388] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00150E10 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[6388] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001501F8 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[6388] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00160600 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[6388] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00160804 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[6388] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00160A08 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[6388] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001601F8 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[6388] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001603FC .text C:\Program Files\DivX\DivX Update\DivXUpdate.exe[6428] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001601F8 .text C:\Program Files\DivX\DivX Update\DivXUpdate.exe[6428] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001603FC .text C:\Program Files\DivX\DivX Update\DivXUpdate.exe[6428] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\DivX\DivX Update\DivXUpdate.exe[6428] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00170600 .text C:\Program Files\DivX\DivX Update\DivXUpdate.exe[6428] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00170804 .text C:\Program Files\DivX\DivX Update\DivXUpdate.exe[6428] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00170A08 .text C:\Program Files\DivX\DivX Update\DivXUpdate.exe[6428] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001701F8 .text C:\Program Files\DivX\DivX Update\DivXUpdate.exe[6428] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001703FC .text C:\Program Files\DivX\DivX Update\DivXUpdate.exe[6428] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001903FC .text C:\Program Files\DivX\DivX Update\DivXUpdate.exe[6428] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00190600 .text C:\Program Files\DivX\DivX Update\DivXUpdate.exe[6428] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00191014 .text C:\Program Files\DivX\DivX Update\DivXUpdate.exe[6428] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00190804 .text C:\Program Files\DivX\DivX Update\DivXUpdate.exe[6428] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00190A08 .text C:\Program Files\DivX\DivX Update\DivXUpdate.exe[6428] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00190C0C .text C:\Program Files\DivX\DivX Update\DivXUpdate.exe[6428] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00190E10 .text C:\Program Files\DivX\DivX Update\DivXUpdate.exe[6428] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001901F8 .text C:\Program Files\Windows Sidebar\sidebar.exe[6468] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000901F8 .text C:\Program Files\Windows Sidebar\sidebar.exe[6468] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000903FC .text C:\Program Files\Windows Sidebar\sidebar.exe[6468] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\Windows Sidebar\sidebar.exe[6468] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000C03FC .text C:\Program Files\Windows Sidebar\sidebar.exe[6468] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 000C0600 .text C:\Program Files\Windows Sidebar\sidebar.exe[6468] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 000C1014 .text C:\Program Files\Windows Sidebar\sidebar.exe[6468] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 000C0804 .text C:\Program Files\Windows Sidebar\sidebar.exe[6468] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 000C0A08 .text C:\Program Files\Windows Sidebar\sidebar.exe[6468] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 000C0C0C .text C:\Program Files\Windows Sidebar\sidebar.exe[6468] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 000C0E10 .text C:\Program Files\Windows Sidebar\sidebar.exe[6468] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000C01F8 .text C:\Program Files\Windows Sidebar\sidebar.exe[6468] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 000D0600 .text C:\Program Files\Windows Sidebar\sidebar.exe[6468] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 000D0804 .text C:\Program Files\Windows Sidebar\sidebar.exe[6468] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 000D0A08 .text C:\Program Files\Windows Sidebar\sidebar.exe[6468] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000D01F8 .text C:\Program Files\Windows Sidebar\sidebar.exe[6468] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000D03FC .text C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe[6500] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 001501F8 .text C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe[6500] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 001503FC .text C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe[6500] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe[6500] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 001703FC .text C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe[6500] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00170600 .text C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe[6500] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00171014 .text C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe[6500] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00170804 .text C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe[6500] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00170A08 .text C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe[6500] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00170C0C .text C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe[6500] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00170E10 .text C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe[6500] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 001701F8 .text C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe[6500] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00180600 .text C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe[6500] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 00180804 .text C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe[6500] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 00180A08 .text C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe[6500] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 001801F8 .text C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe[6500] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 001803FC .text C:\Windows\system32\svchost.exe[7364] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000501F8 .text C:\Windows\system32\svchost.exe[7364] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000503FC .text C:\Windows\system32\svchost.exe[7364] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Windows\system32\svchost.exe[7364] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\svchost.exe[7364] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\svchost.exe[7364] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\svchost.exe[7364] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\svchost.exe[7364] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\svchost.exe[7364] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00070C0C .text C:\Windows\system32\svchost.exe[7364] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\svchost.exe[7364] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000701F8 .text C:\Program Files\Internet Explorer\iexplore.exe[7804] ntdll.dll!LdrLoadDll 77D79378 5 Bytes JMP 000401F8 .text C:\Program Files\Internet Explorer\iexplore.exe[7804] ntdll.dll!LdrUnloadDll 77D8B680 5 Bytes JMP 000403FC .text C:\Program Files\Internet Explorer\iexplore.exe[7804] kernel32.dll!CreateThread 7677CB2E 5 Bytes JMP 700575E3 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] kernel32.dll!GetBinaryTypeW + 70 76782467 1 Byte [62] .text C:\Program Files\Internet Explorer\iexplore.exe[7804] ADVAPI32.dll!CreateServiceW 77729EB4 5 Bytes JMP 000603FC .text C:\Program Files\Internet Explorer\iexplore.exe[7804] ADVAPI32.dll!DeleteService 7772A07E 5 Bytes JMP 00060600 .text C:\Program Files\Internet Explorer\iexplore.exe[7804] ADVAPI32.dll!SetServiceObjectSecurity 77766CD9 5 Bytes JMP 00061014 .text C:\Program Files\Internet Explorer\iexplore.exe[7804] ADVAPI32.dll!ChangeServiceConfigA 77766DD9 5 Bytes JMP 00060804 .text C:\Program Files\Internet Explorer\iexplore.exe[7804] ADVAPI32.dll!ChangeServiceConfigW 77766F81 5 Bytes JMP 00060A08 .text C:\Program Files\Internet Explorer\iexplore.exe[7804] ADVAPI32.dll!ChangeServiceConfig2A 77767099 5 Bytes JMP 00060C0C .text C:\Program Files\Internet Explorer\iexplore.exe[7804] ADVAPI32.dll!ChangeServiceConfig2W 777671E1 5 Bytes JMP 00060E10 .text C:\Program Files\Internet Explorer\iexplore.exe[7804] ADVAPI32.dll!CreateServiceA 777672A1 5 Bytes JMP 000601F8 .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!SetWindowsHookExA 765E6322 5 Bytes JMP 00070600 .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!CreateDialogParamW 765E72A2 5 Bytes JMP 701E9250 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!GetAsyncKeyState 765E863C 5 Bytes JMP 7003DEDD C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!SetWindowsHookExW 765E87AD 5 Bytes JMP 700925B4 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!CallNextHookEx 765E8E3B 5 Bytes JMP 700B7FDF C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!UnhookWindowsHookEx 765E98DB 5 Bytes JMP 700DECE0 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!SetWinEventHook 765E9F3A 5 Bytes JMP 000701F8 .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!UnhookWinEvent 765EC06F 5 Bytes JMP 000703FC .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!EnableWindow 765ECD8B 5 Bytes JMP 70099EB4 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!DefWindowProcA 765EDB88 7 Bytes JMP 7005980D C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!CreateWindowExA 765EDC2A 5 Bytes JMP 70063643 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!CreateWindowExW 765F1305 5 Bytes JMP 700C03B7 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!GetKeyState 765F8CB1 5 Bytes JMP 7003DDB3 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!DefWindowProcW 766003B4 7 Bytes JMP 700B8042 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!IsDialogMessageW 76600745 5 Bytes JMP 701E99AA C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!CreateDialogParamA 766017AA 5 Bytes JMP 701E9218 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!IsDialogMessage 76601847 5 Bytes JMP 701E9982 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!CreateDialogIndirectParamA 766026F1 5 Bytes JMP 701E9288 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!CreateDialogIndirectParamW 76609A62 5 Bytes JMP 701E92C0 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!SetKeyboardState 76610987 5 Bytes JMP 701EA273 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!DialogBoxParamW 766110B0 5 Bytes JMP 6FFF1893 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!DialogBoxIndirectParamW 76612EF5 5 Bytes JMP 701E8EE6 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!SendInput 76612F75 5 Bytes JMP 701EA21B C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!EndDialog 7661326E 5 Bytes JMP 701E9C56 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!SetCursorPos 76626FB2 5 Bytes JMP 701EA2F4 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!DialogBoxParamA 76628152 5 Bytes JMP 701E8E81 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!DialogBoxIndirectParamA 7662847D 5 Bytes JMP 701E8F4B C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!MessageBoxIndirectA 7663D4D9 5 Bytes JMP 701E8E08 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!MessageBoxIndirectW 7663D5D3 5 Bytes JMP 701E8D8F C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!MessageBoxExA 7663D639 5 Bytes JMP 701E8D2B C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!MessageBoxExW 7663D65D 5 Bytes JMP 701E8CC7 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] USER32.dll!keybd_event 7663D972 5 Bytes JMP 701EA1D8 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[7804] SHELL32.dll!SHRestricted + D95 768989A8 4 Bytes [CF, 01, 92, 69] .text C:\Program Files\Internet Explorer\iexplore.exe[7804] SHELL32.dll!SHRestricted + D9D 768989B0 8 Bytes [E0, 61, 91, 69, 79, F7, 91, ...] .text C:\Program Files\Internet Explorer\iexplore.exe[7804] ole32.dll!OleLoadFromStream 77AD1E80 5 Bytes JMP 701E96B4 C:\Windows\system32\IEFRAME.dll (Przegl¹darka internetowa/Microsoft Corporation) ---- User IAT/EAT - GMER 1.0.15 ---- IAT C:\Windows\system32\services.exe[540] @ C:\Windows\system32\services.exe [ADVAPI32.dll!CreateProcessAsUserW] 00450002 IAT C:\Windows\system32\services.exe[540] @ C:\Windows\system32\services.exe [KERNEL32.dll!CreateProcessW] 00450000 IAT C:\Windows\Explorer.EXE[3060] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown] [74B97817] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[3060] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage] [74BDB4E9] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[3060] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI] [74B9BB22] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[3060] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode] [74B8F695] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[3060] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup] [74B975E9] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[3060] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC] [74B8E7CA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[3060] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStreamICM] [74BC73F5] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[3060] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStream] [74B9DA60] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[3060] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight] [74B8FFFA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[3060] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth] [74B8FF61] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[3060] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage] [74B871CF] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[3060] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFileICM] [74C1CAE2] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[3060] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFile] [74BBC8D8] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[3060] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics] [74B8D968] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[3060] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree] [74B86853] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[3060] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc] [74B8687E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[3060] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode] [74B92AD1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SearchPathW] [6992029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [69915EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CopyFileW] [6992BC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!MoveFileW] [6992E089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateProcessW] [69927F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6992F500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindClose] [6992F94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] [699307CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] [6992FCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6992B56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6992ABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [69921555] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegEnumValueW] [69920E28] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegOpenKeyExW] [699160B5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryValueExW] [69917278] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegDeleteKeyW] [699333C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCreateKeyExW] [699219CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCloseKey] [69916692] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [69915EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CopyFileW] [6992BC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SearchPathW] [6992029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindClose] [6992F94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] [6992F9A0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] [6993072B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] [6992FCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] [699307CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesA] [69920ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryA] [6992EFD7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesA] [69929229] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryA] [6992E73F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryA] [6992ECFB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileA] [6992C6B1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesW] [69915F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryW] [6992F500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesW] [6992939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryW] [69916291] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileW] [6992E089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryW] [6992EE67] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileA] [6992DFBD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessA] [69927BE8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessW] [69927F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileA] [6991F1F1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!ReplaceFileW] [6992E457] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!WritePrivateProfileStringW] [6992B56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringW] [6992ABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringA] [6992AA37] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [69915EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesW] [6992939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] [6992FCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] [699307CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathW] [6992029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesW] [69915F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesA] [69929229] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileA] [6991F1F1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] [6992F9A0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] [6993072B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindClose] [6992F94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathA] [6992F2BD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesA] [69920ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpW] [6992D6BF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpA] [6992D557] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCloseKey] [69916692] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExA] [69932FB4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyA] [6993327D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyA] [69933B2F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExA] [6991EEBD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExW] [699219CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExW] [699160B5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExW] [69920859] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueW] [69933983] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyW] [699333C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyW] [69921555] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExW] [69917278] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueW] [69920E28] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyW] [69933E89] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExA] [6991F30B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueA] [69933FED] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyA] [69933D27] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExA] [6991FCC5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionW] [6992A56D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] [699307CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!ReplaceFileW] [6992E457] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionNamesW] [6992A89F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileSectionW] [6992B245] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6992B56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateHardLinkW] [6992C49D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6992F500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CopyFileW] [6992BC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetBinaryTypeW] [69929F4B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [69915EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateProcessW] [69927F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileW] [6992E089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] [6992FCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindClose] [6992F94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameA] [69929AF3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesA] [69920ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SearchPathW] [6992029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileIntW] [6992A249] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6992ABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!RemoveDirectoryW] [6992EE67] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateDirectoryW] [69916291] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetFileAttributesW] [6992939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesW] [69915F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileExW] [6992E0C1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameW] [69929C69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesExW] [6992968F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetLongPathNameW] [6992997F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [USER32.dll!LoadImageW] [6992CB0F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [USER32.dll!WinHelpW] [6992D6BF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [USER32.dll!PrivateExtractIconsW] [6992D11F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringByKeyW] [69930DFB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHCreateStreamOnFileW] [6991F725] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryKeyW] [6991F817] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringW] [69930D47] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyA] [69931F32] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCombineW] [69931095] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHOpenRegStream2W] [6991FB25] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryW] [699312D2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsURLW] [6991FA79] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootA] [69931542] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootW] [69931590] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripToRootW] [69931C5E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFindOnPathW] [69931191] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripPathW] [69931BC6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRemoveArgsW] [699319EE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetBoolUSValueW] [6991E265] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathSkipRootW] [69931B2E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryEmptyW] [6993136E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsSystemFolderW] [6993162F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryA] [69931284] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRelativePathToW] [6993194A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootA] [69930F4E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetPathW] [69932769] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegSetPathW] [69932937] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetUSValueW] [69917430] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCreateFromUrlW] [69920178] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHQueryValueExW] [6991FC0B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetValueW] [69914984] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsNetworkPathW] [6993140A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerShareW] [699317B8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerW] [6993171C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathUnExpandEnvStringsW] [69931CAC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathMakeSystemFolderW] [699318A2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCW] [6991FA2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRelativeW] [69915D08] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHGetValueW] [69914927] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootW] [69930F9F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteValueW] [69932028] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHSetValueW] [69932B62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumKeyExW] [699320D3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumValueW] [6993218A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFileExistsW] [69920123] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyW] [69931F83] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile] [69928C1A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindClose] [6992F94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] [6992FCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [69915EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!SearchPathW] [6992029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateProcessW] [69927F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetShortPathNameW] [69929C69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesExW] [6992968F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesW] [69915F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathUnExpandEnvStringsA] [6991F6D1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteKeyA] [69931F32] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteValueW] [69932028] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueA] [69932B05] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueW] [69932B62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCreateFromUrlW] [69920178] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetUSValueA] [699164C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueA] [69914CAA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueW] [69914927] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueW] [69914984] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueA] [69916528] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5752] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SearchPathW] [6992029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [69915EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CopyFileW] [6992BC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!MoveFileW] [6992E089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateProcessW] [69927F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6992F500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindClose] [6992F94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] [699307CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] [6992FCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6992B56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6992ABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [69921555] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegEnumValueW] [69920E28] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegOpenKeyExW] [699160B5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryValueExW] [69917278] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegDeleteKeyW] [699333C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCreateKeyExW] [699219CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCloseKey] [69916692] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [69915EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CopyFileW] [6992BC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SearchPathW] [6992029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindClose] [6992F94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] [6992F9A0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] [6993072B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] [6992FCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] [699307CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesA] [69920ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryA] [6992EFD7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesA] [69929229] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryA] [6992E73F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryA] [6992ECFB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileA] [6992C6B1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesW] [69915F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryW] [6992F500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesW] [6992939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryW] [69916291] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileW] [6992E089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryW] [6992EE67] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileA] [6992DFBD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessA] [69927BE8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessW] [69927F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileA] [6991F1F1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!ReplaceFileW] [6992E457] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!WritePrivateProfileStringW] [6992B56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringW] [6992ABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringA] [6992AA37] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [69915EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesW] [6992939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] [6992FCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] [699307CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathW] [6992029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesW] [69915F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesA] [69929229] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileA] [6991F1F1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] [6992F9A0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] [6993072B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindClose] [6992F94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathA] [6992F2BD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesA] [69920ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpW] [6992D6BF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpA] [6992D557] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCloseKey] [69916692] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExA] [69932FB4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyA] [6993327D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyA] [69933B2F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExA] [6991EEBD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExW] [699219CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExW] [699160B5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExW] [69920859] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueW] [69933983] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyW] [699333C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyW] [69921555] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExW] [69917278] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueW] [69920E28] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyW] [69933E89] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExA] [6991F30B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueA] [69933FED] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyA] [69933D27] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExA] [6991FCC5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionW] [6992A56D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] [699307CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!ReplaceFileW] [6992E457] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionNamesW] [6992A89F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileSectionW] [6992B245] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6992B56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateHardLinkW] [6992C49D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6992F500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CopyFileW] [6992BC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetBinaryTypeW] [69929F4B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [69915EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateProcessW] [69927F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileW] [6992E089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] [6992FCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindClose] [6992F94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameA] [69929AF3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesA] [69920ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SearchPathW] [6992029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileIntW] [6992A249] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6992ABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!RemoveDirectoryW] [6992EE67] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateDirectoryW] [69916291] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetFileAttributesW] [6992939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesW] [69915F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileExW] [6992E0C1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameW] [69929C69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesExW] [6992968F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetLongPathNameW] [6992997F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [USER32.dll!LoadImageW] [6992CB0F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [USER32.dll!WinHelpW] [6992D6BF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [USER32.dll!PrivateExtractIconsW] [6992D11F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringByKeyW] [69930DFB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHCreateStreamOnFileW] [6991F725] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryKeyW] [6991F817] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringW] [69930D47] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyA] [69931F32] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCombineW] [69931095] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHOpenRegStream2W] [6991FB25] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryW] [699312D2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsURLW] [6991FA79] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootA] [69931542] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootW] [69931590] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripToRootW] [69931C5E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFindOnPathW] [69931191] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripPathW] [69931BC6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRemoveArgsW] [699319EE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetBoolUSValueW] [6991E265] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathSkipRootW] [69931B2E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryEmptyW] [6993136E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsSystemFolderW] [6993162F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryA] [69931284] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRelativePathToW] [6993194A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootA] [69930F4E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetPathW] [69932769] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegSetPathW] [69932937] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetUSValueW] [69917430] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCreateFromUrlW] [69920178] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHQueryValueExW] [6991FC0B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetValueW] [69914984] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsNetworkPathW] [6993140A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerShareW] [699317B8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerW] [6993171C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathUnExpandEnvStringsW] [69931CAC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathMakeSystemFolderW] [699318A2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCW] [6991FA2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRelativeW] [69915D08] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHGetValueW] [69914927] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootW] [69930F9F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteValueW] [69932028] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHSetValueW] [69932B62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumKeyExW] [699320D3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumValueW] [6993218A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFileExistsW] [69920123] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyW] [69931F83] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile] [69928C1A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindClose] [6992F94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] [6992FCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [69915EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!SearchPathW] [6992029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateProcessW] [69927F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetShortPathNameW] [69929C69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesExW] [6992968F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesW] [69915F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathUnExpandEnvStringsA] [6991F6D1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteKeyA] [69931F32] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteValueW] [69932028] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueA] [69932B05] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueW] [69932B62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCreateFromUrlW] [69920178] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetUSValueA] [699164C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueA] [69914CAA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueW] [69914927] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueW] [69914984] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueA] [69916528] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[6168] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SearchPathW] [6992029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [69915EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CopyFileW] [6992BC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!MoveFileW] [6992E089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateProcessW] [69927F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6992F500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindClose] [6992F94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] [699307CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] [6992FCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6992B56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6992ABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [69921555] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegEnumValueW] [69920E28] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegOpenKeyExW] [699160B5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryValueExW] [69917278] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegDeleteKeyW] [699333C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCreateKeyExW] [699219CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCloseKey] [69916692] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [69915EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CopyFileW] [6992BC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SearchPathW] [6992029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindClose] [6992F94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] [6992F9A0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] [6993072B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] [6992FCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] [699307CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesA] [69920ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryA] [6992EFD7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesA] [69929229] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryA] [6992E73F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryA] [6992ECFB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileA] [6992C6B1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesW] [69915F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryW] [6992F500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesW] [6992939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryW] [69916291] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileW] [6992E089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryW] [6992EE67] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileA] [6992DFBD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessA] [69927BE8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessW] [69927F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileA] [6991F1F1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!ReplaceFileW] [6992E457] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!WritePrivateProfileStringW] [6992B56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringW] [6992ABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringA] [6992AA37] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [69915EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesW] [6992939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] [6992FCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] [699307CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathW] [6992029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesW] [69915F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesA] [69929229] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileA] [6991F1F1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] [6992F9A0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] [6993072B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindClose] [6992F94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathA] [6992F2BD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesA] [69920ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpW] [6992D6BF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpA] [6992D557] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCloseKey] [69916692] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExA] [69932FB4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyA] [6993327D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyA] [69933B2F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExA] [6991EEBD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExW] [699219CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExW] [699160B5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExW] [69920859] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueW] [69933983] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyW] [699333C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyW] [69921555] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExW] [69917278] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueW] [69920E28] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyW] [69933E89] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExA] [6991F30B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueA] [69933FED] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyA] [69933D27] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExA] [6991FCC5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionW] [6992A56D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] [699307CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!ReplaceFileW] [6992E457] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionNamesW] [6992A89F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileSectionW] [6992B245] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6992B56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateHardLinkW] [6992C49D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6992F500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CopyFileW] [6992BC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetBinaryTypeW] [69929F4B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [69915EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateProcessW] [69927F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileW] [6992E089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] [6992FCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindClose] [6992F94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameA] [69929AF3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesA] [69920ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SearchPathW] [6992029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileIntW] [6992A249] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6992ABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!RemoveDirectoryW] [6992EE67] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateDirectoryW] [69916291] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetFileAttributesW] [6992939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesW] [69915F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileExW] [6992E0C1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameW] [69929C69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesExW] [6992968F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetLongPathNameW] [6992997F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [USER32.dll!LoadImageW] [6992CB0F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [USER32.dll!WinHelpW] [6992D6BF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [USER32.dll!PrivateExtractIconsW] [6992D11F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringByKeyW] [69930DFB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHCreateStreamOnFileW] [6991F725] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryKeyW] [6991F817] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringW] [69930D47] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyA] [69931F32] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCombineW] [69931095] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHOpenRegStream2W] [6991FB25] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryW] [699312D2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsURLW] [6991FA79] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootA] [69931542] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootW] [69931590] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripToRootW] [69931C5E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFindOnPathW] [69931191] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripPathW] [69931BC6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRemoveArgsW] [699319EE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetBoolUSValueW] [6991E265] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathSkipRootW] [69931B2E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryEmptyW] [6993136E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsSystemFolderW] [6993162F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryA] [69931284] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRelativePathToW] [6993194A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootA] [69930F4E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetPathW] [69932769] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegSetPathW] [69932937] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetUSValueW] [69917430] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCreateFromUrlW] [69920178] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHQueryValueExW] [6991FC0B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetValueW] [69914984] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsNetworkPathW] [6993140A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerShareW] [699317B8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerW] [6993171C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathUnExpandEnvStringsW] [69931CAC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathMakeSystemFolderW] [699318A2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCW] [6991FA2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRelativeW] [69915D08] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHGetValueW] [69914927] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootW] [69930F9F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteValueW] [69932028] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHSetValueW] [69932B62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumKeyExW] [699320D3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumValueW] [6993218A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFileExistsW] [69920123] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyW] [69931F83] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile] [69928C1A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindClose] [6992F94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] [6992FCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [69915EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!SearchPathW] [6992029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateProcessW] [69927F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!DeleteFileW] [6992C811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetShortPathNameW] [69929C69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesExW] [6992968F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateFileW] [699163E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [69914E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesW] [69915F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [69916D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathUnExpandEnvStringsA] [6991F6D1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteKeyA] [69931F32] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteValueW] [69932028] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueA] [69932B05] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueW] [69932B62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCreateFromUrlW] [69920178] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetUSValueA] [699164C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueA] [69914CAA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueW] [69914927] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueW] [69914984] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueA] [69916528] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[7804] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] [699147BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) ---- Devices - GMER 1.0.15 ---- AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys (Dynamiczna struktura WDF/Microsoft Corporation) AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys (Dynamiczna struktura WDF/Microsoft Corporation) AttachedDevice \Driver\tdx \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software) AttachedDevice \Driver\tdx \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software) ---- Registry - GMER 1.0.15 ---- Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{01392C81-B3FA-C9D7-D1A0-61DB6B17E081} Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{01392C81-B3FA-C9D7-D1A0-61DB6B17E081}@iaiecnlipjcmbddkei 0x6B 0x61 0x6D 0x63 ... Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{01392C81-B3FA-C9D7-D1A0-61DB6B17E081}@haceedakmkocbmfd 0x6B 0x61 0x6D 0x63 ... ---- EOF - GMER 1.0.15 ----