{\rtf1\ansi\ansicpg1250\deff0\deflang1045{\fonttbl{\f0\fswiss\fcharset238{\*\fname Arial;}Arial CE;}} {\*\generator Msftedit 5.41.15.1515;}\viewkind4\uc1\pard\f0\fs20 GMER 1.0.15.15641 - http://www.gmer.net\par Rootkit scan 2012-09-07 12:54:40\par Windows 5.1.2600 Dodatek Service Pack 3 Harddisk0\\DR0 -> \\Device\\Scsi\\JRAID1Port4Path0Target0Lun0 SATA____ rev.\par Running: gnio9snx.exe; Driver: C:\\DOCUME~1\\partner1\\USTAWI~1\\Temp\\awrdapow.sys\par \par \par ---- System - GMER 1.0.15 ----\par \par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwAdjustPrivilegesToken [0xAA2E6FA0]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwClose [0xAA28276A]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwConnectPort [0xAA29B1E0]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateEvent [0xAA282CE0]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateFile [0xAA2E6D8A]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateMutant [0xAA282BC6]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreatePort [0xAA29B4F8]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateProcess [0xAA2E56C8]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateProcessEx [0xAA2E589E]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateSection [0xAA2E66F6]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateSemaphore [0xAA282E00]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateSymbolicLinkObject [0xAA2A7280]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateThread [0xAA2E5D1C]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwCreateWaitablePort [0xAA29B5C0]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwDebugActiveProcess [0xAA2E5570]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwDeleteKey [0xAA295154]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwDeleteValueKey [0xAA29693C]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwDeviceIoControlFile [0xAA2827AE]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwDuplicateObject [0xAA2E70B6]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwEnumerateKey [0xAA296148]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwEnumerateValueKey [0xAA296ADC]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwLoadDriver [0xAA2E6C34]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwLoadKey [0xAA295C8C]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwLoadKey2 [0xAA295EE4]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwMapViewOfSection [0xAA2A72A0]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwNotifyChangeKey [0xAA29996A]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwOpenEvent [0xAA282D76]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwOpenMutant [0xAA282C56]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwOpenProcess [0xAA2E5104]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwOpenSection [0xAA2E69A2]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwOpenSemaphore [0xAA282E96]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwOpenThread [0xAA2E5A78]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwPlugPlayControl [0xAA2A7290]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwQueryKey [0xAA294F88]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwQueryMultipleValueKey [0xAA29674A]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwQueryObject [0xAA299B68]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwQueryValueKey [0xAA29653E]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwQueueApcThread [0xAA2E63EA]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwRenameKey [0xAA295268]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwReplaceKey [0xAA2958DA]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwReplyPort [0xAA29B7F6]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwReplyWaitReceivePort [0xAA29B688]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwReplyWaitReceivePortEx [0xAA29B73C]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwRequestWaitReplyPort [0xAA29B864]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwRestoreKey [0xAA295AE0]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwResumeThread [0xAA2E60E8]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSaveKey [0xAA29540C]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSaveKeyEx [0xAA2955A2]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSaveMergedKeys [0xAA29573E]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSecureConnectPort [0xAA29B368]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSetContextThread [0xAA2E6244]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSetInformationToken [0xAA282F20]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSetSystemInformation [0xAA2E6E56]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSetValueKey [0xAA296308]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSuspendProcess [0xAA2E52A4]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSuspendThread [0xAA2E5F90]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwSystemDebugControl [0xAA282F32]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwTerminateProcess [0xAA2E5402]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwTerminateThread [0xAA2E5C18]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwUnmapViewOfSection [0xAA2E6B08]\par SSDT \\SystemRoot\\system32\\DRIVERS\\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwWriteVirtualMemory [0xAA2E6834]\par \par ---- Kernel code sections - GMER 1.0.15 ----\par \par .text ntkrnlpa.exe!ZwCallbackReturn + 2C94 8050454C 12 Bytes [F8, B4, 29, AA, C8, 56, 2E, ...] \{CLC ; MOV AH, 0x29; STOSB ; ENTER 0x2e56, 0xaa; SAHF ; POP EAX; STOS BYTE CS:[EDI]\}\par .text ntkrnlpa.exe!ZwCallbackReturn + 2CA4 8050455C 16 Bytes [F6, 66, 2E, AA, 00, 2E, 28, ...] \{MUL BYTE [ESI+0x2e]; STOSB ; ADD [ESI], CH; SUB [EDX-0x55d58d80], CH; SBB AL, 0x5d; STOS BYTE CS:[EDI]\}\par .text ntkrnlpa.exe!ZwCallbackReturn + 2D60 80504618 9 Bytes [34, 6C, 2E, AA, 8C, 5C, 29, ...]\par .text ntkrnlpa.exe!ZwCallbackReturn + 2D6A 80504622 2 Bytes [29, AA]\par .text ntkrnlpa.exe!ZwCallbackReturn + 2EAC 80504764 4 Bytes [EA, 63, 2E, AA]\par .text ... \par .text ntkrnlpa.exe!ObfDereferenceObject 805266C4 8 Bytes [B8, 36, 9F, 4C, F7, FF, E0, ...] \{MOV EAX, 0xf74c9f36; JMP EAX; NOP \}\par PAGE ntkrnlpa.exe!IoConnectInterrupt 80575796 8 Bytes [B8, 0C, CF, 4C, F7, FF, E0, ...] \{MOV EAX, 0xf74ccf0c; JMP EAX; NOP \}\par PAGE ntkrnlpa.exe!ObOpenObjectByPointer 805BBCE4 8 Bytes [B8, 7C, 59, 4C, F7, FF, E0, ...] \{MOV EAX, 0xf74c597c; JMP EAX; NOP \}\par PAGE ntkrnlpa.exe!NtDuplicateObject 805BE03C 8 Bytes [B8, E0, 5A, 4C, F7, FF, E0, ...] \{MOV EAX, 0xf74c5ae0; JMP EAX; NOP \}\par PAGE ntkrnlpa.exe!ObCreateObject 805C13E8 8 Bytes [B8, F8, 8D, 4C, F7, FF, E0, ...] \{MOV EAX, 0xf74c8df8; JMP EAX; NOP \}\par PAGE ntkrnlpa.exe!ObInsertObject 805C300E 8 Bytes [B8, 22, 9C, 4C, F7, FF, E0, ...] \{MOV EAX, 0xf74c9c22; JMP EAX; NOP \}\par PAGE ntkrnlpa.exe!ZwSetSystemInformation 8060FC34 8 Bytes [B8, 04, A0, 4C, F7, FF, E0, ...] \{MOV EAX, 0xf74ca004; JMP EAX; NOP \}\par .text isapnp.sys F75FC300 28 Bytes [00, 00, 00, 00, 00, 00, 00, ...]\par .text isapnp.sys F75FC31D 27 Bytes [00, 00, 00, 00, 00, 00, 00, ...]\par .text isapnp.sys F75FC33A 23 Bytes [00, 00, 00, 00, 00, 00, 00, ...]\par .text isapnp.sys F75FC352 5 Bytes [00, 00, 00, 00, 00]\par .text isapnp.sys F75FC35A 38 Bytes [00, 00, 00, 00, 00, 00, 00, ...]\par .text ... \par \par ---- User code sections - GMER 1.0.15 ----\par \par .text E:\\Program Files\\Mozilla Firefox\\firefox.exe[2328] ntdll.dll!LdrLoadDll 7C915C35 5 Bytes JMP 01206C40 E:\\Program Files\\Mozilla Firefox\\xul.dll (Mozilla Foundation)\par .text E:\\Program Files\\Mozilla Firefox\\firefox.exe[2328] kernel32.dll!lstrlenW + 43 7C809AEC 7 Bytes JMP 01442DBF E:\\Program Files\\Mozilla Firefox\\xul.dll (Mozilla Foundation)\par .text E:\\Program Files\\Mozilla Firefox\\firefox.exe[2328] kernel32.dll!MapViewOfFileEx + 6A 7C80B9A0 7 Bytes JMP 01442D9C E:\\Program Files\\Mozilla Firefox\\xul.dll (Mozilla Foundation)\par .text E:\\Program Files\\Mozilla Firefox\\firefox.exe[2328] kernel32.dll!ValidateLocale + B138 7C844930 7 Bytes JMP 0120FE71 E:\\Program Files\\Mozilla Firefox\\xul.dll (Mozilla Foundation)\par .text E:\\Program Files\\Mozilla Firefox\\firefox.exe[2328] GDI32.dll!SetDIBitsToDevice + 20A 77F19E14 7 Bytes JMP 01442D1D E:\\Program Files\\Mozilla Firefox\\xul.dll (Mozilla Foundation)\par .text E:\\Program Files\\Mozilla Firefox\\plugin-container.exe[2736] USER32.dll!DefWindowProcA + 11A 7E37C298 7 Bytes JMP 105C8F94 E:\\Program Files\\Mozilla Firefox\\xul.dll (Mozilla Foundation)\par .text E:\\Program Files\\Mozilla Firefox\\plugin-container.exe[2736] USER32.dll!SetWindowLongA + 19 7E37C2B6 7 Bytes JMP 105C8F23 E:\\Program Files\\Mozilla Firefox\\xul.dll (Mozilla Foundation)\par .text E:\\Program Files\\Mozilla Firefox\\plugin-container.exe[2736] USER32.dll!GetWindowInfo 7E37C49C 5 Bytes JMP 1040F66F E:\\Program Files\\Mozilla Firefox\\xul.dll (Mozilla Foundation)\par .text E:\\Program Files\\Mozilla Firefox\\plugin-container.exe[2736] USER32.dll!GetMenuContextHelpId + 1A 7E3B5319 7 Bytes JMP 1040FCA8 E:\\Program Files\\Mozilla Firefox\\xul.dll (Mozilla Foundation)\par ? C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] C:\\WINDOWS\\system32\\ntdll.dll time/date stamp mismatch; \par .text C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 6CAC19ED C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\ushata.dll (Ushata module/Kaspersky Lab ZAO)\par ? C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] C:\\WINDOWS\\system32\\kernel32.dll time/date stamp mismatch; \par .text C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] USER32.dll!AlignRects 7E362A78 4 Bytes [D9, 29, AC, 6C] \{FLDCW [ECX]; LODSB ; INSB \}\par ? C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] C:\\WINDOWS\\system32\\ntdll.dll time/date stamp mismatch; \par .text C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 6CAC19ED C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\ushata.dll (Ushata module/Kaspersky Lab ZAO)\par ? C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] C:\\WINDOWS\\system32\\kernel32.dll time/date stamp mismatch; \par .text C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] USER32.dll!AlignRects 7E362A78 4 Bytes [D9, 29, AC, 6C] \{FLDCW [ECX]; LODSB ; INSB \}\par \par ---- Kernel IAT/EAT - GMER 1.0.15 ----\par \par IAT isapnp.sys[HAL.dll!KeStallExecutionProcessor] 458BF75F\par IAT isapnp.sys[HAL.dll!WRITE_PORT_UCHAR] 28408B08\par IAT isapnp.sys[HAL.dll!READ_PORT_UCHAR] 832346FE\par IAT isapnp.sys[HAL.dll!HalTranslateBusAddress] 56246046\par \par ---- User IAT/EAT - GMER 1.0.15 ----\par \par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\kernel32.dll [ntdll.dll!RtlAllocateHeap] 7DFF0520\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\kernel32.dll [ntdll.dll!RtlFreeHeap] 7DFF058C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\kernel32.dll [ntdll.dll!RtlSizeHeap] 7DFF05F8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\kernel32.dll [ntdll.dll!RtlReAllocateHeap] 7DFF0664\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [KERNEL32.dll!SetErrorMode] 7DFF0D24\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [KERNEL32.dll!GetModuleHandleW] 7DFF0C4C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [KERNEL32.dll!GetModuleHandleA] 7DFF0BE0\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [ntdll.dll!RtlAllocateHeap] 7DFF022C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [ntdll.dll!RtlReAllocateHeap] 7DFF0304\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\RPCRT4.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\RPCRT4.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\RPCRT4.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\RPCRT4.dll [KERNEL32.dll!GetModuleHandleW] 7DFF0C4C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\RPCRT4.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\RPCRT4.dll [ntdll.dll!RtlAllocateHeap] 7DFF022C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\Secur32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\Secur32.dll [KERNEL32.dll!GetModuleHandleW] 7DFF0C4C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\Secur32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\Secur32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\Secur32.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\Secur32.dll [ntdll.dll!RtlAllocateHeap] 7DFF022C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\msvcrt.dll [KERNEL32.dll!SetErrorMode] 7DFF0D24\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\msvcrt.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\msvcrt.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\msvcrt.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\msvcrt.dll [KERNEL32.dll!GetModuleHandleA] 7DFF0BE0\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\msvcrt.dll [KERNEL32.dll!HeapDestroy] 7DFF04B4\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\msvcrt.dll [KERNEL32.dll!HeapCreate] 7DFF0448\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\msvcrt.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\NETAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\NETAPI32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\NETAPI32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\NETAPI32.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\NETAPI32.dll [ntdll.dll!RtlAllocateHeap] 7DFF022C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\NETAPI32.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\USER32.dll [KERNEL32.dll!GetModuleHandleW] 7DFF0C4C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\USER32.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\USER32.dll [KERNEL32.dll!GetModuleHandleA] 7DFF0BE0\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\USER32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\USER32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\USER32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\USER32.dll [ntdll.dll!RtlAllocateHeap] 7DFF022C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\USER32.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\GDI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\GDI32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\GDI32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\GDI32.dll [ntdll.dll!RtlAllocateHeap] 7DFF022C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\GDI32.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WS2_32.dll [KERNEL32.dll!HeapCreate] 7DFF0448\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WS2_32.dll [KERNEL32.dll!HeapDestroy] 7DFF04B4\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WS2_32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WS2_32.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WS2_32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WS2_32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WS2HELP.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WS2HELP.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WS2HELP.dll [KERNEL32.dll!GetModuleHandleA] 7DFF0BE0\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WS2HELP.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WS2HELP.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!SetErrorMode] 7DFF0D24\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!GetModuleHandleA] 7DFF0BE0\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!GetModuleHandleW] 7DFF0C4C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!HeapDestroy] 7DFF04B4\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!HeapCreate] 7DFF0448\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\CRYPT32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\CRYPT32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\CRYPT32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\CRYPT32.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\CRYPT32.dll [KERNEL32.dll!GetModuleHandleA] 7DFF0BE0\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!GetModuleHandleA] 7DFF0BE0\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!HeapCreate] 7DFF0448\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!HeapDestroy] 7DFF04B4\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!GetModuleHandleW] 7DFF0C4C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!SetErrorMode] 7DFF0D24\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\SHELL32.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\ole32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\ole32.dll [KERNEL32.dll!GetModuleHandleW] 7DFF0C4C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\ole32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\ole32.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\ole32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\ole32.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\IPHLPAPI.DLL [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\IPHLPAPI.DLL [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\IPHLPAPI.DLL [KERNEL32.dll!HeapCreate] 7DFF0448\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\IPHLPAPI.DLL [KERNEL32.dll!HeapDestroy] 7DFF04B4\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\IPHLPAPI.DLL [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\IPHLPAPI.DLL [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\IPHLPAPI.DLL [ntdll.dll!RtlAllocateHeap] 7DFF022C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\userenv.dll [KERNEL32.dll!SetErrorMode] 7DFF0D24\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\userenv.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\userenv.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\userenv.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\userenv.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\userenv.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WININET.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WININET.dll [KERNEL32.dll!SetErrorMode] 7DFF0D24\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WININET.dll [KERNEL32.dll!GetModuleHandleA] 7DFF0BE0\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WININET.dll [KERNEL32.dll!GetModuleHandleW] 7DFF0C4C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WININET.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WININET.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[2900] @ C:\\WINDOWS\\system32\\WININET.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\kernel32.dll [ntdll.dll!RtlAllocateHeap] 7DFF0520\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\kernel32.dll [ntdll.dll!RtlFreeHeap] 7DFF058C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\kernel32.dll [ntdll.dll!RtlSizeHeap] 7DFF05F8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\kernel32.dll [ntdll.dll!RtlReAllocateHeap] 7DFF0664\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [KERNEL32.dll!SetErrorMode] 7DFF0D24\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [KERNEL32.dll!GetModuleHandleW] 7DFF0C4C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [KERNEL32.dll!GetModuleHandleA] 7DFF0BE0\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [ntdll.dll!RtlAllocateHeap] 7DFF022C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\ADVAPI32.dll [ntdll.dll!RtlReAllocateHeap] 7DFF0304\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\RPCRT4.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\RPCRT4.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\RPCRT4.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\RPCRT4.dll [KERNEL32.dll!GetModuleHandleW] 7DFF0C4C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\RPCRT4.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\RPCRT4.dll [ntdll.dll!RtlAllocateHeap] 7DFF022C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\Secur32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\Secur32.dll [KERNEL32.dll!GetModuleHandleW] 7DFF0C4C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\Secur32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\Secur32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\Secur32.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\Secur32.dll [ntdll.dll!RtlAllocateHeap] 7DFF022C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\msvcrt.dll [KERNEL32.dll!SetErrorMode] 7DFF0D24\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\msvcrt.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\msvcrt.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\msvcrt.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\msvcrt.dll [KERNEL32.dll!GetModuleHandleA] 7DFF0BE0\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\msvcrt.dll [KERNEL32.dll!HeapDestroy] 7DFF04B4\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\msvcrt.dll [KERNEL32.dll!HeapCreate] 7DFF0448\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\msvcrt.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\NETAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\NETAPI32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\NETAPI32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\NETAPI32.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\NETAPI32.dll [ntdll.dll!RtlAllocateHeap] 7DFF022C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\NETAPI32.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\USER32.dll [KERNEL32.dll!GetModuleHandleW] 7DFF0C4C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\USER32.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\USER32.dll [KERNEL32.dll!GetModuleHandleA] 7DFF0BE0\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\USER32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\USER32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\USER32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\USER32.dll [ntdll.dll!RtlAllocateHeap] 7DFF022C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\USER32.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\GDI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\GDI32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\GDI32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\GDI32.dll [ntdll.dll!RtlAllocateHeap] 7DFF022C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\GDI32.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\WS2_32.dll [KERNEL32.dll!HeapCreate] 7DFF0448\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\WS2_32.dll [KERNEL32.dll!HeapDestroy] 7DFF04B4\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\WS2_32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\WS2_32.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\WS2_32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\WS2_32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\WS2HELP.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\WS2HELP.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\WS2HELP.dll [KERNEL32.dll!GetModuleHandleA] 7DFF0BE0\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\WS2HELP.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\WS2HELP.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!SetErrorMode] 7DFF0D24\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!GetModuleHandleA] 7DFF0BE0\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!GetModuleHandleW] 7DFF0C4C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!HeapDestroy] 7DFF04B4\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!HeapCreate] 7DFF0448\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\CRYPT32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\CRYPT32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\CRYPT32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\CRYPT32.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\CRYPT32.dll [KERNEL32.dll!GetModuleHandleA] 7DFF0BE0\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!GetModuleHandleA] 7DFF0BE0\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!HeapCreate] 7DFF0448\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!HeapDestroy] 7DFF04B4\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!GetModuleHandleW] 7DFF0C4C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!SetErrorMode] 7DFF0D24\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHELL32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SHELL32.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\ole32.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\ole32.dll [KERNEL32.dll!GetModuleHandleW] 7DFF0C4C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\ole32.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\ole32.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\ole32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\ole32.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\IPHLPAPI.DLL [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\IPHLPAPI.DLL [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\IPHLPAPI.DLL [KERNEL32.dll!HeapCreate] 7DFF0448\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\IPHLPAPI.DLL [KERNEL32.dll!HeapDestroy] 7DFF04B4\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\IPHLPAPI.DLL [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\IPHLPAPI.DLL [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\IPHLPAPI.DLL [ntdll.dll!RtlAllocateHeap] 7DFF022C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\userenv.dll [KERNEL32.dll!SetErrorMode] 7DFF0D24\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\userenv.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\userenv.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\userenv.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\userenv.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\userenv.dll [ntdll.dll!RtlFreeHeap] 7DFF0298\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\PSAPI.DLL [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\PSAPI.DLL [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\PSAPI.DLL [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\wininet.dll [KERNEL32.dll!CreateThread] 7DFF03DC\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\wininet.dll [KERNEL32.dll!SetErrorMode] 7DFF0D24\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\wininet.dll [KERNEL32.dll!GetModuleHandleA] 7DFF0BE0\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\wininet.dll [KERNEL32.dll!GetModuleHandleW] 7DFF0C4C\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\wininet.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\wininet.dll [KERNEL32.dll!GetProcAddress] 7DFF0CB8\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\wininet.dll [KERNEL32.dll!FreeLibrary] 7DFF0B74\par IAT C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2013\\avp.exe[3352] @ C:\\WINDOWS\\system32\\SAMLIB.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 7DFF0D90\par \par ---- Devices - GMER 1.0.15 ----\par \par AttachedDevice \\Driver\\Tcpip \\Device\\Ip kltdi.sys (Network filtering component/Kaspersky Lab)\par AttachedDevice \\Driver\\Tcpip \\Device\\Tcp kltdi.sys (Network filtering component/Kaspersky Lab)\par AttachedDevice \\Driver\\Tcpip \\Device\\Udp kltdi.sys (Network filtering component/Kaspersky Lab)\par AttachedDevice \\Driver\\Tcpip \\Device\\RawIp kltdi.sys (Network filtering component/Kaspersky Lab)\par AttachedDevice \\FileSystem\\Fastfat \\Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)\par AttachedDevice \\FileSystem\\Fastfat \\Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)\par \par Device \\FileSystem\\Cdfs \\Cdfs A8BBB400\par \par ---- Registry - GMER 1.0.15 ----\par \par Reg HKLM\\SYSTEM\\ControlSet001\\Services\\BTHPORT\\Parameters\\Keys\\001167bc6807 (not active ControlSet) \par Reg HKLM\\SYSTEM\\ControlSet001\\Services\\BTHPORT\\Parameters\\Keys\\001167bc6807@0021ab366933 0xB4 0xF2 0x28 0x3A ...\par Reg HKLM\\SYSTEM\\ControlSet001\\Services\\BTHPORT\\Parameters\\Keys\\001167bc6807@001e4531ef0c 0x6F 0x0C 0x1C 0xCF ...\par Reg HKLM\\SYSTEM\\ControlSet001\\Services\\BTHPORT\\Parameters\\Keys\\001167c39125 (not active ControlSet) \par Reg HKLM\\SYSTEM\\CurrentControlSet\\Services\\BTHPORT\\Parameters\\Keys\\001167bc6807 \par Reg HKLM\\SYSTEM\\CurrentControlSet\\Services\\BTHPORT\\Parameters\\Keys\\001167bc6807@0021ab366933 0xB4 0xF2 0x28 0x3A ...\par Reg HKLM\\SYSTEM\\CurrentControlSet\\Services\\BTHPORT\\Parameters\\Keys\\001167bc6807@001e4531ef0c 0x6F 0x0C 0x1C 0xCF ...\par Reg HKLM\\SYSTEM\\CurrentControlSet\\Services\\BTHPORT\\Parameters\\Keys\\001167c39125 \par \par ---- Files - GMER 1.0.15 ----\par \par File C:\\WINDOWS\\system32\\DBBK\\525EF84F0AF3E892F02289A53048DFEC 0 bytes\par File C:\\WINDOWS\\system32\\DBBK\\9AAFA889610B52D0FE2FBF838B43A7EF 106496 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\BBC957DC18C17CC027EB80B7C77F2AEA 29274 bytes\par File C:\\WINDOWS\\system32\\DBBK\\BBDFDBEAD1B7A1CFD44BFFFD177FB627 275696 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\7149C0DF1A682BA0D70F955F2FC6823E 3346 bytes\par File C:\\WINDOWS\\system32\\DBBK\\62483DA3D985156FCFE0E9960B1A06ED 116296 bytes\par File C:\\WINDOWS\\system32\\DBBK\\6300F7D9D5D5659E1FA7B39EF8FEBC8D 216064 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\6304964F6FD3F42D5A6E939F13FEE188 65536 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\B079B82CE15A2A2E2E0284013A5F9519 171520 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\0387F72E4E33163F603C65CC50B55314 17408 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\03B945AC0481CD8BB161C3569D8ED1C3 29370 bytes\par File C:\\WINDOWS\\system32\\DBBK\\68B1B04FF42D40B28B369C8E1736C0EE 10240 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\5C18EB793B6AD405548952EEC00DB283 2259968 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\5CD1902741EB3DD4B05B3A301714B416 465642 bytes\par File C:\\WINDOWS\\system32\\DBBK\\A29FB62D8F188B4DCACCA9E942CF29BD 28160 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\0D0AFE6AB566277522A059AA0A2EF6EF 58368 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\FCFE76F941C2232CC98F94BF96C520BD 22528 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\FD6E157F35C18F04070BA940043976BB 8192 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\AADCE464ACAC4C193EFF809913995856 140 bytes\par File C:\\WINDOWS\\system32\\DBBK\\994A5CBF5DEBDAA46D1CBA43C8E3EA61 34304 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\ECA2A3B283482FB78B446902F0BBA7DC 28626 bytes\par File C:\\WINDOWS\\system32\\DBBK\\E294A5F16D91D654C4CA0140379D2D28 838432 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\E3078345C776B959BDEFB9C277E91497 7680 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\13001EB0A58B4DE96126B16AB15FD8CC 278528 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\137AECA65AEED91A85142D8F033045CD 547576 bytes\par File C:\\WINDOWS\\system32\\DBBK\\BDD9B70A185CA6DEFEAA59BB55B70644 697 bytes\par File C:\\WINDOWS\\system32\\DBBK\\7B2E6EA379987B725299D15B796A5429 12288 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\2057659A7108C7DD03EFA5F05E5E745C 116736 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\2074BD9D5C1B7F433FEDE10ACB724E7F 83456 bytes\par File C:\\WINDOWS\\system32\\DBBK\\D568419D8ED63A94E93684ABF388DAFC 176640 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\D5D7BAE2AC541FB79C4D1BEF2650DC09 17920 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\3CFFAEFFF23B0D208214A6D3061A5B1B 29146 bytes\par File C:\\WINDOWS\\system32\\DBBK\\3D889205A5A9BB0F8E4A87604C6DD70F 62464 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\3DB1150555EB9AFAC9B15919A3387689 427 bytes\par File C:\\WINDOWS\\system32\\DBBK\\44098ACE6358140E59FE1BA21CCD8E17 713728 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\441820026B252E39E4671533BD649D60 19456 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\1AF12B28F67CA04ACA8AB080C12F9DCA 41472 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\1B03E055C4A76E8EF1BA15167733A9D5 43520 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\4D64209FC2653BF552120E6A5F491E22 49152 bytes\par File C:\\WINDOWS\\system32\\DBBK\\4DC09008019890913B10CF96A79A1193 1172480 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\4E16974702B0C733F1E669247E8E0D22 48794 bytes\par File C:\\WINDOWS\\system32\\DBBK\\4E173B55801B28447BFC3C4FDA13FCCA 3010 bytes\par File C:\\WINDOWS\\system32\\DBBK\\B472B59EF98469C91651B751D3442CB8 0 bytes\par File C:\\WINDOWS\\system32\\DBBK\\59F27D2AD901C894FC8AF4DABFF17448 359 bytes\par File C:\\WINDOWS\\system32\\DBBK\\59F99F6A41281157C1D3C6CB54FD581C 159232 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\5A34DB0802A96719F9DC08DFC7F356D1 1696 bytes\par File C:\\WINDOWS\\system32\\DBBK\\C65AC4D03D4B7B3092E2F928414532FC 506368 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\28239FF523880A689423312FE6CCF232 4608 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\2863875AB39CFFF5CEC0B1DD3012257D 20511 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\2928E66C01C740D655BF8A9C9F9238B5 69120 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\DBDE664E0BA4BACD0A6A04AE2232B205 39284 bytes\par File C:\\WINDOWS\\system32\\DBBK\\DC1B004064CFAC9A24F8ED919F233802 40960 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\95BEF1EF5606B852EE8429BB17216AC2 278559 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\95DC8CD5C2A8C02F5CBBEB528DAF4B9D 98304 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\15F599BA8070E331145A59C2DB55BBCB 35328 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\1691FFEB64E57358356BE3919C0CDEF1 87176 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\16BD9BEEC4827495997C76AD7317D99D 89600 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\16BF834A84A7DC0D24EDC8E924C90637 24064 bytes\par File C:\\WINDOWS\\system32\\DBBK\\D87F78A7F4E89704CCE15BEB1F2C4993 132096 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\D8E93E37117734E7F1BE292222A4D0E7 28672 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\D91981F03001A196DF8C4A228D635597 14336 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\252044350A6E4FD406C5238FEEFC28E8 20510 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\08BDCC2E1EDD3EAF280E05C0AD1409B0 1024 bytes\par File C:\\WINDOWS\\system32\\DBBK\\08F58007B3465D2822F2D6421C56CFB2 279040 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\54F08335A9707DF831F7FBDA4B317399 22528 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\AEC87FCE9EF89DCA047F5F2432D9C7F9 659968 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\9F21C4D91AD499734C272707A4CC64C6 20510 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\9FA3159F8642BA10329FC12A4E90BC3F 22528 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\A029A434A3035429628CA35102FFB907 114 bytes\par File C:\\WINDOWS\\system32\\DBBK\\BF87CC5F09459CFCEFC35A5AB2990E39 19684 bytes\par File C:\\WINDOWS\\system32\\DBBK\\1FE47076AB0B3781BEA45C4E12EB23A5 0 bytes\par File C:\\WINDOWS\\system32\\DBBK\\31F8A4B6F5F3C7CAD799C38EA6AD2E69 524944 bytes\par File C:\\WINDOWS\\system32\\DBBK\\32053C0812A466B8699826BB75EDAE36 72440 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\05031DA050124303AEE48205E6A9F5EC 92160 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\0558ECBC767ACA4DCF554F2576FF2308 20992 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\05653F49A5F93FBDF15A2C96804D343B 5632 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\058B3B9782AFD41CEFF306A6943D2581 387072 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\C7C3B9CBBCF0FAABE6836DCD1BAC99F1 268300 bytes\par File C:\\WINDOWS\\system32\\DBBK\\C7FE0B22837423F70251AC63C5310E57 510712 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\CE22C2CC69CE3F7D832B37B2242C46CD 701440 bytes\par File C:\\WINDOWS\\system32\\DBBK\\CE8C9DA224FDFC33495A16ED616B5424 20511 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\CEE8DCA0D2E24EC7BF546D6BA1FC9DB9 30720 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\B1E547D33337AAF07ED8991F505850DE 0 bytes\par File C:\\WINDOWS\\system32\\DBBK\\B23F97EDAD875FAE68B5EBAFF5C4A9CA 2149888 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\74197D847A2819D506023BA449ED9C51 49152 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\467DD9659C49AC5CFEEC9279CA432F62 35840 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\46C76ECB06A712BDE508FDCB1F720038 221184 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\6B56CEB3C6F9D5CD7293DBD9FE23B311 34560 bytes\par File C:\\WINDOWS\\system32\\DBBK\\B94C31BAE6344A6283CF878E6A3021E5 108544 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\B9C7AAE96A1BE01E8826E996107763EB 0 bytes\par File C:\\WINDOWS\\system32\\DBBK\\645836F9720C896DEFE3F2BEDBD757B4 90624 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\64C2CB37FA2B4BA84A0FA4F997F08D56 0 bytes\par File C:\\WINDOWS\\system32\\DBBK\\E0F3612872705A73D0BC0012B43A3B0C 0 bytes\par File C:\\WINDOWS\\system32\\DBBK\\AB3BF6AB274C57123827AFA60354642E 149848 bytes\par File C:\\WINDOWS\\system32\\DBBK\\2D7AA395C216EEF3BB03E4407D4F3F5F 67584 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\FF4136BEDF56C76803E68A7E708B2AC0 2992 bytes\par File C:\\WINDOWS\\system32\\DBBK\\FF90B6C09F09BCF4B0FF40051298DA4C 32768 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\FFE26C3DFB6B8EF3101268F4E05AA860 35328 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\4B5BA7A573C9CD5A24D22D050B69A53D 180224 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\3B802B23C9B00EB1D1047975E5F1DF76 22016 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\3BADAF30E38DDFCD7D9F5C4491B3AEE0 38400 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\3BD1548E27B2DF1090E42FEAC1BBA78B 355104 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\6DDFA2500672FCF459503B92B5164CAF 5632 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\6EEEDDF35F5EA480CD24D91C5E3FFA8D 130048 bytes\par File C:\\WINDOWS\\system32\\DBBK\\9C3A1066346AF7E123030D42EF9F5CED 18944 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\9C7D5A264B8D9447A80026ADAD20E0DF 98586 bytes\par File C:\\WINDOWS\\system32\\DBBK\\9C824BDA9928CB8C84205D20C4063B72 147456 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\A784D49798FE8C8A68847B3333D21283 99328 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\D23791E7DA6E4A7EB899417F3670CFCF 23552 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\91C1600EE5C22B78D2CFCC0FB663A3BD 30720 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\0D9FB04AC061B1AE708C737F1DF91229 568832 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\D6C4FE43694B4B079516CC16F8082255 7208 bytes\par File C:\\WINDOWS\\system32\\DBBK\\D84209D3FB6FC9A1FD1519CAE28DC9E7 53478 bytes\par File C:\\WINDOWS\\system32\\DBBK\\8E7A87880DB1A3025B56CE5A475FDB3A 108480 bytes\par File C:\\WINDOWS\\system32\\DBBK\\8F11D2C8601982DED2338767C939A5F1 4096 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\71E4EC5B5D434B65414AE3F0E591700E 56832 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\71E8C2B68F4338A5E9E88B87A58DD19B 2524 bytes\par File C:\\WINDOWS\\system32\\DBBK\\53F51FF44C39FF9F7B8F8D289D75B73A 8192 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\99E5AD1BC4F4C95BBD5E9A0A2DDC19B0 53248 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\E54A14E6175F75EF7513080D5B2E1F1A 28672 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\E5DF85A4DD078DD2C930BA1E66A3980B 34990 bytes\par File C:\\WINDOWS\\system32\\DBBK\\E5FA1B044DAC5F6F600A1742D73F6936 46592 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\E5FBC4D6614E02B2C80EC545963082E3 24576 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\E653B4AF3D4B0D39A8E19791568954AA 4461 bytes\par File C:\\WINDOWS\\system32\\DBBK\\C6F995442C57AF2BCC9779E86A0B4BDE 78336 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\861330BA18A213F621C917F3A6AD71EB 69632 bytes\par File C:\\WINDOWS\\system32\\DBBK\\86E75D9E82518E36B06B3F25D2C6B50B 24626 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\86E96E06A1D73B78B4908FDB940EE810 32768 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\86EBC55E707A905C20A7924BC79E20C4 55296 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\CB5DE000A2359EEC4F0D79B25D716D6A 32590 bytes\par File C:\\WINDOWS\\system32\\DBBK\\CBF36A1D95A3CD642CF72BEEB601932F 214256 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\CC38E74379B3927B9151C71220D0AD7C 50688 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\CC48A742A9ECA2F1D4194DB82918E1A8 6761 bytes\par File C:\\WINDOWS\\system32\\DBBK\\5E68A411B07EFC658649AE881D0D3A67 147456 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\7F7BA5AB76C3BFC0971DF43EFBB9B051 135168 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\7F8503DDBAE0C506271D7D36CF761D2B 2890 bytes\par File C:\\WINDOWS\\system32\\DBBK\\7FDC88E8511D8D53ED25CE1B814B917E 26224 bytes\par File C:\\WINDOWS\\system32\\DBBK\\7FE13B41A8B37AD3152B1FF0F205E583 106496 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\7FE3BF8059CB3205792D5771718FEC37 16384 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\506A7D4A0C1545CC3A76CDE0D8B1D8E1 92424 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\5098D56277F0FFDCAF88EE44345E11E8 196608 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\51064C1F2D0E493121CFD2A78A1FBC3B 1818 bytes\par File C:\\WINDOWS\\system32\\DBBK\\5125D501712FBEC12827C3842EE5BE49 19456 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\515560072280B41B30B1BBE7F7C18E36 31744 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\516921FB08A988525682B7C7EA159573 150528 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\51C063F0ACDA411250E6C75CC7BD5891 11776 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\0AE799C502C6995423283BE600CDE49E 366080 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\0B698BC91749B56C561283519F9EE272 4310 bytes\par File C:\\WINDOWS\\system32\\DBBK\\0C0D057B79359A1E7059A2D459286164 12800 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\6F73F50162DEF60C84B725C18CD9140F 34560 bytes\par File C:\\WINDOWS\\system32\\DBBK\\6F85E1F998742EFAC8D18565185CA262 37376 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\6FBA44274FA09C84236B85D64E96C50F 20528 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\6FBFCE6FB69DB2CFF4BFB6CD6E1F074B 143360 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\42A74887C8763DEB3EABA791C8106531 3178 bytes\par File C:\\WINDOWS\\system32\\DBBK\\42B5F3888CADA74E9A078B26E4FF116E 10074 bytes\par File C:\\WINDOWS\\system32\\DBBK\\42F12EA04C63E48A021D4A477CFADD9A 11419 bytes\par File C:\\WINDOWS\\system32\\DBBK\\0EC019FE4712A63978112E6D8E36C9AE 9709568 bytes\par File C:\\WINDOWS\\system32\\DBBK\\0F86CAF680A4E01224B8CBE4E263F490 14923 bytes\par File C:\\WINDOWS\\system32\\DBBK\\0FA22D6788740B3492EB9847D2697A5E 54936 bytes\par File C:\\WINDOWS\\system32\\DBBK\\1DC4FD7B9515D208DA5EDC1DE6C541C9 601 bytes\par File C:\\WINDOWS\\system32\\DBBK\\1DF9749693A0DDD118C605CA58DC2931 239152 bytes\par File C:\\WINDOWS\\system32\\DBBK\\1E58E53E17D5CAF0F53BCEA86A6042C2 554496 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\1E5B9B44CF527547C2E10EB5FCAD8996 10957 bytes\par File C:\\WINDOWS\\system32\\DBBK\\39000E033D39D19CCCE21AEAFCCE2476 255848 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\D95EAABF5D277EF91D9CA70151209E56 68616 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\D96D63BFEA0D879440711098270506F8 14236 bytes\par File C:\\WINDOWS\\system32\\DBBK\\D9856D45F89143DA7F560B5984E74161 332288 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\19C781EE6D998E66E0816FD70FC83955 4293 bytes\par File C:\\WINDOWS\\system32\\DBBK\\19E177301CF2953F0336EB707779FF44 36648 bytes\par File C:\\WINDOWS\\system32\\DBBK\\1A41A403E6517A9B7253EBB48DFE06E7 12800 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\1A69323DFACCE17817F68AC0E53DE42C 4096 bytes\par File C:\\WINDOWS\\system32\\DBBK\\1A977B0921005D879555F20768726E38 8725 bytes\par File C:\\WINDOWS\\system32\\DBBK\\1809765A558284913CFE60D3CA8406CE 18944 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\1CEE8FE329D3E70DC5A16137D63F6C00 5632 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\2196B126DEFDB5EC1627FAE2DF5F2AC8 14424 bytes\par File C:\\WINDOWS\\system32\\DBBK\\219881ED4E81C1F465118BD3B9410FC5 4096 bytes\par File C:\\WINDOWS\\system32\\DBBK\\21B3412705FF449B7FA67BB12B72E115 217088 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\220354E7A9E1D97720CAE237B5A78BC3 11309 bytes\par File C:\\WINDOWS\\system32\\DBBK\\BE5B4182A4E4E5DEE8B18398815ED98D 4007 bytes\par File C:\\WINDOWS\\system32\\DBBK\\BEACE7EB720A69E5ED568B1FAA6E10CC 18611 bytes\par File C:\\WINDOWS\\system32\\DBBK\\BECA46A3C469574F7D7A35EFF1EB4D7D 6671 bytes\par File C:\\WINDOWS\\system32\\DBBK\\BF3E3C8F94CF7A637048444064C3E7DD 21615 bytes\par File C:\\WINDOWS\\system32\\DBBK\\3E851B59C4F6595FFBDE337E2F7004CA 12804 bytes\par File C:\\WINDOWS\\system32\\DBBK\\3EF12377AB0C60E7039D0C6D4CC8536C 26112 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\3F4FCF495408B5A7E05E628481A6E685 132608 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\3F6CD914DC89DC73277F30D73248BC5C 23552 bytes executable\par File C:\\WINDOWS\\system32\\DBBK\\3F74408B317EDB774AB002C5D95A9A52 18944 bytes executable\par \par ---- EOF - GMER 1.0.15 ----\par }