GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2015-09-29 10:28:40 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 KINGSTON rev.580A 223,57GB Running: gmr.exe; Driver: C:\Users\Czytnia1\AppData\Local\Temp\axldqpow.sys ---- User code sections - GMER 2.1 ---- .text C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe[828] C:\windows\SYSTEM32\ntdll.dll!NtTerminateProcess 00000000777edc70 6 bytes [48, B8, F0, 12, A4, 01] .text C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe[828] C:\windows\SYSTEM32\ntdll.dll!NtTerminateProcess + 8 00000000777edc78 4 bytes [00, 00, 50, C3] .text C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe[828] C:\windows\system32\kernel32.dll!UnhandledExceptionFilter + 1 000000007771b831 11 bytes [B8, F0, 12, C2, 01, 00, 00, ...] .text C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe[2824] C:\windows\SYSTEM32\ntdll.dll!NtTerminateProcess 00000000777edc70 6 bytes [48, B8, F0, 12, 94, 01] .text C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe[2824] C:\windows\SYSTEM32\ntdll.dll!NtTerminateProcess + 8 00000000777edc78 4 bytes [00, 00, 50, C3] .text C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe[2824] C:\windows\system32\kernel32.dll!UnhandledExceptionFilter + 1 000000007771b831 11 bytes [B8, F0, 12, BA, 01, 00, 00, ...] .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3104] C:\windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075bd1401 2 bytes JMP 75deb20b C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3104] C:\windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075bd1419 2 bytes JMP 75deb336 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3104] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075bd1431 2 bytes JMP 75e68f39 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3104] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075bd144a 2 bytes CALL 75dc4885 C:\windows\syswow64\kernel32.dll .text ... * 9 .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3104] C:\windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075bd14dd 2 bytes JMP 75e68832 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3104] C:\windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075bd14f5 2 bytes JMP 75e68a08 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3104] C:\windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075bd150d 2 bytes JMP 75e68728 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3104] C:\windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075bd1525 2 bytes JMP 75e68af2 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3104] C:\windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075bd153d 2 bytes JMP 75ddfc98 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3104] C:\windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075bd1555 2 bytes JMP 75de68df C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3104] C:\windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075bd156d 2 bytes JMP 75e68ff1 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3104] C:\windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075bd1585 2 bytes JMP 75e68b52 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3104] C:\windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075bd159d 2 bytes JMP 75e686ec C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3104] C:\windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075bd15b5 2 bytes JMP 75ddfd31 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3104] C:\windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075bd15cd 2 bytes JMP 75deb2cc C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3104] C:\windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075bd16b2 2 bytes JMP 75e68eb4 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3104] C:\windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075bd16bd 2 bytes JMP 75e68681 C:\windows\syswow64\kernel32.dll .text C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe[4404] C:\windows\SYSTEM32\ntdll.dll!NtTerminateProcess 00000000777edc70 6 bytes [48, B8, F0, 12, 23, 02] .text C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe[4404] C:\windows\SYSTEM32\ntdll.dll!NtTerminateProcess + 8 00000000777edc78 4 bytes [00, 00, 50, C3] .text C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe[4404] C:\windows\system32\kernel32.dll!UnhandledExceptionFilter + 1 000000007771b831 11 bytes [B8, F0, 12, 3D, 02, 00, 00, ...] .text C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe[4524] C:\windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075bd1401 2 bytes JMP 75deb20b C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe[4524] C:\windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075bd1419 2 bytes JMP 75deb336 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe[4524] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075bd1431 2 bytes JMP 75e68f39 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe[4524] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075bd144a 2 bytes CALL 75dc4885 C:\windows\syswow64\kernel32.dll .text ... * 9 .text C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe[4524] C:\windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075bd14dd 2 bytes JMP 75e68832 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe[4524] C:\windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075bd14f5 2 bytes JMP 75e68a08 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe[4524] C:\windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075bd150d 2 bytes JMP 75e68728 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe[4524] C:\windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075bd1525 2 bytes JMP 75e68af2 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe[4524] C:\windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075bd153d 2 bytes JMP 75ddfc98 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe[4524] C:\windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075bd1555 2 bytes JMP 75de68df C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe[4524] C:\windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075bd156d 2 bytes JMP 75e68ff1 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe[4524] C:\windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075bd1585 2 bytes JMP 75e68b52 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe[4524] C:\windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075bd159d 2 bytes JMP 75e686ec C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe[4524] C:\windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075bd15b5 2 bytes JMP 75ddfd31 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe[4524] C:\windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075bd15cd 2 bytes JMP 75deb2cc C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe[4524] C:\windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075bd16b2 2 bytes JMP 75e68eb4 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe[4524] C:\windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075bd16bd 2 bytes JMP 75e68681 C:\windows\syswow64\kernel32.dll .text C:\windows\SysWOW64\RunDll32.exe[4176] C:\windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075bd1401 2 bytes JMP 75deb20b C:\windows\syswow64\kernel32.dll .text C:\windows\SysWOW64\RunDll32.exe[4176] C:\windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075bd1419 2 bytes JMP 75deb336 C:\windows\syswow64\kernel32.dll .text C:\windows\SysWOW64\RunDll32.exe[4176] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075bd1431 2 bytes JMP 75e68f39 C:\windows\syswow64\kernel32.dll .text C:\windows\SysWOW64\RunDll32.exe[4176] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075bd144a 2 bytes CALL 75dc4885 C:\windows\syswow64\kernel32.dll .text ... * 9 .text C:\windows\SysWOW64\RunDll32.exe[4176] C:\windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075bd14dd 2 bytes JMP 75e68832 C:\windows\syswow64\kernel32.dll .text C:\windows\SysWOW64\RunDll32.exe[4176] C:\windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075bd14f5 2 bytes JMP 75e68a08 C:\windows\syswow64\kernel32.dll .text C:\windows\SysWOW64\RunDll32.exe[4176] C:\windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075bd150d 2 bytes JMP 75e68728 C:\windows\syswow64\kernel32.dll .text C:\windows\SysWOW64\RunDll32.exe[4176] C:\windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075bd1525 2 bytes JMP 75e68af2 C:\windows\syswow64\kernel32.dll .text C:\windows\SysWOW64\RunDll32.exe[4176] C:\windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075bd153d 2 bytes JMP 75ddfc98 C:\windows\syswow64\kernel32.dll .text C:\windows\SysWOW64\RunDll32.exe[4176] C:\windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075bd1555 2 bytes JMP 75de68df C:\windows\syswow64\kernel32.dll .text C:\windows\SysWOW64\RunDll32.exe[4176] C:\windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075bd156d 2 bytes JMP 75e68ff1 C:\windows\syswow64\kernel32.dll .text C:\windows\SysWOW64\RunDll32.exe[4176] C:\windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075bd1585 2 bytes JMP 75e68b52 C:\windows\syswow64\kernel32.dll .text C:\windows\SysWOW64\RunDll32.exe[4176] C:\windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075bd159d 2 bytes JMP 75e686ec C:\windows\syswow64\kernel32.dll .text C:\windows\SysWOW64\RunDll32.exe[4176] C:\windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075bd15b5 2 bytes JMP 75ddfd31 C:\windows\syswow64\kernel32.dll .text C:\windows\SysWOW64\RunDll32.exe[4176] C:\windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075bd15cd 2 bytes JMP 75deb2cc C:\windows\syswow64\kernel32.dll .text C:\windows\SysWOW64\RunDll32.exe[4176] C:\windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075bd16b2 2 bytes JMP 75e68eb4 C:\windows\syswow64\kernel32.dll .text C:\windows\SysWOW64\RunDll32.exe[4176] C:\windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075bd16bd 2 bytes JMP 75e68681 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3664] C:\windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075bd1401 2 bytes JMP 75deb20b C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3664] C:\windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075bd1419 2 bytes JMP 75deb336 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3664] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075bd1431 2 bytes JMP 75e68f39 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3664] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075bd144a 2 bytes CALL 75dc4885 C:\windows\syswow64\kernel32.dll .text ... * 9 .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3664] C:\windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075bd14dd 2 bytes JMP 75e68832 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3664] C:\windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075bd14f5 2 bytes JMP 75e68a08 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3664] C:\windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075bd150d 2 bytes JMP 75e68728 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3664] C:\windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075bd1525 2 bytes JMP 75e68af2 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3664] C:\windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075bd153d 2 bytes JMP 75ddfc98 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3664] C:\windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075bd1555 2 bytes JMP 75de68df C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3664] C:\windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075bd156d 2 bytes JMP 75e68ff1 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3664] C:\windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075bd1585 2 bytes JMP 75e68b52 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3664] C:\windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075bd159d 2 bytes JMP 75e686ec C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3664] C:\windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075bd15b5 2 bytes JMP 75ddfd31 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3664] C:\windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075bd15cd 2 bytes JMP 75deb2cc C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3664] C:\windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075bd16b2 2 bytes JMP 75e68eb4 C:\windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3664] C:\windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075bd16bd 2 bytes JMP 75e68681 C:\windows\syswow64\kernel32.dll ---- User IAT/EAT - GMER 2.1 ---- IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\Program Files\Internet Explorer\iexplore.exe[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\USER32.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\GDI32.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\advapi32.DLL[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\shell32.DLL[USER32.dll!MessageBoxW] [7fef53367d0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\shell32.DLL[USER32.dll!DialogBoxParamW] [7fef5336240] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\shell32.DLL[USER32.dll!MessageBoxIndirectW] [7fef5310740] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\shell32.DLL[USER32.dll!EnableWindow] [7fef52feee0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\SHLWAPI.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\SHLWAPI.dll[USER32.dll!DialogBoxParamW] [7fef5336240] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\SHLWAPI.dll[USER32.dll!DialogBoxParamA] [7fef5336140] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\SHLWAPI.dll[USER32.dll!MessageBoxW] [7fef53367d0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\iertutil.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\version.DLL[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\IMM32.DLL[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\MSCTF.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\IEFRAME.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\IEFRAME.dll[USER32.dll!EnableWindow] [7fef52feee0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\IEFRAME.dll[USER32.dll!DialogBoxParamW] [7fef5336240] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\IEFRAME.dll[USER32.dll!MessageBoxW] [7fef53367d0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\IEFRAME.dll[USER32.dll!MessageBoxIndirectW] [7fef5310740] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\ole32.dll[USER32.dll!EnableWindow] [7fef52feee0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\ole32.dll[USER32.dll!DialogBoxParamW] [7fef5336240] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\ole32.dll[USER32.dll!MessageBoxW] [7fef53367d0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\OLEAUT32.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\OLEAUT32.dll[USER32.dll!EnableWindow] [7fef52feee0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\comctl32.dll[USER32.dll!EnableWindow] [7fef52feee0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\comctl32.dll[USER32.dll!DialogBoxIndirectParamW] [7fef5336060] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\comctl32.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\comdlg32.dll[USER32.dll!EnableWindow] [7fef52feee0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\comdlg32.dll[USER32.dll!DialogBoxIndirectParamW] [7fef5336060] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\comdlg32.dll[USER32.dll!MessageBoxW] [7fef53367d0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\comdlg32.dll[COMCTL32.dll!PropertySheetW] [7fef5336ec0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\comdlg32.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\uxtheme.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\urlmon.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\urlmon.dll[USER32.dll!EnableWindow] [7fef52feee0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\urlmon.dll[USER32.dll!DialogBoxParamW] [7fef5336240] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\WININET.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\dwmapi.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\Secur32.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\CLBCatQ.DLL[USER32.dll!DialogBoxParamW] [7fef5336240] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\CLBCatQ.DLL[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\System32\netprofm.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\System32\nlaapi.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\rsaenh.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\Program Files\Internet Explorer\ieproxy.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\apphelp.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\CRYPT32.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\IEUI.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0bf6\MSVCR80.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\PROPSYS.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\windowscodecs.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\Windows\system32\oleacc.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\explorerframe.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\explorerframe.dll[USER32.dll!EnableWindow] [7fef52feee0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\DUser.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\DUI70.dll[USER32.dll!EnableWindow] [7fef52feee0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\DUI70.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\System32\fwpuclnt.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\MLANG.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\SETUPAPI.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\SETUPAPI.dll[USER32.dll!DialogBoxParamW] [7fef5336240] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\SETUPAPI.dll[USER32.dll!EnableWindow] [7fef52feee0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\SETUPAPI.dll[USER32.dll!MessageBoxW] [7fef53367d0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\CFGMGR32.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\ntmarta.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\WLDAP32.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\dxgi.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\WINTRUST.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\EhStorShell.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\COMCTL32.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\COMCTL32.dll[USER32.dll!EnableWindow] [7fef52feee0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\COMCTL32.dll[USER32.dll!DialogBoxIndirectParamW] [7fef5336060] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\ntshrui.dll[USER32.dll!DialogBoxParamW] [7fef5336240] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\ntshrui.dll[USER32.dll!EnableWindow] [7fef52feee0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\ntshrui.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\srvcli.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[5256] @ C:\windows\system32\IcnOvrly.dll[KERNEL32.dll!GetProcAddress] [7fef52f1c40] C:\Program Files\Internet Explorer\IEShims.dll