GMER 1.0.15.15640 - http://www.gmer.net Rootkit scan 2011-06-29 14:09:20 Windows 6.1.7600 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2 ST3400833AS rev.3.AAD Running: 35ud017o.exe; Driver: C:\Users\PAWE~1\AppData\Local\Temp\kwddrkog.sys ---- System - GMER 1.0.15 ---- SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwAddBootEntry [0x91744E6C] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwAdjustPrivilegesToken [0x8C2EBD50] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwAlpcConnectPort [0x917453CE] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwAlpcCreatePort [0x8C2EE208] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwAlpcSendWaitReceivePort [0x91747532] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwClose [0x8C2EC664] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwConnectPort [0x91745FAC] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateEvent [0x8C2ED9E2] SSDT \??\C:\Windows\system32\windrvNT.sys ZwCreateFile [0x98D8536A] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateMutant [0x8C2ED8C8] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateNamedPipeFile [0x8C2EB93E] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreatePort [0x8C2ED79C] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwCreateSection [0x91745C4A] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateSemaphore [0x8C2EDB02] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateSymbolicLinkObject [0x8C3051F0] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwCreateThread [0x917443C6] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateThreadEx [0x8C2EC3E8] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateUserProcess [0x8C2EE6C8] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateWaitablePort [0x8C2ED832] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwDebugActiveProcess [0x8C2EF1F0] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwDeleteBootEntry [0x91744ED8] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwDeleteFile [0x91746F04] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwDeviceIoControlFile [0x9174445A] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwDuplicateObject [0x91744C4E] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwFsControlFile [0x91745612] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwImpersonateClientOfPort [0x917455D8] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwImpersonateThread [0x91745596] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwLoadDriver [0x9174599C] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwMapViewOfSection [0x91745898] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwModifyBootEntry [0x91744EA2] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwOpenEvent [0x8C2EDA78] SSDT \??\C:\Windows\system32\windrvNT.sys ZwOpenFile [0x98D85CD8] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwOpenMutant [0x8C2ED958] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwOpenProcess [0x91745DD6] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwOpenSection [0x91745A72] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwOpenSemaphore [0x8C2EDB98] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwOpenThread [0x91745EA8] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwPlugPlayControl [0x8C305200] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwProtectVirtualMemory [0x91745B36] SSDT \??\C:\Windows\system32\windrvNT.sys ZwQueryDirectoryFile [0x98D85842] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwQueryDirectoryObject [0x8C2EE782] SSDT \??\C:\Windows\system32\windrvNT.sys ZwQueryInformationProcess [0x98D821E0] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwQuerySection [0x8C2EFD84] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwQueueApcThread [0x9174480E] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwReplaceKey [0x91745008] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwReplyPort [0x8C2EDEFC] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwReplyWaitReceivePort [0x8C2EDDC2] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwRequestWaitReplyPort [0x9174745E] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwRestoreKey [0x91744F46] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwResumeThread [0x8C2F02A0] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwSaveKey [0x8C2EA590] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwSecureConnectPort [0x91746080] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwSetBootOptions [0x91744F0E] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwSetContextThread [0x917448B2] SSDT \??\C:\Windows\system32\windrvNT.sys ZwSetInformationFile [0x98D86142] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwSetInformationToken [0x8C2EE824] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwSetSecurityObject [0x8C2EF480] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwSetSystemInformation [0x917446D8] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwShutdownSystem [0x91744E24] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwSuspendProcess [0x8C2EFFC6] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwSuspendThread [0x8C2F0100] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwSystemDebugControl [0x91744926] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwTerminateProcess [0x91750AA0] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwTerminateThread [0x91750AC3] SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwUnmapViewOfSection [0x8C2EFC28] SSDT \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ZwWriteVirtualMemory [0x91746F68] ---- Kernel code sections - GMER 1.0.15 ---- .text ntkrnlpa.exe!ZwSaveKeyEx + 13AD 83262599 1 Byte [06] .text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 83286F52 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3} .text ntkrnlpa.exe!RtlSidHashLookup + 214 8328E724 4 Bytes [6C, 4E, 74, 91] {INSB ; DEC ESI; JZ 0xffffffffffffff95} .text ntkrnlpa.exe!RtlSidHashLookup + 220 8328E730 4 Bytes [50, BD, 2E, 8C] .text ntkrnlpa.exe!RtlSidHashLookup + 248 8328E758 8 Bytes [CE, 53, 74, 91, 08, E2, 2E, ...] .text ntkrnlpa.exe!RtlSidHashLookup + 28C 8328E79C 4 Bytes [32, 75, 74, 91] {XOR DH, [EBP+0x74]; XCHG ECX, EAX} .text ntkrnlpa.exe!RtlSidHashLookup + 2B8 8328E7C8 4 Bytes [64, C6, 2E, 8C] .text ... ? System32\Drivers\spyh.sys System nie może odnaleźć określonej ścieżki. ! PAGE ataport.SYS!DllUnload + 1 8BCA9AD7 4 Bytes JMP 85D791D9 .Shltr3 C:\Program Files\SpyShelter Personal Free\SpyShelter.sys entry point in ".Shltr3" section [0x917782BE] .text USBPORT.SYS!DllUnload 933ACCA0 5 Bytes JMP 871191D8 .text as7vjqwr.SYS 962CC000 12 Bytes [44, 48, 63, 83, EE, 46, 63, ...] .text as7vjqwr.SYS 962CC00D 9 Bytes [27, 63, 83, 48, 4B, 63, 83, ...] {DAA ; ARPL [EBX-0x7c9cb4b8], AX; ADD [EAX], AL} .text as7vjqwr.SYS 962CC017 20 Bytes [00, DE, F7, B9, 8B, E6, F5, ...] .text as7vjqwr.SYS 962CC02C 149 Bytes [00, 00, 00, 00, D0, D1, 25, ...] .text as7vjqwr.SYS 962CC0C3 8 Bytes [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL} .text ... .text win32k.sys!EngMultiByteToUnicodeN + A6B 822D30B4 5 Bytes JMP 91739BE4 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngEraseSurface + 7C80 8230D1BF 5 Bytes JMP 91738DC6 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngEraseSurface + BF78 823114B7 5 Bytes JMP 917391A2 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!XFORMOBJ_iGetXform + 1C30 823235ED 5 Bytes JMP 91739AC6 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!XFORMOBJ_iGetXform + 401D 823259DA 5 Bytes JMP 9173985E \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngCTGetGammaTable + 6CB 8232A25B 5 Bytes JMP 91738444 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngAllocMem + 8F96 82336311 5 Bytes JMP 917385A6 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!PATHOBJ_bEnum + 7A2D 823478AC 5 Bytes JMP 9173A078 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!PATHOBJ_bEnum + 8714 82348593 5 Bytes JMP 9173816C \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngStretchBlt + D2E 82350E8E 5 Bytes JMP 9173A41E \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngCreateSemaphore + A7EC 8236409F 5 Bytes JMP 91738E84 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngCreateSemaphore + CB9E 82366451 5 Bytes JMP 9173909A \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngCreateSemaphore + CEDA 8236678D 5 Bytes JMP 9173A564 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngCopyBits + 1F1C 82368A72 5 Bytes JMP 9173A504 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngBitBlt + 56E 8236FA09 5 Bytes JMP 91738806 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngBitBlt + 23D0 8237186B 5 Bytes JMP 9173A2CC \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngBitBlt + 4608 82373AA3 5 Bytes JMP 917396F4 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngBitBlt + 5201 8237469C 5 Bytes JMP 9173979A \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngLpkInstalled + 36EE 82384E7F 5 Bytes JMP 9173C15E \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!STROBJ_bEnum + 978C 823AFB1C 5 Bytes JMP 91738F02 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngPlgBlt + 26C1 823B7BE2 5 Bytes JMP 9173925E \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!PATHOBJ_bPolyBezierTo + F8 823CB4F1 5 Bytes JMP 9173886E \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngAcquireSemaphoreSharedNoWait + 1F5A 823DB51F 5 Bytes JMP 917392E4 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!PATHOBJ_vGetBounds + EB5 82405D5B 5 Bytes JMP 91739C22 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngCTGetCurrentGamma + 1C7A 82409D78 5 Bytes JMP 91738644 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngSetPointerShape + B31 8240C8A0 5 Bytes JMP 917384E2 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!EngSetPointerShape + C86 8240C9F5 5 Bytes JMP 917388BE \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!CLIPOBJ_cEnumStart + 9982 82418323 5 Bytes JMP 91738274 \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys .text win32k.sys!CLIPOBJ_cEnumStart + E655 8241CFF6 5 Bytes JMP 917430BE \??\C:\Program Files\SpyShelter Personal Free\SpyShelter.sys ---- User code sections - GMER 1.0.15 ---- .text C:\Program Files\Mozilla Firefox\firefox.exe[1868] ntdll.dll!LdrLoadDll 779AF625 5 Bytes JMP 00AA1410 C:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation) ? C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] C:\Windows\SYSTEM32\ntdll.dll time/date stamp mismatch; ? C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] C:\Windows\system32\kernel32.dll time/date stamp mismatch; unknown module: KERNELBASE.dll .text C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] USER32.dll!NotifyWinEvent + 48B 7729F724 4 Bytes [E0, 13, 46, 6C] {LOOPNZ 0x15; INC ESI; INSB } .text C:\Program Files\Mozilla Firefox\plugin-container.exe[2232] USER32.dll!SetWindowLongA 7728B1E3 5 Bytes JMP 692FEDA6 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation) .text C:\Program Files\Mozilla Firefox\plugin-container.exe[2232] USER32.dll!SetWindowLongW 77296614 5 Bytes JMP 692FED38 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation) .text C:\Program Files\Mozilla Firefox\plugin-container.exe[2232] USER32.dll!GetWindowInfo 77296A82 5 Bytes JMP 69115451 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation) .text C:\Program Files\Mozilla Firefox\plugin-container.exe[2232] USER32.dll!TrackPopupMenu 772B4B3B 5 Bytes JMP 69115A99 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation) ? C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] C:\Windows\SYSTEM32\ntdll.dll time/date stamp mismatch; ? C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] C:\Windows\system32\kernel32.dll time/date stamp mismatch; unknown module: KERNELBASE.dll .text C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] USER32.dll!NotifyWinEvent + 48B 7729F724 4 Bytes [E0, 13, 46, 6C] {LOOPNZ 0x15; INC ESI; INSB } ---- Kernel IAT/EAT - GMER 1.0.15 ---- IAT \SystemRoot\system32\DRIVERS\atapi.sys[ataport.SYS!AtaPortReadPortUchar] [8BAA3042] \SystemRoot\System32\Drivers\spyh.sys IAT \SystemRoot\system32\DRIVERS\atapi.sys[ataport.SYS!AtaPortWritePortUchar] [8BAA36D6] \SystemRoot\System32\Drivers\spyh.sys IAT \SystemRoot\system32\DRIVERS\atapi.sys[ataport.SYS!AtaPortWritePortBufferUshort] [8BAA3800] \SystemRoot\System32\Drivers\spyh.sys IAT \SystemRoot\system32\DRIVERS\atapi.sys[ataport.SYS!AtaPortReadPortBufferUshort] [8BAA313E] \SystemRoot\System32\Drivers\spyh.sys IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortNotification] 00147880 IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortQuerySystemTime] 78800C75 IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortReadPortUchar] 06750015 IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortStallExecution] C25DC033 IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortWritePortUchar] 458B0008 IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortWritePortUlong] 6A006A08 IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortGetPhysicalAddress] 50056A24 IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortConvertPhysicalAddressToUlong] 005AB7E8 IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortGetScatterGatherList] 0001B800 IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortGetParentBusType] C25D0000 IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortRequestCallback] CCCC0008 IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortWritePortBufferUshort] CCCCCCCC IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortGetUnCachedExtension] CCCCCCCC IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortCompleteRequest] CCCCCCCC IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortCopyMemory] 53EC8B55 IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortEtwTraceLog] 800C5D8B IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortCompleteAllActiveRequests] 7500117B IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortReleaseRequestSenseIrb] 127B806A IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortBuildRequestSenseIrb] 80647500 IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortReadPortBufferUshort] 7500137B IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortInitialize] 157B805E IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortGetDeviceBase] 56587500 IAT \SystemRoot\System32\Drivers\as7vjqwr.SYS[ataport.SYS!AtaPortDeviceStateChange] 8008758B ---- User IAT/EAT - GMER 1.0.15 ---- IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\kernel32.dll [ntdll.dll!RtlReAllocateHeap] 00240240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\kernel32.dll [ntdll.dll!RtlSizeHeap] 002402B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\kernel32.dll [ntdll.dll!RtlAllocateHeap] 00240320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\kernel32.dll [ntdll.dll!RtlFreeHeap] 00240390 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ADVAPI32.dll [ntdll.dll!RtlFreeHeap] 77AF0710 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ADVAPI32.dll [ntdll.dll!RtlAllocateHeap] 77AF0780 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ADVAPI32.dll [ntdll.dll!RtlReAllocateHeap] 77AF07F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!VirtualFree] 77AF08D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetModuleFileNameW] 77640E10 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 77640E80 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!SetErrorMode] 77640EF0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 77640F60 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 006B0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FreeLibrary] 006B0080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 006B00F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!HeapFree] 77AF0A90 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExA] 006B0160 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 006B01D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetModuleHandleW] 006B0240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\RPCRT4.dll [ntdll.dll!RtlFreeHeap] 77AF0C50 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\RPCRT4.dll [ntdll.dll!RtlAllocateHeap] 77AF0CC0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!RtlFreeHeap] 002502B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] 006B0A90 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] 006B0B00 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 006B0B70 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateThread] 00250320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!HeapFree] 00250400 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetModuleFileNameA] 006B0BE0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetModuleFileNameW] 006B0C50 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetModuleHandleW] 006B0CC0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetModuleHandleA] 006B0D30 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 006B0DA0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 006B0E10 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 006B0E80 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FreeLibrary] 006B0EF0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] 006B0F60 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetErrorMode] 006C0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 006C0080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\GDI32.dll [ntdll.dll!RtlAllocateHeap] 00250470 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\GDI32.dll [ntdll.dll!RtlFreeHeap] 002504E0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 006C00F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 006C0160 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 006C01D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 006C0240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!FreeLibrary] 006C02B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 006C0320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetModuleHandleA] 006C0390 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\USER32.dll [ntdll.dll!RtlSizeHeap] 00250550 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\USER32.dll [ntdll.dll!RtlReAllocateHeap] 002505C0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\USER32.dll [ntdll.dll!RtlAllocateHeap] 00250630 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\USER32.dll [ntdll.dll!RtlFreeHeap] 002506A0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetModuleHandleW] 006C0400 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 006C0470 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateThread] 00250710 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateProcessW] 006C04E0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetModuleFileNameA] 006C0550 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetModuleHandleA] 006C05C0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExA] 006C0630 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 006C06A0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FreeLibrary] 006C0710 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 006C0780 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 006C07F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetModuleFileNameW] 006C0860 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ole32.dll [ntdll.dll!RtlFreeHeap] 002509B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ole32.dll [ntdll.dll!RtlAllocateHeap] 00250A20 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ole32.dll [ntdll.dll!RtlReAllocateHeap] 00250A90 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 006D0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 006D0080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\iphlpapi.dll [ntdll.dll!RtlFreeHeap] 77AF0080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\iphlpapi.dll [ntdll.dll!RtlAllocateHeap] 77AF0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\NETAPI32.dll [ntdll.dll!RtlAllocateHeap] 77AF0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\NETAPI32.dll [ntdll.dll!RtlFreeHeap] 77AF0080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!RtlFreeHeap] 77AF0080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!RtlAllocateHeap] 77AF0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\CRYPT32.dll [ntdll.dll!RtlFreeHeap] 77AF0080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\CRYPT32.dll [ntdll.dll!RtlAllocateHeap] 77AF0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!HeapFree] 77AF0320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetModuleHandleW] 776402B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!VirtualAlloc] 77AF0390 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 776405C0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExW] 77640470 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetModuleFileNameW] 776401D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExA] 77640400 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryA] 77640390 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] 77640320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FreeLibrary] 776400F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\Secur32.dll [ntdll.dll!RtlAllocateHeap] 77AF0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\Secur32.dll [ntdll.dll!RtlFreeHeap] 77AF0080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryExA] 77640400 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!FreeLibrary] 776400F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetModuleHandleW] 776402B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] 77640320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 776405C0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!CreateThread] 77AF01D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetModuleHandleA] 77640240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!SetErrorMode] 77640550 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryW] 776404E0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!HeapFree] 77AF0320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 776405C0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryExW] 77640470 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] 77640320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryA] 77640390 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!FreeLibrary] 776400F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetModuleFileNameW] 776401D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetModuleFileNameA] 77640160 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1980] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetModuleHandleW] 776402B0 IAT C:\Windows\Explorer.EXE[2552] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc] [74552494] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2552] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup] [74535624] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2552] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown] [745356E2] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2552] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree] [7455250F] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2552] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics] [74548573] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2552] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage] [74544D27] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2552] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth] [745450CE] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2552] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight] [745451A3] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2552] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromHBITMAP] [745466D0] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2552] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC] [745482CA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2552] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode] [74548819] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2552] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode] [7454907A] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2552] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI] [7454E21D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2552] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage] [74544C59] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\kernel32.dll [ntdll.dll!RtlReAllocateHeap] 00490240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\kernel32.dll [ntdll.dll!RtlSizeHeap] 004902B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\kernel32.dll [ntdll.dll!RtlAllocateHeap] 00490320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\kernel32.dll [ntdll.dll!RtlFreeHeap] 00490390 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ADVAPI32.dll [ntdll.dll!RtlFreeHeap] 77AF0710 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ADVAPI32.dll [ntdll.dll!RtlAllocateHeap] 77AF0780 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ADVAPI32.dll [ntdll.dll!RtlReAllocateHeap] 77AF07F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!VirtualFree] 77AF08D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetModuleFileNameW] 77640E10 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 77640E80 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!SetErrorMode] 77640EF0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 77640F60 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 00640010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FreeLibrary] 00640080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 006400F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!HeapFree] 77AF0A90 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExA] 00640160 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 006401D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetModuleHandleW] 00640240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\RPCRT4.dll [ntdll.dll!RtlFreeHeap] 77AF0C50 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\RPCRT4.dll [ntdll.dll!RtlAllocateHeap] 77AF0CC0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!RtlFreeHeap] 004A02B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] 00640A90 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] 00640B00 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 00640B70 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateThread] 004A0320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!HeapFree] 004A0400 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetModuleFileNameA] 00640BE0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetModuleFileNameW] 00640C50 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetModuleHandleW] 00640CC0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetModuleHandleA] 00640D30 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 00640DA0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 00640E10 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 00640E80 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FreeLibrary] 00640EF0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] 00640F60 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetErrorMode] 01820010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 01820080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\GDI32.dll [ntdll.dll!RtlAllocateHeap] 004A0470 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\GDI32.dll [ntdll.dll!RtlFreeHeap] 004A04E0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 018200F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 01820160 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 018201D0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 01820240 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!FreeLibrary] 018202B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 01820320 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetModuleHandleA] 01820390 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\USER32.dll [ntdll.dll!RtlSizeHeap] 004A0550 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\USER32.dll [ntdll.dll!RtlReAllocateHeap] 004A05C0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\USER32.dll [ntdll.dll!RtlAllocateHeap] 004A0630 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\USER32.dll [ntdll.dll!RtlFreeHeap] 004A06A0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetModuleHandleW] 01820400 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 01820470 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateThread] 004A0710 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateProcessW] 018204E0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetModuleFileNameA] 01820550 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetModuleHandleA] 018205C0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExA] 01820630 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] 018206A0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FreeLibrary] 01820710 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 01820780 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 018207F0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetModuleFileNameW] 01820860 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ole32.dll [ntdll.dll!RtlFreeHeap] 004A09B0 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ole32.dll [ntdll.dll!RtlAllocateHeap] 004A0A20 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ole32.dll [ntdll.dll!RtlReAllocateHeap] 004A0A90 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 01830010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 01830080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\NETAPI32.dll [ntdll.dll!RtlAllocateHeap] 77AF0010 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\NETAPI32.dll [ntdll.dll!RtlFreeHeap] 77AF0080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!RtlFreeHeap] 77AF0080 IAT C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2736] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!RtlAllocateHeap] 77AF0010 IAT C:\Program Files\SpyShelter Personal Free\SpyShelter.exe[2756] @ C:\Windows\system32\ole32.dll [USER32.dll!LoadCursorW] 01E45510 IAT C:\Program Files\SpyShelter Personal Free\SpyShelter.exe[2756] @ C:\Windows\system32\ole32.dll [USER32.dll!LoadIconW] 01E45570 IAT C:\Program Files\SpyShelter Personal Free\SpyShelter.exe[2756] @ C:\Windows\system32\ole32.dll [USER32.dll!CreateDialogParamW] 01E45760 IAT C:\Program Files\SpyShelter Personal Free\SpyShelter.exe[2756] @ C:\Windows\system32\ole32.dll [USER32.dll!DialogBoxParamW] 01E45800 IAT C:\Program Files\SpyShelter Personal Free\SpyShelter.exe[2756] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GlobalLock] 01E44F10 IAT C:\Program Files\SpyShelter Personal Free\SpyShelter.exe[2756] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GlobalUnlock] 01E44ED0 IAT C:\Program Files\SpyShelter Personal Free\SpyShelter.exe[2756] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 01E42460 IAT C:\Program Files\SpyShelter Personal Free\SpyShelter.exe[2756] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 01E42180 IAT C:\Program Files\SpyShelter Personal Free\SpyShelter.exe[2756] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetVersion] 01E452A0 IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetModuleHandleW] [00DBF8E1] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SearchPathW] [00DBED61] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [00DBF89F] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CloseHandle] [00DBFC5D] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!ReadFile] [00DBFC84] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindClose] [00DBF092] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] [00DBF0EA] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] [00DBEE72] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!UnmapViewOfFile] [00DBFDD5] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetFileSize] [00DBF3ED] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!MapViewOfFile] [00DBFD96] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateFileMappingW] [00DBFD5A] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetModuleFileNameA] [00DBF423] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetModuleHandleA] [00DBF8B3] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExA] [00DBF7D6] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [00DBE806] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FreeLibrary] [00DBFA5C] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [00DBF977] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [00DBF88C] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetModuleFileNameW] [00DBF45D] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateFileW] [00DBFB9E] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [00DBE806] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [00DBF89F] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [00DBF7C3] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SetFilePointer] [00DBFCDC] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CreateFileMappingW] [00DBFD5A] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!MapViewOfFile] [00DBFD96] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!UnmapViewOfFile] [00DBFDD5] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SearchPathW] [00DBED61] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [00DBF88C] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!FreeLibrary] [00DBFA5C] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [00DBF977] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetModuleHandleA] [00DBF8B3] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CloseHandle] [00DBFC5D] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CreateFileW] [00DBFB9E] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetModuleFileNameW] [00DBF45D] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] [00DBF89F] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetFileSize] [00DBF3ED] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] [00DBF0EA] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] [00DBEF7C] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [00DBF977] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [00DBF7C3] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!CloseHandle] [00DBFC5D] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FreeLibrary] [00DBFA5C] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [00DBF88C] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!CreateFileW] [00DBFB9E] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetFileAttributesW] [00DBF230] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!SearchPathW] [00DBED61] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExA] [00DBF7D6] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [00DBE806] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetFileAttributesExW] [00DBF2E2] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!SetFilePointer] [00DBFCDC] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetModuleHandleW] [00DBF8E1] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!CreateFileMappingW] [00DBFD5A] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!ReadFile] [00DBFC84] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!MapViewOfFile] [00DBFD96] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!UnmapViewOfFile] [00DBFDD5] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetLongPathNameW] [00DBF51A] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindClose] [00DBF092] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [00DBF88C] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [00DBF7C3] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [00DBF88C] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetModuleFileNameA] [00DBF423] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetModuleFileNameW] [00DBF45D] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!ReadFile] [00DBFC84] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFilePointer] [00DBFCDC] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!MapViewOfFile] [00DBFD96] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileMappingA] [00DBFD1E] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringA] [00DBF615] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileMappingW] [00DBFD5A] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetModuleHandleW] [00DBF8E1] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetModuleHandleA] [00DBF8B3] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [00DBF7C3] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!UnmapViewOfFile] [00DBFDD5] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [00DBF89F] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] [00DBEE72] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] [00DBF0EA] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileW] [00DBFB9E] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathW] [00DBED61] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesW] [00DBF230] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileA] [00DBFB56] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [00DBF977] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FreeLibrary] [00DBFA5C] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [00DBF7D6] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesA] [00DBF203] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathA] [00DBED07] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindClose] [00DBF092] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] [00DBF0B9] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] [00DBEE45] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CloseHandle] [00DBFC5D] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [00DBE806] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [00DBF7C3] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) IAT E:\Folder Lock\Folder Lock.exe[4484] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [00DBF88C] E:\Folder Lock\Folder Lock.exe (Fast, reliable, portable and powerful./NewSoftwares.net Inc.) ---- Devices - GMER 1.0.15 ---- Device \FileSystem\Ntfs \Ntfs 85D7F1F8 Device \FileSystem\fastfat \FatCdrom 87CF0500 Device \Driver\volmgr \Device\VolMgrControl 85D7B1F8 Device \Driver\usbuhci \Device\USBPDO-0 871691F8 Device \Driver\usbuhci \Device\USBPDO-1 871691F8 Device \Driver\usbuhci \Device\USBPDO-2 871691F8 Device \Driver\PCI_PNP9250 \Device\00000053 spyh.sys Device \Driver\usbehci \Device\USBPDO-3 87100500 Device \Driver\usbuhci \Device\USBPDO-4 871691F8 Device \Driver\ACPI_HAL \Device\00000048 halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) AttachedDevice \Driver\tdx \Device\Tcp kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \Driver\usbuhci \Device\USBPDO-5 871691F8 Device \Driver\usbuhci \Device\USBPDO-6 871691F8 Device \Driver\sptd \Device\1035243251 spyh.sys Device \Driver\volmgr \Device\HarddiskVolume1 85D7B1F8 AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) Device \Driver\usbehci \Device\USBPDO-7 87100500 Device \Driver\NetBT \Device\NetBT_Tcpip_{8C15B5B1-D131-4A16-BCF9-915A55007D2D} 86F152F8 Device \Driver\cdrom \Device\CdRom0 86DD4500 Device \Driver\volmgr \Device\HarddiskVolume2 85D7B1F8 AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) Device \Driver\USBSTOR \Device\00000072 8787D1F8 Device \Driver\volmgr \Device\HarddiskVolume3 85D7B1F8 AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) Device \Driver\cdrom \Device\CdRom1 86DD4500 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-0 85D7D1F8 Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-2 85D7D1F8 Device \Driver\atapi \Device\Ide\IdePort0 85D7D1F8 Device \Driver\atapi \Device\Ide\IdePort1 85D7D1F8 Device \Driver\atapi \Device\Ide\IdePort2 85D7D1F8 Device \Driver\atapi \Device\Ide\IdePort3 85D7D1F8 Device \Driver\atapi \Device\Ide\IdePort4 85D7D1F8 Device \Driver\atapi \Device\Ide\IdePort5 85D7D1F8 Device \Driver\USBSTOR \Device\00000073 8787D1F8 Device \Driver\volmgr \Device\HarddiskVolume4 85D7B1F8 AttachedDevice \Driver\volmgr \Device\HarddiskVolume4 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) Device \Driver\volmgr \Device\HarddiskVolume5 85D7B1F8 AttachedDevice \Driver\volmgr \Device\HarddiskVolume5 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) Device \Driver\USBSTOR \Device\00000081 8787D1F8 Device \Driver\volmgr \Device\HarddiskVolume6 85D7B1F8 AttachedDevice \Driver\volmgr \Device\HarddiskVolume6 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) Device \Driver\USBSTOR \Device\00000082 8787D1F8 Device \Driver\volmgr \Device\HarddiskVolume7 85D7B1F8 AttachedDevice \Driver\volmgr \Device\HarddiskVolume7 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) Device \Driver\USBSTOR \Device\00000083 8787D1F8 Device \Driver\NetBT \Device\NetBt_Wins_Export 86F152F8 Device \Driver\volmgr \Device\HarddiskVolume8 85D7B1F8 AttachedDevice \Driver\volmgr \Device\HarddiskVolume8 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) Device \Driver\USBSTOR \Device\00000084 8787D1F8 Device \Driver\USBSTOR \Device\00000085 8787D1F8 AttachedDevice \Driver\tdx \Device\Udp kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \Driver\usbuhci \Device\USBFDO-0 871691F8 Device \Driver\usbuhci \Device\USBFDO-1 871691F8 Device \Driver\usbuhci \Device\USBFDO-2 871691F8 Device \Driver\usbehci \Device\USBFDO-3 87100500 Device \Driver\usbuhci \Device\USBFDO-4 871691F8 Device \Driver\usbuhci \Device\USBFDO-5 871691F8 Device \Driver\usbuhci \Device\USBFDO-6 871691F8 Device \Driver\usbehci \Device\USBFDO-7 87100500 Device \Driver\as7vjqwr \Device\Scsi\as7vjqwr1Port6Path0Target0Lun0 87125500 Device \Driver\as7vjqwr \Device\Scsi\as7vjqwr1 87125500 Device \FileSystem\fastfat \Fat 87CF0500 AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Menedżer filtrów systemu plików firmy Microsoft/Microsoft Corporation) Device \FileSystem\cdfs \Cdfs 87BE0500 ---- Registry - GMER 1.0.15 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\111111111111 Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s1 771343423 Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s2 285507792 Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@h0 1 Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\ Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0 Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x28 0xA9 0x22 0x8D ... Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xE1 0x92 0x9E 0xD9 ... Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x69 0x28 0x40 0x62 ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\111111111111 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\ Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0 Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x28 0xA9 0x22 0x8D ... Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xE1 0x92 0x9E 0xD9 ... Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x69 0x28 0x40 0x62 ... ---- EOF - GMER 1.0.15 ----