GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2011-07-29 17:36:05
Windows 5.1.2600 Dodatek Service Pack 3 Harddisk0\DR0 -> \Device\Scsi\nvgts1Port2Path0Target0Lun0 SAMSUNG_ rev.1AA0
Running: 86hdvclt.exe; Driver: C:\DOCUME~1\marian\USTAWI~1\Temp\aftyrkoc.sys


---- System - GMER 1.0.15 ----

SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwAdjustPrivilegesToken [0xACF0E8B2]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwConnectPort [0xACF0DE48]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwCreateFile [0xACF0E518]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwCreateKey [0xACF0F126]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwCreatePort [0xACF0DD28]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwCreateSection [0xACF111E0]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwCreateSymbolicLinkObject [0xACF11568]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwCreateThread [0xACF0D714]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwDeleteKey [0xACF0EA9E]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwDeleteValueKey [0xACF0EC9E]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwDuplicateObject [0xACF0D51A]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwEnumerateKey [0xACF0F864]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwEnumerateValueKey [0xACF0FABA]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwLoadDriver [0xACF10BF0]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwMakeTemporaryObject [0xACF0E110]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwOpenFile [0xACF0E6F4]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwOpenKey [0xACF0F116]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwOpenProcess [0xACF0D148]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwOpenSection [0xACF0E3B4]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwOpenThread [0xACF0D34C]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwQueryKey [0xACF0FCC8]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwQueryMultipleValueKey [0xACF1011C]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwQueryValueKey [0xACF0FEDA]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwRenameKey [0xACF0F67C]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwRequestWaitReplyPort [0xACF1068C]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwSecureConnectPort [0xACF10940]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwSetSecurityObject [0xACF0EEEE]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwSetSystemInformation [0xACF10EE8]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwSetValueKey [0xACF0F3F4]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwShutdownSystem [0xACF0E07A]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwSystemDebugControl [0xACF0E2A0]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwTerminateProcess [0xACF0DB2A]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                           ZwTerminateThread [0xACF0D918]

---- Kernel code sections - GMER 1.0.15 ----

.text           ntkrnlpa.exe!ZwCallbackReturn + 2C10                                                                                 805044AC 4 Bytes  CALL CBCEF1A1 
.text           ntkrnlpa.exe!ZwCallbackReturn + 2CE0                                                                                 8050457C 4 Bytes  [9E, EA, F0, AC]
.text           ntkrnlpa.exe!ZwCallbackReturn + 2FA4                                                                                 80504840 4 Bytes  CALL 98FD3953 
.text           C:\WINDOWS\system32\DRIVERS\ati2mtag.sys                                                                             section is writeable [0xB9715000, 0x235297, 0xE8000020]

---- User code sections - GMER 1.0.15 ----

.text           C:\WINDOWS\system32\svchost.exe[280] ntdll.dll!NtAllocateVirtualMemory                                               7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ntdll.dll!NtClose                                                               7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ntdll.dll!NtCreateFile                                                          7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ntdll.dll!NtCreateProcess                                                       7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ntdll.dll!NtCreateProcessEx                                                     7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ntdll.dll!NtDeleteFile                                                          7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ntdll.dll!NtFreeVirtualMemory                                                   7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ntdll.dll!NtLoadDriver                                                          7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ntdll.dll!NtOpenFile                                                            7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ntdll.dll!NtProtectVirtualMemory                                                7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ntdll.dll!NtSetInformationProcess                                               7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ntdll.dll!NtUnloadDriver                                                        7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ntdll.dll!NtWriteVirtualMemory                                                  7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ntdll.dll!RtlAllocateHeap                                                       7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ntdll.dll!LdrLoadDll                                                            7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ntdll.dll!LdrUnloadDll                                                          7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ntdll.dll!LdrGetProcedureAddress                                                7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!CreateFileA                                                        7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!VirtualProtect                                                     7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!LoadLibraryExW                                                     7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!LoadLibraryExA                                                     7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!LoadLibraryA                                                       7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!CreateProcessW                                                     7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!CreateProcessA                                                     7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!GetProcAddress                                                     7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!LoadLibraryW                                                       7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!GetModuleHandleA                                                   7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!GetModuleHandleW                                                   7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!CreateFileW                                                        7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!MoveFileWithProgressW                                              7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!MoveFileW                                                          7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!OpenFile                                                           7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!CopyFileExW                                                        7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!CopyFileA                                                          7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!CopyFileW                                                          7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!DeleteFileA                                                        7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!DeleteFileW                                                        7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!MoveFileExW                                                        7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!MoveFileA                                                          7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!MoveFileWithProgressA                                              7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!MoveFileExA                                                        7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!CopyFileExA                                                        7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!WinExec                                                            7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!WinExec + 3                                                        7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\system32\svchost.exe[280] kernel32.dll!LoadModule                                                         7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ADVAPI32.dll!CreateProcessAsUserW                                               77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ADVAPI32.dll!CreateProcessAsUserA                                               77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] USER32.dll!EndTask                                                              7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ole32.dll!CoCreateInstanceEx                                                    774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] ole32.dll!CoGetClassObject                                                      775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] SHELL32.dll!ShellExecuteExW                                                     7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] SHELL32.dll!ShellExecuteEx                                                      7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] SHELL32.dll!ShellExecuteA                                                       7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[280] SHELL32.dll!ShellExecuteW                                                       7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ntdll.dll!NtAllocateVirtualMemory         7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ntdll.dll!NtClose                         7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ntdll.dll!NtCreateFile                    7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ntdll.dll!NtCreateProcess                 7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ntdll.dll!NtCreateProcessEx               7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ntdll.dll!NtDeleteFile                    7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ntdll.dll!NtFreeVirtualMemory             7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ntdll.dll!NtLoadDriver                    7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ntdll.dll!NtOpenFile                      7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ntdll.dll!NtProtectVirtualMemory          7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ntdll.dll!NtSetInformationProcess         7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ntdll.dll!NtUnloadDriver                  7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ntdll.dll!NtWriteVirtualMemory            7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ntdll.dll!RtlAllocateHeap                 7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ntdll.dll!LdrLoadDll                      7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ntdll.dll!LdrUnloadDll                    7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ntdll.dll!LdrGetProcedureAddress          7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!CreateFileA                  7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!VirtualProtect               7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!LoadLibraryExW               7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!LoadLibraryExA               7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!LoadLibraryA                 7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!CreateProcessW               7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!CreateProcessA               7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!GetProcAddress               7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!LoadLibraryW                 7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!GetModuleHandleA             7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!GetModuleHandleW             7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!CreateFileW                  7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!MoveFileWithProgressW        7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!MoveFileW                    7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!OpenFile                     7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!CopyFileExW                  7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!CopyFileA                    7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!CopyFileW                    7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!DeleteFileA                  7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!DeleteFileW                  7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!MoveFileExW                  7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!MoveFileA                    7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!MoveFileWithProgressA        7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!MoveFileExA                  7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!CopyFileExA                  7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!WinExec                      7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!WinExec + 3                  7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] KERNEL32.dll!LoadModule                   7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] USER32.dll!EndTask                        7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ADVAPI32.dll!CreateProcessAsUserW         77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ADVAPI32.dll!CreateProcessAsUserA         77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] shell32.dll!ShellExecuteExW               7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] shell32.dll!ShellExecuteEx                7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] shell32.dll!ShellExecuteA                 7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] shell32.dll!ShellExecuteW                 7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ole32.dll!CoCreateInstanceEx              774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe[468] ole32.dll!CoGetClassObject                775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ntdll.dll!NtAllocateVirtualMemory                                          7C90CF6E 5 Bytes  JMP 02987E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ntdll.dll!NtClose                                                          7C90CFEE 5 Bytes  JMP 0297CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ntdll.dll!NtCreateFile                                                     7C90D0AE 5 Bytes  JMP 02987E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ntdll.dll!NtCreateProcess                                                  7C90D14E 5 Bytes  JMP 02987ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ntdll.dll!NtCreateProcessEx                                                7C90D15E 5 Bytes  JMP 02987EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ntdll.dll!NtDeleteFile                                                     7C90D23E 5 Bytes  JMP 02987E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ntdll.dll!NtFreeVirtualMemory                                              7C90D38E 5 Bytes  JMP 029874E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ntdll.dll!NtLoadDriver                                                     7C90D46E 5 Bytes  JMP 02987E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ntdll.dll!NtOpenFile                                                       7C90D59E 5 Bytes  JMP 02987DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ntdll.dll!NtProtectVirtualMemory                                           7C90D6EE 5 Bytes  JMP 02987490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ntdll.dll!NtSetInformationProcess                                          7C90DC9E 5 Bytes  JMP 02987DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ntdll.dll!NtUnloadDriver                                                   7C90DEBE 5 Bytes  JMP 02987DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ntdll.dll!NtWriteVirtualMemory                                             7C90DFAE 5 Bytes  JMP 02987E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ntdll.dll!RtlAllocateHeap                                                  7C9100C4 5 Bytes  JMP 02987530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ntdll.dll!LdrLoadDll                                                       7C91632D 5 Bytes  JMP 02985680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ntdll.dll!LdrUnloadDll                                                     7C9171CD 5 Bytes  JMP 0297CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ntdll.dll!LdrGetProcedureAddress                                           7C917CF0 5 Bytes  JMP 02987D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!CreateFileA                                                   7C801A28 5 Bytes  JMP 02987CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!VirtualProtect                                                7C801AD4 5 Bytes  JMP 02987A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!LoadLibraryExW                                                7C801AF5 7 Bytes  JMP 02987D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!LoadLibraryExA                                                7C801D53 5 Bytes  JMP 02987D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!LoadLibraryA                                                  7C801D7B 5 Bytes  JMP 02987AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!CreateProcessW                                                7C802336 5 Bytes  JMP 029826F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!CreateProcessA                                                7C80236B 5 Bytes  JMP 02983280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!GetProcAddress                                                7C80AE40 5 Bytes  JMP 02987D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!LoadLibraryW                                                  7C80AEEB 5 Bytes  JMP 02987AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!GetModuleHandleA                                              7C80B741 5 Bytes  JMP 02987B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!GetModuleHandleW                                              7C80E4DD 5 Bytes  JMP 02987AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!CreateFileW                                                   7C810800 5 Bytes  JMP 02987CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!MoveFileWithProgressW                                         7C81F72E 5 Bytes  JMP 02987B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!MoveFileW                                                     7C821261 5 Bytes  JMP 02987BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!OpenFile                                                      7C821982 5 Bytes  JMP 02987CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!CopyFileExW                                                   7C827B32 7 Bytes  JMP 02987C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!CopyFileA                                                     7C8286EE 5 Bytes  JMP 02987C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!CopyFileW                                                     7C82F87B 5 Bytes  JMP 02987C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!DeleteFileA                                                   7C831EDD 5 Bytes  JMP 02987B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!DeleteFileW                                                   7C831F63 5 Bytes  JMP 02987B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!MoveFileExW                                                   7C83568B 5 Bytes  JMP 02987BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!MoveFileA                                                     7C835EBF 5 Bytes  JMP 02987C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!MoveFileWithProgressA                                         7C835EDE 5 Bytes  JMP 02987B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!MoveFileExA                                                   7C85E49B 5 Bytes  JMP 02987BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!CopyFileExA                                                   7C85F39C 5 Bytes  JMP 02987C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!WinExec                                                       7C86250D 2 Bytes  JMP 02987A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!WinExec + 3                                                   7C862510 2 Bytes  [12, 86]
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] kernel32.dll!LoadModule                                                    7C86261E 5 Bytes  JMP 02987D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] USER32.dll!EndTask                                                         7E3AA0A5 5 Bytes  JMP 0298DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ole32.dll!CoCreateInstanceEx                                               774EF154 5 Bytes  JMP 0298E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ole32.dll!CoGetClassObject                                                 775051F5 5 Bytes  JMP 0298E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ADVAPI32.dll!CreateProcessAsUserW                                          77DDA8A9 5 Bytes  JMP 02981220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] ADVAPI32.dll!CreateProcessAsUserA                                          77E00CE8 5 Bytes  JMP 02981B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] SHELL32.dll!ShellExecuteExW                                                7CA098CB 5 Bytes  JMP 029879F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] SHELL32.dll!ShellExecuteEx                                                 7CA40E45 5 Bytes  JMP 02987A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] SHELL32.dll!ShellExecuteA                                                  7CA41170 5 Bytes  JMP 02987A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] SHELL32.dll!ShellExecuteW                                                  7CAB5D48 5 Bytes  JMP 02987A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] WS2_32.dll!WSASocketW                                                      71A5404E 7 Bytes  JMP 02987970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] WS2_32.dll!WSASocketA                                                      71A58B6A 5 Bytes  JMP 02987990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] WININET.dll!InternetConnectA                                               3FD0DEAE 5 Bytes  JMP 029879D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Gadu-Gadu 10\gg.exe[520] WININET.dll!InternetConnectW                                               3FD0F862 5 Bytes  JMP 029879B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!NtAllocateVirtualMemory                                              7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!NtClose                                                              7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!NtCreateFile                                                         7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!NtCreateProcess                                                      7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!NtCreateProcessEx                                                    7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!NtDeleteFile                                                         7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!NtFreeVirtualMemory                                                  7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!NtLoadDriver                                                         7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!NtOpenFile                                                           7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!NtProtectVirtualMemory                                               7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!NtReplyWaitReceivePort                                               7C90DA8E 5 Bytes  JMP 10028AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!NtReplyWaitReceivePortEx                                             7C90DA9E 5 Bytes  JMP 10028870 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!NtSetInformationProcess                                              7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!NtUnloadDriver                                                       7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!NtWriteVirtualMemory                                                 7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!RtlAllocateHeap                                                      7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!LdrLoadDll                                                           7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!LdrUnloadDll                                                         7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ntdll.dll!LdrGetProcedureAddress                                               7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!CreateFileA                                                       7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!VirtualProtect                                                    7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!LoadLibraryExW                                                    7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!LoadLibraryExA                                                    7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!LoadLibraryA                                                      7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!CreateProcessW                                                    7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!CreateProcessA                                                    7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!GetProcAddress                                                    7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!LoadLibraryW                                                      7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!GetModuleHandleA                                                  7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!GetModuleHandleW                                                  7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!CreateFileW                                                       7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!MoveFileWithProgressW                                             7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!MoveFileW                                                         7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!OpenFile                                                          7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!CopyFileExW                                                       7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!CopyFileA                                                         7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!CopyFileW                                                         7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!DeleteFileA                                                       7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!DeleteFileW                                                       7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!MoveFileExW                                                       7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!MoveFileA                                                         7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!MoveFileWithProgressA                                             7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!MoveFileExA                                                       7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!CopyFileExA                                                       7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!WinExec                                                           7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!WinExec + 3                                                       7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\system32\services.exe[776] kernel32.dll!LoadModule                                                        7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ADVAPI32.dll!CreateProcessAsUserW                                              77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] ADVAPI32.dll!CreateProcessAsUserA                                              77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[776] USER32.dll!EndTask                                                             7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ntdll.dll!NtAllocateVirtualMemory                                                 7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ntdll.dll!NtClose                                                                 7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ntdll.dll!NtCreateFile                                                            7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ntdll.dll!NtCreateProcess                                                         7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ntdll.dll!NtCreateProcessEx                                                       7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ntdll.dll!NtDeleteFile                                                            7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ntdll.dll!NtFreeVirtualMemory                                                     7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ntdll.dll!NtLoadDriver                                                            7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ntdll.dll!NtOpenFile                                                              7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ntdll.dll!NtProtectVirtualMemory                                                  7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ntdll.dll!NtSetInformationProcess                                                 7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ntdll.dll!NtUnloadDriver                                                          7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ntdll.dll!NtWriteVirtualMemory                                                    7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ntdll.dll!RtlAllocateHeap                                                         7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ntdll.dll!LdrLoadDll                                                              7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ntdll.dll!LdrUnloadDll                                                            7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ntdll.dll!LdrGetProcedureAddress                                                  7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!CreateFileA                                                          7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!VirtualProtect                                                       7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!LoadLibraryExW                                                       7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!LoadLibraryExA                                                       7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!LoadLibraryA                                                         7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!CreateProcessW                                                       7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!CreateProcessA                                                       7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!GetProcAddress                                                       7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!LoadLibraryW                                                         7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!GetModuleHandleA                                                     7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!GetModuleHandleW                                                     7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!CreateFileW                                                          7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!MoveFileWithProgressW                                                7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!MoveFileW                                                            7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!OpenFile                                                             7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!CopyFileExW                                                          7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!CopyFileA                                                            7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!CopyFileW                                                            7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!DeleteFileA                                                          7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!DeleteFileW                                                          7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!MoveFileExW                                                          7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!MoveFileA                                                            7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!MoveFileWithProgressA                                                7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!MoveFileExA                                                          7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!CopyFileExA                                                          7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!WinExec                                                              7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!WinExec + 3                                                          7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\system32\lsass.exe[788] kernel32.dll!LoadModule                                                           7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ADVAPI32.dll!CreateProcessAsUserW                                                 77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ADVAPI32.dll!CreateProcessAsUserA                                                 77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] USER32.dll!EndTask                                                                7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] WS2_32.dll!WSASocketW                                                             71A5404E 7 Bytes  JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] WS2_32.dll!WSASocketA                                                             71A58B6A 5 Bytes  JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ole32.dll!CoCreateInstanceEx                                                      774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] ole32.dll!CoGetClassObject                                                        775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] SHELL32.dll!ShellExecuteExW                                                       7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] SHELL32.dll!ShellExecuteEx                                                        7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] SHELL32.dll!ShellExecuteA                                                         7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[788] SHELL32.dll!ShellExecuteW                                                         7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ntdll.dll!NtAllocateVirtualMemory                       7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ntdll.dll!NtClose                                       7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ntdll.dll!NtCreateFile                                  7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ntdll.dll!NtCreateProcess                               7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ntdll.dll!NtCreateProcessEx                             7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ntdll.dll!NtDeleteFile                                  7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ntdll.dll!NtFreeVirtualMemory                           7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ntdll.dll!NtLoadDriver                                  7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ntdll.dll!NtOpenFile                                    7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ntdll.dll!NtProtectVirtualMemory                        7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ntdll.dll!NtSetInformationProcess                       7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ntdll.dll!NtUnloadDriver                                7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ntdll.dll!NtWriteVirtualMemory                          7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ntdll.dll!RtlAllocateHeap                               7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ntdll.dll!LdrLoadDll                                    7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ntdll.dll!LdrUnloadDll                                  7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ntdll.dll!LdrGetProcedureAddress                        7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!CreateFileA                                7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!VirtualProtect                             7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!LoadLibraryExW                             7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!LoadLibraryExA                             7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!LoadLibraryA                               7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!CreateProcessW                             7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!CreateProcessA                             7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!GetProcAddress                             7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!LoadLibraryW                               7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!GetModuleHandleA                           7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!GetModuleHandleW                           7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!CreateFileW                                7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!MoveFileWithProgressW                      7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!MoveFileW                                  7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!OpenFile                                   7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!CopyFileExW                                7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!CopyFileA                                  7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!CopyFileW                                  7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!DeleteFileA                                7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!DeleteFileW                                7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!MoveFileExW                                7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!MoveFileA                                  7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!MoveFileWithProgressA                      7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!MoveFileExA                                7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!CopyFileExA                                7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!WinExec                                    7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!WinExec + 3                                7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] kernel32.dll!LoadModule                                 7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] WS2_32.dll!WSASocketW                                   71A5404E 7 Bytes  JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] WS2_32.dll!WSASocketA                                   71A58B6A 5 Bytes  JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ADVAPI32.dll!CreateProcessAsUserW                       77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ADVAPI32.dll!CreateProcessAsUserA                       77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] USER32.dll!EndTask                                      7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ole32.dll!CoCreateInstanceEx                            774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] ole32.dll!CoGetClassObject                              775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] SHELL32.dll!ShellExecuteExW                             7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] SHELL32.dll!ShellExecuteEx                              7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] SHELL32.dll!ShellExecuteA                               7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe[860] SHELL32.dll!ShellExecuteW                               7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ntdll.dll!NtAllocateVirtualMemory                                              7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ntdll.dll!NtClose                                                              7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ntdll.dll!NtCreateFile                                                         7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ntdll.dll!NtCreateProcess                                                      7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ntdll.dll!NtCreateProcessEx                                                    7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ntdll.dll!NtDeleteFile                                                         7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ntdll.dll!NtFreeVirtualMemory                                                  7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ntdll.dll!NtLoadDriver                                                         7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ntdll.dll!NtOpenFile                                                           7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ntdll.dll!NtProtectVirtualMemory                                               7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ntdll.dll!NtSetInformationProcess                                              7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ntdll.dll!NtUnloadDriver                                                       7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ntdll.dll!NtWriteVirtualMemory                                                 7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ntdll.dll!RtlAllocateHeap                                                      7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ntdll.dll!LdrLoadDll                                                           7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ntdll.dll!LdrUnloadDll                                                         7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ntdll.dll!LdrGetProcedureAddress                                               7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!CreateFileA                                                       7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!VirtualProtect                                                    7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!LoadLibraryExW                                                    7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!LoadLibraryExA                                                    7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!LoadLibraryA                                                      7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!CreateProcessW                                                    7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!CreateProcessA                                                    7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!GetProcAddress                                                    7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!LoadLibraryW                                                      7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!GetModuleHandleA                                                  7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!GetModuleHandleW                                                  7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!CreateFileW                                                       7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!MoveFileWithProgressW                                             7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!MoveFileW                                                         7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!OpenFile                                                          7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!CopyFileExW                                                       7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!CopyFileA                                                         7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!CopyFileW                                                         7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!DeleteFileA                                                       7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!DeleteFileW                                                       7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!MoveFileExW                                                       7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!MoveFileA                                                         7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!MoveFileWithProgressA                                             7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!MoveFileExA                                                       7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!CopyFileExA                                                       7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!WinExec                                                           7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!WinExec + 3                                                       7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] kernel32.dll!LoadModule                                                        7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] USER32.dll!EndTask                                                             7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ole32.dll!CoCreateInstanceEx                                                   774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ole32.dll!CoGetClassObject                                                     775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ADVAPI32.dll!CreateProcessAsUserW                                              77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[956] ADVAPI32.dll!CreateProcessAsUserA                                              77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ntdll.dll!NtAllocateVirtualMemory                                               7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ntdll.dll!NtClose                                                               7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ntdll.dll!NtCreateFile                                                          7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ntdll.dll!NtCreateProcess                                                       7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ntdll.dll!NtCreateProcessEx                                                     7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ntdll.dll!NtDeleteFile                                                          7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ntdll.dll!NtFreeVirtualMemory                                                   7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ntdll.dll!NtLoadDriver                                                          7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ntdll.dll!NtOpenFile                                                            7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ntdll.dll!NtProtectVirtualMemory                                                7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ntdll.dll!NtSetInformationProcess                                               7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ntdll.dll!NtUnloadDriver                                                        7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ntdll.dll!NtWriteVirtualMemory                                                  7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ntdll.dll!RtlAllocateHeap                                                       7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ntdll.dll!LdrLoadDll                                                            7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ntdll.dll!LdrUnloadDll                                                          7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ntdll.dll!LdrGetProcedureAddress                                                7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!CreateFileA                                                        7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!VirtualProtect                                                     7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!LoadLibraryExW                                                     7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!LoadLibraryExA                                                     7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!LoadLibraryA                                                       7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!CreateProcessW                                                     7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!CreateProcessA                                                     7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!GetProcAddress                                                     7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!LoadLibraryW                                                       7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!GetModuleHandleA                                                   7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!GetModuleHandleW                                                   7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!CreateFileW                                                        7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!MoveFileWithProgressW                                              7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!MoveFileW                                                          7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!OpenFile                                                           7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!CopyFileExW                                                        7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!CopyFileA                                                          7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!CopyFileW                                                          7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!DeleteFileA                                                        7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!DeleteFileW                                                        7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!MoveFileExW                                                        7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!MoveFileA                                                          7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!MoveFileWithProgressA                                              7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!MoveFileExA                                                        7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!CopyFileExA                                                        7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!WinExec                                                            7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!WinExec + 3                                                        7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!LoadModule                                                         7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ADVAPI32.dll!CreateProcessAsUserW                                               77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ADVAPI32.dll!CreateProcessAsUserA                                               77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] USER32.dll!EndTask                                                              7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ole32.dll!CoCreateInstanceEx                                                    774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] ole32.dll!CoGetClassObject                                                      775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] SHELL32.dll!ShellExecuteExW                                                     7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] SHELL32.dll!ShellExecuteEx                                                      7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] SHELL32.dll!ShellExecuteA                                                       7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[976] SHELL32.dll!ShellExecuteW                                                       7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ntdll.dll!NtAllocateVirtualMemory                                              7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ntdll.dll!NtClose                                                              7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ntdll.dll!NtCreateFile                                                         7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ntdll.dll!NtCreateProcess                                                      7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ntdll.dll!NtCreateProcessEx                                                    7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ntdll.dll!NtDeleteFile                                                         7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ntdll.dll!NtFreeVirtualMemory                                                  7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ntdll.dll!NtLoadDriver                                                         7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ntdll.dll!NtOpenFile                                                           7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ntdll.dll!NtProtectVirtualMemory                                               7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ntdll.dll!NtSetInformationProcess                                              7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ntdll.dll!NtUnloadDriver                                                       7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ntdll.dll!NtWriteVirtualMemory                                                 7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ntdll.dll!RtlAllocateHeap                                                      7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ntdll.dll!LdrLoadDll                                                           7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ntdll.dll!LdrUnloadDll                                                         7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ntdll.dll!LdrGetProcedureAddress                                               7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!CreateFileA                                                       7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!VirtualProtect                                                    7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!LoadLibraryExW                                                    7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!LoadLibraryExA                                                    7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!LoadLibraryA                                                      7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!CreateProcessW                                                    7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!CreateProcessA                                                    7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!GetProcAddress                                                    7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!LoadLibraryW                                                      7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!GetModuleHandleA                                                  7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!GetModuleHandleW                                                  7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!CreateFileW                                                       7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!MoveFileWithProgressW                                             7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!MoveFileW                                                         7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!OpenFile                                                          7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!CopyFileExW                                                       7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!CopyFileA                                                         7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!CopyFileW                                                         7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!DeleteFileA                                                       7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!DeleteFileW                                                       7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!MoveFileExW                                                       7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!MoveFileA                                                         7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!MoveFileWithProgressA                                             7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!MoveFileExA                                                       7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!CopyFileExA                                                       7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!WinExec                                                           7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!WinExec + 3                                                       7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\system32\svchost.exe[1032] kernel32.dll!LoadModule                                                        7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ADVAPI32.dll!CreateProcessAsUserW                                              77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ADVAPI32.dll!CreateProcessAsUserA                                              77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] USER32.dll!EndTask                                                             7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ole32.dll!CoCreateInstanceEx                                                   774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] ole32.dll!CoGetClassObject                                                     775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] SHELL32.dll!ShellExecuteExW                                                    7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] SHELL32.dll!ShellExecuteEx                                                     7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] SHELL32.dll!ShellExecuteA                                                      7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1032] SHELL32.dll!ShellExecuteW                                                      7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe[1144] ntdll.dll!NtAllocateVirtualMemory                7C90CF6E 5 Bytes  JMP 005166A0 C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (COMODO Internet Security/COMODO)
.text           C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe[1144] ntdll.dll!NtCreateFile                           7C90D0AE 5 Bytes  JMP 0052E5C0 C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ntdll.dll!NtAllocateVirtualMemory                                              7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ntdll.dll!NtClose                                                              7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ntdll.dll!NtCreateFile                                                         7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ntdll.dll!NtCreateProcess                                                      7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ntdll.dll!NtCreateProcessEx                                                    7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ntdll.dll!NtDeleteFile                                                         7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ntdll.dll!NtFreeVirtualMemory                                                  7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ntdll.dll!NtLoadDriver                                                         7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ntdll.dll!NtOpenFile                                                           7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ntdll.dll!NtProtectVirtualMemory                                               7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ntdll.dll!NtSetInformationProcess                                              7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ntdll.dll!NtUnloadDriver                                                       7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ntdll.dll!NtWriteVirtualMemory                                                 7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ntdll.dll!RtlAllocateHeap                                                      7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ntdll.dll!LdrLoadDll                                                           7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ntdll.dll!LdrUnloadDll                                                         7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ntdll.dll!LdrGetProcedureAddress                                               7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!CreateFileA                                                       7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!VirtualProtect                                                    7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!LoadLibraryExW                                                    7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!LoadLibraryExA                                                    7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!LoadLibraryA                                                      7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!CreateProcessW                                                    7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!CreateProcessA                                                    7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!GetProcAddress                                                    7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!LoadLibraryW                                                      7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!GetModuleHandleA                                                  7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!GetModuleHandleW                                                  7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!CreateFileW                                                       7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!MoveFileWithProgressW                                             7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!MoveFileW                                                         7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!OpenFile                                                          7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!CopyFileExW                                                       7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!CopyFileA                                                         7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!CopyFileW                                                         7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!DeleteFileA                                                       7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!DeleteFileW                                                       7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!MoveFileExW                                                       7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!MoveFileA                                                         7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!MoveFileWithProgressA                                             7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!MoveFileExA                                                       7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!CopyFileExA                                                       7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!WinExec                                                           7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!WinExec + 3                                                       7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\system32\svchost.exe[1204] kernel32.dll!LoadModule                                                        7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ADVAPI32.dll!CreateProcessAsUserW                                              77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ADVAPI32.dll!CreateProcessAsUserA                                              77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] USER32.dll!EndTask                                                             7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ole32.dll!CoCreateInstanceEx                                                   774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] ole32.dll!CoGetClassObject                                                     775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] SHELL32.dll!ShellExecuteExW                                                    7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] SHELL32.dll!ShellExecuteEx                                                     7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] SHELL32.dll!ShellExecuteA                                                      7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1204] SHELL32.dll!ShellExecuteW                                                      7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ntdll.dll!NtAllocateVirtualMemory                                              7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ntdll.dll!NtClose                                                              7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ntdll.dll!NtCreateFile                                                         7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ntdll.dll!NtCreateProcess                                                      7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ntdll.dll!NtCreateProcessEx                                                    7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ntdll.dll!NtDeleteFile                                                         7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ntdll.dll!NtFreeVirtualMemory                                                  7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ntdll.dll!NtLoadDriver                                                         7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ntdll.dll!NtOpenFile                                                           7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ntdll.dll!NtProtectVirtualMemory                                               7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ntdll.dll!NtSetInformationProcess                                              7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ntdll.dll!NtUnloadDriver                                                       7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ntdll.dll!NtWriteVirtualMemory                                                 7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ntdll.dll!RtlAllocateHeap                                                      7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ntdll.dll!LdrLoadDll                                                           7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ntdll.dll!LdrUnloadDll                                                         7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ntdll.dll!LdrGetProcedureAddress                                               7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!CreateFileA                                                       7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!VirtualProtect                                                    7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!LoadLibraryExW                                                    7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!LoadLibraryExA                                                    7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!LoadLibraryA                                                      7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!CreateProcessW                                                    7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!CreateProcessA                                                    7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!GetProcAddress                                                    7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!LoadLibraryW                                                      7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!GetModuleHandleA                                                  7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!GetModuleHandleW                                                  7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!CreateFileW                                                       7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!MoveFileWithProgressW                                             7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!MoveFileW                                                         7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!OpenFile                                                          7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!CopyFileExW                                                       7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!CopyFileA                                                         7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!CopyFileW                                                         7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!DeleteFileA                                                       7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!DeleteFileW                                                       7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!MoveFileExW                                                       7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!MoveFileA                                                         7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!MoveFileWithProgressA                                             7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!MoveFileExA                                                       7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!CopyFileExA                                                       7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!WinExec                                                           7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!WinExec + 3                                                       7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\system32\svchost.exe[1280] kernel32.dll!LoadModule                                                        7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ADVAPI32.dll!CreateProcessAsUserW                                              77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ADVAPI32.dll!CreateProcessAsUserA                                              77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] USER32.dll!EndTask                                                             7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ole32.dll!CoCreateInstanceEx                                                   774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] ole32.dll!CoGetClassObject                                                     775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] SHELL32.dll!ShellExecuteExW                                                    7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] SHELL32.dll!ShellExecuteEx                                                     7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] SHELL32.dll!ShellExecuteA                                                      7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1280] SHELL32.dll!ShellExecuteW                                                      7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ntdll.dll!NtAllocateVirtualMemory                                              7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ntdll.dll!NtClose                                                              7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ntdll.dll!NtCreateFile                                                         7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ntdll.dll!NtCreateProcess                                                      7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ntdll.dll!NtCreateProcessEx                                                    7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ntdll.dll!NtDeleteFile                                                         7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ntdll.dll!NtFreeVirtualMemory                                                  7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ntdll.dll!NtLoadDriver                                                         7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ntdll.dll!NtOpenFile                                                           7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ntdll.dll!NtProtectVirtualMemory                                               7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ntdll.dll!NtSetInformationProcess                                              7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ntdll.dll!NtUnloadDriver                                                       7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ntdll.dll!NtWriteVirtualMemory                                                 7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ntdll.dll!RtlAllocateHeap                                                      7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ntdll.dll!LdrLoadDll                                                           7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ntdll.dll!LdrUnloadDll                                                         7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ntdll.dll!LdrGetProcedureAddress                                               7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!CreateFileA                                                       7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!VirtualProtect                                                    7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!LoadLibraryExW                                                    7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!LoadLibraryExA                                                    7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!LoadLibraryA                                                      7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!CreateProcessW                                                    7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!CreateProcessA                                                    7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!GetProcAddress                                                    7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!LoadLibraryW                                                      7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!GetModuleHandleA                                                  7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!GetModuleHandleW                                                  7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!CreateFileW                                                       7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!MoveFileWithProgressW                                             7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!MoveFileW                                                         7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!OpenFile                                                          7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!CopyFileExW                                                       7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!CopyFileA                                                         7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!CopyFileW                                                         7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!DeleteFileA                                                       7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!DeleteFileW                                                       7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!MoveFileExW                                                       7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!MoveFileA                                                         7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!MoveFileWithProgressA                                             7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!MoveFileExA                                                       7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!CopyFileExA                                                       7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!WinExec                                                           7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!WinExec + 3                                                       7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\system32\svchost.exe[1372] kernel32.dll!LoadModule                                                        7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ADVAPI32.dll!CreateProcessAsUserW                                              77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ADVAPI32.dll!CreateProcessAsUserA                                              77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] USER32.dll!EndTask                                                             7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ole32.dll!CoCreateInstanceEx                                                   774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] ole32.dll!CoGetClassObject                                                     775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] SHELL32.dll!ShellExecuteExW                                                    7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] SHELL32.dll!ShellExecuteEx                                                     7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] SHELL32.dll!ShellExecuteA                                                      7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1372] SHELL32.dll!ShellExecuteW                                                      7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ntdll.dll!NtAllocateVirtualMemory                                             7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ntdll.dll!NtClose                                                             7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ntdll.dll!NtCreateFile                                                        7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ntdll.dll!NtCreateProcess                                                     7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ntdll.dll!NtCreateProcessEx                                                   7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ntdll.dll!NtDeleteFile                                                        7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ntdll.dll!NtFreeVirtualMemory                                                 7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ntdll.dll!NtLoadDriver                                                        7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ntdll.dll!NtOpenFile                                                          7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ntdll.dll!NtProtectVirtualMemory                                              7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ntdll.dll!NtSetInformationProcess                                             7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ntdll.dll!NtUnloadDriver                                                      7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ntdll.dll!NtWriteVirtualMemory                                                7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ntdll.dll!RtlAllocateHeap                                                     7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ntdll.dll!LdrLoadDll                                                          7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ntdll.dll!LdrUnloadDll                                                        7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ntdll.dll!LdrGetProcedureAddress                                              7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!CreateFileA                                                      7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!VirtualProtect                                                   7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!LoadLibraryExW                                                   7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!LoadLibraryExA                                                   7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!LoadLibraryA                                                     7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!CreateProcessW                                                   7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!CreateProcessA                                                   7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!GetProcAddress                                                   7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!LoadLibraryW                                                     7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!GetModuleHandleA                                                 7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!GetModuleHandleW                                                 7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!CreateFileW                                                      7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!MoveFileWithProgressW                                            7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!MoveFileW                                                        7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!OpenFile                                                         7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!CopyFileExW                                                      7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!CopyFileA                                                        7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!CopyFileW                                                        7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!DeleteFileA                                                      7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!DeleteFileW                                                      7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!MoveFileExW                                                      7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!MoveFileA                                                        7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!MoveFileWithProgressA                                            7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!MoveFileExA                                                      7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!CopyFileExA                                                      7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!WinExec                                                          7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!WinExec + 3                                                      7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] kernel32.dll!LoadModule                                                       7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] USER32.dll!EndTask                                                            7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ole32.dll!CoCreateInstanceEx                                                  774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ole32.dll!CoGetClassObject                                                    775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ADVAPI32.dll!CreateProcessAsUserW                                             77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\Ati2evxx.exe[1492] ADVAPI32.dll!CreateProcessAsUserA                                             77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ntdll.dll!NtAllocateVirtualMemory                                              7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ntdll.dll!NtClose                                                              7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ntdll.dll!NtCreateFile                                                         7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ntdll.dll!NtCreateProcess                                                      7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ntdll.dll!NtCreateProcessEx                                                    7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ntdll.dll!NtDeleteFile                                                         7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ntdll.dll!NtFreeVirtualMemory                                                  7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ntdll.dll!NtLoadDriver                                                         7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ntdll.dll!NtOpenFile                                                           7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ntdll.dll!NtProtectVirtualMemory                                               7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ntdll.dll!NtSetInformationProcess                                              7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ntdll.dll!NtUnloadDriver                                                       7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ntdll.dll!NtWriteVirtualMemory                                                 7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ntdll.dll!RtlAllocateHeap                                                      7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ntdll.dll!LdrLoadDll                                                           7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ntdll.dll!LdrUnloadDll                                                         7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ntdll.dll!LdrGetProcedureAddress                                               7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!CreateFileA                                                       7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!VirtualProtect                                                    7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!LoadLibraryExW                                                    7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!LoadLibraryExA                                                    7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!LoadLibraryA                                                      7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!CreateProcessW                                                    7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!CreateProcessA                                                    7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!GetProcAddress                                                    7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!LoadLibraryW                                                      7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!GetModuleHandleA                                                  7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!GetModuleHandleW                                                  7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!CreateFileW                                                       7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!MoveFileWithProgressW                                             7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!MoveFileW                                                         7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!OpenFile                                                          7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!CopyFileExW                                                       7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!CopyFileA                                                         7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!CopyFileW                                                         7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!DeleteFileA                                                       7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!DeleteFileW                                                       7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!MoveFileExW                                                       7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!MoveFileA                                                         7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!MoveFileWithProgressA                                             7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!MoveFileExA                                                       7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!CopyFileExA                                                       7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!WinExec                                                           7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!WinExec + 3                                                       7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\system32\svchost.exe[1500] kernel32.dll!LoadModule                                                        7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ADVAPI32.dll!CreateProcessAsUserW                                              77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ADVAPI32.dll!CreateProcessAsUserA                                              77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] USER32.dll!EndTask                                                             7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ole32.dll!CoCreateInstanceEx                                                   774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] ole32.dll!CoGetClassObject                                                     775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] SHELL32.dll!ShellExecuteExW                                                    7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] SHELL32.dll!ShellExecuteEx                                                     7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] SHELL32.dll!ShellExecuteA                                                      7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1500] SHELL32.dll!ShellExecuteW                                                      7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ntdll.dll!NtAllocateVirtualMemory                                              7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ntdll.dll!NtClose                                                              7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ntdll.dll!NtCreateFile                                                         7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ntdll.dll!NtCreateProcess                                                      7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ntdll.dll!NtCreateProcessEx                                                    7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ntdll.dll!NtDeleteFile                                                         7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ntdll.dll!NtFreeVirtualMemory                                                  7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ntdll.dll!NtLoadDriver                                                         7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ntdll.dll!NtOpenFile                                                           7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ntdll.dll!NtProtectVirtualMemory                                               7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ntdll.dll!NtSetInformationProcess                                              7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ntdll.dll!NtUnloadDriver                                                       7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ntdll.dll!NtWriteVirtualMemory                                                 7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ntdll.dll!RtlAllocateHeap                                                      7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ntdll.dll!LdrLoadDll                                                           7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ntdll.dll!LdrUnloadDll                                                         7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ntdll.dll!LdrGetProcedureAddress                                               7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!CreateFileA                                                       7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!VirtualProtect                                                    7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!LoadLibraryExW                                                    7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!LoadLibraryExA                                                    7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!LoadLibraryA                                                      7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!CreateProcessW                                                    7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!CreateProcessA                                                    7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!GetProcAddress                                                    7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!LoadLibraryW                                                      7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!GetModuleHandleA                                                  7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!GetModuleHandleW                                                  7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!CreateFileW                                                       7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!MoveFileWithProgressW                                             7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!MoveFileW                                                         7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!OpenFile                                                          7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!CopyFileExW                                                       7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!CopyFileA                                                         7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!CopyFileW                                                         7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!DeleteFileA                                                       7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!DeleteFileW                                                       7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!MoveFileExW                                                       7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!MoveFileA                                                         7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!MoveFileWithProgressA                                             7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!MoveFileExA                                                       7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!CopyFileExA                                                       7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!WinExec                                                           7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!WinExec + 3                                                       7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\system32\spoolsv.exe[1652] kernel32.dll!LoadModule                                                        7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ADVAPI32.dll!CreateProcessAsUserW                                              77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ADVAPI32.dll!CreateProcessAsUserA                                              77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] USER32.dll!EndTask                                                             7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ole32.dll!CoCreateInstanceEx                                                   774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] ole32.dll!CoGetClassObject                                                     775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] SHELL32.dll!ShellExecuteExW                                                    7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] SHELL32.dll!ShellExecuteEx                                                     7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] SHELL32.dll!ShellExecuteA                                                      7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[1652] SHELL32.dll!ShellExecuteW                                                      7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ntdll.dll!NtAllocateVirtualMemory                                              7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ntdll.dll!NtClose                                                              7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ntdll.dll!NtCreateFile                                                         7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ntdll.dll!NtCreateProcess                                                      7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ntdll.dll!NtCreateProcessEx                                                    7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ntdll.dll!NtDeleteFile                                                         7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ntdll.dll!NtFreeVirtualMemory                                                  7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ntdll.dll!NtLoadDriver                                                         7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ntdll.dll!NtOpenFile                                                           7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ntdll.dll!NtProtectVirtualMemory                                               7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ntdll.dll!NtSetInformationProcess                                              7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ntdll.dll!NtUnloadDriver                                                       7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ntdll.dll!NtWriteVirtualMemory                                                 7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ntdll.dll!RtlAllocateHeap                                                      7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ntdll.dll!LdrLoadDll                                                           7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ntdll.dll!LdrUnloadDll                                                         7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ntdll.dll!LdrGetProcedureAddress                                               7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!CreateFileA                                                       7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!VirtualProtect                                                    7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!LoadLibraryExW                                                    7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!LoadLibraryExA                                                    7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!LoadLibraryA                                                      7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!CreateProcessW                                                    7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!CreateProcessA                                                    7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!GetProcAddress                                                    7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!LoadLibraryW                                                      7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!GetModuleHandleA                                                  7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!GetModuleHandleW                                                  7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!CreateFileW                                                       7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!MoveFileWithProgressW                                             7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!MoveFileW                                                         7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!OpenFile                                                          7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!CopyFileExW                                                       7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!CopyFileA                                                         7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!CopyFileW                                                         7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!DeleteFileA                                                       7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!DeleteFileW                                                       7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!MoveFileExW                                                       7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!MoveFileA                                                         7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!MoveFileWithProgressA                                             7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!MoveFileExA                                                       7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!CopyFileExA                                                       7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!WinExec                                                           7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!WinExec + 3                                                       7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\system32\svchost.exe[1728] kernel32.dll!LoadModule                                                        7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ADVAPI32.dll!CreateProcessAsUserW                                              77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ADVAPI32.dll!CreateProcessAsUserA                                              77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] USER32.dll!EndTask                                                             7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ole32.dll!CoCreateInstanceEx                                                   774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] ole32.dll!CoGetClassObject                                                     775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] SHELL32.dll!ShellExecuteExW                                                    7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] SHELL32.dll!ShellExecuteEx                                                     7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] SHELL32.dll!ShellExecuteA                                                      7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1728] SHELL32.dll!ShellExecuteW                                                      7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ntdll.dll!NtAllocateVirtualMemory                                                      7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ntdll.dll!NtClose                                                                      7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ntdll.dll!NtCreateFile                                                                 7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ntdll.dll!NtCreateProcess                                                              7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ntdll.dll!NtCreateProcessEx                                                            7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ntdll.dll!NtDeleteFile                                                                 7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ntdll.dll!NtFreeVirtualMemory                                                          7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ntdll.dll!NtLoadDriver                                                                 7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ntdll.dll!NtOpenFile                                                                   7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ntdll.dll!NtProtectVirtualMemory                                                       7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ntdll.dll!NtSetInformationProcess                                                      7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ntdll.dll!NtUnloadDriver                                                               7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ntdll.dll!NtWriteVirtualMemory                                                         7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ntdll.dll!RtlAllocateHeap                                                              7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ntdll.dll!LdrLoadDll                                                                   7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ntdll.dll!LdrUnloadDll                                                                 7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ntdll.dll!LdrGetProcedureAddress                                                       7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!CreateFileA                                                               7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!VirtualProtect                                                            7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!LoadLibraryExW                                                            7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!LoadLibraryExA                                                            7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!LoadLibraryA                                                              7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!CreateProcessW                                                            7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!CreateProcessA                                                            7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!LoadLibraryW                                                              7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!GetModuleHandleA                                                          7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!GetModuleHandleW                                                          7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!CreateFileW                                                               7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!MoveFileWithProgressW                                                     7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!MoveFileW                                                                 7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!OpenFile                                                                  7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!CopyFileExW                                                               7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!CopyFileA                                                                 7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!CopyFileW                                                                 7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!DeleteFileA                                                               7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!DeleteFileW                                                               7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!MoveFileExW                                                               7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!MoveFileA                                                                 7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!MoveFileWithProgressA                                                     7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!MoveFileExA                                                               7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!CopyFileExA                                                               7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!WinExec                                                                   7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!WinExec + 3                                                               7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\Explorer.EXE[1772] kernel32.dll!LoadModule                                                                7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ADVAPI32.dll!CreateProcessAsUserW                                                      77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ADVAPI32.dll!CreateProcessAsUserA                                                      77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] USER32.dll!EndTask                                                                     7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ole32.dll!CoCreateInstanceEx                                                           774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] ole32.dll!CoGetClassObject                                                             775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] WININET.dll!InternetConnectA                                                           3FD0DEAE 5 Bytes  JMP 100279D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] WININET.dll!InternetConnectW                                                           3FD0F862 5 Bytes  JMP 100279B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] SHELL32.dll!ShellExecuteExW                                                            7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] SHELL32.dll!ShellExecuteEx                                                             7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] SHELL32.dll!ShellExecuteA                                                              7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1772] SHELL32.dll!ShellExecuteW                                                              7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ntdll.dll!NtAllocateVirtualMemory                       7C90CF6E 5 Bytes  JMP 006A7E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ntdll.dll!NtClose                                       7C90CFEE 5 Bytes  JMP 0069CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ntdll.dll!NtCreateFile                                  7C90D0AE 5 Bytes  JMP 006A7E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ntdll.dll!NtCreateProcess                               7C90D14E 5 Bytes  JMP 006A7ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ntdll.dll!NtCreateProcessEx                             7C90D15E 5 Bytes  JMP 006A7EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ntdll.dll!NtDeleteFile                                  7C90D23E 5 Bytes  JMP 006A7E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ntdll.dll!NtFreeVirtualMemory                           7C90D38E 5 Bytes  JMP 006A74E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ntdll.dll!NtLoadDriver                                  7C90D46E 5 Bytes  JMP 006A7E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ntdll.dll!NtOpenFile                                    7C90D59E 5 Bytes  JMP 006A7DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ntdll.dll!NtProtectVirtualMemory                        7C90D6EE 5 Bytes  JMP 006A7490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ntdll.dll!NtSetInformationProcess                       7C90DC9E 5 Bytes  JMP 006A7DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ntdll.dll!NtUnloadDriver                                7C90DEBE 5 Bytes  JMP 006A7DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ntdll.dll!NtWriteVirtualMemory                          7C90DFAE 5 Bytes  JMP 006A7E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ntdll.dll!RtlAllocateHeap                               7C9100C4 5 Bytes  JMP 006A7530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ntdll.dll!LdrLoadDll                                    7C91632D 5 Bytes  JMP 006A5680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ntdll.dll!LdrUnloadDll                                  7C9171CD 5 Bytes  JMP 0069CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ntdll.dll!LdrGetProcedureAddress                        7C917CF0 5 Bytes  JMP 006A7D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!CreateFileA                                7C801A28 5 Bytes  JMP 006A7CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!VirtualProtect                             7C801AD4 5 Bytes  JMP 006A7A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!LoadLibraryExW                             7C801AF5 7 Bytes  JMP 006A7D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!LoadLibraryExA                             7C801D53 5 Bytes  JMP 006A7D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!LoadLibraryA                               7C801D7B 5 Bytes  JMP 006A7AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!CreateProcessW                             7C802336 5 Bytes  JMP 006A26F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!CreateProcessA                             7C80236B 5 Bytes  JMP 006A3280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!GetProcAddress                             7C80AE40 5 Bytes  JMP 006A7D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!LoadLibraryW                               7C80AEEB 5 Bytes  JMP 006A7AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!GetModuleHandleA                           7C80B741 5 Bytes  JMP 006A7B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!GetModuleHandleW                           7C80E4DD 5 Bytes  JMP 006A7AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!CreateFileW                                7C810800 5 Bytes  JMP 006A7CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!MoveFileWithProgressW                      7C81F72E 5 Bytes  JMP 006A7B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!MoveFileW                                  7C821261 5 Bytes  JMP 006A7BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!OpenFile                                   7C821982 5 Bytes  JMP 006A7CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!CopyFileExW                                7C827B32 7 Bytes  JMP 006A7C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!CopyFileA                                  7C8286EE 5 Bytes  JMP 006A7C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!CopyFileW                                  7C82F87B 5 Bytes  JMP 006A7C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!DeleteFileA                                7C831EDD 5 Bytes  JMP 006A7B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!DeleteFileW                                7C831F63 5 Bytes  JMP 006A7B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!MoveFileExW                                7C83568B 5 Bytes  JMP 006A7BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!MoveFileA                                  7C835EBF 5 Bytes  JMP 006A7C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!MoveFileWithProgressA                      7C835EDE 5 Bytes  JMP 006A7B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!MoveFileExA                                7C85E49B 5 Bytes  JMP 006A7BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!CopyFileExA                                7C85F39C 5 Bytes  JMP 006A7C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!WinExec                                    7C86250D 2 Bytes  JMP 006A7A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!WinExec + 3                                7C862510 2 Bytes  [E4, 83] {IN AL, 0x83}
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] kernel32.dll!LoadModule                                 7C86261E 5 Bytes  JMP 006A7D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ADVAPI32.dll!CreateProcessAsUserW                       77DDA8A9 5 Bytes  JMP 006A1220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] ADVAPI32.dll!CreateProcessAsUserA                       77E00CE8 5 Bytes  JMP 006A1B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] USER32.dll!EndTask                                      7E3AA0A5 5 Bytes  JMP 006ADFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] SHELL32.dll!ShellExecuteExW                             7CA098CB 5 Bytes  JMP 006A79F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] SHELL32.dll!ShellExecuteEx                              7CA40E45 5 Bytes  JMP 006A7A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] SHELL32.dll!ShellExecuteA                               7CA41170 5 Bytes  JMP 006A7A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] SHELL32.dll!ShellExecuteW                               7CAB5D48 5 Bytes  JMP 006A7A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] WS2_32.dll!WSASocketW                                   71A5404E 7 Bytes  JMP 006A7970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe[1776] WS2_32.dll!WSASocketA                                   71A58B6A 5 Bytes  JMP 006A7990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ntdll.dll!NtAllocateVirtualMemory                                       7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ntdll.dll!NtClose                                                       7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ntdll.dll!NtCreateFile                                                  7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ntdll.dll!NtCreateProcess                                               7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ntdll.dll!NtCreateProcessEx                                             7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ntdll.dll!NtDeleteFile                                                  7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ntdll.dll!NtFreeVirtualMemory                                           7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ntdll.dll!NtLoadDriver                                                  7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ntdll.dll!NtOpenFile                                                    7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ntdll.dll!NtProtectVirtualMemory                                        7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ntdll.dll!NtSetInformationProcess                                       7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ntdll.dll!NtUnloadDriver                                                7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ntdll.dll!NtWriteVirtualMemory                                          7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ntdll.dll!RtlAllocateHeap                                               7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ntdll.dll!LdrLoadDll                                                    7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ntdll.dll!LdrUnloadDll                                                  7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ntdll.dll!LdrGetProcedureAddress                                        7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!CreateFileA                                                7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!VirtualProtect                                             7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!LoadLibraryExW                                             7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!LoadLibraryExA                                             7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!LoadLibraryA                                               7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!CreateProcessW                                             7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!CreateProcessA                                             7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!GetProcAddress                                             7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!LoadLibraryW                                               7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!GetModuleHandleA                                           7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!GetModuleHandleW                                           7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!CreateFileW                                                7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!MoveFileWithProgressW                                      7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!MoveFileW                                                  7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!OpenFile                                                   7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!CopyFileExW                                                7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!CopyFileA                                                  7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!CopyFileW                                                  7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!DeleteFileA                                                7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!DeleteFileW                                                7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!MoveFileExW                                                7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!MoveFileA                                                  7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!MoveFileWithProgressA                                      7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!MoveFileExA                                                7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!CopyFileExA                                                7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!WinExec                                                    7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!WinExec + 3                                                7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] kernel32.dll!LoadModule                                                 7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] WS2_32.dll!WSASocketW                                                   71A5404E 7 Bytes  JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] WS2_32.dll!WSASocketA                                                   71A58B6A 5 Bytes  JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ADVAPI32.dll!CreateProcessAsUserW                                       77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ADVAPI32.dll!CreateProcessAsUserA                                       77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ole32.dll!CoCreateInstanceEx                                            774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] ole32.dll!CoGetClassObject                                              775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[1852] USER32.dll!EndTask                                                      7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ntdll.dll!NtAllocateVirtualMemory                                             7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ntdll.dll!NtClose                                                             7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ntdll.dll!NtCreateFile                                                        7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ntdll.dll!NtCreateProcess                                                     7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ntdll.dll!NtCreateProcessEx                                                   7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ntdll.dll!NtDeleteFile                                                        7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ntdll.dll!NtFreeVirtualMemory                                                 7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ntdll.dll!NtLoadDriver                                                        7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ntdll.dll!NtOpenFile                                                          7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ntdll.dll!NtProtectVirtualMemory                                              7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ntdll.dll!NtSetInformationProcess                                             7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ntdll.dll!NtUnloadDriver                                                      7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ntdll.dll!NtWriteVirtualMemory                                                7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ntdll.dll!RtlAllocateHeap                                                     7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ntdll.dll!LdrLoadDll                                                          7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ntdll.dll!LdrUnloadDll                                                        7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ntdll.dll!LdrGetProcedureAddress                                              7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!CreateFileA                                                      7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!VirtualProtect                                                   7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!LoadLibraryExW                                                   7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!LoadLibraryExA                                                   7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!LoadLibraryA                                                     7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!CreateProcessW                                                   7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!CreateProcessA                                                   7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!GetProcAddress                                                   7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!LoadLibraryW                                                     7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!GetModuleHandleA                                                 7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!GetModuleHandleW                                                 7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!CreateFileW                                                      7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!MoveFileWithProgressW                                            7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!MoveFileW                                                        7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!OpenFile                                                         7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!CopyFileExW                                                      7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!CopyFileA                                                        7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!CopyFileW                                                        7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!DeleteFileA                                                      7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!DeleteFileW                                                      7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!MoveFileExW                                                      7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!MoveFileA                                                        7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!MoveFileWithProgressA                                            7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!MoveFileExA                                                      7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!CopyFileExA                                                      7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!WinExec                                                          7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!WinExec + 3                                                      7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] kernel32.dll!LoadModule                                                       7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] USER32.dll!EndTask                                                            7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ADVAPI32.dll!CreateProcessAsUserW                                             77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ADVAPI32.dll!CreateProcessAsUserA                                             77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ws2_32.dll!WSASocketW                                                         71A5404E 7 Bytes  JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lxdxcoms.exe[1924] ws2_32.dll!WSASocketA                                                         71A58B6A 5 Bytes  JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ntdll.dll!NtAllocateVirtualMemory                                                  7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ntdll.dll!NtClose                                                                  7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ntdll.dll!NtCreateFile                                                             7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ntdll.dll!NtCreateProcess                                                          7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ntdll.dll!NtCreateProcessEx                                                        7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ntdll.dll!NtDeleteFile                                                             7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ntdll.dll!NtFreeVirtualMemory                                                      7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ntdll.dll!NtLoadDriver                                                             7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ntdll.dll!NtOpenFile                                                               7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ntdll.dll!NtProtectVirtualMemory                                                   7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ntdll.dll!NtSetInformationProcess                                                  7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ntdll.dll!NtUnloadDriver                                                           7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ntdll.dll!NtWriteVirtualMemory                                                     7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ntdll.dll!RtlAllocateHeap                                                          7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ntdll.dll!LdrLoadDll                                                               7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ntdll.dll!LdrUnloadDll                                                             7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ntdll.dll!LdrGetProcedureAddress                                                   7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!CreateFileA                                                           7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!VirtualProtect                                                        7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!LoadLibraryExW                                                        7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!LoadLibraryExA                                                        7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!LoadLibraryA                                                          7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!CreateProcessW                                                        7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!CreateProcessA                                                        7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!GetProcAddress                                                        7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!LoadLibraryW                                                          7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!GetModuleHandleA                                                      7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!GetModuleHandleW                                                      7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!CreateFileW                                                           7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!MoveFileWithProgressW                                                 7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!MoveFileW                                                             7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!OpenFile                                                              7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!CopyFileExW                                                           7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!CopyFileA                                                             7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!CopyFileW                                                             7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!DeleteFileA                                                           7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!DeleteFileW                                                           7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!MoveFileExW                                                           7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!MoveFileA                                                             7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!MoveFileWithProgressA                                                 7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!MoveFileExA                                                           7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!CopyFileExA                                                           7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!WinExec                                                               7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!WinExec + 3                                                           7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\System32\alg.exe[1968] kernel32.dll!LoadModule                                                            7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] USER32.dll!EndTask                                                                 7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ADVAPI32.dll!CreateProcessAsUserW                                                  77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ADVAPI32.dll!CreateProcessAsUserA                                                  77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ole32.dll!CoCreateInstanceEx                                                       774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] ole32.dll!CoGetClassObject                                                         775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] WS2_32.dll!WSASocketW                                                              71A5404E 7 Bytes  JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] WS2_32.dll!WSASocketA                                                              71A58B6A 5 Bytes  JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] SHELL32.dll!ShellExecuteExW                                                        7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] SHELL32.dll!ShellExecuteEx                                                         7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] SHELL32.dll!ShellExecuteA                                                          7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[1968] SHELL32.dll!ShellExecuteW                                                          7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ntdll.dll!NtAllocateVirtualMemory                                               7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ntdll.dll!NtClose                                                               7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ntdll.dll!NtCreateFile                                                          7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ntdll.dll!NtCreateProcess                                                       7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ntdll.dll!NtCreateProcessEx                                                     7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ntdll.dll!NtDeleteFile                                                          7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ntdll.dll!NtFreeVirtualMemory                                                   7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ntdll.dll!NtLoadDriver                                                          7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ntdll.dll!NtOpenFile                                                            7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ntdll.dll!NtProtectVirtualMemory                                                7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ntdll.dll!NtSetInformationProcess                                               7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ntdll.dll!NtUnloadDriver                                                        7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ntdll.dll!NtWriteVirtualMemory                                                  7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ntdll.dll!RtlAllocateHeap                                                       7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ntdll.dll!LdrLoadDll                                                            7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ntdll.dll!LdrUnloadDll                                                          7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ntdll.dll!LdrGetProcedureAddress                                                7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!CreateFileA                                                        7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!VirtualProtect                                                     7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!LoadLibraryExW                                                     7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!LoadLibraryExA                                                     7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!LoadLibraryA                                                       7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!CreateProcessW                                                     7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!CreateProcessA                                                     7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!GetProcAddress                                                     7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!LoadLibraryW                                                       7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!GetModuleHandleA                                                   7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!GetModuleHandleW                                                   7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!CreateFileW                                                        7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!MoveFileWithProgressW                                              7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!MoveFileW                                                          7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!OpenFile                                                           7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!CopyFileExW                                                        7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!CopyFileA                                                          7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!CopyFileW                                                          7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!DeleteFileA                                                        7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!DeleteFileW                                                        7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!MoveFileExW                                                        7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!MoveFileA                                                          7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!MoveFileWithProgressA                                              7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!MoveFileExA                                                        7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!CopyFileExA                                                        7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!WinExec                                                            7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!WinExec + 3                                                        7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\system32\ctfmon.exe[2128] kernel32.dll!LoadModule                                                         7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ADVAPI32.dll!CreateProcessAsUserW                                               77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ADVAPI32.dll!CreateProcessAsUserA                                               77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] USER32.dll!EndTask                                                              7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ole32.dll!CoCreateInstanceEx                                                    774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] ole32.dll!CoGetClassObject                                                      775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] SHELL32.dll!ShellExecuteExW                                                     7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] SHELL32.dll!ShellExecuteEx                                                      7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] SHELL32.dll!ShellExecuteA                                                       7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2128] SHELL32.dll!ShellExecuteW                                                       7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ntdll.dll!NtAllocateVirtualMemory                                                       7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ntdll.dll!NtClose                                                                       7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ntdll.dll!NtCreateFile                                                                  7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ntdll.dll!NtCreateProcess                                                               7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ntdll.dll!NtCreateProcessEx                                                             7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ntdll.dll!NtDeleteFile                                                                  7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ntdll.dll!NtFreeVirtualMemory                                                           7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ntdll.dll!NtLoadDriver                                                                  7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ntdll.dll!NtOpenFile                                                                    7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ntdll.dll!NtProtectVirtualMemory                                                        7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ntdll.dll!NtSetInformationProcess                                                       7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ntdll.dll!NtUnloadDriver                                                                7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ntdll.dll!NtWriteVirtualMemory                                                          7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ntdll.dll!RtlAllocateHeap                                                               7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ntdll.dll!LdrLoadDll                                                                    7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ntdll.dll!LdrUnloadDll                                                                  7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ntdll.dll!LdrGetProcedureAddress                                                        7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!CreateFileA                                                                7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!VirtualProtect                                                             7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!LoadLibraryExW                                                             7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!LoadLibraryExA                                                             7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!LoadLibraryA                                                               7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!CreateProcessW                                                             7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!CreateProcessA                                                             7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!GetProcAddress                                                             7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!LoadLibraryW                                                               7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!GetModuleHandleA                                                           7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!GetModuleHandleW                                                           7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!CreateFileW                                                                7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!MoveFileWithProgressW                                                      7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!MoveFileW                                                                  7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!OpenFile                                                                   7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!CopyFileExW                                                                7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!CopyFileA                                                                  7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!CopyFileW                                                                  7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!DeleteFileA                                                                7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!DeleteFileW                                                                7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!MoveFileExW                                                                7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!MoveFileA                                                                  7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!MoveFileWithProgressA                                                      7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!MoveFileExA                                                                7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!CopyFileExA                                                                7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!WinExec                                                                    7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!WinExec + 3                                                                7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\RTHDCPL.EXE[2228] kernel32.dll!LoadModule                                                                 7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ADVAPI32.dll!CreateProcessAsUserW                                                       77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ADVAPI32.dll!CreateProcessAsUserA                                                       77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ole32.dll!CoCreateInstanceEx                                                            774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] ole32.dll!CoGetClassObject                                                              775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] USER32.dll!EndTask                                                                      7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] SHELL32.dll!ShellExecuteExW                                                             7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] SHELL32.dll!ShellExecuteEx                                                              7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] SHELL32.dll!ShellExecuteA                                                               7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[2228] SHELL32.dll!ShellExecuteW                                                               7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ntdll.dll!NtAllocateVirtualMemory                                              7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ntdll.dll!NtClose                                                              7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ntdll.dll!NtCreateFile                                                         7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ntdll.dll!NtCreateProcess                                                      7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ntdll.dll!NtCreateProcessEx                                                    7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ntdll.dll!NtDeleteFile                                                         7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ntdll.dll!NtFreeVirtualMemory                                                  7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ntdll.dll!NtLoadDriver                                                         7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ntdll.dll!NtOpenFile                                                           7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ntdll.dll!NtProtectVirtualMemory                                               7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ntdll.dll!NtSetInformationProcess                                              7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ntdll.dll!NtUnloadDriver                                                       7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ntdll.dll!NtWriteVirtualMemory                                                 7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ntdll.dll!RtlAllocateHeap                                                      7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ntdll.dll!LdrLoadDll                                                           7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ntdll.dll!LdrUnloadDll                                                         7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ntdll.dll!LdrGetProcedureAddress                                               7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!CreateFileA                                                       7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!VirtualProtect                                                    7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!LoadLibraryExW                                                    7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!LoadLibraryExA                                                    7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!LoadLibraryA                                                      7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!CreateProcessW                                                    7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!CreateProcessA                                                    7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!GetProcAddress                                                    7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!LoadLibraryW                                                      7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!GetModuleHandleA                                                  7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!GetModuleHandleW                                                  7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!CreateFileW                                                       7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!MoveFileWithProgressW                                             7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!MoveFileW                                                         7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!OpenFile                                                          7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!CopyFileExW                                                       7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!CopyFileA                                                         7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!CopyFileW                                                         7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!DeleteFileA                                                       7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!DeleteFileW                                                       7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!MoveFileExW                                                       7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!MoveFileA                                                         7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!MoveFileWithProgressA                                             7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!MoveFileExA                                                       7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!CopyFileExA                                                       7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!WinExec                                                           7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!WinExec + 3                                                       7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\System32\svchost.exe[2620] kernel32.dll!LoadModule                                                        7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ADVAPI32.dll!CreateProcessAsUserW                                              77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ADVAPI32.dll!CreateProcessAsUserA                                              77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] USER32.dll!EndTask                                                             7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ole32.dll!CoCreateInstanceEx                                                   774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] ole32.dll!CoGetClassObject                                                     775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] SHELL32.dll!ShellExecuteExW                                                    7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] SHELL32.dll!ShellExecuteEx                                                     7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] SHELL32.dll!ShellExecuteA                                                      7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[2620] SHELL32.dll!ShellExecuteW                                                      7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ntdll.dll!NtAllocateVirtualMemory                                                      7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ntdll.dll!NtClose                                                                      7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ntdll.dll!NtCreateFile                                                                 7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ntdll.dll!NtCreateProcess                                                              7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ntdll.dll!NtCreateProcessEx                                                            7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ntdll.dll!NtDeleteFile                                                                 7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ntdll.dll!NtFreeVirtualMemory                                                          7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ntdll.dll!NtLoadDriver                                                                 7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ntdll.dll!NtOpenFile                                                                   7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ntdll.dll!NtProtectVirtualMemory                                                       7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ntdll.dll!NtSetInformationProcess                                                      7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ntdll.dll!NtUnloadDriver                                                               7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ntdll.dll!NtWriteVirtualMemory                                                         7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ntdll.dll!RtlAllocateHeap                                                              7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ntdll.dll!LdrLoadDll                                                                   7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ntdll.dll!LdrUnloadDll                                                                 7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ntdll.dll!LdrGetProcedureAddress                                                       7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!CreateFileA                                                               7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!VirtualProtect                                                            7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!LoadLibraryExW                                                            7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!LoadLibraryExA                                                            7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!LoadLibraryA                                                              7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!CreateProcessW                                                            7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!CreateProcessA                                                            7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!GetProcAddress                                                            7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!LoadLibraryW                                                              7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!GetModuleHandleA                                                          7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!GetModuleHandleW                                                          7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!CreateFileW                                                               7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!MoveFileWithProgressW                                                     7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!MoveFileW                                                                 7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!OpenFile                                                                  7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!CopyFileExW                                                               7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!CopyFileA                                                                 7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!CopyFileW                                                                 7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!DeleteFileA                                                               7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!DeleteFileW                                                               7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!MoveFileExW                                                               7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!MoveFileA                                                                 7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!MoveFileWithProgressA                                                     7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!MoveFileExA                                                               7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!CopyFileExA                                                               7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!WinExec                                                                   7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!WinExec + 3                                                               7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\V0420Mon.exe[2748] kernel32.dll!LoadModule                                                                7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ADVAPI32.dll!CreateProcessAsUserW                                                      77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ADVAPI32.dll!CreateProcessAsUserA                                                      77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] USER32.dll!EndTask                                                                     7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ole32.dll!CoCreateInstanceEx                                                           774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\V0420Mon.exe[2748] ole32.dll!CoGetClassObject                                                             775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ntdll.dll!NtAllocateVirtualMemory                        7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ntdll.dll!NtClose                                        7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ntdll.dll!NtCreateFile                                   7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ntdll.dll!NtCreateProcess                                7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ntdll.dll!NtCreateProcessEx                              7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ntdll.dll!NtDeleteFile                                   7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ntdll.dll!NtFreeVirtualMemory                            7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ntdll.dll!NtLoadDriver                                   7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ntdll.dll!NtOpenFile                                     7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ntdll.dll!NtProtectVirtualMemory                         7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ntdll.dll!NtSetInformationProcess                        7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ntdll.dll!NtUnloadDriver                                 7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ntdll.dll!NtWriteVirtualMemory                           7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ntdll.dll!RtlAllocateHeap                                7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ntdll.dll!LdrLoadDll                                     7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ntdll.dll!LdrUnloadDll                                   7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ntdll.dll!LdrGetProcedureAddress                         7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!CreateFileA                                 7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!VirtualProtect                              7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!LoadLibraryExW                              7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!LoadLibraryExA                              7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!LoadLibraryA                                7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!CreateProcessW                              7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!CreateProcessA                              7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!GetProcAddress                              7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!LoadLibraryW                                7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!GetModuleHandleA                            7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!GetModuleHandleW                            7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!CreateFileW                                 7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!MoveFileWithProgressW                       7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!MoveFileW                                   7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!OpenFile                                    7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!CopyFileExW                                 7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!CopyFileA                                   7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!CopyFileW                                   7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!DeleteFileA                                 7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!DeleteFileW                                 7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!MoveFileExW                                 7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!MoveFileA                                   7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!MoveFileWithProgressA                       7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!MoveFileExA                                 7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!CopyFileExA                                 7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!WinExec                                     7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!WinExec + 3                                 7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] kernel32.dll!LoadModule                                  7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ADVAPI32.dll!CreateProcessAsUserW                        77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ADVAPI32.dll!CreateProcessAsUserA                        77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] USER32.dll!EndTask                                       7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] SHELL32.dll!ShellExecuteExW                              7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] SHELL32.dll!ShellExecuteEx                               7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] SHELL32.dll!ShellExecuteA                                7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] SHELL32.dll!ShellExecuteW                                7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ws2_32.dll!WSASocketW                                    71A5404E 7 Bytes  JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe[2804] ws2_32.dll!WSASocketA                                    71A58B6A 5 Bytes  JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ntdll.dll!NtAllocateVirtualMemory                     7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ntdll.dll!NtClose                                     7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ntdll.dll!NtCreateFile                                7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ntdll.dll!NtCreateProcess                             7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ntdll.dll!NtCreateProcessEx                           7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ntdll.dll!NtDeleteFile                                7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ntdll.dll!NtFreeVirtualMemory                         7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ntdll.dll!NtLoadDriver                                7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ntdll.dll!NtOpenFile                                  7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ntdll.dll!NtProtectVirtualMemory                      7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ntdll.dll!NtSetInformationProcess                     7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ntdll.dll!NtUnloadDriver                              7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ntdll.dll!NtWriteVirtualMemory                        7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ntdll.dll!RtlAllocateHeap                             7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ntdll.dll!LdrLoadDll                                  7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ntdll.dll!LdrUnloadDll                                7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ntdll.dll!LdrGetProcedureAddress                      7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!CreateFileA                              7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!VirtualProtect                           7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!LoadLibraryExW                           7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!LoadLibraryExA                           7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!LoadLibraryA                             7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!CreateProcessW                           7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!CreateProcessA                           7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!GetProcAddress                           7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!LoadLibraryW                             7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!GetModuleHandleA                         7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!GetModuleHandleW                         7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!CreateFileW                              7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!MoveFileWithProgressW                    7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!MoveFileW                                7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!OpenFile                                 7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!CopyFileExW                              7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!CopyFileA                                7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!CopyFileW                                7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!DeleteFileA                              7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!DeleteFileW                              7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!MoveFileExW                              7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!MoveFileA                                7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!MoveFileWithProgressA                    7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!MoveFileExA                              7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!CopyFileExA                              7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!WinExec                                  7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!WinExec + 3                              7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] KERNEL32.dll!LoadModule                               7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] USER32.dll!EndTask                                    7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ADVAPI32.dll!CreateProcessAsUserW                     77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ADVAPI32.dll!CreateProcessAsUserA                     77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] shell32.dll!ShellExecuteExW                           7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] shell32.dll!ShellExecuteEx                            7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] shell32.dll!ShellExecuteA                             7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] shell32.dll!ShellExecuteW                             7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ole32.dll!CoCreateInstanceEx                          774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe[2836] ole32.dll!CoGetClassObject                            775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[2916] ntdll.dll!NtAllocateVirtualMemory                     7C90CF6E 5 Bytes  JMP 0074A730 C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ntdll.dll!NtAllocateVirtualMemory                 7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ntdll.dll!NtClose                                 7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ntdll.dll!NtCreateFile                            7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ntdll.dll!NtCreateProcess                         7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ntdll.dll!NtCreateProcessEx                       7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ntdll.dll!NtDeleteFile                            7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ntdll.dll!NtFreeVirtualMemory                     7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ntdll.dll!NtLoadDriver                            7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ntdll.dll!NtOpenFile                              7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ntdll.dll!NtProtectVirtualMemory                  7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ntdll.dll!NtSetInformationProcess                 7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ntdll.dll!NtUnloadDriver                          7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ntdll.dll!NtWriteVirtualMemory                    7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ntdll.dll!RtlAllocateHeap                         7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ntdll.dll!LdrLoadDll                              7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ntdll.dll!LdrUnloadDll                            7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ntdll.dll!LdrGetProcedureAddress                  7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!CreateFileA                          7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!VirtualProtect                       7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!LoadLibraryExW                       7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!LoadLibraryExA                       7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!LoadLibraryA                         7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!CreateProcessW                       7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!CreateProcessA                       7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!GetProcAddress                       7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!LoadLibraryW                         7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!GetModuleHandleA                     7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!GetModuleHandleW                     7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!CreateFileW                          7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!MoveFileWithProgressW                7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!MoveFileW                            7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!OpenFile                             7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!CopyFileExW                          7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!CopyFileA                            7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!CopyFileW                            7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!DeleteFileA                          7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!DeleteFileW                          7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!MoveFileExW                          7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!MoveFileA                            7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!MoveFileWithProgressA                7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!MoveFileExA                          7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!CopyFileExA                          7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!WinExec                              7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!WinExec + 3                          7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] kernel32.dll!LoadModule                           7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] USER32.dll!EndTask                                7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] SHELL32.dll!ShellExecuteExW                       7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] SHELL32.dll!ShellExecuteEx                        7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] SHELL32.dll!ShellExecuteA                         7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] SHELL32.dll!ShellExecuteW                         7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ADVAPI32.dll!CreateProcessAsUserW                 77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ADVAPI32.dll!CreateProcessAsUserA                 77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ole32.dll!CoCreateInstanceEx                      774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] ole32.dll!CoGetClassObject                        775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] WININET.dll!InternetConnectA                      3FD0DEAE 5 Bytes  JMP 100279D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[2944] WININET.dll!InternetConnectW                      3FD0F862 5 Bytes  JMP 100279B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ntdll.dll!NtAllocateVirtualMemory                   7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ntdll.dll!NtClose                                   7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ntdll.dll!NtCreateFile                              7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ntdll.dll!NtCreateProcess                           7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ntdll.dll!NtCreateProcessEx                         7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ntdll.dll!NtDeleteFile                              7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ntdll.dll!NtFreeVirtualMemory                       7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ntdll.dll!NtLoadDriver                              7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ntdll.dll!NtOpenFile                                7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ntdll.dll!NtProtectVirtualMemory                    7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ntdll.dll!NtSetInformationProcess                   7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ntdll.dll!NtUnloadDriver                            7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ntdll.dll!NtWriteVirtualMemory                      7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ntdll.dll!RtlAllocateHeap                           7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ntdll.dll!LdrLoadDll                                7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ntdll.dll!LdrUnloadDll                              7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ntdll.dll!LdrGetProcedureAddress                    7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!CreateFileA                            7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!VirtualProtect                         7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!LoadLibraryExW                         7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!LoadLibraryExA                         7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!LoadLibraryA                           7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!CreateProcessW                         7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!CreateProcessA                         7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!GetProcAddress                         7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!LoadLibraryW                           7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!GetModuleHandleA                       7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!GetModuleHandleW                       7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!CreateFileW                            7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!MoveFileWithProgressW                  7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!MoveFileW                              7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!OpenFile                               7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!CopyFileExW                            7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!CopyFileA                              7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!CopyFileW                              7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!DeleteFileA                            7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!DeleteFileW                            7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!MoveFileExW                            7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!MoveFileA                              7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!MoveFileWithProgressA                  7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!MoveFileExA                            7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!CopyFileExA                            7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!WinExec                                7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!WinExec + 3                            7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] kernel32.dll!LoadModule                             7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ADVAPI32.dll!CreateProcessAsUserW                   77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ADVAPI32.dll!CreateProcessAsUserA                   77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] USER32.dll!EndTask                                  7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] WININET.dll!InternetConnectA                        3FD0DEAE 5 Bytes  JMP 100279D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] WININET.dll!InternetConnectW                        3FD0F862 5 Bytes  JMP 100279B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ole32.dll!CoCreateInstanceEx                        774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] ole32.dll!CoGetClassObject                          775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] SHELL32.dll!ShellExecuteExW                         7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] SHELL32.dll!ShellExecuteEx                          7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] SHELL32.dll!ShellExecuteA                           7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Java\Java Update\jusched.exe[2952] SHELL32.dll!ShellExecuteW                           7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ntdll.dll!NtAllocateVirtualMemory   7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ntdll.dll!NtClose                   7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ntdll.dll!NtCreateFile              7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ntdll.dll!NtCreateProcess           7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ntdll.dll!NtCreateProcessEx         7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ntdll.dll!NtDeleteFile              7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ntdll.dll!NtFreeVirtualMemory       7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ntdll.dll!NtLoadDriver              7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ntdll.dll!NtOpenFile                7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ntdll.dll!NtProtectVirtualMemory    7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ntdll.dll!NtSetInformationProcess   7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ntdll.dll!NtUnloadDriver            7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ntdll.dll!NtWriteVirtualMemory      7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ntdll.dll!RtlAllocateHeap           7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ntdll.dll!LdrLoadDll                7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ntdll.dll!LdrUnloadDll              7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ntdll.dll!LdrGetProcedureAddress    7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!CreateFileA            7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!VirtualProtect         7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!LoadLibraryExW         7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!LoadLibraryExA         7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!LoadLibraryA           7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!CreateProcessW         7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!CreateProcessA         7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!GetProcAddress         7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!LoadLibraryW           7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!GetModuleHandleA       7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!GetModuleHandleW       7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!CreateFileW            7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!MoveFileWithProgressW  7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!MoveFileW              7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!OpenFile               7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!CopyFileExW            7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!CopyFileA              7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!CopyFileW              7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!DeleteFileA            7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!DeleteFileW            7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!MoveFileExW            7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!MoveFileA              7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!MoveFileWithProgressA  7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!MoveFileExA            7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!CopyFileExA            7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!WinExec                7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!WinExec + 3            7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] kernel32.dll!LoadModule             7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ADVAPI32.dll!CreateProcessAsUserW   77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ADVAPI32.dll!CreateProcessAsUserA   77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] USER32.dll!EndTask                  7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] SHELL32.dll!ShellExecuteExW         7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] SHELL32.dll!ShellExecuteEx          7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] SHELL32.dll!ShellExecuteA           7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] SHELL32.dll!ShellExecuteW           7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ole32.dll!CoCreateInstanceEx        774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe[2964] ole32.dll!CoGetClassObject          775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ntdll.dll!NtAllocateVirtualMemory                                              7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ntdll.dll!NtClose                                                              7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ntdll.dll!NtCreateFile                                                         7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ntdll.dll!NtCreateProcess                                                      7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ntdll.dll!NtCreateProcessEx                                                    7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ntdll.dll!NtDeleteFile                                                         7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ntdll.dll!NtFreeVirtualMemory                                                  7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ntdll.dll!NtLoadDriver                                                         7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ntdll.dll!NtOpenFile                                                           7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ntdll.dll!NtProtectVirtualMemory                                               7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ntdll.dll!NtSetInformationProcess                                              7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ntdll.dll!NtUnloadDriver                                                       7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ntdll.dll!NtWriteVirtualMemory                                                 7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ntdll.dll!RtlAllocateHeap                                                      7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ntdll.dll!LdrLoadDll                                                           7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ntdll.dll!LdrUnloadDll                                                         7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ntdll.dll!LdrGetProcedureAddress                                               7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!CreateFileA                                                       7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!VirtualProtect                                                    7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!LoadLibraryExW                                                    7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!LoadLibraryExA                                                    7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!LoadLibraryA                                                      7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!CreateProcessW                                                    7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!CreateProcessA                                                    7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!GetProcAddress                                                    7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!LoadLibraryW                                                      7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!GetModuleHandleA                                                  7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!GetModuleHandleW                                                  7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!CreateFileW                                                       7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!MoveFileWithProgressW                                             7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!MoveFileW                                                         7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!OpenFile                                                          7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!CopyFileExW                                                       7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!CopyFileA                                                         7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!CopyFileW                                                         7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!DeleteFileA                                                       7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!DeleteFileW                                                       7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!MoveFileExW                                                       7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!MoveFileA                                                         7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!MoveFileWithProgressA                                             7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!MoveFileExA                                                       7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!CopyFileExA                                                       7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!WinExec                                                           7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!WinExec + 3                                                       7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\system32\wuauclt.exe[3004] kernel32.dll!LoadModule                                                        7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ole32.dll!CoCreateInstanceEx                                                   774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ole32.dll!CoGetClassObject                                                     775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ADVAPI32.dll!CreateProcessAsUserW                                              77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] ADVAPI32.dll!CreateProcessAsUserA                                              77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] USER32.dll!EndTask                                                             7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] SHELL32.dll!ShellExecuteExW                                                    7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] SHELL32.dll!ShellExecuteEx                                                     7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] SHELL32.dll!ShellExecuteA                                                      7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\wuauclt.exe[3004] SHELL32.dll!ShellExecuteW                                                      7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ntdll.dll!NtAllocateVirtualMemory                                               7C90CF6E 5 Bytes  JMP 02407E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ntdll.dll!NtClose                                                               7C90CFEE 5 Bytes  JMP 023FCE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ntdll.dll!NtCreateFile                                                          7C90D0AE 5 Bytes  JMP 02407E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ntdll.dll!NtCreateProcess                                                       7C90D14E 5 Bytes  JMP 02407ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ntdll.dll!NtCreateProcessEx                                                     7C90D15E 5 Bytes  JMP 02407EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ntdll.dll!NtDeleteFile                                                          7C90D23E 5 Bytes  JMP 02407E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ntdll.dll!NtFreeVirtualMemory                                                   7C90D38E 5 Bytes  JMP 024074E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ntdll.dll!NtLoadDriver                                                          7C90D46E 5 Bytes  JMP 02407E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ntdll.dll!NtOpenFile                                                            7C90D59E 5 Bytes  JMP 02407DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ntdll.dll!NtProtectVirtualMemory                                                7C90D6EE 5 Bytes  JMP 02407490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ntdll.dll!NtSetInformationProcess                                               7C90DC9E 5 Bytes  JMP 02407DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ntdll.dll!NtUnloadDriver                                                        7C90DEBE 5 Bytes  JMP 02407DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ntdll.dll!NtWriteVirtualMemory                                                  7C90DFAE 5 Bytes  JMP 02407E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ntdll.dll!RtlAllocateHeap                                                       7C9100C4 5 Bytes  JMP 02407530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ntdll.dll!LdrLoadDll                                                            7C91632D 5 Bytes  JMP 02405680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ntdll.dll!LdrUnloadDll                                                          7C9171CD 5 Bytes  JMP 023FCF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ntdll.dll!LdrGetProcedureAddress                                                7C917CF0 5 Bytes  JMP 02407D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!CreateFileA                                                        7C801A28 5 Bytes  JMP 02407CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!VirtualProtect                                                     7C801AD4 5 Bytes  JMP 02407A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!LoadLibraryExW                                                     7C801AF5 7 Bytes  JMP 02407D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!LoadLibraryExA                                                     7C801D53 5 Bytes  JMP 02407D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!LoadLibraryA                                                       7C801D7B 5 Bytes  JMP 02407AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!CreateProcessW                                                     7C802336 5 Bytes  JMP 024026F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!CreateProcessA                                                     7C80236B 5 Bytes  JMP 02403280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!GetProcAddress                                                     7C80AE40 5 Bytes  JMP 02407D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!LoadLibraryW                                                       7C80AEEB 5 Bytes  JMP 02407AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!GetModuleHandleA                                                   7C80B741 5 Bytes  JMP 02407B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!GetModuleHandleW                                                   7C80E4DD 5 Bytes  JMP 02407AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!CreateFileW                                                        7C810800 5 Bytes  JMP 02407CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!MoveFileWithProgressW                                              7C81F72E 5 Bytes  JMP 02407B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!MoveFileW                                                          7C821261 5 Bytes  JMP 02407BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!OpenFile                                                           7C821982 5 Bytes  JMP 02407CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!CopyFileExW                                                        7C827B32 7 Bytes  JMP 02407C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!CopyFileA                                                          7C8286EE 5 Bytes  JMP 02407C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!CopyFileW                                                          7C82F87B 5 Bytes  JMP 02407C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!DeleteFileA                                                        7C831EDD 5 Bytes  JMP 02407B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!DeleteFileW                                                        7C831F63 5 Bytes  JMP 02407B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!MoveFileExW                                                        7C83568B 5 Bytes  JMP 02407BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!MoveFileA                                                          7C835EBF 5 Bytes  JMP 02407C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!MoveFileWithProgressA                                              7C835EDE 5 Bytes  JMP 02407B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!MoveFileExA                                                        7C85E49B 5 Bytes  JMP 02407BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!CopyFileExA                                                        7C85F39C 5 Bytes  JMP 02407C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!WinExec                                                            7C86250D 2 Bytes  JMP 02407A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!WinExec + 3                                                        7C862510 2 Bytes  [BA, 85]
.text           C:\Program Files\ipla\ipla.exe[3100] kernel32.dll!LoadModule                                                         7C86261E 5 Bytes  JMP 02407D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] WS2_32.dll!WSASocketW                                                           71A5404E 7 Bytes  JMP 02407970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] WS2_32.dll!WSASocketA                                                           71A58B6A 5 Bytes  JMP 02407990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ADVAPI32.dll!CreateProcessAsUserW                                               77DDA8A9 5 Bytes  JMP 02401220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ADVAPI32.dll!CreateProcessAsUserA                                               77E00CE8 5 Bytes  JMP 02401B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] USER32.dll!EndTask                                                              7E3AA0A5 5 Bytes  JMP 0240DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] SHELL32.dll!ShellExecuteExW                                                     7CA098CB 5 Bytes  JMP 024079F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] SHELL32.dll!ShellExecuteEx                                                      7CA40E45 5 Bytes  JMP 02407A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] SHELL32.dll!ShellExecuteA                                                       7CA41170 5 Bytes  JMP 02407A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] SHELL32.dll!ShellExecuteW                                                       7CAB5D48 5 Bytes  JMP 02407A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ole32.dll!CoCreateInstanceEx                                                    774EF154 5 Bytes  JMP 0240E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] ole32.dll!CoGetClassObject                                                      775051F5 5 Bytes  JMP 0240E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] wininet.dll!InternetConnectA                                                    3FD0DEAE 5 Bytes  JMP 024079D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ipla\ipla.exe[3100] wininet.dll!InternetConnectW                                                    3FD0F862 5 Bytes  JMP 024079B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ntdll.dll!NtAllocateVirtualMemory                      7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ntdll.dll!NtClose                                      7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ntdll.dll!NtCreateFile                                 7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ntdll.dll!NtCreateProcess                              7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ntdll.dll!NtCreateProcessEx                            7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ntdll.dll!NtDeleteFile                                 7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ntdll.dll!NtFreeVirtualMemory                          7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ntdll.dll!NtLoadDriver                                 7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ntdll.dll!NtOpenFile                                   7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ntdll.dll!NtProtectVirtualMemory                       7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ntdll.dll!NtSetInformationProcess                      7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ntdll.dll!NtUnloadDriver                               7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ntdll.dll!NtWriteVirtualMemory                         7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ntdll.dll!RtlAllocateHeap                              7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ntdll.dll!LdrLoadDll                                   7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ntdll.dll!LdrUnloadDll                                 7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ntdll.dll!LdrGetProcedureAddress                       7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!CreateFileA                               7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!VirtualProtect                            7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!LoadLibraryExW                            7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!LoadLibraryExA                            7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!LoadLibraryA                              7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!CreateProcessW                            7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!CreateProcessA                            7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!GetProcAddress                            7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!LoadLibraryW                              7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!GetModuleHandleA                          7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!GetModuleHandleW                          7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!CreateFileW                               7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!MoveFileWithProgressW                     7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!MoveFileW                                 7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!OpenFile                                  7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!CopyFileExW                               7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!CopyFileA                                 7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!CopyFileW                                 7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!DeleteFileA                               7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!DeleteFileW                               7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!MoveFileExW                               7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!MoveFileA                                 7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!MoveFileWithProgressA                     7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!MoveFileExA                               7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!CopyFileExA                               7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!WinExec                                   7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!WinExec + 3                               7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] kernel32.dll!LoadModule                                7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] USER32.dll!EndTask                                     7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ADVAPI32.dll!CreateProcessAsUserW                      77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ADVAPI32.dll!CreateProcessAsUserA                      77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ole32.dll!CoCreateInstanceEx                           774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] ole32.dll!CoGetClassObject                             775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] WS2_32.dll!WSASocketW                                  71A5404E 7 Bytes  JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[3196] WS2_32.dll!WSASocketA                                  71A58B6A 5 Bytes  JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ntdll.dll!NtAllocateVirtualMemory                                        7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ntdll.dll!NtClose                                                        7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ntdll.dll!NtCreateFile                                                   7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ntdll.dll!NtCreateProcess                                                7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ntdll.dll!NtCreateProcessEx                                              7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ntdll.dll!NtDeleteFile                                                   7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ntdll.dll!NtFreeVirtualMemory                                            7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ntdll.dll!NtLoadDriver                                                   7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ntdll.dll!NtOpenFile                                                     7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ntdll.dll!NtProtectVirtualMemory                                         7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ntdll.dll!NtSetInformationProcess                                        7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ntdll.dll!NtUnloadDriver                                                 7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ntdll.dll!NtWriteVirtualMemory                                           7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ntdll.dll!RtlAllocateHeap                                                7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ntdll.dll!LdrLoadDll                                                     7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ntdll.dll!LdrUnloadDll                                                   7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ntdll.dll!LdrGetProcedureAddress                                         7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!CreateFileA                                                 7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!VirtualProtect                                              7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!LoadLibraryExW                                              7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!LoadLibraryExA                                              7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!LoadLibraryA                                                7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!CreateProcessW                                              7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!CreateProcessA                                              7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!GetProcAddress                                              7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!LoadLibraryW                                                7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!GetModuleHandleA                                            7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!GetModuleHandleW                                            7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!CreateFileW                                                 7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!MoveFileWithProgressW                                       7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!MoveFileW                                                   7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!OpenFile                                                    7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!CopyFileExW                                                 7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!CopyFileA                                                   7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!CopyFileW                                                   7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!DeleteFileA                                                 7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!DeleteFileW                                                 7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!MoveFileExW                                                 7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!MoveFileA                                                   7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!MoveFileWithProgressA                                       7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!MoveFileExA                                                 7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!CopyFileExA                                                 7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!WinExec                                                     7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!WinExec + 3                                                 7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\Program Files\Messenger\msmsgs.exe[3268] kernel32.dll!LoadModule                                                  7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ADVAPI32.dll!CreateProcessAsUserW                                        77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ADVAPI32.dll!CreateProcessAsUserA                                        77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] USER32.dll!EndTask                                                       7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] WS2_32.dll!WSASocketW                                                    71A5404E 7 Bytes  JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] WS2_32.dll!WSASocketA                                                    71A58B6A 5 Bytes  JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ole32.dll!CoCreateInstanceEx                                             774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] ole32.dll!CoGetClassObject                                               775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] SHELL32.dll!ShellExecuteExW                                              7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] SHELL32.dll!ShellExecuteEx                                               7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] SHELL32.dll!ShellExecuteA                                                7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] SHELL32.dll!ShellExecuteW                                                7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] WININET.dll!InternetConnectA                                             3FD0DEAE 5 Bytes  JMP 100279D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Messenger\msmsgs.exe[3268] WININET.dll!InternetConnectW                                             3FD0F862 5 Bytes  JMP 100279B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!NtAllocateVirtualMemory                                       7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!NtClose                                                       7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!NtCreateFile                                                  7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!NtCreateProcess                                               7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!NtCreateProcessEx                                             7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!NtDeleteFile                                                  7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!NtFreeVirtualMemory                                           7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!NtLoadDriver                                                  7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!NtOpenFile                                                    7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!NtProtectVirtualMemory                                        7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!NtSetInformationProcess                                       7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!NtUnloadDriver                                                7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!NtWriteVirtualMemory                                          7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!KiUserExceptionDispatcher                                     7C90E47C 7 Bytes  JMP 100277A0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!RtlAllocateHeap                                               7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!LdrLoadDll                                                    7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!LdrUnloadDll                                                  7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ntdll.dll!LdrGetProcedureAddress                                        7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!CreateFileA                                                7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!VirtualProtect                                             7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!LoadLibraryExW                                             7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!LoadLibraryExA                                             7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!LoadLibraryA                                               7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!CreateProcessW                                             7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!CreateProcessA                                             7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!GetProcAddress                                             7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!LoadLibraryW                                               7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!GetModuleHandleA                                           7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!GetModuleHandleW                                           7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!CreateFileW                                                7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!MoveFileWithProgressW                                      7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!MoveFileW                                                  7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!OpenFile                                                   7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!CopyFileExW                                                7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!CopyFileA                                                  7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!CopyFileW                                                  7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!DeleteFileA                                                7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!DeleteFileW                                                7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!MoveFileExW                                                7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!MoveFileA                                                  7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!MoveFileWithProgressA                                      7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!MoveFileExA                                                7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!CopyFileExA                                                7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!WinExec                                                    7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!WinExec + 3                                                7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] kernel32.dll!LoadModule                                                 7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] USER32.dll!EndTask                                                      7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ADVAPI32.dll!CreateProcessAsUserW                                       77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] ADVAPI32.dll!CreateProcessAsUserA                                       77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] wininet.dll!InternetConnectA                                            3FD0DEAE 5 Bytes  JMP 100279D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] wininet.dll!InternetConnectW                                            3FD0F862 5 Bytes  JMP 100279B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] shell32.dll!ShellExecuteExW                                             7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] shell32.dll!ShellExecuteEx                                              7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] shell32.dll!ShellExecuteA                                               7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] shell32.dll!ShellExecuteW                                               7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] WS2_32.dll!WSASocketW                                                   71A5404E 7 Bytes  JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[3504] WS2_32.dll!WSASocketA                                                   71A58B6A 5 Bytes  JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ntdll.dll!NtAllocateVirtualMemory                7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ntdll.dll!NtClose                                7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ntdll.dll!NtCreateFile                           7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ntdll.dll!NtCreateProcess                        7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ntdll.dll!NtCreateProcessEx                      7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ntdll.dll!NtDeleteFile                           7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ntdll.dll!NtFreeVirtualMemory                    7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ntdll.dll!NtLoadDriver                           7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ntdll.dll!NtOpenFile                             7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ntdll.dll!NtProtectVirtualMemory                 7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ntdll.dll!NtSetInformationProcess                7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ntdll.dll!NtUnloadDriver                         7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ntdll.dll!NtWriteVirtualMemory                   7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ntdll.dll!RtlAllocateHeap                        7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ntdll.dll!LdrLoadDll                             7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ntdll.dll!LdrUnloadDll                           7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ntdll.dll!LdrGetProcedureAddress                 7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!CreateFileA                         7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!VirtualProtect                      7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!LoadLibraryExW                      7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!LoadLibraryExA                      7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!LoadLibraryA                        7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!CreateProcessW                      7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!CreateProcessA                      7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!GetProcAddress                      7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!LoadLibraryW                        7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!GetModuleHandleA                    7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!GetModuleHandleW                    7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!CreateFileW                         7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!MoveFileWithProgressW               7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!MoveFileW                           7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!OpenFile                            7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!CopyFileExW                         7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!CopyFileA                           7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!CopyFileW                           7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!DeleteFileA                         7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!DeleteFileW                         7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!MoveFileExW                         7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!MoveFileA                           7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!MoveFileWithProgressA               7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!MoveFileExA                         7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!CopyFileExA                         7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!WinExec                             7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!WinExec + 3                         7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] kernel32.dll!LoadModule                          7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ADVAPI32.dll!CreateProcessAsUserW                77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ADVAPI32.dll!CreateProcessAsUserA                77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] USER32.dll!EndTask                               7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] SHELL32.dll!ShellExecuteExW                      7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] SHELL32.dll!ShellExecuteEx                       7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] SHELL32.dll!ShellExecuteA                        7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] SHELL32.dll!ShellExecuteW                        7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ole32.dll!CoCreateInstanceEx                     774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] ole32.dll!CoGetClassObject                       775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] WS2_32.dll!WSASocketW                            71A5404E 7 Bytes  JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[3548] WS2_32.dll!WSASocketA                            71A58B6A 5 Bytes  JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ntdll.dll!NtAllocateVirtualMemory            7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ntdll.dll!NtClose                            7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ntdll.dll!NtCreateFile                       7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ntdll.dll!NtCreateProcess                    7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ntdll.dll!NtCreateProcessEx                  7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ntdll.dll!NtDeleteFile                       7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ntdll.dll!NtFreeVirtualMemory                7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ntdll.dll!NtLoadDriver                       7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ntdll.dll!NtOpenFile                         7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ntdll.dll!NtProtectVirtualMemory             7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ntdll.dll!NtSetInformationProcess            7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ntdll.dll!NtUnloadDriver                     7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ntdll.dll!NtWriteVirtualMemory               7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ntdll.dll!RtlAllocateHeap                    7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ntdll.dll!LdrLoadDll                         7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ntdll.dll!LdrUnloadDll                       7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ntdll.dll!LdrGetProcedureAddress             7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!CreateFileA                     7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!VirtualProtect                  7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!LoadLibraryExW                  7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!LoadLibraryExA                  7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!LoadLibraryA                    7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!CreateProcessW                  7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!CreateProcessA                  7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!GetProcAddress                  7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!LoadLibraryW                    7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!GetModuleHandleA                7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!GetModuleHandleW                7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!CreateFileW                     7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!MoveFileWithProgressW           7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!MoveFileW                       7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!OpenFile                        7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!CopyFileExW                     7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!CopyFileA                       7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!CopyFileW                       7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!DeleteFileA                     7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!DeleteFileW                     7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!MoveFileExW                     7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!MoveFileA                       7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!MoveFileWithProgressA           7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!MoveFileExA                     7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!CopyFileExA                     7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!WinExec                         7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!WinExec + 3                     7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] kernel32.dll!LoadModule                      7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] USER32.dll!EndTask                           7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ADVAPI32.dll!CreateProcessAsUserW            77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ADVAPI32.dll!CreateProcessAsUserA            77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ole32.dll!CoCreateInstanceEx                 774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] ole32.dll!CoGetClassObject                   775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] WS2_32.dll!WSASocketW                        71A5404E 7 Bytes  JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe[3568] WS2_32.dll!WSASocketA                        71A58B6A 5 Bytes  JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ntdll.dll!NtAllocateVirtualMemory            7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ntdll.dll!NtClose                            7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ntdll.dll!NtCreateFile                       7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ntdll.dll!NtCreateProcess                    7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ntdll.dll!NtCreateProcessEx                  7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ntdll.dll!NtDeleteFile                       7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ntdll.dll!NtFreeVirtualMemory                7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ntdll.dll!NtLoadDriver                       7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ntdll.dll!NtOpenFile                         7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ntdll.dll!NtProtectVirtualMemory             7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ntdll.dll!NtSetInformationProcess            7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ntdll.dll!NtUnloadDriver                     7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ntdll.dll!NtWriteVirtualMemory               7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ntdll.dll!RtlAllocateHeap                    7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ntdll.dll!LdrLoadDll                         7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ntdll.dll!LdrUnloadDll                       7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ntdll.dll!LdrGetProcedureAddress             7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!CreateFileA                     7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!VirtualProtect                  7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!LoadLibraryExW                  7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!LoadLibraryExA                  7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!LoadLibraryA                    7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!CreateProcessW                  7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!CreateProcessA                  7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!GetProcAddress                  7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!LoadLibraryW                    7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!GetModuleHandleA                7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!GetModuleHandleW                7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!CreateFileW                     7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!MoveFileWithProgressW           7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!MoveFileW                       7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!OpenFile                        7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!CopyFileExW                     7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!CopyFileA                       7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!CopyFileW                       7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!DeleteFileA                     7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!DeleteFileW                     7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!MoveFileExW                     7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!MoveFileA                       7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!MoveFileWithProgressA           7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!MoveFileExA                     7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!CopyFileExA                     7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!WinExec                         7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!WinExec + 3                     7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] kernel32.dll!LoadModule                      7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] USER32.dll!EndTask                           7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ADVAPI32.dll!CreateProcessAsUserW            77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe[3576] ADVAPI32.dll!CreateProcessAsUserA            77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ntdll.dll!NtAllocateVirtualMemory                                         7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ntdll.dll!NtClose                                                         7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ntdll.dll!NtCreateFile                                                    7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ntdll.dll!NtCreateProcess                                                 7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ntdll.dll!NtCreateProcessEx                                               7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ntdll.dll!NtDeleteFile                                                    7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ntdll.dll!NtFreeVirtualMemory                                             7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ntdll.dll!NtLoadDriver                                                    7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ntdll.dll!NtOpenFile                                                      7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ntdll.dll!NtProtectVirtualMemory                                          7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ntdll.dll!NtSetInformationProcess                                         7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ntdll.dll!NtUnloadDriver                                                  7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ntdll.dll!NtWriteVirtualMemory                                            7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ntdll.dll!RtlAllocateHeap                                                 7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ntdll.dll!LdrLoadDll                                                      7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ntdll.dll!LdrUnloadDll                                                    7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ntdll.dll!LdrGetProcedureAddress                                          7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!CreateFileA                                                  7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!VirtualProtect                                               7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!LoadLibraryExW                                               7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!LoadLibraryExA                                               7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!LoadLibraryA                                                 7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!CreateProcessW                                               7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!CreateProcessA                                               7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!GetProcAddress                                               7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!LoadLibraryW                                                 7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!GetModuleHandleA                                             7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!GetModuleHandleW                                             7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!CreateFileW                                                  7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!MoveFileWithProgressW                                        7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!MoveFileW                                                    7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!OpenFile                                                     7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!CopyFileExW                                                  7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!CopyFileA                                                    7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!CopyFileW                                                    7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!DeleteFileA                                                  7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!DeleteFileW                                                  7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!MoveFileExW                                                  7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!MoveFileA                                                    7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!MoveFileWithProgressA                                        7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!MoveFileExA                                                  7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!CopyFileExA                                                  7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!WinExec                                                      7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!WinExec + 3                                                  7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] kernel32.dll!LoadModule                                                   7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ADVAPI32.DLL!CreateProcessAsUserW                                         77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] ADVAPI32.DLL!CreateProcessAsUserA                                         77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] USER32.dll!EndTask                                                        7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] SHELL32.dll!ShellExecuteExW                                               7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] SHELL32.dll!ShellExecuteEx                                                7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] SHELL32.dll!ShellExecuteA                                                 7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] SHELL32.dll!ShellExecuteW                                                 7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] WS2_32.dll!WSASocketW                                                     71A5404E 7 Bytes  JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] WS2_32.dll!WSASocketA                                                     71A58B6A 5 Bytes  JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] OLE32.dll!CoCreateInstanceEx                                              774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Bitcoin\bitcoin.exe[3656] OLE32.dll!CoGetClassObject                                                775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ntdll.dll!NtAllocateVirtualMemory                        7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ntdll.dll!NtClose                                        7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ntdll.dll!NtCreateFile                                   7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ntdll.dll!NtCreateProcess                                7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ntdll.dll!NtCreateProcessEx                              7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ntdll.dll!NtDeleteFile                                   7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ntdll.dll!NtFreeVirtualMemory                            7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ntdll.dll!NtLoadDriver                                   7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ntdll.dll!NtOpenFile                                     7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ntdll.dll!NtProtectVirtualMemory                         7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ntdll.dll!NtSetInformationProcess                        7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ntdll.dll!NtUnloadDriver                                 7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ntdll.dll!NtWriteVirtualMemory                           7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ntdll.dll!RtlAllocateHeap                                7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ntdll.dll!LdrLoadDll                                     7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ntdll.dll!LdrUnloadDll                                   7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ntdll.dll!LdrGetProcedureAddress                         7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!CreateFileA                                 7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!VirtualProtect                              7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!LoadLibraryExW                              7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!LoadLibraryExA                              7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!LoadLibraryA                                7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!CreateProcessW                              7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!CreateProcessA                              7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!GetProcAddress                              7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!LoadLibraryW                                7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!GetModuleHandleA                            7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!GetModuleHandleW                            7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!CreateFileW                                 7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!MoveFileWithProgressW                       7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!MoveFileW                                   7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!OpenFile                                    7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!CopyFileExW                                 7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!CopyFileA                                   7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!CopyFileW                                   7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!DeleteFileA                                 7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!DeleteFileW                                 7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!MoveFileExW                                 7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!MoveFileA                                   7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!MoveFileWithProgressA                       7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!MoveFileExA                                 7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!CopyFileExA                                 7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!WinExec                                     7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!WinExec + 3                                 7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] kernel32.dll!LoadModule                                  7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] USER32.dll!EndTask                                       7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ADVAPI32.dll!CreateProcessAsUserW                        77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] ADVAPI32.dll!CreateProcessAsUserA                        77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] SHELL32.dll!ShellExecuteExW                              7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] SHELL32.dll!ShellExecuteEx                               7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] SHELL32.dll!ShellExecuteA                                7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.exe[3688] SHELL32.dll!ShellExecuteW                                7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ntdll.dll!NtAllocateVirtualMemory                         7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ntdll.dll!NtClose                                         7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ntdll.dll!NtCreateFile                                    7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ntdll.dll!NtCreateProcess                                 7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ntdll.dll!NtCreateProcessEx                               7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ntdll.dll!NtDeleteFile                                    7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ntdll.dll!NtFreeVirtualMemory                             7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ntdll.dll!NtLoadDriver                                    7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ntdll.dll!NtOpenFile                                      7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ntdll.dll!NtProtectVirtualMemory                          7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ntdll.dll!NtSetInformationProcess                         7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ntdll.dll!NtUnloadDriver                                  7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ntdll.dll!NtWriteVirtualMemory                            7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ntdll.dll!RtlAllocateHeap                                 7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ntdll.dll!LdrLoadDll                                      7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ntdll.dll!LdrUnloadDll                                    7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ntdll.dll!LdrGetProcedureAddress                          7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!CreateFileA                                  7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!VirtualProtect                               7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!LoadLibraryExW                               7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!LoadLibraryExA                               7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!LoadLibraryA                                 7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!CreateProcessW                               7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!CreateProcessA                               7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!GetProcAddress                               7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!LoadLibraryW                                 7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!GetModuleHandleA                             7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!GetModuleHandleW                             7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!CreateFileW                                  7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!MoveFileWithProgressW                        7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!MoveFileW                                    7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!OpenFile                                     7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!CopyFileExW                                  7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!CopyFileA                                    7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!CopyFileW                                    7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!DeleteFileA                                  7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!DeleteFileW                                  7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!MoveFileExW                                  7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!MoveFileA                                    7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!MoveFileWithProgressA                        7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!MoveFileExA                                  7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!CopyFileExA                                  7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!WinExec                                      7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!WinExec + 3                                  7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] kernel32.dll!LoadModule                                   7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] USER32.dll!EndTask                                        7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ADVAPI32.dll!CreateProcessAsUserW                         77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ADVAPI32.dll!CreateProcessAsUserA                         77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ole32.dll!CoCreateInstanceEx                              774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] ole32.dll!CoGetClassObject                                775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] shell32.dll!ShellExecuteExW                               7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] shell32.dll!ShellExecuteEx                                7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] shell32.dll!ShellExecuteA                                 7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\marian\Pulpit\86hdvclt.exe[3708] shell32.dll!ShellExecuteW                                 7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ntdll.dll!NtAllocateVirtualMemory                  7C90CF6E 5 Bytes  JMP 00A37E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ntdll.dll!NtClose                                  7C90CFEE 5 Bytes  JMP 00A2CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ntdll.dll!NtCreateFile                             7C90D0AE 5 Bytes  JMP 00A37E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ntdll.dll!NtCreateProcess                          7C90D14E 5 Bytes  JMP 00A37ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ntdll.dll!NtCreateProcessEx                        7C90D15E 5 Bytes  JMP 00A37EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ntdll.dll!NtDeleteFile                             7C90D23E 5 Bytes  JMP 00A37E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ntdll.dll!NtFreeVirtualMemory                      7C90D38E 5 Bytes  JMP 00A374E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ntdll.dll!NtLoadDriver                             7C90D46E 5 Bytes  JMP 00A37E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ntdll.dll!NtOpenFile                               7C90D59E 5 Bytes  JMP 00A37DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ntdll.dll!NtProtectVirtualMemory                   7C90D6EE 5 Bytes  JMP 00A37490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ntdll.dll!NtSetInformationProcess                  7C90DC9E 5 Bytes  JMP 00A37DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ntdll.dll!NtUnloadDriver                           7C90DEBE 5 Bytes  JMP 00A37DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ntdll.dll!NtWriteVirtualMemory                     7C90DFAE 5 Bytes  JMP 00A37E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ntdll.dll!RtlAllocateHeap                          7C9100C4 5 Bytes  JMP 00A37530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ntdll.dll!LdrLoadDll                               7C91632D 5 Bytes  JMP 00A35680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ntdll.dll!LdrUnloadDll                             7C9171CD 5 Bytes  JMP 00A2CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ntdll.dll!LdrGetProcedureAddress                   7C917CF0 5 Bytes  JMP 00A37D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!CreateFileA                           7C801A28 5 Bytes  JMP 00A37CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!VirtualProtect                        7C801AD4 5 Bytes  JMP 00A37A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!LoadLibraryExW                        7C801AF5 7 Bytes  JMP 00A37D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!LoadLibraryExA                        7C801D53 5 Bytes  JMP 00A37D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!LoadLibraryA                          7C801D7B 5 Bytes  JMP 00A37AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!CreateProcessW                        7C802336 5 Bytes  JMP 00A326F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!CreateProcessA                        7C80236B 5 Bytes  JMP 00A33280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!GetProcAddress                        7C80AE40 5 Bytes  JMP 00A37D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!LoadLibraryW                          7C80AEEB 5 Bytes  JMP 00A37AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!GetModuleHandleA                      7C80B741 5 Bytes  JMP 00A37B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!GetModuleHandleW                      7C80E4DD 5 Bytes  JMP 00A37AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!CreateFileW                           7C810800 5 Bytes  JMP 00A37CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!MoveFileWithProgressW                 7C81F72E 5 Bytes  JMP 00A37B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!MoveFileW                             7C821261 5 Bytes  JMP 00A37BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!OpenFile                              7C821982 5 Bytes  JMP 00A37CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!CopyFileExW                           7C827B32 7 Bytes  JMP 00A37C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!CopyFileA                             7C8286EE 5 Bytes  JMP 00A37C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!CopyFileW                             7C82F87B 5 Bytes  JMP 00A37C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!DeleteFileA                           7C831EDD 5 Bytes  JMP 00A37B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!DeleteFileW                           7C831F63 5 Bytes  JMP 00A37B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!MoveFileExW                           7C83568B 5 Bytes  JMP 00A37BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!MoveFileA                             7C835EBF 5 Bytes  JMP 00A37C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!MoveFileWithProgressA                 7C835EDE 5 Bytes  JMP 00A37B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!MoveFileExA                           7C85E49B 5 Bytes  JMP 00A37BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!CopyFileExA                           7C85F39C 5 Bytes  JMP 00A37C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!WinExec                               7C86250D 2 Bytes  JMP 00A37A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!WinExec + 3                           7C862510 2 Bytes  [1D, 84]
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] kernel32.dll!LoadModule                            7C86261E 5 Bytes  JMP 00A37D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ADVAPI32.dll!CreateProcessAsUserW                  77DDA8A9 5 Bytes  JMP 00A31220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ADVAPI32.dll!CreateProcessAsUserA                  77E00CE8 5 Bytes  JMP 00A31B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] USER32.dll!EndTask                                 7E3AA0A5 5 Bytes  JMP 00A3DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ole32.dll!CoCreateInstanceEx                       774EF154 5 Bytes  JMP 00A3E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] ole32.dll!CoGetClassObject                         775051F5 5 Bytes  JMP 00A3E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] WS2_32.dll!WSASocketW                              71A5404E 7 Bytes  JMP 00A37970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[3780] WS2_32.dll!WSASocketA                              71A58B6A 5 Bytes  JMP 00A37990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ntdll.dll!NtAllocateVirtualMemory                        7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ntdll.dll!NtClose                                        7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ntdll.dll!NtCreateFile                                   7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ntdll.dll!NtCreateProcess                                7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ntdll.dll!NtCreateProcessEx                              7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ntdll.dll!NtDeleteFile                                   7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ntdll.dll!NtFreeVirtualMemory                            7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ntdll.dll!NtLoadDriver                                   7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ntdll.dll!NtOpenFile                                     7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ntdll.dll!NtProtectVirtualMemory                         7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ntdll.dll!NtSetInformationProcess                        7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ntdll.dll!NtUnloadDriver                                 7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ntdll.dll!NtWriteVirtualMemory                           7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ntdll.dll!RtlAllocateHeap                                7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ntdll.dll!LdrLoadDll                                     7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ntdll.dll!LdrUnloadDll                                   7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ntdll.dll!LdrGetProcedureAddress                         7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!CreateFileA                                 7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!VirtualProtect                              7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!LoadLibraryExW                              7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!LoadLibraryExA                              7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!LoadLibraryA                                7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!CreateProcessW                              7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!CreateProcessA                              7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!GetProcAddress                              7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!LoadLibraryW                                7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!GetModuleHandleA                            7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!GetModuleHandleW                            7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!CreateFileW                                 7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!MoveFileWithProgressW                       7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!MoveFileW                                   7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!OpenFile                                    7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!CopyFileExW                                 7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!CopyFileA                                   7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!CopyFileW                                   7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!DeleteFileA                                 7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!DeleteFileW                                 7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!MoveFileExW                                 7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!MoveFileA                                   7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!MoveFileWithProgressA                       7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!MoveFileExA                                 7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!CopyFileExA                                 7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!WinExec                                     7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!WinExec + 3                                 7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] kernel32.dll!LoadModule                                  7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] USER32.dll!EndTask                                       7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ADVAPI32.dll!CreateProcessAsUserW                        77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ADVAPI32.dll!CreateProcessAsUserA                        77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] WS2_32.dll!WSASocketW                                    71A5404E 7 Bytes  JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] WS2_32.dll!WSASocketA                                    71A58B6A 5 Bytes  JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ole32.dll!CoCreateInstanceEx                             774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] ole32.dll!CoGetClassObject                               775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] SHELL32.dll!ShellExecuteExW                              7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] SHELL32.dll!ShellExecuteEx                               7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] SHELL32.dll!ShellExecuteA                                7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\OpenOffice.org 3\program\soffice.bin[4004] SHELL32.dll!ShellExecuteW                                7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ntdll.dll!NtAllocateVirtualMemory                                                       7C90CF6E 5 Bytes  JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ntdll.dll!NtClose                                                                       7C90CFEE 5 Bytes  JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ntdll.dll!NtCreateFile                                                                  7C90D0AE 5 Bytes  JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ntdll.dll!NtCreateProcess                                                               7C90D14E 5 Bytes  JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ntdll.dll!NtCreateProcessEx                                                             7C90D15E 5 Bytes  JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ntdll.dll!NtDeleteFile                                                                  7C90D23E 5 Bytes  JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ntdll.dll!NtFreeVirtualMemory                                                           7C90D38E 5 Bytes  JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ntdll.dll!NtLoadDriver                                                                  7C90D46E 5 Bytes  JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ntdll.dll!NtOpenFile                                                                    7C90D59E 5 Bytes  JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ntdll.dll!NtProtectVirtualMemory                                                        7C90D6EE 5 Bytes  JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ntdll.dll!NtSetInformationProcess                                                       7C90DC9E 5 Bytes  JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ntdll.dll!NtUnloadDriver                                                                7C90DEBE 5 Bytes  JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ntdll.dll!NtWriteVirtualMemory                                                          7C90DFAE 5 Bytes  JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ntdll.dll!RtlAllocateHeap                                                               7C9100C4 5 Bytes  JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ntdll.dll!LdrLoadDll                                                                    7C91632D 5 Bytes  JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ntdll.dll!LdrUnloadDll                                                                  7C9171CD 5 Bytes  JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ntdll.dll!LdrGetProcedureAddress                                                        7C917CF0 5 Bytes  JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!CreateFileA                                                                7C801A28 5 Bytes  JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!VirtualProtect                                                             7C801AD4 5 Bytes  JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!LoadLibraryExW                                                             7C801AF5 7 Bytes  JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!LoadLibraryExA                                                             7C801D53 5 Bytes  JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!LoadLibraryA                                                               7C801D7B 5 Bytes  JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!CreateProcessW                                                             7C802336 5 Bytes  JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!CreateProcessA                                                             7C80236B 5 Bytes  JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!GetProcAddress                                                             7C80AE40 5 Bytes  JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!LoadLibraryW                                                               7C80AEEB 5 Bytes  JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!GetModuleHandleA                                                           7C80B741 5 Bytes  JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!GetModuleHandleW                                                           7C80E4DD 5 Bytes  JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!CreateFileW                                                                7C810800 5 Bytes  JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!MoveFileWithProgressW                                                      7C81F72E 5 Bytes  JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!MoveFileW                                                                  7C821261 5 Bytes  JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!OpenFile                                                                   7C821982 5 Bytes  JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!CopyFileExW                                                                7C827B32 7 Bytes  JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!CopyFileA                                                                  7C8286EE 5 Bytes  JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!CopyFileW                                                                  7C82F87B 5 Bytes  JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!DeleteFileA                                                                7C831EDD 5 Bytes  JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!DeleteFileW                                                                7C831F63 5 Bytes  JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!MoveFileExW                                                                7C83568B 5 Bytes  JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!MoveFileA                                                                  7C835EBF 5 Bytes  JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!MoveFileWithProgressA                                                      7C835EDE 5 Bytes  JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!MoveFileExA                                                                7C85E49B 5 Bytes  JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!CopyFileExA                                                                7C85F39C 5 Bytes  JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!WinExec                                                                    7C86250D 2 Bytes  JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!WinExec + 3                                                                7C862510 2 Bytes  [7C, 93] {JL 0xffffffffffffff95}
.text           C:\WINDOWS\notepad.exe[4088] kernel32.dll!LoadModule                                                                 7C86261E 5 Bytes  JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ADVAPI32.dll!CreateProcessAsUserW                                                       77DDA8A9 5 Bytes  JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ADVAPI32.dll!CreateProcessAsUserA                                                       77E00CE8 5 Bytes  JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] USER32.dll!EndTask                                                                      7E3AA0A5 5 Bytes  JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] SHELL32.dll!ShellExecuteExW                                                             7CA098CB 5 Bytes  JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] SHELL32.dll!ShellExecuteEx                                                              7CA40E45 5 Bytes  JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] SHELL32.dll!ShellExecuteA                                                               7CA41170 5 Bytes  JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] SHELL32.dll!ShellExecuteW                                                               7CAB5D48 5 Bytes  JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ole32.dll!CoCreateInstanceEx                                                            774EF154 5 Bytes  JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\notepad.exe[4088] ole32.dll!CoGetClassObject                                                              775051F5 5 Bytes  JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)

---- Kernel IAT/EAT - GMER 1.0.15 ----

IAT             \SystemRoot\system32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisCloseAdapter]                                                  [B9E08750] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisOpenAdapter]                                                   [B9E08820] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisDeregisterProtocol]                                            [B9E087F0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisRegisterProtocol]                                              [B9E087B0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisRegisterProtocol]                                             [B9E087B0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisOpenAdapter]                                                  [B9E08820] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisCloseAdapter]                                                 [B9E08750] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisDeregisterProtocol]                                           [B9E087F0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisDeregisterProtocol]                                             [B9E087F0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisRegisterProtocol]                                               [B9E087B0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisOpenAdapter]                                                    [B9E08820] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisCloseAdapter]                                                   [B9E08750] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisRegisterProtocol]                                              [B9E087B0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisDeregisterProtocol]                                            [B9E087F0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisCloseAdapter]                                                  [B9E08750] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisOpenAdapter]                                                   [B9E08820] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\tcpip.sys[NDIS.SYS!NdisCloseAdapter]                                                    [B9E08750] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\tcpip.sys[NDIS.SYS!NdisOpenAdapter]                                                     [B9E08820] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\tcpip.sys[NDIS.SYS!NdisRegisterProtocol]                                                [B9E087B0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\wanarp.sys[NDIS.SYS!NdisDeregisterProtocol]                                             [B9E087F0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\wanarp.sys[NDIS.SYS!NdisRegisterProtocol]                                               [B9E087B0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\wanarp.sys[NDIS.SYS!NdisOpenAdapter]                                                    [B9E08820] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\wanarp.sys[NDIS.SYS!NdisCloseAdapter]                                                   [B9E08750] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisRegisterProtocol]                                              [B9E087B0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisDeregisterProtocol]                                            [B9E087F0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisCloseAdapter]                                                  [B9E08750] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisOpenAdapter]                                                   [B9E08820] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)

---- Devices - GMER 1.0.15 ----

AttachedDevice  \Driver\Tcpip \Device\Ip                                                                                             cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)
AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                                            cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)
AttachedDevice  \Driver\Tcpip \Device\Udp                                                                                            cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)
AttachedDevice  \Driver\Tcpip \Device\RawIp                                                                                          cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)
AttachedDevice  \FileSystem\Fastfat \Fat                                                                                             fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

---- Files - GMER 1.0.15 ----

File            C:\Program Files\COMODO\COMODO Internet Security\Quarantine\Temp                                                     0 bytes
File            C:\Program Files\COMODO\COMODO Internet Security\Quarantine\Temp\baseupd                                             0 bytes

---- EOF - GMER 1.0.15 ----