GMER 2.2.19882 - http://www.gmer.net Rootkit scan 2016-10-07 20:24:16 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 SPCC_Solid_State_Disk rev.S8FM08.3 111,79GB Running: m9nwp2c5.exe; Driver: C:\Users\aaa\AppData\Local\Temp\uxriapow.sys ---- User code sections - GMER 2.2 ---- .text C:\Program Files (x86)\Launch Manager\LManager.exe[1036] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000074db1401 2 bytes JMP 761fb263 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Launch Manager\LManager.exe[1036] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000074db1419 2 bytes JMP 761fb38e C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Launch Manager\LManager.exe[1036] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000074db1431 2 bytes JMP 762790f1 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Launch Manager\LManager.exe[1036] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000074db144a 2 bytes CALL 761d48ad C:\Windows\syswow64\kernel32.dll .text ... * 9 .text C:\Program Files (x86)\Launch Manager\LManager.exe[1036] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000074db14dd 2 bytes JMP 762789ea C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Launch Manager\LManager.exe[1036] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000074db14f5 2 bytes JMP 76278bc0 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Launch Manager\LManager.exe[1036] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000074db150d 2 bytes JMP 762788e0 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Launch Manager\LManager.exe[1036] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000074db1525 2 bytes JMP 76278caa C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Launch Manager\LManager.exe[1036] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000074db153d 2 bytes JMP 761efce8 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Launch Manager\LManager.exe[1036] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000074db1555 2 bytes JMP 761f6937 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Launch Manager\LManager.exe[1036] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000074db156d 2 bytes JMP 762791a9 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Launch Manager\LManager.exe[1036] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000074db1585 2 bytes JMP 76278d0a C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Launch Manager\LManager.exe[1036] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000074db159d 2 bytes JMP 762788a4 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Launch Manager\LManager.exe[1036] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000074db15b5 2 bytes JMP 761efd81 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Launch Manager\LManager.exe[1036] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000074db15cd 2 bytes JMP 761fb324 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Launch Manager\LManager.exe[1036] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000074db16b2 2 bytes JMP 7627906c C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Launch Manager\LManager.exe[1036] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000074db16bd 2 bytes JMP 76278839 C:\Windows\syswow64\kernel32.dll ---- User IAT/EAT - GMER 2.2 ---- IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msiexec.exe[ADVAPI32.dll!RegCreateKeyExW] [7fee1deb4f4] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msiexec.exe[ADVAPI32.dll!RegDeleteValueW] [7fee1debbc8] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msiexec.exe[ADVAPI32.dll!RegOpenKeyExW] [7fee1deb6d0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msiexec.exe[ADVAPI32.dll!RegSetValueExW] [7fee1debaa8] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msiexec.exe[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\ADVAPI32.dll[KERNEL32.dll!CopyFileW] [7fee1dea184] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\ADVAPI32.dll[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\ADVAPI32.dll[KERNEL32.dll!CreateFileW] [7fee1dea42c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\ADVAPI32.dll[KERNEL32.dll!DeleteFileW] [7fee1dea5e4] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\USER32.dll[KERNEL32.dll!RegOpenKeyExW] [7fee1deb6d0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\USER32.dll[KERNEL32.dll!RegCreateKeyExW] [7fee1deb4f4] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\USER32.dll[KERNEL32.dll!RegSetValueExW] [7fee1debaa8] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\USER32.dll[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\USER32.dll[KERNEL32.dll!CreateFileW] [7fee1dea42c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\GDI32.dll[KERNEL32.dll!CopyFileW] [7fee1dea184] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\GDI32.dll[KERNEL32.dll!DeleteFileW] [7fee1dea5e4] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\GDI32.dll[KERNEL32.dll!CreateFileW] [7fee1dea42c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\GDI32.dll[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msi.dll[ADVAPI32.dll!SetFileSecurityW] [7fee1debcb0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msi.dll[ADVAPI32.dll!RegCreateKeyExW] [7fee1deb4f4] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msi.dll[ADVAPI32.dll!RegSetValueExA] [7fee1deba0c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msi.dll[ADVAPI32.dll!RegOpenKeyExW] [7fee1deb6d0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msi.dll[ADVAPI32.dll!RegDeleteValueW] [7fee1debbc8] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msi.dll[ADVAPI32.dll!RegDeleteKeyW] [7fee1ded12c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msi.dll[ADVAPI32.dll!RegSetValueExW] [7fee1debaa8] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msi.dll[KERNEL32.dll!MoveFileExW] [7fee1dea804] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msi.dll[KERNEL32.dll!SetFileAttributesW] [7fee1deabe0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msi.dll[KERNEL32.dll!MoveFileW] [7fee1dea6e0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msi.dll[KERNEL32.dll!DeleteFileW] [7fee1dea5e4] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msi.dll[KERNEL32.dll!CreateFileW] [7fee1dea42c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\msi.dll[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SHELL32.dll[KERNEL32.dll!CopyFileW] [7fee1dea184] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SHELL32.dll[KERNEL32.dll!MoveFileExW] [7fee1dea804] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SHELL32.dll[KERNEL32.dll!MoveFileW] [7fee1dea6e0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SHLWAPI.dll[KERNEL32.dll!DeleteFileW] [7fee1dea5e4] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SHLWAPI.dll[KERNEL32.dll!CreateFileW] [7fee1dea42c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SHLWAPI.dll[KERNEL32.dll!SetFileAttributesW] [7fee1deabe0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SHLWAPI.dll[KERNEL32.dll!SetFileAttributesA] [7fee1deab7c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SHLWAPI.dll[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SHLWAPI.dll[KERNEL32.dll!CreateFileA] [7fee1dea2d8] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\WINSPOOL.DRV[KERNEL32.dll!DeleteFileW] [7fee1dea5e4] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\WINSPOOL.DRV[KERNEL32.dll!MoveFileExW] [7fee1dea804] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\WINSPOOL.DRV[KERNEL32.dll!SetFileAttributesW] [7fee1deabe0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\WINSPOOL.DRV[KERNEL32.dll!CopyFileW] [7fee1dea184] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\WINSPOOL.DRV[KERNEL32.dll!CreateFileW] [7fee1dea42c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\WINSPOOL.DRV[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\MPR.dll[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\sfc_os.DLL[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\USERENV.dll[KERNEL32.dll!PrivCopyFileExW] [7fee1deab04] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\USERENV.dll[KERNEL32.dll!MoveFileExW] [7fee1dea804] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\dwmapi.dll[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\IMM32.DLL[KERNEL32.dll!OpenFile] [7fee1dea890] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\IMM32.DLL[KERNEL32.dll!CreateFileW] [7fee1dea42c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\IMM32.DLL[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\MSCTF.dll[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\COMCTL32.DLL[KERNEL32.dll!CreateFileW] [7fee1dea42c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\COMCTL32.DLL[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\CLBCatQ.DLL[ADVAPI32.dll!RegDeleteValueW] [7fee1debbc8] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\CLBCatQ.DLL[ADVAPI32.dll!RegCreateKeyExW] [7fee1deb4f4] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\CLBCatQ.DLL[ADVAPI32.dll!RegSetValueExW] [7fee1debaa8] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\CLBCatQ.DLL[ADVAPI32.dll!RegOpenKeyExW] [7fee1deb6d0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\CLBCatQ.DLL[KERNEL32.dll!MoveFileExW] [7fee1dea804] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\CLBCatQ.DLL[KERNEL32.dll!CreateFileW] [7fee1dea42c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\CLBCatQ.DLL[KERNEL32.dll!SetFileAttributesW] [7fee1deabe0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\CLBCatQ.DLL[KERNEL32.dll!MoveFileW] [7fee1dea6e0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\CLBCatQ.DLL[KERNEL32.dll!DeleteFileW] [7fee1dea5e4] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\CLBCatQ.DLL[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\OLEAUT32.dll[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\OLEAUT32.dll[KERNEL32.dll!_lwrite] [7fee1deaa1c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\OLEAUT32.dll[KERNEL32.dll!CreateFileW] [7fee1dea42c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\OLEAUT32.dll[KERNEL32.dll!CreateFileA] [7fee1dea2d8] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\rsaenh.dll[KERNEL32.dll!DeleteFileW] [7fee1dea5e4] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\rsaenh.dll[KERNEL32.dll!CreateFileW] [7fee1dea42c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\rsaenh.dll[KERNEL32.dll!RegCreateKeyExA] [7fee1deb3dc] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\rsaenh.dll[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\rsaenh.dll[KERNEL32.dll!MoveFileExW] [7fee1dea804] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\rsaenh.dll[KERNEL32.dll!RegSetValueExA] [7fee1deba0c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\srvcli.dll[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\wkscli.dll[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\VERSION.DLL[KERNEL32.dll!_lcreat] [7fee1dea9a0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\VERSION.DLL[KERNEL32.dll!_lopen] [7fee1dea924] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\VERSION.DLL[KERNEL32.dll!_lwrite] [7fee1deaa1c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\VERSION.DLL[KERNEL32.dll!DeleteFileA] [7fee1dea580] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\VERSION.DLL[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\VERSION.DLL[KERNEL32.dll!CreateFileW] [7fee1dea42c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\VERSION.DLL[KERNEL32.dll!DeleteFileW] [7fee1dea5e4] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\VERSION.DLL[KERNEL32.dll!MoveFileW] [7fee1dea6e0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SETUPAPI.dll[KERNEL32.dll!MoveFileExW] [7fee1dea804] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SETUPAPI.dll[KERNEL32.dll!CopyFileW] [7fee1dea184] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SETUPAPI.dll[KERNEL32.dll!CreateFileA] [7fee1dea2d8] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SETUPAPI.dll[KERNEL32.dll!RegSetValueExW] [7fee1debaa8] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SETUPAPI.dll[KERNEL32.dll!RegDeleteValueW] [7fee1debbc8] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SETUPAPI.dll[KERNEL32.dll!RegCreateKeyExW] [7fee1deb4f4] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SETUPAPI.dll[KERNEL32.dll!RegOpenKeyExW] [7fee1deb6d0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SETUPAPI.dll[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SETUPAPI.dll[KERNEL32.dll!MoveFileW] [7fee1dea6e0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SETUPAPI.dll[KERNEL32.dll!DeleteFileW] [7fee1dea5e4] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SETUPAPI.dll[KERNEL32.dll!SetFileAttributesW] [7fee1deabe0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\SETUPAPI.dll[KERNEL32.dll!CreateFileW] [7fee1dea42c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\CFGMGR32.dll[ADVAPI32.dll!RegCreateKeyExW] [7fee1deb4f4] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\CFGMGR32.dll[ADVAPI32.dll!RegOpenKeyExW] [7fee1deb6d0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\CFGMGR32.dll[ADVAPI32.dll!RegSetValueExW] [7fee1debaa8] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\CFGMGR32.dll[ADVAPI32.dll!RegDeleteValueW] [7fee1debbc8] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\CFGMGR32.dll[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\DEVRTL.dll[KERNEL32.dll!MoveFileW] [7fee1dea6e0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\DEVRTL.dll[KERNEL32.dll!MoveFileExW] [7fee1dea804] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\ntmarta.dll[ADVAPI32.dll!RegSetValueExW] [7fee1debaa8] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\ntmarta.dll[ADVAPI32.dll!RegCreateKeyExW] [7fee1deb4f4] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\ntmarta.dll[ADVAPI32.dll!RegOpenKeyExW] [7fee1deb6d0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\ntmarta.dll[KERNEL32.dll!CreateFileW] [7fee1dea42c] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\ntmarta.dll[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\system32\WLDAP32.dll[KERNEL32.dll!GetProcAddress] [7fefc8e4230] C:\Windows\system32\apphelp.dll IAT C:\Windows\system32\msiexec.exe[3232] @ C:\Windows\System32\perfproc.dll[ADVAPI32.dll!RegOpenKeyExW] [7fee1deb6d0] C:\Windows\AppPatch\AppPatch64\AcGenral.DLL ---- EOF - GMER 2.2 ----