Some random trojan

Breaker934 Topic Starter

Post #1August 31, 2010, 10:04 PM UTC

Booted my computer, Kaspersky turned off and said I had an infection. Tried removing them, but as usual my antivirus protection never seems to work.

Here's my HiJackThis log, said it may not be able to access all the registry and that I may need to do it manually, but any help would be greatly appreciated.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 5:59:11 PM, on 8/31/2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Zune\ZuneLauncher.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
C:\Users\Nick\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Nick\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nick\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nick\Desktop\HijackThis.exe
C:\Users\Nick\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\taskeng.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [Zune Launcher] "C:\Program Files\Zune\ZuneLauncher.exe"
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKCU\..\Run: [Google Update] "C:\Users\Nick\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Octoshape Streaming Services] "C:\Users\Nick\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" -inv:bootrun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GO36F4~1.DLL,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: Kaspersky Anti-Virus Service (AVP) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

–
End of file - 6191 bytes

The names of the infected process are: wininit.exe and csrss.exe

JonTom

Post #2September 1, 2010, 6:42 PM UTC

Hello Breaker934 and

My name is JonTom.

Malware Logs can sometimes take a lot of time to research and interpret.
Please be patient while I try to assist with your problem. If at any time you do not understand what is required, please ask for further explanation.
Please note that there is no "Quick Fix" to modern malware infections and we may need to use several different approaches to get your system clean.
Read every reply you receive carefully and thoroughly before carrying out the instructions. You may also find it helpful to print out the instructions you receive, as in some instances you may have to disconnect your computer from the Internet.
PLEASE NOTE: If you do not reply after 5 days your thread will be closed.

Lets take a closer look at your system with some scans. Please work your way through the following steps. If you encounter any difficulties just let me know.

Download and run OTL by Oldtimer
- Please download OTL by Oldtimer by clicking here and save the file (called OTL.exe) to your desktop.
- Close all open windows on your computer then Right click on the OTL.exe icon and select "Run as Administrator" to run the program.
- Check the boxes beside "LOP Check" and "Purity Check".
- Under Custom Scan paste this in:
netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
symmpi.sys
adp3132.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\drivers\*.sys /90
CREATERESTOREPOINT
- Click the "Run Scan" button. Do not change any settings unless specifically told to do so. The scan will not take long.
- When the scan completes, it will open two notepad windows: OTL.Txt and Extras.Txt.
- Note: These logs can be located in the OTL. folder on you C:\ drive if they fail to open automatically.
- Please Copy and Paste the contents of both files in your next reply. You may need two posts to fit them both in.
DeFogger
- Please download DeFogger to your desktop.
- Click on DeFogger to run the tool.
- The application window will appear.
- Click the Disable button to disable your CD Emulation drivers.
- Click Yes to continue.
- A 'Finished!' message will appear.
- Click OK.
- DeFogger will now ask to reboot the machine - click OK.
  IMPORTANT! If you receive an error message while running DeFogger, please post the log defogger_disable which will appear on your desktop.
  Do not re-enable these drivers until otherwise instructed.
Please scan your system with GMER

[external image: Posted Image]
Download GMER Rootkit Scanner from here or here.
- Extract the contents of the zipped file to desktop.
- Right click GMER.exe and select "Run as Administrator". If asked to allow gmer.sys driver to load, please consent.
- If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.
- In the right panel, you will see several boxes that have been checked. Uncheck the following …
- IAT/EAT
- Drives/Partition other than Systemdrive (typically C:\)
- Show All (don't miss this one)
Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and post it in your reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries

Please post the OTL logs and the GMER log in your next reply.

Breaker934

Post #3September 2, 2010, 1:58 AM UTC

Hi, JonTom thank you for helping me! I ran the OTL scan and here's what it came up with.

OTL.txt is as follows:

OTL logfile created on: 9/1/2010 9:28:28 PM - Run 1
OTL by OldTimer - Version 3.2.11.0 Folder = C:\Users\Nick\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 60.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 72.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 55.78 Gb Total Space | 11.72 Gb Free Space | 21.01% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
Drive G: | 232.83 Gb Total Space | 142.13 Gb Free Space | 61.04% Space Free | Partition Type: FAT32
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: NICK-PC
Current User Name: Nick
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010/09/01 21:26:42 | 000,574,976 | —- | M] (OldTimer Tools) – C:\Users\Nick\Desktop\OTL.exe
PRC - [2010/08/17 21:58:17 | 000,945,720 | —- | M] (Google Inc.) – C:\Users\Nick\AppData\Local\Google\Chrome\Application\chrome.exe
PRC - [2010/07/28 10:00:47 | 000,030,192 | —- | M] (Google) – C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
PRC - [2010/07/01 21:39:08 | 000,357,096 | —- | M] (Kaspersky Lab ZAO) – C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
PRC - [2010/01/07 14:38:08 | 000,158,448 | —- | M] (Microsoft Corporation) – C:\Program Files\Zune\ZuneLauncher.exe
PRC - [2009/10/31 01:45:39 | 002,614,272 | —- | M] (Microsoft Corporation) – C:\Windows\explorer.exe
PRC - [2009/07/13 21:14:42 | 000,049,152 | —- | M] (Microsoft Corporation) – C:\Windows\System32\taskhost.exe

========== Modules (SafeList) ==========

MOD - [2010/09/01 21:26:42 | 000,574,976 | —- | M] (OldTimer Tools) – C:\Users\Nick\Desktop\OTL.exe
MOD - [2009/07/13 21:16:15 | 000,099,840 | —- | M] (Microsoft Corporation) – C:\Windows\System32\sspicli.dll
MOD - [2009/07/13 21:16:13 | 000,092,160 | —- | M] (Microsoft Corporation) – C:\Windows\System32\sechost.dll
MOD - [2009/07/13 21:16:13 | 000,050,688 | —- | M] (Microsoft Corporation) – C:\Windows\System32\samcli.dll
MOD - [2009/07/13 21:16:12 | 000,031,744 | —- | M] (Microsoft Corporation) – C:\Windows\System32\profapi.dll
MOD - [2009/07/13 21:16:03 | 000,022,016 | —- | M] (Microsoft Corporation) – C:\Windows\System32\netutils.dll
MOD - [2009/07/13 21:15:35 | 000,288,256 | —- | M] (Microsoft Corporation) – C:\Windows\System32\KernelBase.dll
MOD - [2009/07/13 21:15:13 | 000,067,072 | —- | M] (Microsoft Corporation) – C:\Windows\System32\dwmapi.dll
MOD - [2009/07/13 21:15:11 | 000,064,512 | —- | M] (Microsoft Corporation) – C:\Windows\System32\devobj.dll
MOD - [2009/07/13 21:15:07 | 000,036,864 | —- | M] (Microsoft Corporation) – C:\Windows\System32\cryptbase.dll
MOD - [2009/07/13 21:15:02 | 000,145,920 | —- | M] (Microsoft Corporation) – C:\Windows\System32\cfgmgr32.dll
MOD - [2009/07/13 21:14:10 | 000,095,232 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msscript.ocx
MOD - [2009/07/13 21:03:50 | 001,680,896 | —- | M] (Microsoft Corporation) – C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll

========== Win32 Services (SafeList) ==========

SRV - [2010/07/28 10:00:47 | 000,030,192 | —- | M] (Google) [On_Demand | Stopped] – C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe – (GoogleDesktopManager-051210-111108)
SRV - [2010/07/01 21:39:08 | 000,357,096 | —- | M] (Kaspersky Lab ZAO) [Auto | Running] – C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe – (AVP)
SRV - [2010/03/25 10:25:22 | 030,969,208 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Program Files\Microsoft Office\Office14\GROOVE.EXE – (Microsoft SharePoint Workspace Audit Service)
SRV - [2010/03/18 13:16:28 | 000,130,384 | —- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe – (clr_optimization_v4.0.30319_32)
SRV - [2010/01/09 21:37:50 | 004,640,000 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE – (osppsvc)
SRV - [2010/01/07 14:38:18 | 000,447,216 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\ZuneWlanCfgSvc.exe – (ZuneWlanCfgSvc)
SRV - [2010/01/07 14:38:08 | 005,950,704 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Program Files\Zune\ZuneNss.exe – (ZuneNetworkSvc)
SRV - [2009/07/13 21:16:21 | 000,185,856 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\wwansvc.dll – (WwanSvc)
SRV - [2009/07/13 21:16:17 | 000,151,552 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\wbiosrvc.dll – (WbioSrvc)
SRV - [2009/07/13 21:16:17 | 000,119,808 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\umpo.dll – (Power)
SRV - [2009/07/13 21:16:16 | 000,037,376 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\themeservice.dll – (Themes)
SRV - [2009/07/13 21:16:15 | 000,053,760 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\sppuinotify.dll – (sppuinotify)
SRV - [2009/07/13 21:16:13 | 000,043,520 | —- | M] (Microsoft Corporation) [Unknown | Running] – C:\Windows\System32\RpcEpMap.dll – (RpcEptMapper)
SRV - [2009/07/13 21:16:13 | 000,025,088 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\sensrsvc.dll – (SensrSvc)
SRV - [2009/07/13 21:16:12 | 001,004,544 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\PeerDistSvc.dll – (PeerDistSvc)
SRV - [2009/07/13 21:16:12 | 000,269,824 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\System32\pnrpsvc.dll – (PNRPsvc)
SRV - [2009/07/13 21:16:12 | 000,269,824 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\System32\pnrpsvc.dll – (p2pimsvc)
SRV - [2009/07/13 21:16:12 | 000,165,376 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\System32\provsvc.dll – (HomeGroupProvider)
SRV - [2009/07/13 21:16:12 | 000,020,480 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\pnrpauto.dll – (PNRPAutoReg)
SRV - [2009/07/13 21:15:41 | 000,680,960 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)
SRV - [2009/07/13 21:15:36 | 000,194,560 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\System32\ListSvc.dll – (HomeGroupListener)
SRV - [2009/07/13 21:15:21 | 000,797,696 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\FntCache.dll – (FontCache)
SRV - [2009/07/13 21:15:11 | 000,253,440 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\System32\dhcpcore.dll – (Dhcp)
SRV - [2009/07/13 21:15:10 | 000,218,624 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\defragsvc.dll – (defragsvc)
SRV - [2009/07/13 21:14:59 | 000,076,800 | —- | M] (Microsoft Corporation) [Unknown | Stopped] – C:\Windows\System32\bdesvc.dll – (BDESVC)
SRV - [2009/07/13 21:14:58 | 000,088,064 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\AxInstSv.dll – (AxInstSV) ActiveX Installer (AxInstSV)
SRV - [2009/07/13 21:14:53 | 000,027,648 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\appidsvc.dll – (AppIDSvc)
SRV - [2009/07/13 21:14:29 | 003,179,520 | —- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Windows\System32\sppsvc.exe – (sppsvc)

========== Driver Services (SafeList) ==========

DRV - [2010/08/30 19:28:37 | 000,691,696 | —- | M] () [Kernel | Boot | Running] – C:\Windows\System32\Drivers\sptd.sys – (sptd)
DRV - [2010/08/19 09:34:58 | 000,495,192 | —- | M] (Kaspersky Lab) [File_System | System | Running] – C:\Windows\System32\drivers\klif.sys – (KLIF)
DRV - [2010/06/09 17:43:52 | 000,011,352 | —- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] – C:\Windows\System32\drivers\kl2.sys – (kl2)
DRV - [2010/06/09 17:43:50 | 000,132,184 | —- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] – C:\Windows\system32\DRIVERS\kl1.sys – (KL1)
DRV - [2010/06/07 19:57:00 | 010,888,168 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\nvlddmkm.sys – (nvlddmkm)
DRV - [2010/04/22 19:07:34 | 000,022,104 | —- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] – C:\Windows\System32\drivers\klim6.sys – (KLIM6)
DRV - [2009/12/11 03:44:02 | 000,133,720 | —- | M] (Microsoft Corporation) [Kernel | Boot | Running] – C:\Windows\System32\Drivers\ksecpkg.sys – (KSecPkg)
DRV - [2009/11/02 20:27:16 | 000,019,984 | —- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\klmouflt.sys – (klmouflt)
DRV - [2009/07/13 21:26:21 | 000,015,952 | —- | M] (CMD Technology, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\cmdide.sys – (cmdide)
DRV - [2009/07/13 21:26:17 | 000,297,552 | —- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\adpahci.sys – (adpahci)
DRV - [2009/07/13 21:26:15 | 000,422,976 | —- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\adp94xx.sys – (adp94xx)
DRV - [2009/07/13 21:26:15 | 000,159,312 | —- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\amdsbs.sys – (amdsbs)
DRV - [2009/07/13 21:26:15 | 000,146,512 | —- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\adpu320.sys – (adpu320)
DRV - [2009/07/13 21:26:15 | 000,086,608 | —- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\arcsas.sys – (arcsas)
DRV - [2009/07/13 21:26:15 | 000,079,952 | —- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\amdsata.sys – (amdsata)
DRV - [2009/07/13 21:26:15 | 000,076,368 | —- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\arc.sys – (arc)
DRV - [2009/07/13 21:26:15 | 000,023,616 | —- | M] (Advanced Micro Devices) [Kernel | Boot | Running] – C:\Windows\system32\DRIVERS\amdxata.sys – (amdxata)
DRV - [2009/07/13 21:26:15 | 000,014,400 | —- | M] (Acer Laboratories Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\aliide.sys – (aliide)
DRV - [2009/07/13 21:20:44 | 000,142,416 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\nvstor.sys – (nvstor)
DRV - [2009/07/13 21:20:44 | 000,117,312 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\nvraid.sys – (nvraid)
DRV - [2009/07/13 21:20:44 | 000,044,624 | —- | M] (IBM Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\nfrd960.sys – (nfrd960)
DRV - [2009/07/13 21:20:37 | 000,089,168 | —- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\lsi_sas.sys – (LSI_SAS)
DRV - [2009/07/13 21:20:36 | 000,332,352 | —- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\iaStorV.sys – (iaStorV)
DRV - [2009/07/13 21:20:36 | 000,235,584 | —- | M] (LSI Corporation, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\MegaSR.sys – (MegaSR)
DRV - [2009/07/13 21:20:36 | 000,096,848 | —- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\lsi_scsi.sys – (LSI_SCSI)
DRV - [2009/07/13 21:20:36 | 000,095,824 | —- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\lsi_fc.sys – (LSI_FC)
DRV - [2009/07/13 21:20:36 | 000,054,864 | —- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\lsi_sas2.sys – (LSI_SAS2)
DRV - [2009/07/13 21:20:36 | 000,041,040 | —- | M] (Intel Corp./ICP vortex GmbH) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\iirsp.sys – (iirsp)
DRV - [2009/07/13 21:20:36 | 000,030,800 | —- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\megasas.sys – (megasas)
DRV - [2009/07/13 21:20:36 | 000,013,904 | —- | M] (Microsoft Corporation) [Kernel | Boot | Running] – C:\Windows\System32\drivers\hwpolicy.sys – (hwpolicy)
DRV - [2009/07/13 21:20:28 | 000,453,712 | —- | M] (Emulex) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\elxstor.sys – (elxstor)
DRV - [2009/07/13 21:20:28 | 000,070,720 | —- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\djsvs.sys – (aic78xx)
DRV - [2009/07/13 21:20:28 | 000,067,152 | —- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\HpSAMD.sys – (HpSAMD)
DRV - [2009/07/13 21:20:28 | 000,046,160 | —- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] – C:\Windows\System32\drivers\fsdepends.sys – (FsDepends)
DRV - [2009/07/13 21:19:11 | 000,141,904 | —- | M] (VIA Technologies Inc.,Ltd) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\vsmraid.sys – (vsmraid)
DRV - [2009/07/13 21:19:10 | 000,175,824 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\vmbus.sys – (vmbus)
DRV - [2009/07/13 21:19:10 | 000,159,824 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\vhdmp.sys – (vhdmp)
DRV - [2009/07/13 21:19:10 | 000,040,896 | —- | M] (Microsoft Corporation) [Kernel | Boot | Running] – C:\Windows\system32\DRIVERS\vmstorfl.sys – (storflt)
DRV - [2009/07/13 21:19:10 | 000,032,832 | —- | M] (Microsoft Corporation) [Kernel | Boot | Running] – C:\Windows\system32\DRIVERS\vdrvroot.sys – (vdrvroot)
DRV - [2009/07/13 21:19:10 | 000,028,224 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\storvsc.sys – (storvsc)
DRV - [2009/07/13 21:19:10 | 000,019,008 | —- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] – C:\Windows\System32\drivers\wimmount.sys – (WIMMount)
DRV - [2009/07/13 21:19:10 | 000,016,976 | —- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\viaide.sys – (viaide)
DRV - [2009/07/13 21:19:04 | 001,383,488 | —- | M] (QLogic Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\ql2300.sys – (ql2300)
DRV - [2009/07/13 21:19:04 | 000,173,648 | —- | M] (Microsoft Corporation) [Kernel | Boot | Running] – C:\Windows\System32\drivers\rdyboost.sys – (rdyboost)
DRV - [2009/07/13 21:19:04 | 000,106,064 | —- | M] (QLogic Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\ql40xx.sys – (ql40xx)
DRV - [2009/07/13 21:19:04 | 000,077,888 | —- | M] (Silicon Integrated Systems) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\sisraid4.sys – (SiSRaid4)
DRV - [2009/07/13 21:19:04 | 000,043,088 | —- | M] (Microsoft Corporation) [Kernel | Boot | Running] – C:\Windows\System32\drivers\pcw.sys – (pcw)
DRV - [2009/07/13 21:19:04 | 000,040,016 | —- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\SiSRaid2.sys – (SiSRaid2)
DRV - [2009/07/13 21:19:04 | 000,021,072 | —- | M] (Promise Technology) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\stexstor.sys – (stexstor)
DRV - [2009/07/13 21:17:54 | 000,369,568 | —- | M] (Microsoft Corporation) [Kernel | Boot | Running] – C:\Windows\System32\Drivers\cng.sys – (CNG)
DRV - [2009/07/13 20:57:25 | 000,272,128 | —- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] – C:\Windows\System32\Drivers\Brserid.sys – (Brserid) Brother MFC Serial Port Interface Driver (WDM)
DRV - [2009/07/13 20:02:41 | 000,018,944 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\rdpbus.sys – (rdpbus)
DRV - [2009/07/13 20:01:41 | 000,007,168 | —- | M] (Microsoft Corporation) [Kernel | System | Running] – C:\Windows\System32\drivers\RDPREFMP.sys – (RDPREFMP)
DRV - [2009/07/13 19:55:00 | 000,049,152 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\agilevpn.sys – (RasAgileVpn) WAN Miniport (IKEv2)
DRV - [2009/07/13 19:53:51 | 000,009,728 | —- | M] (Microsoft Corporation) [Kernel | System | Running] – C:\Windows\System32\drivers\wfplwf.sys – (WfpLwf)
DRV - [2009/07/13 19:52:44 | 000,027,136 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\ndiscap.sys – (NdisCap)
DRV - [2009/07/13 19:52:02 | 000,019,968 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\vwifibus.sys – (vwifibus)
DRV - [2009/07/13 19:52:00 | 000,163,328 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\1394ohci.sys – (1394ohci)
DRV - [2009/07/13 19:51:35 | 000,008,192 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\umpass.sys – (UmPass)
DRV - [2009/07/13 19:51:11 | 000,034,944 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\winusb.sys – (WinUsb)
DRV - [2009/07/13 19:51:08 | 000,004,096 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\mshidkmdf.sys – (mshidkmdf)
DRV - [2009/07/13 19:46:55 | 000,012,288 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\MTConfig.sys – (MTConfig)
DRV - [2009/07/13 19:45:26 | 000,031,232 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\CompositeBus.sys – (CompositeBus)
DRV - [2009/07/13 19:36:52 | 000,050,176 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\drivers\appid.sys – (AppID)
DRV - [2009/07/13 19:33:50 | 000,026,624 | —- | M] (Microsoft Corporation) [Kernel | Unknown | Running] – C:\Windows\System32\drivers\scfilter.sys – (scfilter)
DRV - [2009/07/13 19:28:47 | 000,005,632 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\vms3cap.sys – (s3cap)
DRV - [2009/07/13 19:28:45 | 000,017,920 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\VMBusHID.sys – (VMBusHID)
DRV - [2009/07/13 19:24:05 | 000,032,256 | —- | M] (Microsoft Corporation) [Kernel | System | Running] – C:\Windows\System32\drivers\discache.sys – (discache)
DRV - [2009/07/13 19:19:21 | 000,021,504 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\HidBatt.sys – (HidBatt)
DRV - [2009/07/13 19:16:36 | 000,009,728 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\acpipmi.sys – (AcpiPmi)
DRV - [2009/07/13 19:11:04 | 000,052,736 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\amdppm.sys – (AmdPPM)
DRV - [2009/07/13 18:54:14 | 000,026,624 | —- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\system32\drivers\hcw85cir.sys – (hcw85cir)
DRV - [2009/07/13 18:53:33 | 000,012,160 | —- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] – C:\Windows\System32\Drivers\BrUsbMdm.sys – (BrUsbMdm)
DRV - [2009/07/13 18:53:33 | 000,011,904 | —- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] – C:\Windows\System32\Drivers\BrUsbSer.sys – (BrUsbSer)
DRV - [2009/07/13 18:53:32 | 000,062,336 | —- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] – C:\Windows\System32\Drivers\BrSerWdm.sys – (BrSerWdm)
DRV - [2009/07/13 18:53:28 | 000,013,568 | —- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\BrFiltLo.sys – (BrFiltLo)
DRV - [2009/07/13 18:53:28 | 000,005,248 | —- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\BrFiltUp.sys – (BrFiltUp)
DRV - [2009/07/13 18:13:46 | 000,980,992 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\VSTDPV3.SYS – (SrvHsfV92)
DRV - [2009/07/13 18:13:45 | 000,661,504 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\VSTCNXT3.SYS – (SrvHsfWinac)
DRV - [2009/07/13 18:13:45 | 000,207,360 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\VSTAZL3.SYS – (SrvHsfHDA)
DRV - [2009/07/13 18:02:51 | 004,231,168 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\netw5v32.sys – (netw5v32) Intel®
DRV - [2009/07/13 18:02:50 | 000,118,784 | —- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\E1G60I32.sys – (E1G60) Intel®
DRV - [2009/07/13 18:02:49 | 000,229,888 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\b57nd60x.sys – (b57nd60x)
DRV - [2009/07/13 18:02:48 | 003,100,160 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\evbdx.sys – (ebdrv)
DRV - [2009/07/13 18:02:48 | 000,430,080 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\DRIVERS\bxvbdx.sys – (b06bdrv)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F3 79 96 BC 64 21 CB 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: [removed]:11.0.1.400
FF - prefs.js..extensions.enabledItems: [removed]:11.0.1.400
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..browser.search.selectedEngine: "DAEMON Search"

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/08/19 01:45:14 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/08/19 01:45:13 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\THBExt [2010/08/19 09:35:31 | 000,000,000 | —D | M]

[2010/08/19 01:45:31 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Mozilla\Extensions
[2010/08/30 19:29:31 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\h5xkchst.default\extensions
[2010/08/30 19:29:31 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\h5xkchst.default\extensions\[removed]
[2010/08/30 19:29:19 | 000,002,059 | —- | M] () – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\h5xkchst.default\searchplugins\daemon-search.xml
[2010/08/27 11:37:04 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions
[2010/08/27 11:37:04 | 000,000,000 | —D | M] (Skype extension for Firefox) – C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010/08/19 09:37:18 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions\[removed]
[2010/08/19 09:37:14 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions\[removed]

O1 HOSTS File: ([2009/06/10 17:39:37 | 000,000,824 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll (Kaspersky Lab ZAO)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
O4 - HKLM..\Run: [NVHotkey] C:\Windows\System32\nvHotkey.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe File not found
O4 - HKLM..\Run: [Zune Launcher] C:\Program Files\Zune\ZuneLauncher.exe (Microsoft Corporation)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [Octoshape Streaming Services] C:\Users\Nick\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe (Octoshape ApS)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm ()
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed] [removed]
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~2\GO36F4~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\mzvkbd3.dll (Kaspersky Lab ZAO)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\kloehk.dll (Kaspersky Lab ZAO)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - Winlogon\Notify\klogon: DllName - C:\Windows\system32\klogon.dll - C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 17:42:20 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O32 - AutoRun File - [2008/02/25 10:30:42 | 000,000,054 | RHS- | M] () - G:\autorun.inf – [ FAT32 ]
O32 - AutoRun File - [2008/12/01 22:32:56 | 000,000,000 | —D | M] - G:\autorun – [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
NetSvcs: Themes - C:\Windows\System32\themeservice.dll (Microsoft Corporation)
NetSvcs: BDESVC - C:\Windows\System32\bdesvc.dll (Microsoft Corporation)

========== Files/Folders - Created Within 30 Days ==========

[2010/09/01 21:26:42 | 000,574,976 | —- | C] (OldTimer Tools) – C:\Users\Nick\Desktop\OTL.exe
[2010/08/31 17:57:17 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Users\Nick\Desktop\HijackThis.exe
[2010/08/30 19:43:08 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Synchronization Services
[2010/08/30 19:43:05 | 000,000,000 | —D | C] – C:\Program Files\Common Files\DESIGNER
[2010/08/30 19:41:45 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Sync Framework
[2010/08/30 19:41:45 | 000,000,000 | —D | C] – C:\Program Files\Microsoft SQL Server Compact Edition
[2010/08/30 19:40:12 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Visual Studio 8
[2010/08/30 19:39:11 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Analysis Services
[2010/08/30 19:38:07 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2010/08/30 19:29:19 | 000,000,000 | —D | C] – C:\Program Files\DAEMON Tools Toolbar
[2010/08/30 19:27:53 | 000,000,000 | —D | C] – C:\Program Files\DAEMON Tools Lite
[2010/08/30 19:27:41 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\DAEMON Tools Lite
[2010/08/30 19:27:33 | 000,000,000 | —D | C] – C:\ProgramData\DAEMON Tools Lite
[2010/08/30 19:22:20 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\Octoshape
[2010/08/28 15:23:24 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\Octoshape
[2010/08/28 15:20:04 | 000,000,000 | —D | C] – C:\Windows\System32\Macromed
[2010/08/27 11:38:15 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\skypePM
[2010/08/27 11:37:23 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\Skype
[2010/08/27 11:36:37 | 000,000,000 | R–D | C] – C:\Program Files\Skype
[2010/08/27 11:36:37 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Skype
[2010/08/27 11:36:31 | 000,000,000 | —D | C] – C:\ProgramData\Skype
[2010/08/26 22:16:30 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\Ventrilo
[2010/08/26 22:15:35 | 000,000,000 | —D | C] – C:\Program Files\Ventrilo
[2010/08/26 22:13:53 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Wise Installation Wizard
[2010/08/22 10:54:38 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\ElevatedDiagnostics
[2010/08/19 17:08:57 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\Google
[2010/08/19 17:04:26 | 000,000,000 | —D | C] – C:\ProgramData\Google
[2010/08/19 09:35:07 | 000,000,000 | —D | C] – C:\ProgramData\Kaspersky Lab
[2010/08/19 09:35:07 | 000,000,000 | —D | C] – C:\Program Files\Kaspersky Lab
[2010/08/19 09:34:58 | 000,495,192 | —- | C] (Kaspersky Lab) – C:\Windows\System32\drivers\klif.sys
[2010/08/19 09:31:55 | 000,000,000 | —D | C] – C:\ProgramData\Kaspersky Lab Setup Files
[2010/08/19 01:45:21 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\Mozilla
[2010/08/19 01:45:21 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\Mozilla
[2010/08/19 01:45:11 | 000,000,000 | —D | C] – C:\Program Files\Mozilla Firefox
[2010/08/11 22:18:33 | 001,638,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtml.tlb
[2010/08/11 22:18:33 | 000,606,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mstime.dll
[2010/08/11 22:18:33 | 000,381,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iedkcs32.dll
[2010/08/11 22:18:33 | 000,185,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iepeers.dll
[2010/08/11 22:18:33 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2010/08/11 22:18:33 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeedsbs.dll
[2010/08/11 22:18:33 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jsproxy.dll
[2010/08/11 22:18:33 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeedssync.exe
[2010/08/11 22:18:32 | 003,955,080 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntkrnlpa.exe
[2010/08/11 22:18:32 | 003,899,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntoskrnl.exe
[2010/08/11 22:18:30 | 000,197,632 | —- | C] (Intel® Corporation) – C:\Windows\System32\ir32_32.dll
[2010/08/11 22:18:30 | 000,082,944 | —- | C] (Radius Inc.) – C:\Windows\System32\iccvid.dll
[2010/08/11 22:18:29 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rtutils.dll
[2010/08/11 22:18:27 | 002,326,016 | —- | C] (Microsoft Corporation) – C:\Windows\System32\win32k.sys
[2010/08/11 21:32:47 | 000,000,000 | —D | C] – C:\Windows\Minidump

========== Files - Modified Within 30 Days ==========

[2010/09/01 21:37:07 | 001,310,720 | -HS- | M] () – C:\Users\Nick\ntuser.dat
[2010/09/01 21:26:42 | 000,574,976 | —- | M] (OldTimer Tools) – C:\Users\Nick\Desktop\OTL.exe
[2010/09/01 21:21:37 | 000,000,904 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1511221965-872038785-1645886738-1001UA.job
[2010/09/01 21:21:25 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/09/01 11:21:55 | 000,000,236 | -HS- | M] () – C:\Windows\KLIF.spi
[2010/08/31 23:54:31 | 000,014,016 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/08/31 23:54:31 | 000,014,016 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/08/31 23:49:17 | 000,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2010/08/31 23:49:02 | 1609,015,296 | -HS- | M] () – C:\hiberfil.sys
[2010/08/31 23:06:07 | 000,000,852 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1511221965-872038785-1645886738-1001Core.job
[2010/08/31 17:57:18 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Users\Nick\Desktop\HijackThis.exe
[2010/08/31 17:35:53 | 000,524,288 | -HS- | M] () – C:\Users\Nick\ntuser.dat{87eaf593-b4fd-11df-90e1-001c230b2fb0}.TMContainer00000000000000000002.regtrans-ms
[2010/08/31 17:35:53 | 000,524,288 | -HS- | M] () – C:\Users\Nick\ntuser.dat{87eaf593-b4fd-11df-90e1-001c230b2fb0}.TMContainer00000000000000000001.regtrans-ms
[2010/08/31 17:35:53 | 000,065,536 | -HS- | M] () – C:\Users\Nick\ntuser.dat{87eaf593-b4fd-11df-90e1-001c230b2fb0}.TM.blf
[2010/08/31 17:32:28 | 002,930,227 | -H– | M] () – C:\Users\Nick\AppData\Local\IconCache.db
[2010/08/30 22:51:09 | 000,108,824 | —- | M] () – C:\Users\Nick\AppData\Local\GDIPFONTCACHEV1.DAT
[2010/08/30 22:50:39 | 000,406,968 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT
[2010/08/30 19:39:28 | 000,000,478 | —- | M] () – C:\Windows\win.ini
[2010/08/30 19:28:37 | 000,691,696 | —- | M] () – C:\Windows\System32\drivers\sptd.sys
[2010/08/30 19:04:33 | 000,726,316 | —- | M] () – C:\Windows\System32\PerfStringBackup.INI
[2010/08/30 19:04:33 | 000,624,178 | —- | M] () – C:\Windows\System32\perfh009.dat
[2010/08/30 19:04:33 | 000,106,522 | —- | M] () – C:\Windows\System32\perfc009.dat
[2010/08/27 11:38:17 | 000,000,056 | -H– | M] () – C:\ProgramData\ezsidmv.dat
[2010/08/26 22:15:50 | 000,000,262 | —- | M] () – C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2010/08/19 09:58:53 | 000,113,933 | —- | M] () – C:\Windows\System32\drivers\klin.dat
[2010/08/19 09:58:53 | 000,097,549 | —- | M] () – C:\Windows\System32\drivers\klick.dat
[2010/08/19 09:34:58 | 000,495,192 | —- | M] (Kaspersky Lab) – C:\Windows\System32\drivers\klif.sys
[2010/08/19 01:45:16 | 000,001,909 | —- | M] () – C:\Users\Nick\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk

========== Files Created - No Company Name ==========

[2010/09/01 11:21:55 | 000,000,236 | -HS- | C] () – C:\Windows\KLIF.spi
[2010/08/31 17:35:53 | 000,524,288 | -HS- | C] () – C:\Users\Nick\ntuser.dat{87eaf593-b4fd-11df-90e1-001c230b2fb0}.TMContainer00000000000000000002.regtrans-ms
[2010/08/31 17:35:53 | 000,524,288 | -HS- | C] () – C:\Users\Nick\ntuser.dat{87eaf593-b4fd-11df-90e1-001c230b2fb0}.TMContainer00000000000000000001.regtrans-ms
[2010/08/31 17:35:53 | 000,065,536 | -HS- | C] () – C:\Users\Nick\ntuser.dat{87eaf593-b4fd-11df-90e1-001c230b2fb0}.TM.blf
[2010/08/30 19:28:37 | 000,691,696 | —- | C] () – C:\Windows\System32\drivers\sptd.sys
[2010/08/27 11:38:17 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2010/08/26 22:15:23 | 000,000,262 | —- | C] () – C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2010/08/19 09:36:59 | 000,113,933 | —- | C] () – C:\Windows\System32\drivers\klin.dat
[2010/08/19 09:36:59 | 000,097,549 | —- | C] () – C:\Windows\System32\drivers\klick.dat
[2010/08/19 01:45:16 | 000,001,909 | —- | C] () – C:\Users\Nick\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/08/02 13:42:04 | 000,000,565 | —- | C] () – C:\Users\Nick\AppData\Roaming\myMPQ.ini
[2010/07/12 13:36:16 | 000,043,520 | —- | C] () – C:\Windows\System32\CmdLineExt03.dll
[2010/06/07 17:47:34 | 000,408,168 | —- | C] () – C:\Windows\System32\easyUpdatusAPIU.dll
[2009/07/13 19:51:43 | 000,073,728 | —- | C] () – C:\Windows\System32\BthpanContextHandler.dll
[2009/07/13 19:42:10 | 000,064,000 | —- | C] () – C:\Windows\System32\BWContextHandler.dll

========== LOP Check ==========

[2010/08/30 19:35:45 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\DAEMON Tools Lite
[2010/08/28 15:23:24 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Octoshape
[2009/07/14 00:53:46 | 000,011,156 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.exe >

< MD5 for: AGP440.SYS >
[2009/07/13 21:26:15 | 000,053,312 | —- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E – C:\Windows\System32\drivers\AGP440.sys
[2009/07/13 21:26:15 | 000,053,312 | —- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E – C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\AGP440.sys
[2009/07/13 21:26:15 | 000,053,312 | —- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E – C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009/07/13 21:26:15 | 000,021,584 | —- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E – C:\Windows\System32\drivers\atapi.sys
[2009/07/13 21:26:15 | 000,021,584 | —- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E – C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys
[2009/07/13 21:26:15 | 000,021,584 | —- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E – C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys

< MD5 for: CNGAUDIT.DLL >
[2009/07/13 21:15:06 | 000,012,288 | —- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E – C:\Windows\System32\cngaudit.dll
[2009/07/13 21:15:06 | 000,012,288 | —- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E – C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll

< MD5 for: IASTORV.SYS >
[2009/07/13 21:20:36 | 000,332,352 | —- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 – C:\Windows\System32\drivers\iaStorV.sys
[2009/07/13 21:20:36 | 000,332,352 | —- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 – C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_18cccb83b34e1453\iaStorV.sys
[2009/07/13 21:20:36 | 000,332,352 | —- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 – C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys

< MD5 for: NETLOGON.DLL >
[2009/07/13 21:16:02 | 000,563,712 | —- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 – C:\Windows\System32\netlogon.dll
[2009/07/13 21:16:02 | 000,563,712 | —- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 – C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll

< MD5 for: NVSTOR.SYS >
[2009/07/13 21:20:44 | 000,142,416 | —- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F – C:\Windows\System32\drivers\nvstor.sys
[2009/07/13 21:20:44 | 000,142,416 | —- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F – C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvstor.sys
[2009/07/13 21:20:44 | 000,142,416 | —- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F – C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009/07/13 21:16:13 | 000,175,616 | —- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 – C:\Windows\System32\scecli.dll
[2009/07/13 21:16:13 | 000,175,616 | —- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 – C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2010/07/01 21:35:12 | 000,228,024 | —- | M] (Kaspersky Lab ZAO) Unable to obtain MD5 – C:\Windows\System32\klogon.dll
[2009/07/13 21:15:50 | 001,386,496 | —- | M] (Microsoft Corporation) Unable to obtain MD5 – C:\Windows\System32\msvbvm60.dll

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2010/06/09 17:43:50 | 000,132,184 | —- | M] (Kaspersky Lab ZAO) Unable to obtain MD5 – C:\Windows\System32\drivers\kl1.sys
[2010/06/09 17:43:52 | 000,011,352 | —- | M] (Kaspersky Lab ZAO) Unable to obtain MD5 – C:\Windows\System32\drivers\kl2.sys
[2010/08/19 09:34:58 | 000,495,192 | —- | M] (Kaspersky Lab) Unable to obtain MD5 – C:\Windows\System32\drivers\klif.sys
[2010/04/22 19:07:34 | 000,022,104 | —- | M] (Kaspersky Lab ZAO) Unable to obtain MD5 – C:\Windows\System32\drivers\klim6.sys
[2009/11/02 20:27:16 | 000,019,984 | —- | M] (Kaspersky Lab) Unable to obtain MD5 – C:\Windows\System32\drivers\klmouflt.sys
[2010/08/30 19:28:37 | 000,691,696 | —- | M] () Unable to obtain MD5 – C:\Windows\System32\drivers\sptd.sys

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\drivers\*.sys /90 >
[2010/06/09 17:43:50 | 000,132,184 | —- | M] (Kaspersky Lab ZAO) – C:\Windows\System32\drivers\kl1.sys
[2010/06/09 17:43:52 | 000,011,352 | —- | M] (Kaspersky Lab ZAO) – C:\Windows\System32\drivers\kl2.sys
[2010/08/19 09:34:58 | 000,495,192 | —- | M] (Kaspersky Lab) – C:\Windows\System32\drivers\klif.sys
[2010/06/07 19:57:00 | 010,888,168 | —- | M] (NVIDIA Corporation) – C:\Windows\System32\drivers\nvlddmkm.sys
[2010/08/30 19:28:37 | 000,691,696 | —- | M] () – C:\Windows\System32\drivers\sptd.sys
[2010/06/21 22:47:35 | 000,310,784 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\srv.sys
[2010/06/21 22:47:21 | 000,307,200 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\srv2.sys
[2010/06/21 22:47:13 | 000,113,664 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\srvnet.sys
[2010/06/14 02:12:30 | 001,286,016 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\tcpip.sys

< End of report >

Extras txt:

OTL Extras logfile created on: 9/1/2010 9:28:28 PM - Run 1
OTL by OldTimer - Version 3.2.11.0 Folder = C:\Users\Nick\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 60.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 72.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 55.78 Gb Total Space | 11.72 Gb Free Space | 21.01% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
Drive G: | 232.83 Gb Total Space | 142.13 Gb Free Space | 61.04% Space Free | Partition Type: FAT32
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: NICK-PC
Current User Name: Nick
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] – C:\Users\Nick\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile – "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] – "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0076E1AC-9E7B-4B9F-A62A-4CC9511AD8E3}" = Zune Language Pack (FR)
"{370BCBBA-67D7-4535-ADCD-58CD1C8DEC99}" = Zune Language Pack (DE)
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{40EC6323-497B-44DA-8A88-74578622D9B3}" = Zune Language Pack (IT)
"{597E70FF-7C46-4EED-8092-91B7C2E0529D}" = Google SketchUp 7
"{629F65FB-7F3C-4D66-A1C0-20722744B7B6}" = Star Wars® Knights of the Old Republic® II: The Sith Lords™
"{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Internet Security 2011
"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo Client
"{888FFC82-688D-46AB-A776-B417885432B6}" = Zune
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{EE4ACABF-531E-419A-9225-B8E0FA4955AF}" = Zune Language Pack (ES)
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"Google Desktop" = Google Desktop
"InstallWIX_{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Internet Security 2011
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox (3.6.8)" = Mozilla Firefox (3.6.8)
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"StarCraft II" = StarCraft II
"WinRAR archiver" = WinRAR archiver
"Zune" = Zune

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"Octoshape Streaming Services" = Octoshape Streaming Services

========== Last 10 Event Log Errors ==========

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >

I'll start the other steps now, thanks again!

Breaker934

Post #4September 2, 2010, 3:55 AM UTC last edited September 2, 2010, 3:57 AM UTC

I saved my GMER scan as "GMER.txt like you said, but it's saying it's too big and I can't upload it as an attachment for the same reason. Any ideas? =/

JonTom

Post #5September 2, 2010, 6:24 AM UTC

Hello Breaker934

Thank you for the logs.

Any ideas?

Please make sure you ran DeFogger before running GMER. If the log is too large to post in one piece, please split it up over a number of posts/attachments

Breaker934

Post #6September 2, 2010, 2:21 PM UTC

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-09-01 23:48:26
Windows 6.1.7600
Running: gmer.exe; Driver: C:\Users\Nick\AppData\Local\Temp\kxldqpoc.sys

—- System - GMER 1.0.15 —-

SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwAdjustPrivilegesToken [0x8979A528]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwAlpcConnectPort [0x8979C752]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwAlpcCreatePort [0x8979C9CC]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwAlpcSendWaitReceivePort [0x8979CC3E]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwClose [0x8979AE30]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwConnectPort [0x8979BC5C]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateEvent [0x8979C1A6]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateFile [0x8979B10C]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateMutant [0x8979C08C]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateNamedPipeFile [0x8979A118]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreatePort [0x8979BF60]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateSection [0x8979A2C0]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateSemaphore [0x8979C2C6]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateThread [0x8979AAB8]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateThreadEx [0x8979ABB6]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateUserProcess [0x8979CE88]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwCreateWaitablePort [0x8979BFF6]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwDebugActiveProcess [0x8979D9A8]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwDeviceIoControlFile [0x8979B58E]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwDuplicateObject [0x8979EBBE]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwFsControlFile [0x8979B39C]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwLoadDriver [0x8979DA9A]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwMapViewOfSection [0x8979E20A]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwOpenEvent [0x8979C23C]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwOpenFile [0x8979AEB2]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwOpenMutant [0x8979C11C]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwOpenProcess [0x8979A762]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwOpenSection [0x8979DFA4]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwOpenSemaphore [0x8979C35C]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwOpenThread [0x8979A656]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwQueryDirectoryObject [0x8979CF42]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwQuerySection [0x8979E544]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwQueueApcThread [0x8979DE36]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwReplaceKey [0x89798DD2]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwReplyPort [0x8979C6C0]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwReplyWaitReceivePort [0x8979C586]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwRequestWaitReplyPort [0x8979D742]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwRestoreKey [0x8979914A]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwResumeThread [0x8979EA60]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwSaveKey [0x89798D6A]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwSecureConnectPort [0x8979B9A6]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwSetContextThread [0x8979ACD2]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwSetInformationToken [0x8979CFE4]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwSetSecurityObject [0x8979DC38]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwSetSystemInformation [0x8979E694]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwSuspendProcess [0x8979E786]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwSuspendThread [0x8979E8C0]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwSystemDebugControl [0x8979D8CC]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwTerminateProcess [0x8979A902]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwTerminateThread [0x8979A858]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwUnmapViewOfSection [0x8979E3E8]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) ZwWriteVirtualMemory [0x8979A9EE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAcceptConnectPort [0x830B3159]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheck [0x82F0C23B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckAndAuditAlarm [0x8305EEB4]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckByType [0x82E77701]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckByTypeAndAuditAlarm [0x830D3EFE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckByTypeResultList [0x82F50496]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckByTypeResultListAndAuditAlarm [0x8313CBEB]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckByTypeResultListAndAuditAlarmByHandle [0x8313CC34]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAddAtom [0x8304A32D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAddBootEntry [0x8315647C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAddDriverEntry [0x831576D5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAdjustGroupsToken [0x8305874D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlertResumeThread [0x8312F9D5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlertThread [0x830DD7A8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAllocateLocallyUniqueId [0x83061202]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAllocateReserveObject [0x82FF4CAF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAllocateUserPhysicalPages [0x83121B94]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAllocateUuids [0x8304BCD3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAllocateVirtualMemory [0x8309EE9B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcAcceptConnectPort [0x830D1D86]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcCancelMessage [0x8302DD97]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcCreatePortSection [0x8305DA9B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcCreateResourceReserve [0x830400EA]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcCreateSectionView [0x8305D7D9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcCreateSecurityContext [0x830664B1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcDeletePortSection [0x8306B189]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcDeleteResourceReserve [0x8311CB4B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcDeleteSectionView [0x830C6996]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcDeleteSecurityContext [0x83065BD5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcDisconnectPort [0x830CA868]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcImpersonateClientOfPort [0x830C66ED]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcOpenSenderProcess [0x830552F5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcOpenSenderThread [0x83047324]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcQueryInformation [0x83058B10]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcQueryInformationMessage [0x830B1415]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcRevokeSecurityContext [0x8311CC73]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcSetInformation [0x83046856]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwApphelpCacheControl [0x830D5E70]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAreMappedFilesTheSame [0x83022338]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAssignProcessToJobObject [0x8304A764]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCallbackReturn [0x82EC3220]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCancelIoFile [0x8301DD8D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCancelIoFileEx [0x830494DB]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCancelSynchronousIoFile [0x8310C6C8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCancelTimer [0x82E812B2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwClearEvent [0x83089174]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCloseObjectAuditAlarm [0x830D3C6D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCommitComplete [0x831445FE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCommitEnlistment [0x8314431E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCommitTransaction [0x830263C5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCompactKeys [0x830F08CD]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCompareTokens [0x83046134]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCompleteConnectPort [0x8304261D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCompressKey [0x830F0B3B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwContinue [0x82E99F6C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateDebugObject [0x83102383]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateDirectoryObject [0x830622AD]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateEnlistment [0x8301BD47]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateEventPair [0x8315C17C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateIoCompletion [0x830B7225]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateJobObject [0x8304B20F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateJobSet [0x8313175C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateKey [0x83061A65]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateKeyedEvent [0x830D8BB2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateKeyTransacted [0x8302673D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateMailslotFile [0x8306238C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreatePagingFile [0x82FE3667]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreatePrivateNamespace [0x8302A21D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateProcess [0x8312DE61]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateProcessEx [0x8312DEAC]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateProfile [0x8315CC0F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateProfileEx [0x8315CBD5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateResourceManager [0x82FEFE82]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateSymbolicLinkObject [0x830620BF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateTimer [0x8304D19B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateToken [0x830634A2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateTransaction [0x8302A68C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateTransactionManager [0x82FF0127]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateWorkerFactory [0x830B6FC8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDebugContinue [0x831038FD]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDelayExecution [0x830846DF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteAtom [0x8303F684]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteBootEntry [0x831564AF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteDriverEntry [0x83157707]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteFile [0x8300DA0E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteKey [0x8305026F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteObjectAuditAlarm [0x830E52CC]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeletePrivateNamespace [0x830E9D9B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteValueKey [0x830361ED]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDisableLastKnownGood [0x831199CE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDisplayString [0x831546F3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDrawText [0x82F66B05]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDuplicateToken [0x8308F285]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnableLastKnownGood [0x83119AAF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnumerateBootEntries [0x831566B1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnumerateDriverEntries [0x83157907]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnumerateKey [0x830B8ABF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnumerateSystemEnvironmentValuesEx [0x8315628F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnumerateTransactionObject [0x8314513E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnumerateValueKey [0x830B069E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwExtendSection [0x8311FD95]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFilterToken [0x83037105]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFindAtom [0x83044250]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushBuffersFile [0x83071CE3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushInstallUILanguage [0x82FEC5A6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushInstructionCache [0x830419D5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushKey [0x830312F5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushProcessWriteBuffers [0x82E77507]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushVirtualMemory [0x83032197]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushWriteBuffer [0x83122C3F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFreeUserPhysicalPages [0x831222AF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFreeVirtualMemory [0x82F06831]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFreezeRegistry [0x82F249BC]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFreezeTransactions [0x8314558E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetContextThread [0x830EC205]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetCurrentProcessorNumber [0x83031EC9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetDevicePowerState [0x8312AEA7]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetMUIRegistryInfo [0x830CC957]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetNextProcess [0x8312FBCC]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetNextThread [0x830E6B18]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetNlsSectionPtr [0x83046FEC]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetNotificationResourceManager [0x831456EE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetPlugPlayEvent [0x8300A288]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetWriteWatch [0x82F3D72B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwImpersonateAnonymousToken [0x83045F96]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwImpersonateClientOfPort [0x8311BC95]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwImpersonateThread [0x830AB6C9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwInitializeNlsFiles [0x830D5169]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwInitializeRegistry [0x8300D288]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwInitiatePowerAction [0x830E4A6A]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwIsProcessInJob [0x830E804B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwIsSystemResumeAutomatic [0x8312AE8E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwIsUILanguageComitted [0x82FED62F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwListenPort [0x82FE70E3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLoadKey [0x82FEAAD1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLoadKey2 [0x82FD1137]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLoadKeyEx [0x8300FDC6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLockFile [0x830668F2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLockProductActivationKeys [0x82FCA94C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLockRegistryKey [0x82FC66E1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLockVirtualMemory [0x82E75DC1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwMakePermanentObject [0x830E1CE4]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwMakeTemporaryObject [0x8305A3B9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwMapCMFModule [0x830B4FBE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwMapUserPhysicalPages [0x83120E55]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwMapUserPhysicalPagesScatter [0x8312142B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwModifyBootEntry [0x83156680]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwModifyDriverEntry [0x831578D8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwNotifyChangeDirectoryFile [0x830416A5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwNotifyChangeKey [0x8304CD3B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwNotifyChangeMultipleKeys [0x8304C0E5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwNotifyChangeSession [0x82FF19C9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenDirectoryObject [0x830D1474]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenEnlistment [0x83143B85]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenEventPair [0x8315C27D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenIoCompletion [0x8310C3BD]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenJobObject [0x831310D3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenKey [0x83095784]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenKeyEx [0x8308C75F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenKeyedEvent [0x8315C5B3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenKeyTransacted [0x8302A4F8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenKeyTransactedEx [0x8302A488]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenObjectAuditAlarm [0x830307C6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenPrivateNamespace [0x8302E0A6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenProcessToken [0x8308F971]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenProcessTokenEx [0x8308F0BE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenResourceManager [0x82FD0DC0]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenSession [0x83056D1E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenSymbolicLinkObject [0x830D151A]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenThreadToken [0x8308F1D5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenThreadTokenEx [0x8308ECA9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenTimer [0x8315BF23]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenTransaction [0x831448E3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenTransactionManager [0x83145B83]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPlugPlayControl [0x8303B288]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPowerInformation [0x8308C87C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPrepareComplete [0x8314448E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPrepareEnlistment [0x831441AC]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPrePrepareComplete [0x83144546]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPrePrepareEnlistment [0x83144266]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPrivilegeCheck [0x8304E0B2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPrivilegedServiceAuditAlarm [0x830169DE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPrivilegeObjectAuditAlarm [0x83031063]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPropagationComplete [0x831462DE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPropagationFailed [0x831463A6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwProtectVirtualMemory [0x830D2CD1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPulseEvent [0x830E9CD2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryAttributesFile [0x830B5BD8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryBootEntryOrder [0x83156B52]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryBootOptions [0x83156F97]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryDebugFilterState [0x82F15C8A]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryDefaultLocale [0x830D7503]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryDefaultUILanguage [0x82FF2F4B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryDirectoryFile [0x830CD6BF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryDriverEntryOrder [0x83157495]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryEaFile [0x82FECB58]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryEvent [0x83047BD2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryFullAttributesFile [0x830B5881]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationAtom [0x8303F53B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationEnlistment [0x83143D90]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationFile [0x830AF7A6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationJobObject [0x830E600D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationPort [0x8311BCC8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationProcess [0x8309C0C3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationResourceManager [0x831457F8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationThread [0x830BA80D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationToken [0x8309599C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationTransaction [0x83144AD6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationTransactionManager [0x82FD08C8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationWorkerFactory [0x82F67743]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInstallUILanguage [0x83031567]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryIntervalProfile [0x8315CF7F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryIoCompletion [0x8310C480]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryKey [0x830A9785]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryLicenseValue [0x8305E35B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryMultipleValueKey [0x83047F17]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryMutant [0x8315C690]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryObject [0x8305FD17]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryOpenSubKeys [0x830F03BF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryOpenSubKeysEx [0x830DF38B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryPerformanceCounter [0x830D35A9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryPortInformationProcess [0x8312E32C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryQuotaInformationFile [0x8310DA61]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySecurityAttributesToken [0x83048C7B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySecurityObject [0x8305F099]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySemaphore [0x83155510]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySymbolicLinkObject [0x830D4D95]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySystemEnvironmentValue [0x831556E7]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySystemEnvironmentValueEx [0x83155CDB]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySystemInformation [0x83089496]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySystemInformationEx [0x830B730F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySystemTime [0x830D34C2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryTimer [0x8315BFE2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryTimerResolution [0x830408BB]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryValueKey [0x830CE79E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryVirtualMemory [0x830CC093]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryVolumeInformationFile [0x830A444A]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueueApcThreadEx [0x8303FB6C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRaiseException [0x82E99FB4]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRaiseHardError [0x8302E9FE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReadFile [0x830A28E4]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReadFileScatter [0x8300829E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReadOnlyEnlistment [0x8314476E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReadRequestData [0x8311BDAD]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReadVirtualMemory [0x830D6C09]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRecoverEnlistment [0x83143D36]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRecoverResourceManager [0x82FF1975]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRecoverTransactionManager [0x82FEF798]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRegisterProtocolAddressInformation [0x83146132]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRegisterThreadTerminatePort [0x8312F10A]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReleaseKeyedEvent [0x830DD7F9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReleaseMutant [0x830845E3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReleaseSemaphore [0x8306E502]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReleaseWorkerFactoryWorker [0x82EC50E7]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRemoveIoCompletion [0x8305E106]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRemoveIoCompletionEx [0x8306062E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRemoveProcessDebug [0x83103387]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRenameKey [0x830F0605]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRenameTransactionManager [0x83145DCE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReplacePartitionUnit [0x82F2E197]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReplyWaitReceivePortEx [0x830C0072]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReplyWaitReplyPort [0x8311BF79]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRequestPort [0x830DDDC1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwResetEvent [0x830326CA]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwResetWriteWatch [0x82F3DD7C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwResumeProcess [0x8312F96F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRollbackComplete [0x83144826]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRollbackEnlistment [0x831443D6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRollbackTransaction [0x83019EC3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRollforwardTransactionManager [0x83145F30]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSaveKeyEx [0x830E7C29]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSaveMergedKeys [0x830EF477]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSerializeBoot [0x82FDD085]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetBootEntryOrder [0x83156D93]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetBootOptions [0x8315727F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetDebugFilterState [0x82FC39C9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetDefaultHardErrorPort [0x82FE30E7]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetDefaultLocale [0x82FF1CF0]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetDefaultUILanguage [0x82FF2F1E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetDriverEntryOrder [0x83157D09]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetEaFile [0x8310D4F2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetEvent [0x83089067]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetEventBoostPriority [0x831551BB]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetHighEventPair [0x8315C549]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetHighWaitLowEventPair [0x8315C47B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationDebugObject [0x83103AC3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationEnlistment [0x83143FD6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationFile [0x830A2F3F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationJobObject [0x830448FB]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationKey [0x830EFC67]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationObject [0x83061ED9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationProcess [0x830A0495]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationResourceManager [0x83145A06]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationThread [0x830BC83A]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationTransaction [0x83145338]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationTransactionManager [0x83145FF5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationWorkerFactory [0x82EF4AD0]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetIntervalProfile [0x8315CF5C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetIoCompletion [0x8303618B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetIoCompletionEx [0x8310C5A6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetLdtEntries [0x83130D93]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetLowEventPair [0x8315C4E6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetLowWaitHighEventPair [0x8315C410]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetQuotaInformationFile [0x8310E077]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetSystemEnvironmentValue [0x831559E1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetSystemEnvironmentValueEx [0x83155FF3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetSystemPowerState [0x83174355]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetSystemTime [0x830E2668]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetThreadExecutionState [0x830EC39C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetTimer [0x82EC4F94]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetTimerEx [0x82EEB664]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetTimerResolution [0x8304327D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetUuidSeed [0x82FEC91E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetValueKey [0x83053607]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetVolumeInformationFile [0x8310E091]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwShutdownSystem [0x831546B1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwShutdownWorkerFactory [0x830B800F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSignalAndWaitForSingleObject [0x82F1D1B5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSinglePhaseReject [0x831446B6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwStartProfile [0x8315CC98]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwStopProfile [0x8315CE8F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTerminateJobObject [0x83045800]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTestAlert [0x830C5128]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwThawRegistry [0x82F24A1F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwThawTransactions [0x8314566E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTraceControl [0x830A52D5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTraceEvent [0x82E85E34]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTranslateFilePath [0x83157F0D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUmsThreadYield [0x8311BC3F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnloadDriver [0x8310E8E7]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnloadKey [0x830DF371]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnloadKey2 [0x830E0AE4]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnloadKeyEx [0x830EF60D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnlockFile [0x83066D47]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnlockVirtualMemory [0x82E8A5D8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwVdmControl [0x83149AF7]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitForDebugEvent [0x831035E1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitForKeyedEvent [0x8309E424]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitForMultipleObjects [0x83085344]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitForMultipleObjects32 [0x83125B2C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitForSingleObject [0x830844CF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitForWorkViaWorkerFactory [0x82EC4B64]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitHighEventPair [0x8315C3A7]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitLowEventPair [0x8315C33E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWorkerFactoryWorkerReady [0x82F04F97]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWriteFile [0x83091134]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWriteFileGather [0x830087F7]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWriteRequestData [0x8311BE1A]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)

Breaker934

Post #7September 2, 2010, 2:21 PM UTC

INT 0x00 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E97220 INT 0x01 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E973B0 INT 0x03 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E97820 INT 0x04 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E979A8 INT 0x05 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E97B08 INT 0x06 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E97C7C INT 0x07 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E98278 INT 0x09 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E986D8 INT 0x0A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E987FC INT 0x0B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9893C INT 0x0C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E98B9C INT 0x0D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E98E8C INT 0x0E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9955C INT 0x0F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E99910 INT 0x10 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E99A34 INT 0x11 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E99B74 INT 0x13 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E99CE0 INT 0x14 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E99910 INT 0x15 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E99910 INT 0x16 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E99910 INT 0x17 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E99910 INT 0x18 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E99910 INT 0x19 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E99910 INT 0x1A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E99910 INT 0x1B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E99910 INT 0x1C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E99910 INT 0x1D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E99910 INT 0x1E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E99910 INT 0x1F \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E36AF8 INT 0x2A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9689A INT 0x2B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E96A20 INT 0x2C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E96B5C INT 0x2D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E976F8 INT 0x2E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9624E INT 0x2F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E99910 INT 0x30 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95910 INT 0x31 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9591A INT 0x32 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95924 INT 0x33 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9592E INT 0x34 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95938 INT 0x35 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95942 INT 0x36 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9594C INT 0x37 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E36104 INT 0x38 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95960 INT 0x39 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9596A INT 0x3A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95974 INT 0x3B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9597E INT 0x3C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95988 INT 0x3D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95992 INT 0x3E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9599C INT 0x3F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E959A6 INT 0x40 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E959B0 INT 0x41 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E959BA INT 0x42 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E959C4 INT 0x43 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E959CE INT 0x44 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E959D8 INT 0x45 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E959E2 INT 0x46 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E959EC INT 0x47 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E959F6 INT 0x48 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95A00 INT 0x49 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95A0A INT 0x4A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95A14 INT 0x4B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95A1E INT 0x4C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95A28 INT 0x4D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95A32 INT 0x4E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95A3C INT 0x4F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95A46 INT 0x50 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95A50 INT 0x53 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95A6E INT 0x54 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95A78 INT 0x55 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95A82 INT 0x56 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95A8C INT 0x57 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95A96 INT 0x58 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95AA0 INT 0x59 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95AAA INT 0x5A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95AB4 INT 0x5B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95ABE INT 0x5C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95AC8 INT 0x5D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95AD2 INT 0x5E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95ADC INT 0x5F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95AE6 INT 0x60 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95AF0 INT 0x61 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95AFA INT 0x63 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95B0E INT 0x64 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95B18 INT 0x65 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95B22 INT 0x66 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95B2C INT 0x67 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95B36 INT 0x68 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95B40 INT 0x69 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95B4A INT 0x6A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95B54 INT 0x6B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95B5E INT 0x6C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95B68 INT 0x6D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95B72 INT 0x6E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95B7C INT 0x6F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95B86 INT 0x70 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95B90 INT 0x71 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95B9A INT 0x73 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95BAE INT 0x74 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95BB8 INT 0x75 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95BC2 INT 0x76 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95BCC INT 0x77 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95BD6 INT 0x78 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95BE0 INT 0x79 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95BEA INT 0x7A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95BF4 INT 0x7B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95BFE INT 0x7C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95C08 INT 0x7D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95C12 INT 0x7E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95C1C INT 0x7F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95C26 INT 0x80 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95C30 INT 0x83 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95C4E INT 0x84 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95C58 INT 0x85 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95C62 INT 0x86 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95C6C INT 0x87 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95C76 INT 0x88 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95C80 INT 0x89 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95C8A INT 0x8A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95C94 INT 0x8B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95C9E INT 0x8C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95CA8 INT 0x8D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95CB2 INT 0x8E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95CBC INT 0x8F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95CC6 INT 0x90 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95CD0 INT 0x93 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95CEE INT 0x94 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95CF8 INT 0x95 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95D02 INT 0x96 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95D0C INT 0x97 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95D16 INT 0x98 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95D20 INT 0x99 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95D2A INT 0x9A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95D34 INT 0x9B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95D3E INT 0x9C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95D48 INT 0x9D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95D52 INT 0x9E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95D5C INT 0x9F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95D66 INT 0xA1 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95D7A INT 0xA2 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95D84 INT 0xA3 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95D8E INT 0xA4 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95D98 INT 0xA5 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95DA2 INT 0xA6 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95DAC INT 0xA7 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95DB6 INT 0xA8 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95DC0 INT 0xA9 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95DCA INT 0xAA \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95DD4 INT 0xAB \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95DDE INT 0xAC \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95DE8 INT 0xAD \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95DF2 INT 0xAE \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95DFC INT 0xAF \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95E06 INT 0xB4 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95E38 INT 0xB5 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95E42 INT 0xB6 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95E4C INT 0xB7 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95E56 INT 0xB8 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95E60 INT 0xB9 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95E6A INT 0xBA \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95E74 INT 0xBB \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95E7E INT 0xBC \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95E88 INT 0xBD \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95E92 INT 0xBE \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95E9C INT 0xBF \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95EA6 INT 0xC0 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95EB0 INT 0xC1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E363F4 INT 0xC2 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95EC4 INT 0xC3 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95ECE INT 0xC4 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95ED8 INT 0xC5 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95EE2 INT 0xC6 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95EEC INT 0xC7 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95EF6 INT 0xC8 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95F00 INT 0xC9 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95F0A INT 0xCA \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95F14 INT 0xCB \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95F1E INT 0xCC \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95F28 INT 0xCD \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95F32 INT 0xCE \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95F3C INT 0xCF \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95F46 INT 0xD0 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95F50 INT 0xD1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E1E634 INT 0xD2 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E1E898 INT 0xD3 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95F6E INT 0xD4 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95F78 INT 0xD5 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95F82 INT 0xD6 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95F8C INT 0xD7 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95F96 INT 0xD8 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95FA0 INT 0xD9 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95FAA INT 0xDA \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95FB4 INT 0xDB \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95FBE INT 0xDC \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95FC8 INT 0xDD \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95FD2 INT 0xDE \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95FDC INT 0xDF \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E361DC INT 0xE0 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E95FF0 INT 0xE1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E36958 INT 0xE2 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E96004 INT 0xE3 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E366F8 INT 0xE4 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E96018 INT 0xE5 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E96022 INT 0xE6 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9602C INT 0xE7 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E96036 INT 0xE8 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E96040 INT 0xE9 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9604A INT 0xEA \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E96054 INT 0xEB \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9605E INT 0xEC \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E96068 INT 0xED \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E96072 INT 0xEE \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E96079 INT 0xEF \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E96080 INT 0xF0 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E96087 INT 0xF1 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9608E INT 0xF2 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E96095 INT 0xF3 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9609C INT 0xF4 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E960A3 INT 0xF5 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E960AA INT 0xF6 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E960B1 INT 0xF7 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E960B8 INT 0xF8 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E960BF INT 0xF9 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E960C6 INT 0xFA \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E960CD INT 0xFB \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E960D4 INT 0xFC \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E960DB INT 0xFD \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E36F2C INT 0xFE \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E371A8 INT 0xFF \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E960F0 SYSENTER \SystemRoot\system32\ntkrnlpa.exe 82E96320

Breaker934

Post #8September 2, 2010, 2:22 PM UTC

—- Kernel code sections - GMER 1.0.15 —- .text ntkrnlpa.exe!RtlPrefetchMemoryNonTemporal 82E92E88 1 Byte [90] .text ntkrnlpa.exe!ZwSaveKeyEx + 13AD 82E96599 1 Byte [06] .text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82EBAF52 1 Byte [E0] .text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82EBAF52 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, …] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3} .text ntkrnlpa.exe!KiDispatchInterrupt + 5B7 82EBAF67 1 Byte [D9] .text ntkrnlpa.exe!KiDispatchInterrupt + 5BF 82EBAF6F 1 Byte [00] .text ntkrnlpa.exe!RtlSidHashLookup + 220 82EC2730 4 Bytes [28, A5, 79, 89] .text ntkrnlpa.exe!RtlSidHashLookup + 248 82EC2758 8 Bytes [52, C7, 79, 89, CC, C9, 79, …] .text ntkrnlpa.exe!RtlSidHashLookup + 28C 82EC279C 4 Bytes [3E, CC, 79, 89] .text ntkrnlpa.exe!RtlSidHashLookup + 2B8 82EC27C8 4 Bytes [30, AE, 79, 89] .text ntkrnlpa.exe!RtlSidHashLookup + 2DC 82EC27EC 4 Bytes [5C, BC, 79, 89] .text … .text peauth.sys 9A829C9D 28 Bytes [DE, 17, 48, 8E, 5C, BA, D1, …] .text peauth.sys 9A829CC1 28 Bytes [DE, 17, 48, 8E, 5C, BA, D1, …] —- User code sections - GMER 1.0.15 —- UPX1 C:\Users\Nick\Desktop\gmer.exe[332] C:\Users\Nick\Desktop\gmer.exe entry point in "UPX1" section [0x004B3F40] .text C:\Windows\Explorer.EXE[1024] GROOVEEX.DLL!DllCanUnloadNow + 55AF 6F29B9F0 4 Bytes [88, 83, B5, FD] .text C:\Windows\Explorer.EXE[1024] C:\Windows\system32\CmdLineExt03.dll section is writeable [0x03281000, 0x13000, 0xE0000060] .petite C:\Windows\Explorer.EXE[1024] C:\Windows\system32\CmdLineExt03.dll entry point in ".petite" section [0x0329710B] C:\Windows\Explorer.EXE[1024] C:\Windows\system32\CmdLineExt03.dll unknown last section [0x03299000, 0x1000, 0xC2000080] ? C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\Windows\SYSTEM32\ntdll.dll time/date stamp mismatch; ? C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\Windows\system32\kernel32.dll time/date stamp mismatch; unknown module: KERNELBASE.dll ? C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\Windows\system32\KERNELBASE.dll time/date stamp mismatch; unknown module: KERNELBASE.dll .text C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] USER32.dll!NotifyWinEvent + 48B 75E2F724 4 Bytes [E0, 13, 46, 6C] {LOOPNZ 0x15; INC ESI; INSB } .text C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\klavemu.kdl.06ecd24ad0bcecb5db8a94e329f97363 section is writeable [0x38401000, 0x1A7000, 0xE0000020] .pklav C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\klavemu.kdl.06ecd24ad0bcecb5db8a94e329f97363 entry point in ".pklav" section [0x38749118] .pklav C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\klavemu.kdl.06ecd24ad0bcecb5db8a94e329f97363 unknown last code section [0x38749000, 0x2000, 0xE00000E0] .text C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\kjim.kdl.fa306d735d3e94b879d3dd42aa355183 section is writeable [0x38801000, 0x68000, 0xE0000020] .pklav C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\kjim.kdl.fa306d735d3e94b879d3dd42aa355183 entry point in ".pklav" section [0x38976118] .pklav C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\kjim.kdl.fa306d735d3e94b879d3dd42aa355183 unknown last code section [0x38976000, 0x2000, 0xE00000E0] CODE C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avzkrnl.dll entry point in "CODE" section [0x6C32AB7C] .text C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\mark.kdl.4d0f31801e5ff37724e32cbec01eef17 section is writeable [0x38301000, 0x1E000, 0xE0000020] .pklav C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\mark.kdl.4d0f31801e5ff37724e32cbec01eef17 entry point in ".pklav" section [0x3832E2A0] .pklav C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\mark.kdl.4d0f31801e5ff37724e32cbec01eef17 unknown last code section [0x3832E000, 0x2000, 0xE00000E0] .text C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\qscan.kdl.72dc07f54416a6025b514fa359528ce8 section is writeable [0x38C01000, 0x9F000, 0xE0000020] .pklav C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\qscan.kdl.72dc07f54416a6025b514fa359528ce8 entry point in ".pklav" section [0x38CC3178] .pklav C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\qscan.kdl.72dc07f54416a6025b514fa359528ce8 unknown last code section [0x38CC3000, 0x2000, 0xE00000E0] .text C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\kavsys.kdl.b45acade5360ab4998f63b238a6e3afb section is writeable [0x38D01000, 0x28000, 0xE0000020] .pklav C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\kavsys.kdl.b45acade5360ab4998f63b238a6e3afb entry point in ".pklav" section [0x38D372BC] .pklav C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[1884] C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\kavsys.kdl.b45acade5360ab4998f63b238a6e3afb unknown last code section [0x38D37000, 0x2000, 0xE00000E0] ? C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2420] C:\Windows\SYSTEM32\ntdll.dll time/date stamp mismatch; ? C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2420] C:\Windows\system32\kernel32.dll time/date stamp mismatch; unknown module: KERNELBASE.dll ? C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2420] C:\Windows\system32\KERNELBASE.dll time/date stamp mismatch; unknown module: KERNELBASE.dll .text C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe[2420] USER32.dll!NotifyWinEvent + 48B 75E2F724 4 Bytes [E0, 13, 46, 6C] {LOOPNZ 0x15; INC ESI; INSB } UPX1 C:\Users\Nick\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe[2584] C:\Users\Nick\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1008042-0-libOctoshapeClient.dll entry point in "UPX1" section [0x1016FDB0] .text C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[2812] GROOVEEX.DLL!DllCanUnloadNow + 55AF 6F29B9F0 4 Bytes [7D, 6F, 89, 0E] {JGE 0x71; MOV [ESI], ECX} —- Devices - GMER 1.0.15 —- Device \FileSystem\Ntfs \Ntfs Ntfs.sys (NT File System Driver/Microsoft Corporation) Device \FileSystem\Ntfs \Ntfs ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Ntfs \Ntfs ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Ntfs \Ntfs ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\fastfat \FatCdrom fastfat.SYS (Fast FAT File System Driver/Microsoft Corporation) Device \FileSystem\fastfat \FatCdrom ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\fastfat \FatCdrom ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\fastfat \FatCdrom ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\fastfat \FatCdrom ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \ Device \Driver\KSecDD \Device\KsecDD ksecdd.sys (Kernel Security Support Provider Interface/Microsoft Corporation) Device \Driver\KSecDD \Device\KsecDD ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\NDIS \Device\Ndis ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\Beep \Device\Beep Beep.SYS (BEEP Driver/Microsoft Corporation) Device \Driver\Beep \Device\Beep ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\srvnet \Device\SrvNet srvnet.sys (Server Network driver/Microsoft Corporation) Device \Driver\WudfPf \Device\WUDFLpcDevice WudfPf.sys (Windows Driver Foundation - User-mode Driver Framework Platform Driver/Microsoft Corporation) Device \Driver\rdpbus \Device\RdpBus rdpbus.sys (Microsoft RDP Bus Device driver/Microsoft Corporation) Device \Device\00000032 Device \Device\00000025 Device \Device\00000019 Device \Driver\NdisWan \Device\NDMP10 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\RasAgileVpn \Device\AgileVPN ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \FileSystem\NetBIOS \Device\Netbios netbios.sys (NetBIOS interface driver/Microsoft Corporation) Device \FileSystem\NetBIOS \Device\Netbios ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000033 Device \Device\00000026 Device \Driver\RasPppoe \Device\NDMP11 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\PnpManager \Device\00000040 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000040 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000034 Device \Device\00000027 Device \Driver\kbdclass \Device\KeyboardClass0 kbdclass.sys (Keyboard Class Driver/Microsoft Corporation) Device \Driver\kbdclass \Device\KeyboardClass0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RDPCDD \Device\Video0 VIDEOPRT.SYS (Video Port Driver/Microsoft Corporation) Device \Driver\RDPCDD \Device\Video0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PptpMiniport \Device\NDMP12 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\PnpManager \Device\00000041 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000041 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Wdf01000 \Device\KMDF0 Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation) Device \Driver\Wdf01000 \Device\KMDF0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\WMIxWDM \Device\WMIAdminDevice ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\WMIxWDM \Device\WMIAdminDevice ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000035 Device \Device\00000028 Device \Driver\kbdclass \Device\KeyboardClass1 kbdclass.sys (Keyboard Class Driver/Microsoft Corporation) Device \Driver\kbdclass \Device\KeyboardClass1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RDPENCDD \Device\Video1 VIDEOPRT.SYS (Video Port Driver/Microsoft Corporation) Device \Driver\RDPENCDD \Device\Video1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RasSstp \Device\NDMP13 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\RasSstp \Device\NDMP13 rassstp.sys (RAS SSTP Miniport Call Manager/Microsoft Corporation) Device \Driver\WUDFRd \Device\UMDFCtrlDev-2b6592b3-b63f-11df-9eee-001c230b2fb0 WUDFRd.sys (Windows Driver Foundation - User-mode Driver Framework Reflector/Microsoft Corporation) Device \Driver\WudfPf \Device\ProcessManagement WudfPf.sys (Windows Driver Foundation - User-mode Driver Framework Platform Driver/Microsoft Corporation) Device \Driver\PnpManager \Device\00000042 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000042 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\volmgr \Device\VolMgrControl volmgr.sys (Volume Manager Driver/Microsoft Corporation) Device \Driver\volmgr \Device\VolMgrControl ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000036 Device \Device\00000029 Device \Driver\RDPREFMP \Device\Video2 VIDEOPRT.SYS (Video Port Driver/Microsoft Corporation) Device \Driver\RDPREFMP \Device\Video2 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\srvnet \Device\SrvAdmin srvnet.sys (Server Network driver/Microsoft Corporation) Device \Driver\mouclass \Device\PointerClass0 mouclass.sys (Mouse Class Driver/Microsoft Corporation) Device \Driver\mouclass \Device\PointerClass0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Serial \Device\Serial0 serial.sys (Serial Device Driver/Microsoft Corporation) Device \Driver\Serial \Device\Serial0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\ACPI \Device\00000050 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\PnpManager \Device\00000043 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000043 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000037 Device \Device\0000000a Device \Driver\PnpManager \Device\00000044 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000044 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\ACPI \Device\00000051 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Device\Video3 Device \Driver\usbuhci \Device\USBPDO-0 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbuhci \Device\USBPDO-0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\mouclass \Device\PointerClass1 mouclass.sys (Mouse Class Driver/Microsoft Corporation) Device \Driver\mouclass \Device\PointerClass1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Compbatt \Device\CompositeBattery compbatt.sys (Composite Battery Driver/Microsoft Corporation) Device \Driver\Compbatt \Device\CompositeBattery ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000038 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000038 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\0000000b Device \Driver\KL1 \Device\klick kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \Driver\nvlddmkm \Device\Video4 nvlddmkm.sys (NVIDIA Windows Kernel Mode Driver, Version 257.21 /NVIDIA Corporation) Device \Driver\WMIxWDM \Device\WMIDataDevice ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\WMIxWDM \Device\WMIDataDevice ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\TeredoTun Device \Driver\ACPI \Device\00000052 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\spldr \Device\SPDevice spldr.sys (loader for security processor/Microsoft Corporation) Device \Driver\spldr \Device\SPDevice ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbuhci \Device\USBPDO-1 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbuhci \Device\USBPDO-1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\PointerClass2 Device \Driver\KL1 \Device\klbg_1604100 kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \FileSystem\RAW \Device\RawTape ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\RAW \Device\RawTape ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\RAW \Device\RawTape ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000045 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000045 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000039 Device \Device\0000000c Device \Driver\PEAUTH \Device\PEAuth Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation) Device \Driver\usbehci \Device\USBPDO-2 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbehci \Device\USBPDO-2 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\nvlddmkm \Device\Video5 nvlddmkm.sys (NVIDIA Windows Kernel Mode Driver, Version 257.21 /NVIDIA Corporation) Device \Driver\PnpManager \Device\00000046 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000046 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\NTPNP_PCI0000 Device \Device\00000053 Device \Device\0000001a Device \Device\0000000d Device \Device\MPS Device \Driver\usbuhci \Device\USBPDO-3 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbuhci \Device\USBPDO-3 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\ACPI \Device\00000060 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Device\00000054 Device \Device\NTPNP_PCI0001 Device \Driver\ACPI_HAL \Device\00000047 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\ACPI_HAL \Device\00000047 halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) Device \Device\0000001b Device \Device\0000000e Device \Driver\usbuhci \Device\USBPDO-4 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbuhci \Device\USBPDO-4 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Psched \Device\Psched ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Device\00000061 Device \Device\00000055 Device \Driver\pci \Device\NTPNP_PCI0002 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0002 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Device\00000048 Device \Device\0000001c Device \Device\0000000f Device \Driver\tdx \Device\Tcp tdx.sys (TDI Translation Driver/Microsoft Corporation) Device \Driver\tdx \Device\Tcp ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) AttachedDevice \Driver\tdx \Device\Tcp kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \FileSystem\DfsC \Device\DfsClient dfsc.sys (DFS Namespace Client Driver/Microsoft Corporation) Device \FileSystem\DfsC \Device\DfsClient ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\KL1 \Device\kl1 kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \Driver\ACPI \Device\00000056 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\usbuhci \Device\USBPDO-5 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbuhci \Device\USBPDO-5 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbhub \Device\00000062 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\00000062 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0010 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0010 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0003 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0003 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Device\00000049 Device \Device\0000001d Device \Device\HostProcess-6fab009b-5e5a-44c9-9990-b6379656e54c Device \Driver\ACPI \Device\00000057 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\usbehci \Device\USBPDO-6 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbehci \Device\USBPDO-6 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\nvlddmkm \Device\00000070 nvlddmkm.sys (NVIDIA Windows Kernel Mode Driver, Version 257.21 /NVIDIA Corporation) Device \Driver\usbhub \Device\00000063 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\00000063 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Tcpip \Device\eQoS tcpip.sys (TCP/IP Driver/Microsoft Corporation) Device \Driver\Tcpip \Device\eQoS ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0011 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0011 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0004 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0004 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Device\0000002a Device \Device\0000001e Device \Device\Http\ReqQueue Device \Device\Http\Communication Device \Driver\volmgr \Device\HarddiskVolume1 volmgr.sys (Volume Manager Driver/Microsoft Corporation) Device \Driver\volmgr \Device\HarddiskVolume1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation) Device \Driver\tunnel \Device\NDMP1 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\usbhub \Device\USBPDO-7 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\USBPDO-7 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbhub \Device\00000071 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\00000071 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbhub \Device\00000064 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\00000064 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\ACPI \Device\00000058 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0012 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0012 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0005 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0005 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Device\i Device \Driver\volmgr \Device\HarddiskVolume2 volmgr.sys (Volume Manager Driver/Microsoft Corporation) Device \Driver\volmgr \Device\HarddiskVolume2 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation) Device \Driver\cdrom \Device\CdRom0 Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation) Device \Driver\tunnel \Device\NDMP2 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\usbhub \Device\00000065 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\00000065 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\nvlddmkm \Device\NvAdminDevice nvlddmkm.sys (NVIDIA Windows Kernel Mode Driver, Version 257.21 /NVIDIA Corporation) Device \Driver\blbdrive \Device\BlbControl blbdrive.sys (BLB Drive Driver/Microsoft Corporation) Device \FileSystem\rdbss \Device\FsWrap rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \FileSystem\rdbss \Device\FsWrap ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\TermDD \Device\Termdd termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\volmgr \Device\HarddiskVolume3 volmgr.sys (Volume Manager Driver/Microsoft Corporation) Device \Driver\volmgr \Device\HarddiskVolume3 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-0 ataport.SYS (ATAPI Driver Extension/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort0 ataport.SYS (ATAPI Driver Extension/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort1 ataport.SYS (ATAPI Driver Extension/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\intelide \Device\Ide\PciIde1Channel0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\intelide \Device\Ide\PciIde1Channel0 PCIIDEX.SYS (PCI IDE Bus Driver Extension/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-1 ataport.SYS (ATAPI Driver Extension/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\intelide \Device\Ide\PciIde0Channel0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\intelide \Device\Ide\PciIde0Channel0 PCIIDEX.SYS (PCI IDE Bus Driver Extension/Microsoft Corporation) Device \Device\Ide\PciIde0 Device \Device\Ide\PciIde1 Device \Driver\KL1 \Device\klnkd29 kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \Driver\umbus \Device\00000073 Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation) Device \Driver\tunnel \Device\NDMP3 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\usbhub \Device\USBPDO-9 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\USBPDO-9 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbhub \Device\00000066 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\00000066 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\tdx \Device\RawIp6 tdx.sys (TDI Translation Driver/Microsoft Corporation) Device \Driver\tdx \Device\RawIp6 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0020 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0020 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0014 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0014 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003a ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003a ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\netw5v32 \Device\NDMP4 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\usbhub \Device\00000067 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\00000067 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\CNG \Device\CNG cng.sys (Kernel Cryptography, Next Generation/Microsoft Corporation) Device \Driver\CNG \Device\CNG ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0021 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0021 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003b ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003b ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\KL1 \Device\KLCR kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \Driver\b57nd60x \Device\NDMP5 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\usbhub \Device\00000068 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\00000068 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo0 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0022 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0022 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0009 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0009 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003c ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003c ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\tdx \Device\Tcp6 tdx.sys (TDI Translation Driver/Microsoft Corporation) Device \Driver\tdx \Device\Tcp6 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\KL1 \Device\klark_1202100 kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \Driver\secdrv \Device\Secdrv secdrv.SYS (Macrovision SECURITY Driver/Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) Device \Driver\secdrv \Device\Secdrv ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RasAgileVpn \Device\NDMP6 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo10 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo1 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003d ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003d ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0018 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0018 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\NetBT \Device\NetBt_Wins_Export netbt.sys (MBT Transport driver/Microsoft Corporation) Device \Driver\NetBT \Device\NetBt_Wins_Export ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\SrvHsfV92 \Device\HSF_MDMDevice0 VSTDPV3.SYS (HSF_DP driver/Conexant Systems, Inc.) Device \Driver\SrvHsfV92 \Device\HSF_MDMDevice0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo11 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo2 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\ACPI \Device\0000004a ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003e ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003e ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\NdisWan \Device\NDMP8 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\Tcpip \Device\WFP tcpip.sys (TCP/IP Driver/Microsoft Corporation) Device \Driver\Tcpip \Device\WFP ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo12 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo3 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\KL1 \Device\Klop kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \Driver\pci \Device\NTPNP_PCI0019 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0019 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003f ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003f ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\KL1 \Device\IDS002d6 kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \Driver\NdisWan \Device\NDMP9 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\NativeWifiP \Device\nativewifip ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo13 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo4 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\KLIM6 \Device\KLIM6 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\kxldqpoc \Device\kxldqpoc kxldqpoc.sys Device \Driver\kxldqpoc \Device\kxldqpoc ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo14 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo5 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\ACPI \Device\0000004d ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\NetBT \Device\NetBT_Tcpip_{AAA3F172-9256-4BBD-BEF2-1B69899ED0C6} netbt.sys (MBT Transport driver/Microsoft Corporation) Device \Driver\NetBT \Device\NetBT_Tcpip_{AAA3F172-9256-4BBD-BEF2-1B69899ED0C6} ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\mountmgr \Device\MountPointManager mountmgr.sys (Mount Point Manager/Microsoft Corporation) Device \Driver\mountmgr \Device\MountPointManager ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\tdx \Device\Tdx tdx.sys (TDI Translation Driver/Microsoft Corporation) Device \Driver\tdx \Device\Tdx ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo15 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo6 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\ACPI \Device\0000004e ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \FileSystem\Mup \Device\Mup mup.sys (Multiple UNC Provider Driver/Microsoft Corporation) Device \FileSystem\srv2 \Device\Srv2 srv2.sys (Smb 2.0 Server driver/Microsoft Corporation) Device \Driver\nsiproxy \Device\Nsi nsiproxy.sys (NSI Proxy/Microsoft Corporation) Device \FileSystem\srv \Device\LanmanServer srv.sys (Server driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo7 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\Wanarpv6 \Device\WANARP wanarp.sys (MS Remote Access and Routing ARP Driver/Microsoft Corporation) Device \Driver\partmgr \Device\PartmgrControl partmgr.sys (Partition Management Driver/Microsoft Corporation) Device \Driver\ACPI \Device\0000004f ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\tdx \Device\Udp tdx.sys (TDI Translation Driver/Microsoft Corporation) Device \Driver\tdx \Device\Udp ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) AttachedDevice \Driver\tdx \Device\Udp kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \Driver\TermDD \Device\RemoteVideo8 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\Disk \Device\Harddisk0\DR0 CLASSPNP.SYS (SCSI Class System Dll/Microsoft Corporation) Device \Driver\Disk \Device\Harddisk0\DR0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\tdx \Device\RawIp tdx.sys (TDI Translation Driver/Microsoft Corporation) Device \Driver\tdx \Device\RawIp ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) AttachedDevice \Driver\tdx \Device\RawIp kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \Driver\Ndisuio \Device\WwanProt ndisuio.sys (NDIS User mode I/O driver/Microsoft Corporation) Device \Driver\Ndisuio \Device\WwanProt ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\HDAudBus \Device\0000006a Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation) Device \Driver\HDAudBus \Device\0000006a HDAudBus.sys (High Definition Audio Bus Driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo9 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\PnpManager \Device\00000001 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000001 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Disk \Device\Harddisk1\DR1 CLASSPNP.SYS (SCSI Class System Dll/Microsoft Corporation) Device \Driver\Disk \Device\Harddisk1\DR1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Wanarpv6 \Device\WANARPV6 wanarp.sys (MS Remote Access and Routing ARP Driver/Microsoft Corporation) Device \FileSystem\RAW \Device\RawDisk ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\RAW \Device\RawDisk ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\RAW \Device\RawDisk ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000002 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000002 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbuhci \Device\USBFDO-0 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbuhci \Device\USBFDO-0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Null \Device\Null Null.SYS (NULL Driver/Microsoft Corporation) Device \Driver\Null \Device\Null ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Modem \Device\0000006c modem.sys (Modem Device Driver/Microsoft Corporation) Device \Driver\Modem \Device\0000006c ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\1394ohci \Device\1394BUS0 Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation) Device \Driver\PnpManager \Device\00000003 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000003 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Tcpip \Device\NXTIPSEC tcpip.sys (TCP/IP Driver/Microsoft Corporation) Device \Driver\Tcpip \Device\NXTIPSEC ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\klmouflt \Device\KLMouFlt klmouflt.sys (KLMOUFLT Mouse Device Filter [fre_wlh_x86]/Kaspersky Lab) Device \Driver\usbuhci \Device\USBFDO-1 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbuhci \Device\USBFDO-1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\tdx \Device\Udp6 tdx.sys (TDI Translation Driver/Microsoft Corporation) Device \Driver\tdx \Device\Udp6 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\bowser \Device\LanmanDatagramReceiver bowser.sys (NT Lan Manager Datagram Receiver Driver/Microsoft Corporation) Device \Driver\secdrv \Device\AscKmd secdrv.SYS (Macrovision SECURITY Driver/Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) Device \Driver\secdrv \Device\AscKmd ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\USBSTOR \Device\0000006e USBSTOR.SYS (USB Mass Storage Class Driver/Microsoft Corporation) Device \Driver\USBSTOR \Device\0000006e ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\SrvHsfHDA \Device\MICH_AZ0 VSTAZL3.SYS (HSF_HWAZL WDM driver/Conexant Systems, Inc.) Device \Driver\SrvHsfHDA \Device\MICH_AZ0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\NdisWan \Device\NdisWan ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\NdisTapi \Device\NdisTapi ndistapi.sys (NDIS 3.0 connection wrapper driver/Microsoft Corporation) Device \Driver\NdisTapi \Device\NdisTapi ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbehci \Device\USBFDO-2 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbehci \Device\USBFDO-2 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000005 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000005 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\USBSTOR \Device\0000006f USBSTOR.SYS (USB Mass Storage Class Driver/Microsoft Corporation) Device \Driver\USBSTOR \Device\0000006f ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\DXGKrnl \Device\DxgKrnl dxgkrnl.sys (DirectX Graphics Kernel/Microsoft Corporation) Device \Driver\DXGKrnl \Device\DxgKrnl ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbuhci \Device\USBFDO-3 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbuhci \Device\USBFDO-3 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000006 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000006 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\KL1 \Device\KLFW kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \FileSystem\Npfs \Device\NamedPipe Npfs.SYS (NPFS Driver/Microsoft Corporation) Device \FileSystem\Npfs \Device\NamedPipe ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbuhci \Device\USBFDO-4 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbuhci \Device\USBFDO-4 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000007 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000007 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbuhci \Device\USBFDO-5 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbuhci \Device\USBFDO-5 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Msfs \Device\Mailslot Msfs.SYS (Mailslot driver/Microsoft Corporation) Device \FileSystem\Msfs \Device\Mailslot ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\KL1 \Device\klin kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \FileSystem\FileInfo \Device\FileInfo fileinfo.sys (FileInfo Filter Driver/Microsoft Corporation) Device \FileSystem\FileInfo \Device\FileInfo ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\AFD \Device\Afd afd.sys (Ancillary Function Driver for WinSock/Microsoft Corporation) Device \Driver\Ndisuio \Device\Ndisuio ndisuio.sys (NDIS User mode I/O driver/Microsoft Corporation) Device \Driver\Ndisuio \Device\Ndisuio ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\SrvHsfWinac \Device\Winachsf0 VSTCNXT3.SYS (HSF_CNXT driver/Conexant Systems, Inc.) Device \Driver\SrvHsfWinac \Device\Winachsf0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RasSstp \Device\SstpDrv ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\RasSstp \Device\SstpDrv rassstp.sys (RAS SSTP Miniport Call Manager/Microsoft Corporation) Device \Driver\usbehci \Device\USBFDO-6 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbehci \Device\USBFDO-6 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\RAW \Device\RawCdRom ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\RAW \Device\RawCdRom ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\RAW \Device\RawCdRom ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\NetBT \Device\NetBT_Tcpip_{C3B85141-B0BC-4A43-8B33-E9367BE560D2} netbt.sys (MBT Transport driver/Microsoft Corporation) Device \Driver\NetBT \Device\NetBT_Tcpip_{C3B85141-B0BC-4A43-8B33-E9367BE560D2} ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pcw \Device\PcwDrv pcw.sys (Performance Counters for Windows Driver/Microsoft Corporation) Device \Driver\pcw \Device\PcwDrv ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Tcpip \Device\WfpAle tcpip.sys (TCP/IP Driver/Microsoft Corporation) Device \Driver\Tcpip \Device\WfpAle ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\rdyboost \Device\RdyBoost rdyboost.sys (ReadyBoost Driver/Microsoft Corporation) Device \Driver\KL1 \Device\kimul36 kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) Device \Driver\Tcpip \Device\IPSECDOSP tcpip.sys (TCP/IP Driver/Microsoft Corporation) Device \Driver\Tcpip \Device\IPSECDOSP ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\fastfat \Fat fastfat.SYS (Fast FAT File System Driver/Microsoft Corporation) Device \FileSystem\fastfat \Fat ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\fastfat \Fat ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\fastfat \Fat ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\fastfat \Fat ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\ExFatRecognizer Fs_Rec.sys (File System Recognizer Driver/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\ExFatRecognizer ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\UdfsCdRomRecognizer Fs_Rec.sys (File System Recognizer Driver/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\UdfsCdRomRecognizer ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Filters\FltMgrMsg Device \FileSystem\KLIF \FileSystem\Filters\KLIF klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) Device \FileSystem\FltMgr \FileSystem\Filters\FltMgr fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\FatCdRomRecognizer Fs_Rec.sys (File System Recognizer Driver/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\FatCdRomRecognizer ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\CdfsRecognizer Fs_Rec.sys (File System Recognizer Driver/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\CdfsRecognizer ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\FatDiskRecognizer Fs_Rec.sys (File System Recognizer Driver/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\FatDiskRecognizer ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\UdfsDiskRecognizer Fs_Rec.sys (File System Recognizer Driver/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\UdfsDiskRecognizer

Breaker934

Post #9September 2, 2010, 2:23 PM UTC

—- Modules - GMER 1.0.15 —- Module \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E53000-83263000 (4259840 bytes) Module \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E1C000-82E53000 (225280 bytes) Module \SystemRoot\system32\kdcom.dll (Serial Kernel Debugger/Microsoft Corporation) 80BB3000-80BBB000 (32768 bytes) Module \SystemRoot\system32\mcupdate_GenuineIntel.dll (Intel Microcode Update Library/Microsoft Corporation) 89009000-89081000 (491520 bytes) Module \SystemRoot\system32\PSHED.dll (Platform Specific Hardware Error Driver/Microsoft Corporation) 89081000-89092000 (69632 bytes) Module \SystemRoot\system32\BOOTVID.dll (VGA Boot Driver/Microsoft Corporation) 89092000-8909A000 (32768 bytes) Module \SystemRoot\system32\CLFS.SYS (Common Log File System Driver/Microsoft Corporation) 8909A000-890DC000 (270336 bytes) Module \SystemRoot\system32\CI.dll (Code Integrity Module/Microsoft Corporation) 890DC000-89187000 (700416 bytes) Module \SystemRoot\system32\drivers\Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation) 89187000-891F8000 (462848 bytes) Module \SystemRoot\system32\drivers\WDFLDR.SYS (Kernel Mode Driver Framework Loader/Microsoft Corporation) 89211000-8921F000 (57344 bytes) Module \SystemRoot\system32\DRIVERS\ACPI.sys (ACPI Driver for NT/Microsoft Corporation) 8921F000-89267000 (294912 bytes) Module \SystemRoot\system32\DRIVERS\WMILIB.SYS (WMILIB WMI support library Dll/Microsoft Corporation) 89267000-89270000 (36864 bytes) Module \SystemRoot\system32\DRIVERS\msisadrv.sys (ISA Driver/Microsoft Corporation) 89270000-89278000 (32768 bytes) Module \SystemRoot\system32\DRIVERS\vdrvroot.sys (Virtual Drive Root Enumerator/Microsoft Corporation) 89278000-89283000 (45056 bytes) Module \SystemRoot\system32\DRIVERS\pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) 89283000-892AD000 (172032 bytes) Module \SystemRoot\System32\drivers\partmgr.sys (Partition Management Driver/Microsoft Corporation) 892AD000-892BE000 (69632 bytes) Module \SystemRoot\system32\DRIVERS\compbatt.sys (Composite Battery Driver/Microsoft Corporation) 892BE000-892C6000 (32768 bytes) Module \SystemRoot\system32\DRIVERS\BATTC.SYS (Battery Class Driver/Microsoft Corporation) 892C6000-892D1000 (45056 bytes) Module \SystemRoot\system32\DRIVERS\volmgr.sys (Volume Manager Driver/Microsoft Corporation) 892D1000-892E1000 (65536 bytes) Module \SystemRoot\System32\drivers\volmgrx.sys (Volume Manager Extension Driver/Microsoft Corporation) 892E1000-8932C000 (307200 bytes) Module \SystemRoot\system32\DRIVERS\intelide.sys (Intel PCI IDE Driver/Microsoft Corporation) 8932C000-89333000 (28672 bytes) Module \SystemRoot\system32\DRIVERS\PCIIDEX.SYS (PCI IDE Bus Driver Extension/Microsoft Corporation) 89333000-89341000 (57344 bytes) Module \SystemRoot\system32\DRIVERS\pcmcia.sys (PCMCIA Bus Driver/Microsoft Corporation) 89341000-8936F000 (188416 bytes) Module \SystemRoot\System32\drivers\mountmgr.sys (Mount Point Manager/Microsoft Corporation) 8936F000-89385000 (90112 bytes) Module \SystemRoot\system32\DRIVERS\atapi.sys (ATAPI IDE Miniport Driver/Microsoft Corporation) 89385000-8938E000 (36864 bytes) Module \SystemRoot\system32\DRIVERS\ataport.SYS (ATAPI Driver Extension/Microsoft Corporation) 8938E000-893B1000 (143360 bytes) Module \SystemRoot\system32\DRIVERS\amdxata.sys (Storage Filter Driver/Advanced Micro Devices) 893B1000-893BA000 (36864 bytes) Module \SystemRoot\system32\drivers\fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation) 893BA000-893EE000 (212992 bytes) Module \SystemRoot\system32\drivers\fileinfo.sys (FileInfo Filter Driver/Microsoft Corporation) 893EE000-893FF000 (69632 bytes) Module \SystemRoot\System32\Drivers\Ntfs.sys (NT File System Driver/Microsoft Corporation) 89407000-89536000 (1241088 bytes) Module \SystemRoot\System32\Drivers\msrpc.sys (Kernel Remote Procedure Call Provider/Microsoft Corporation) 89536000-89561000 (176128 bytes) Module \SystemRoot\System32\Drivers\ksecdd.sys (Kernel Security Support Provider Interface/Microsoft Corporation) 89561000-89574000 (77824 bytes) Module \SystemRoot\System32\Drivers\cng.sys (Kernel Cryptography, Next Generation/Microsoft Corporation) 89574000-895D1000 (380928 bytes) Module \SystemRoot\System32\drivers\pcw.sys (Performance Counters for Windows Driver/Microsoft Corporation) 895D1000-895DF000 (57344 bytes) Module \SystemRoot\System32\Drivers\Fs_Rec.sys (File System Recognizer Driver/Microsoft Corporation) 895DF000-895E8000 (36864 bytes) Module \SystemRoot\system32\drivers\ndis.sys (NDIS 6.20 driver/Microsoft Corporation) 89627000-896DE000 (749568 bytes) Module \SystemRoot\system32\drivers\NETIO.SYS (Network I/O Subsystem/Microsoft Corporation) 896DE000-8971C000 (253952 bytes) Module \SystemRoot\System32\Drivers\ksecpkg.sys (Kernel Security Support Provider Interface Packages/Microsoft Corporation) 8971C000-89741000 (151552 bytes) Module \SystemRoot\System32\drivers\tcpip.sys (TCP/IP Driver/Microsoft Corporation) 8981F000-89968000 (1347584 bytes) Module \SystemRoot\System32\drivers\fwpkclnt.sys (FWP/IPsec Kernel-Mode API/Microsoft Corporation) 89968000-89999000 (200704 bytes) Module \SystemRoot\system32\DRIVERS\vmstorfl.sys (Virtual Storage Filter Driver/Microsoft Corporation) 89999000-899A2000 (36864 bytes) Module \SystemRoot\system32\DRIVERS\volsnap.sys (Volume Shadow Copy Driver/Microsoft Corporation) 899A2000-899E1000 (258048 bytes) Module \SystemRoot\System32\Drivers\spldr.sys (loader for security processor/Microsoft Corporation) 899E1000-899E9000 (32768 bytes) Module \SystemRoot\System32\drivers\rdyboost.sys (ReadyBoost Driver/Microsoft Corporation) 89741000-8976E000 (184320 bytes) Module \SystemRoot\System32\Drivers\mup.sys (Multiple UNC Provider Driver/Microsoft Corporation) 899E9000-899F9000 (65536 bytes) Module \SystemRoot\system32\DRIVERS\kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) 89A2F000-89F51000 (5382144 bytes) Module \SystemRoot\System32\drivers\hwpolicy.sys (Hardware Policy Driver/Microsoft Corporation) 89F51000-89F59000 (32768 bytes) Module \SystemRoot\System32\DRIVERS\fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) 89F59000-89F8B000 (204800 bytes) Module \SystemRoot\system32\DRIVERS\disk.sys (PnP Disk Driver/Microsoft Corporation) 89F8B000-89F9C000 (69632 bytes) Module \SystemRoot\system32\DRIVERS\CLASSPNP.SYS (SCSI Class System Dll/Microsoft Corporation) 89F9C000-89FC1000 (151552 bytes) Module \SystemRoot\system32\DRIVERS\cdrom.sys (SCSI CD-ROM Driver/Microsoft Corporation) 89FC1000-89FE0000 (126976 bytes) Module \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) 8976E000-897F2000 (540672 bytes) Module \SystemRoot\System32\Drivers\Null.SYS (NULL Driver/Microsoft Corporation) 89FE0000-89FE7000 (28672 bytes) Module \SystemRoot\System32\Drivers\Beep.SYS (BEEP Driver/Microsoft Corporation) 89FE7000-89FEE000 (28672 bytes) Module \SystemRoot\System32\drivers\vga.sys (VGA/Super VGA Video Driver/Microsoft Corporation) 89FEE000-89FFA000 (49152 bytes) Module \SystemRoot\System32\drivers\VIDEOPRT.SYS (Video Port Driver/Microsoft Corporation) 89A00000-89A21000 (135168 bytes) Module \SystemRoot\System32\drivers\watchdog.sys (Watchdog Driver/Microsoft Corporation) 89A21000-89A2E000 (53248 bytes) Module \SystemRoot\System32\DRIVERS\RDPCDD.sys (RDP Miniport/Microsoft Corporation) 89800000-89808000 (32768 bytes) Module \SystemRoot\system32\drivers\rdpencdd.sys (RDP Encoder Miniport/Microsoft Corporation) 89808000-89810000 (32768 bytes) Module \SystemRoot\system32\drivers\rdprefmp.sys (RDP Reflector Driver Miniport/Microsoft Corporation) 89810000-89818000 (32768 bytes) Module \SystemRoot\System32\Drivers\Msfs.SYS (Mailslot driver/Microsoft Corporation) 897F2000-897FD000 (45056 bytes) Module \SystemRoot\System32\Drivers\Npfs.SYS (NPFS Driver/Microsoft Corporation) 89600000-8960E000 (57344 bytes) Module \SystemRoot\system32\DRIVERS\tdx.sys (TDI Translation Driver/Microsoft Corporation) 8960E000-89625000 (94208 bytes) Module \SystemRoot\system32\DRIVERS\TDI.SYS (TDI Wrapper/Microsoft Corporation) 895E8000-895F3000 (45056 bytes) Module \SystemRoot\system32\DRIVERS\kl2.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) 89FFA000-8A000000 (24576 bytes) Module \SystemRoot\system32\drivers\afd.sys (Ancillary Function Driver for WinSock/Microsoft Corporation) 8E639000-8E693000 (368640 bytes) Module \SystemRoot\System32\DRIVERS\netbt.sys (MBT Transport driver/Microsoft Corporation) 8E693000-8E6C5000 (204800 bytes) Module \SystemRoot\system32\DRIVERS\wfplwf.sys (WFP NDIS 6.20 Lightweight Filter Driver/Microsoft Corporation) 8E6C5000-8E6CC000 (28672 bytes) Module \SystemRoot\system32\DRIVERS\pacer.sys (QoS Packet Scheduler/Microsoft Corporation) 8E6CC000-8E6EB000 (126976 bytes) Module \SystemRoot\system32\DRIVERS\klim6.sys (Kaspersky Lab Intermediate Network Driver/Kaspersky Lab ZAO) 8E6EB000-8E6F3000 (32768 bytes) Module \SystemRoot\system32\DRIVERS\netbios.sys (NetBIOS interface driver/Microsoft Corporation) 8E6F3000-8E701000 (57344 bytes) Module \SystemRoot\system32\DRIVERS\serial.sys (Serial Device Driver/Microsoft Corporation) 8E701000-8E71B000 (106496 bytes) Module \SystemRoot\system32\DRIVERS\wanarp.sys (MS Remote Access and Routing ARP Driver/Microsoft Corporation) 8E71B000-8E72E000 (77824 bytes) Module \SystemRoot\system32\DRIVERS\termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) 8E72E000-8E73E000 (65536 bytes) Module \SystemRoot\system32\DRIVERS\rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) 8E73E000-8E77F000 (266240 bytes) Module \SystemRoot\system32\drivers\nsiproxy.sys (NSI Proxy/Microsoft Corporation) 8E77F000-8E789000 (40960 bytes) Module \SystemRoot\system32\DRIVERS\mssmbios.sys (System Management BIOS Driver/Microsoft Corporation) 8E789000-8E793000 (40960 bytes) Module \SystemRoot\System32\drivers\discache.sys (System Indexer/Cache Driver/Microsoft Corporation) 8E793000-8E79F000 (49152 bytes) Module \SystemRoot\system32\drivers\csc.sys (Windows Client Side Caching Driver/Microsoft Corporation) 8EC01000-8EC65000 (409600 bytes) Module \SystemRoot\System32\Drivers\dfsc.sys (DFS Namespace Client Driver/Microsoft Corporation) 8EC65000-8EC7D000 (98304 bytes) Module \SystemRoot\system32\DRIVERS\blbdrive.sys (BLB Drive Driver/Microsoft Corporation) 8EC7D000-8EC8B000 (57344 bytes) Module \SystemRoot\system32\DRIVERS\tunnel.sys (Microsoft Tunnel Interface Driver/Microsoft Corporation) 8EC8B000-8ECAC000 (135168 bytes) Module \SystemRoot\system32\DRIVERS\intelppm.sys (Processor Device Driver/Microsoft Corporation) 8ECAC000-8ECBE000 (73728 bytes) Module \SystemRoot\system32\DRIVERS\nvlddmkm.sys (NVIDIA Windows Kernel Mode Driver, Version 257.21 /NVIDIA Corporation) 90C32000-91693000 (10883072 bytes) Module \SystemRoot\system32\DRIVERS\nvBridge.kmd (NVIDIA Compatible Windows Vista Kernel Mode Driver, Version 257.21 /NVIDIA Corporation) 91693000-91695000 (8192 bytes) Module \SystemRoot\System32\drivers\dxgkrnl.sys (DirectX Graphics Kernel/Microsoft Corporation) 91695000-9174C000 (749568 bytes) Module \SystemRoot\System32\drivers\dxgmms1.sys (DirectX Graphics MMS/Microsoft Corporation) 9174C000-91785000 (233472 bytes) Module \SystemRoot\system32\DRIVERS\usbuhci.sys (UHCI USB Miniport Driver/Microsoft Corporation) 91785000-91790000 (45056 bytes) Module \SystemRoot\system32\DRIVERS\USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) 91790000-917DB000 (307200 bytes) Module \SystemRoot\system32\DRIVERS\usbehci.sys (EHCI eUSB Miniport Driver/Microsoft Corporation) 917DB000-917EA000 (61440 bytes) Module \SystemRoot\system32\DRIVERS\HDAudBus.sys (High Definition Audio Bus Driver/Microsoft Corporation) 90C00000-90C1F000 (126976 bytes) Module \SystemRoot\system32\DRIVERS\netw5v32.sys (Intel® Wireless WiFi Link Driver/Intel Corporation) 91A00000-91E13000 (4272128 bytes) Module \SystemRoot\system32\DRIVERS\b57nd60x.sys (Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver./Broadcom Corporation) 91E13000-91E4F000 (245760 bytes) Module \SystemRoot\system32\DRIVERS\1394ohci.sys (1394 OpenHCI Driver/Microsoft Corporation) 91E4F000-91E7B000 (180224 bytes) Module \SystemRoot\system32\DRIVERS\i8042prt.sys (i8042 Port Driver/Microsoft Corporation) 91E7B000-91E93000 (98304 bytes) Module \SystemRoot\system32\DRIVERS\klmouflt.sys (KLMOUFLT Mouse Device Filter [fre_wlh_x86]/Kaspersky Lab) 91E93000-91E9C000 (36864 bytes) Module \SystemRoot\system32\DRIVERS\mouclass.sys (Mouse Class Driver/Microsoft Corporation) 91E9C000-91EA9000 (53248 bytes) Module \SystemRoot\system32\DRIVERS\kbdclass.sys (Keyboard Class Driver/Microsoft Corporation) 91EA9000-91EB6000 (53248 bytes) Module \SystemRoot\system32\DRIVERS\serenum.sys (Serial Port Enumerator/Microsoft Corporation) 91EB6000-91EC0000 (40960 bytes) Module \SystemRoot\system32\DRIVERS\CmBatt.sys (Control Method Battery Driver/Microsoft Corporation) 91EC0000-91EC4000 (16384 bytes) Module \SystemRoot\system32\DRIVERS\wmiacpi.sys (Windows Management Interface for ACPI/Microsoft Corporation) 91EC4000-91ECD000 (36864 bytes) Module \SystemRoot\system32\DRIVERS\CompositeBus.sys (Multi-Transport Composite Bus Enumerator/Microsoft Corporation) 91ECD000-91EDA000 (53248 bytes) Module \SystemRoot\system32\DRIVERS\AgileVpn.sys (RAS Agile Vpn Miniport Call Manager/Microsoft Corporation) 91EDA000-91EEC000 (73728 bytes) Module \SystemRoot\system32\DRIVERS\rasl2tp.sys (RAS L2TP mini-port/call-manager driver/Microsoft Corporation) 91EEC000-91F04000 (98304 bytes) Module \SystemRoot\system32\DRIVERS\ndistapi.sys (NDIS 3.0 connection wrapper driver/Microsoft Corporation) 91F04000-91F0F000 (45056 bytes) Module \SystemRoot\system32\DRIVERS\ndiswan.sys (MS PPP Framing Driver (Strong Encryption)/Microsoft Corporation) 91F0F000-91F31000 (139264 bytes) Module \SystemRoot\system32\DRIVERS\raspppoe.sys (RAS PPPoE mini-port/call-manager driver/Microsoft Corporation) 91F31000-91F49000 (98304 bytes) Module \SystemRoot\system32\DRIVERS\raspptp.sys (Peer-to-Peer Tunneling Protocol/Microsoft Corporation) 91F49000-91F60000 (94208 bytes) Module \SystemRoot\system32\DRIVERS\rassstp.sys (RAS SSTP Miniport Call Manager/Microsoft Corporation) 91F60000-91F77000 (94208 bytes) Module \SystemRoot\system32\DRIVERS\rdpbus.sys (Microsoft RDP Bus Device driver/Microsoft Corporation) 91F77000-91F81000 (40960 bytes) Module \SystemRoot\system32\DRIVERS\swenum.sys (Plug and Play Software Device Enumerator/Microsoft Corporation) 91F81000-91F83000 (8192 bytes) Module \SystemRoot\system32\DRIVERS\ks.sys (Kernel CSA Library/Microsoft Corporation) 91F83000-91FB7000 (212992 bytes) Module \SystemRoot\system32\DRIVERS\umbus.sys (User-Mode Bus Enumerator/Microsoft Corporation) 91FB7000-91FC5000 (57344 bytes) Module \SystemRoot\system32\DRIVERS\usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) 8ECBE000-8ED02000 (278528 bytes) Module \SystemRoot\System32\Drivers\NDProxy.SYS (NDIS Proxy/Microsoft Corporation) 91FC5000-91FD6000 (69632 bytes) Module \SystemRoot\system32\drivers\HdAudio.sys (High Definition Audio Function Driver/Microsoft Corporation) 8ED02000-8ED52000 (327680 bytes) Module \SystemRoot\system32\drivers\portcls.sys (Port Class (Class Driver for Port/Miniport Devices)/Microsoft Corporation) 8ED52000-8ED81000 (192512 bytes) Module \SystemRoot\system32\drivers\drmk.sys (Microsoft Trusted Audio Drivers/Microsoft Corporation) 91FD6000-91FEF000 (102400 bytes) Module \SystemRoot\system32\DRIVERS\VSTAZL3.SYS (HSF_HWAZL WDM driver/Conexant Systems, Inc.) 8ED81000-8EDBE000 (249856 bytes) Module \SystemRoot\system32\DRIVERS\VSTDPV3.SYS (HSF_DP driver/Conexant Systems, Inc.) 9202A000-9212C000 (1056768 bytes) Module \SystemRoot\system32\DRIVERS\VSTCNXT3.SYS (HSF_CNXT driver/Conexant Systems, Inc.) 9212C000-921E1000 (741376 bytes) Module \SystemRoot\system32\drivers\modem.sys (Modem Device Driver/Microsoft Corporation) 921E1000-921EE000 (53248 bytes) Module \SystemRoot\System32\Drivers\crashdmp.sys (Crash Dump Driver/Microsoft Corporation) 921EE000-921FB000 (53248 bytes) Module \SystemRoot\System32\Drivers\dump_dumpata.sys 92000000-9200B000 (45056 bytes) Module \SystemRoot\System32\Drivers\dump_atapi.sys 9200B000-92014000 (36864 bytes) Module \SystemRoot\System32\Drivers\dump_dumpfve.sys 92014000-92025000 (69632 bytes) Module \SystemRoot\System32\win32k.sys (Multi-User Win32 Driver/Microsoft Corporation) 95880000-95ACA000 (2400256 bytes) Module \SystemRoot\System32\drivers\Dxapi.sys (DirectX API Driver/Microsoft Corporation) 91FEF000-91FF9000 (40960 bytes) Module \SystemRoot\system32\DRIVERS\hidusb.sys (USB Miniport Driver for Input Devices/Microsoft Corporation) 90C1F000-90C2A000 (45056 bytes) Module \SystemRoot\system32\DRIVERS\HIDCLASS.SYS (Hid Class Library/Microsoft Corporation) 917EA000-917FD000 (77824 bytes) Module \SystemRoot\system32\DRIVERS\HIDPARSE.SYS (Hid Parsing Library/Microsoft Corporation) 91FF9000-92000000 (28672 bytes) Module \SystemRoot\system32\DRIVERS\USBD.SYS (Universal Serial Bus Driver/Microsoft Corporation) 92025000-92027000 (8192 bytes) Module \SystemRoot\system32\DRIVERS\mouhid.sys (HID Mouse Filter Driver/Microsoft Corporation) 8EDBE000-8EDC9000 (45056 bytes) Module \SystemRoot\system32\DRIVERS\USBSTOR.SYS (USB Mass Storage Class Driver/Microsoft Corporation) 8EDC9000-8EDE0000 (94208 bytes) Module \SystemRoot\system32\DRIVERS\monitor.sys (Monitor Driver/Microsoft Corporation) 8EDE0000-8EDEB000 (45056 bytes) Module \SystemRoot\System32\Drivers\fastfat.SYS (Fast FAT File System Driver/Microsoft Corporation) 8E79F000-8E7C9000 (172032 bytes) Module \SystemRoot\System32\TSDDD.dll (Framebuffer Display Driver/Microsoft Corporation) 95AE0000-95AE9000 (36864 bytes) Module \SystemRoot\System32\cdd.dll (Canonical Display Driver/Microsoft Corporation) 95B10000-95B2E000 (122880 bytes) Module \SystemRoot\system32\drivers\luafv.sys (LUA File Virtualization Filter Driver/Microsoft Corporation) 8E600000-8E61B000 (110592 bytes) Module \SystemRoot\system32\drivers\WudfPf.sys (Windows Driver Foundation - User-mode Driver Framework Platform Driver/Microsoft Corporation) 8E61B000-8E635000 (106496 bytes) Module \SystemRoot\system32\DRIVERS\lltdio.sys (Link-Layer Topology Mapper I/O Driver/Microsoft Corporation) 89200000-89210000 (65536 bytes) Module \SystemRoot\system32\DRIVERS\nwifi.sys (NativeWiFi Miniport Driver/Microsoft Corporation) 98C26000-98C6C000 (286720 bytes) Module \SystemRoot\system32\DRIVERS\ndisuio.sys (NDIS User mode I/O driver/Microsoft Corporation) 98C6C000-98C7C000 (65536 bytes) Module \SystemRoot\system32\DRIVERS\rspndr.sys (Link-Layer Topology Responder Driver for NDIS 6/Microsoft Corporation) 98C7C000-98C8F000 (77824 bytes) Module \SystemRoot\system32\drivers\HTTP.sys (HTTP Protocol Stack/Microsoft Corporation) 98C8F000-98D14000 (544768 bytes) Module \SystemRoot\system32\DRIVERS\bowser.sys (NT Lan Manager Datagram Receiver Driver/Microsoft Corporation) 98D14000-98D2D000 (102400 bytes) Module \SystemRoot\System32\drivers\mpsdrv.sys (Microsoft Protection Service Driver/Microsoft Corporation) 98D2D000-98D3F000 (73728 bytes) Module \SystemRoot\system32\DRIVERS\mrxsmb.sys (Windows NT SMB Minirdr/Microsoft Corporation) 98D3F000-98D62000 (143360 bytes) Module \SystemRoot\system32\DRIVERS\mrxsmb10.sys (Longhorn SMB Downlevel SubRdr/Microsoft Corporation) 98D62000-98D9D000 (241664 bytes) Module \SystemRoot\system32\DRIVERS\mrxsmb20.sys (Longhorn SMB 2.0 Redirector/Microsoft Corporation) 98D9D000-98DB8000 (110592 bytes) Module \SystemRoot\system32\drivers\peauth.sys (Protected Environment Authentication and Authorization Export Driver/Microsoft Corporation) 9A824000-9A8BB000 (618496 bytes) Module \SystemRoot\System32\Drivers\secdrv.SYS (Macrovision SECURITY Driver/Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) 9A8BB000-9A8C5000 (40960 bytes) Module \SystemRoot\System32\DRIVERS\srvnet.sys (Server Network driver/Microsoft Corporation) 9A8C5000-9A8E6000 (135168 bytes) Module \SystemRoot\System32\drivers\tcpipreg.sys (TCP/IP Registry Compatibility Driver/Microsoft Corporation) 9A8E6000-9A8F3000 (53248 bytes) Module \SystemRoot\System32\DRIVERS\srv2.sys (Smb 2.0 Server driver/Microsoft Corporation) 9A8F3000-9A942000 (323584 bytes) Module \SystemRoot\System32\DRIVERS\srv.sys (Server driver/Microsoft Corporation) 9A942000-9A993000 (331776 bytes) Module \??\C:\Users\Nick\AppData\Local\Temp\kxldqpoc.sys (GMER) 9A800000-9A817000 (94208 bytes) Module \Windows\System32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 77830000-7796C000 (1294336 bytes) Module \Windows\System32\smss.exe (Windows Session Manager/Microsoft Corporation) 47B60000-47B73000 (77824 bytes) Module \Windows\System32\apisetschema.dll (ApiSet Schema DLL/Microsoft Corporation) 77A70000-77AC0000 (327680 bytes) Module \Windows\System32\autochk.exe (Auto Check Utility/Microsoft Corporation) 002F0000-00396000 (679936 bytes) —- Processes - GMER 1.0.15 —- Process System Idle 0 Process System 4 Process C:\Windows\System32\smss.exe (Windows Session Manager/Microsoft Corporation) 284 Library C:\Windows\System32\smss.exe (Windows Session Manager/Microsoft Corporation) 0x47B60000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Process C:\Users\Nick\Desktop\gmer.exe 332 Library C:\Users\Nick\Desktop\gmer.exe 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7600.16385_none_ebf82fc36c758ad5\COMCTL32.DLL (Common Controls Library/Microsoft Corporation) 0x75BF0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74730000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74440000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.DLL (User Experience Controls Library/Microsoft Corporation) 0x74870000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\VERSION.DLL (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Process C:\Windows\system32\csrss.exe (Client Server Runtime Process/Microsoft Corporation) 364 Library C:\Windows\system32\csrss.exe (Client Server Runtime Process/Microsoft Corporation) 0x49A10000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\CSRSRV.dll (Client Server Runtime Process/Microsoft Corporation) 0x759E0000 Library C:\Windows\system32\basesrv.DLL (Windows NT BASE API Server DLL/Microsoft Corporation) 0x759D0000 Library C:\Windows\system32\winsrv.DLL (Multi-User Windows Server DLL/Microsoft Corporation) 0x759A0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\SYSTEM32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\system32\sxssrv.DLL (Windows SxS Server DLL/Microsoft Corporation) 0x75990000 Library C:\Windows\system32\sxs.dll (Fusion 2.5/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Process C:\Windows\system32\wininit.exe (Windows Start-Up Application/Microsoft Corporation) 416 Library C:\Windows\system32\wininit.exe (Windows Start-Up Application/Microsoft Corporation) 0x00520000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75890000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x753F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74F60000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x753E0000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Process C:\Windows\system32\csrss.exe (Client Server Runtime Process/Microsoft Corporation) 440 Library C:\Windows\system32\csrss.exe (Client Server Runtime Process/Microsoft Corporation) 0x49A10000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\CSRSRV.dll (Client Server Runtime Process/Microsoft Corporation) 0x759E0000 Library C:\Windows\system32\basesrv.DLL (Windows NT BASE API Server DLL/Microsoft Corporation) 0x759D0000 Library C:\Windows\system32\winsrv.DLL (Multi-User Windows Server DLL/Microsoft Corporation) 0x759A0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\SYSTEM32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\system32\sxssrv.DLL (Windows SxS Server DLL/Microsoft Corporation) 0x75990000 Library C:\Windows\system32\sxs.dll (Fusion 2.5/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Process C:\Windows\system32\services.exe (Services and Controller app/Microsoft Corporation) 488 Library C:\Windows\system32\services.exe (Services and Controller app/Microsoft Corporation) 0x008A0000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\scext.dll (Service Control Manager Extension DLL for non-minwin/Microsoft Corporation) 0x75880000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\system32\SCESRV.dll (Windows Security Configuration Editor Engine/Microsoft Corporation) 0x75810000 Library C:\Windows\system32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x756F0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x755A0000 Library C:\Windows\system32\UBPM.dll (Unified Background Process Manager DLL/Microsoft Corporation) 0x750A0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75890000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x74F80000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x753F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74F60000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x753E0000 Process C:\Windows\system32\lsass.exe (Local Security Authority Process/Microsoft Corporation) 508 Library C:\Windows\system32\lsass.exe (Local Security Authority Process/Microsoft Corporation) 0x000E0000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\SspiSrv.dll (LSA SSPI RPC interface DLL/Microsoft Corporation) 0x75860000 Library C:\Windows\system32\lsasrv.dll (LSA Server DLL/Microsoft Corporation) 0x75710000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\SAMSRV.dll (SAM Server DLL/Microsoft Corporation) 0x75650000 Library C:\Windows\system32\cryptdll.dll (Cryptography Manager/Microsoft Corporation) 0x75630000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\system32\wevtapi.dll (Eventing Consumption and Configuration API/Microsoft Corporation) 0x755D0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\cngaudit.dll (Windows Cryptographic Next Generation audit library/Microsoft Corporation) 0x755C0000 Library C:\Windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x755A0000 Library C:\Windows\system32\ncrypt.dll (Windows cryptographic library/Microsoft Corporation) 0x75560000 Library C:\Windows\system32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75540000 Library C:\Windows\system32\msprivs.DLL (Microsoft Privilege Translations/Microsoft Corporation) 0x75530000 Library C:\Windows\system32\netjoin.dll (Domain Join DLL/Microsoft Corporation) 0x75500000 Library C:\Windows\system32\negoexts.DLL (NegoExtender Security Package/Microsoft Corporation) 0x754E0000 Library C:\Windows\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\system32\cryptbase.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\kerberos.DLL (Kerberos Security Package/Microsoft Corporation) 0x75450000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x753F0000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x753E0000 Library C:\Windows\system32\msv1_0.DLL (Microsoft Authentication Package v1.0/Microsoft Corporation) 0x75390000 Library C:\Windows\system32\netlogon.DLL (Net Logon Services DLL/Microsoft Corporation) 0x75300000 Library C:\Windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x752B0000 Library C:\Windows\system32\logoncli.dll (Net Logon Client DLL/Microsoft Corporation) 0x75280000 Library C:\Windows\system32\schannel.DLL (TLS / SSL Security Provider/Microsoft Corporation) 0x75240000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\wdigest.DLL (Microsoft Digest Access/Microsoft Corporation) 0x75210000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\tspkg.DLL (Web Service Security Package/Microsoft Corporation) 0x75190000 Library C:\Windows\system32\pku2u.DLL (Pku2u Security Package/Microsoft Corporation) 0x75150000 Library C:\Windows\system32\bcryptprimitives.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75110000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\efslsaext.dll (LSA extension for EFS/Microsoft Corporation) 0x751C0000 Library C:\Windows\system32\scecli.DLL (Windows Security Configuration Editor Client Engine/Microsoft Corporation) 0x750E0000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library C:\Windows\system32\keyiso.dll (CNG Key Isolation Service/Microsoft Corporation) 0x72290000 Library C:\Windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x722D0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x722C0000 Library C:\Windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x74110000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74F60000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\samcli.dll (Security Accounts Manager Client DLL/Microsoft Corporation) 0x740F0000 Library C:\Windows\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x74EB0000 Library C:\Windows\system32\dssenh.dll (Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider/Microsoft Corporation) 0x74020000 Library C:\Windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74FC0000 Library C:\Windows\system32\cryptnet.dll (Crypto Network Related API/Microsoft Corporation) 0x72310000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x75DC0000 Library C:\Windows\system32\certpoleng.dll (Certificate Policy Engine/Microsoft Corporation) 0x6DE50000 Library C:\Windows\system32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x74100000 Process C:\Windows\system32\lsm.exe (Local Session Manager Service/Microsoft Corporation) 516 Library C:\Windows\system32\lsm.exe (Local Session Manager Service/Microsoft Corporation) 0x00CE0000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\SYSNTFY.dll (Windows Notifications Dynamic Link Library/Microsoft Corporation) 0x756E0000 Library C:\Windows\system32\WMsgAPI.dll (WinLogon IPC Client/Microsoft Corporation) 0x75620000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\pcwum.dll (Performance Counters for Windows Native DLL/Microsoft Corporation) 0x74F90000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 656 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00F60000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library c:\windows\system32\umpnpmgr.dll (User-mode Plug-and-Play Service/Microsoft Corporation) 0x75020000 Library c:\windows\system32\SPINF.dll (Windows SPINF/Microsoft Corporation) 0x75000000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library c:\windows\system32\DEVRTL.dll (Device Management Run Time Library/Microsoft Corporation) 0x751B0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74FC0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library c:\windows\system32\umpo.dll (User-mode Power Service/Microsoft Corporation) 0x74FA0000 Library c:\windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x766F0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x75AB0000 Library c:\windows\system32\pcwum.DLL (Performance Counters for Windows Native DLL/Microsoft Corporation) 0x74F90000 Library c:\windows\system32\rpcss.dll (Distributed COM Services/Microsoft Corporation) 0x74EF0000 Library c:\windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x73EC0000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x75DC0000 Library C:\Windows\system32\wbem\wmidcprv.dll (WMI/Microsoft Corporation) 0x70F30000 Library C:\Windows\system32\wbem\FastProx.dll (WMI Custom Marshaller/Microsoft Corporation) 0x70E90000 Library C:\Windows\system32\wbemcomn.dll (WMI/Microsoft Corporation) 0x70F60000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\NTDSAPI.dll (Active Directory Domain Services API/Microsoft Corporation) 0x70D00000 Library C:\Windows\system32\wbem\wbemprox.dll (WMI/Microsoft Corporation) 0x70CF0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\wbem\wbemsvc.dll (WMI/Microsoft Corporation) 0x707A0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75890000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x74F80000 Library C:\Windows\system32\wbem\wmiutils.dll (WMI/Microsoft Corporation) 0x70780000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x75A50000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Process C:\Windows\system32\nvvsvc.exe (NVIDIA Driver Helper Service, Version 257.21/NVIDIA Corporation) 732 Library C:\Windows\system32\nvvsvc.exe (NVIDIA Driver Helper Service, Version 257.21/NVIDIA Corporation) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x74F80000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x766F0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x75AB0000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75890000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x75A50000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Process C:\Windows\system32\winlogon.exe (Windows Logon Application/Microsoft Corporation) 768 Library C:\Windows\system32\winlogon.exe (Windows Logon Application/Microsoft Corporation) 0x00370000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75890000 Library C:\Windows\system32\UXINIT.dll (Windows User Experience Session Initialization Dll/Microsoft Corporation) 0x739C0000 Library C:\Windows\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74730000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\WindowsCodecs.dll (Microsoft Windows Codecs Library/Microsoft Corporation) 0x74310000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x74100000 Library C:\Windows\system32\netjoin.dll (Domain Join DLL/Microsoft Corporation) 0x75500000 Library C:\Windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x74110000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x73C10000 Library C:\Windows\system32\MPR.dll (Multiple Provider Router DLL/Microsoft Corporation) 0x70C50000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 820 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00F60000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library c:\windows\system32\rpcepmap.dll (RPC Endpoint Mapper/Microsoft Corporation) 0x74F70000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library c:\windows\system32\rpcss.dll (Distributed COM Services/Microsoft Corporation) 0x74EF0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x753F0000 Library C:\Windows\system32\user32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74F60000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x753E0000 Library C:\Windows\system32\FirewallAPI.dll (Windows Firewall API/Microsoft Corporation) 0x74E10000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x72180000 Process C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 896 Library C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00F60000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\System32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library c:\windows\system32\wevtsvc.dll (Event Logging Service/Microsoft Corporation) 0x74D00000 Library C:\Windows\System32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\System32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\System32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\System32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x753F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74F60000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x753E0000 Library C:\Windows\System32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74FC0000 Library c:\windows\system32\audiosrv.dll (Windows Audio Service/Microsoft Corporation) 0x74290000 Library c:\windows\system32\POWRPROF.dll (Power Profile Helper DLL/Microsoft Corporation) 0x74260000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x766F0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x75AB0000 Library c:\windows\system32\MMDevAPI.DLL (MMDevice API/Microsoft Corporation) 0x74460000 Library c:\windows\system32\PROPSYS.dll (Microsoft Property System/Microsoft Corporation) 0x74770000 Library c:\windows\system32\AVRT.dll (Multimedia Realtime Runtime/Microsoft Corporation) 0x74E90000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\System32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\System32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\System32\audioses.dll (Audio Session/Microsoft Corporation) 0x73C40000 Library C:\Windows\System32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x73EC0000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x75DC0000 Library c:\windows\system32\lmhsvc.dll (TCPIP NetBios Transport Services DLL/Microsoft Corporation) 0x722F0000 Library c:\windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x722D0000 Library c:\windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x722C0000 Library c:\windows\system32\nrpsrv.DLL (Name Resolution Proxy (NRP) RPC interface/Microsoft Corporation) 0x722B0000 Library c:\windows\system32\dhcpcore.dll (DHCP Client Service/Microsoft Corporation) 0x72250000 Library c:\windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x752B0000 Library C:\Windows\System32\firewallapi.dll (Windows Firewall API/Microsoft Corporation) 0x74E10000 Library C:\Windows\System32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Library C:\Windows\System32\dhcpcore6.dll (DHCPv6 Client/Microsoft Corporation) 0x72210000 Library C:\Windows\System32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x71FC0000 Library C:\Windows\System32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x71F40000 Library c:\windows\system32\provsvc.dll (Windows HomeGroup/Microsoft Corporation) 0x6CA40000 Library C:\Windows\system32\actxprxy.dll (ActiveX Interface Marshaling Library/Microsoft Corporation) 0x717A0000 Library C:\Windows\System32\npmproxy.dll (Network List Manager Proxy/Microsoft Corporation) 0x727F0000 Library C:\Windows\system32\FunDisc.dll (Function Discovery Dll/Microsoft Corporation) 0x71280000 Library C:\Windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73C80000 Library C:\Windows\System32\msxml6.dll (MSXML 6.0 SP3/Microsoft Corporation) 0x71B90000 Library C:\Windows\system32\fdproxy.dll (Function Discovery Proxy Dll/Microsoft Corporation) 0x6CA00000 Library C:\Windows\System32\P2P.dll (Peer-to-Peer Grouping/Microsoft Corporation) 0x6A4A0000 Library C:\Windows\System32\P2PCOLLAB.dll (Peer-to-Peer Collaboration/Microsoft Corporation) 0x6A430000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library C:\Program Files\Internet Explorer\ieproxy.dll (IE ActiveX Interface Marshaling Library/Microsoft Corporation) 0x6A3D0000 Library C:\Windows\system32\pnrpnsp.dll (PNRP Name Space Provider/Microsoft Corporation) 0x73560000 Library C:\Windows\System32\XmlLite.dll (Microsoft XmlLite Library/Microsoft Corporation) 0x74410000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\System32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\System32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library c:\windows\system32\wscsvc.dll (Windows Security Center Service/Microsoft Corporation) 0x72940000 Library c:\windows\system32\dbghelp.dll (Windows Image Helper/Microsoft Corporation) 0x67750000 Library C:\Windows\system32\wbem\wbemprox.dll (WMI/Microsoft Corporation) 0x70CF0000 Library C:\Windows\system32\wbemcomn.dll (WMI/Microsoft Corporation) 0x70F60000 Library C:\Windows\system32\wbem\wbemsvc.dll (WMI/Microsoft Corporation) 0x707A0000 Library C:\Windows\system32\wbem\fastprox.dll (WMI Custom Marshaller/Microsoft Corporation) 0x70E90000 Library C:\Windows\system32\NTDSAPI.dll (Active Directory Domain Services API/Microsoft Corporation) 0x70D00000 Library C:\Windows\system32\WINTRUST.DLL (Microsoft Trust Verification APIs/Microsoft Corporation) 0x75A50000 Library C:\Windows\system32\imagehlp.dll (Windows NT Image Helper/Microsoft Corporation) 0x766C0000 Library C:\Windows\System32\ncrypt.dll (Windows cryptographic library/Microsoft Corporation) 0x75560000 Library C:\Windows\System32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75540000 Library C:\Windows\system32\bcryptprimitives.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75110000 Library C:\Windows\system32\wuapi.dll (Windows Update Client API/Microsoft Corporation) 0x67460000 Library C:\Windows\system32\Cabinet.dll (Microsoft® Cabinet File API/Microsoft Corporation) 0x71780000 Library C:\Windows\System32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x74100000 Library C:\Windows\System32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x74110000 Library C:\Windows\system32\NLAapi.dll (Network Location Awareness 2/Microsoft Corporation) 0x73D00000 Library C:\Windows\System32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x70770000 Library C:\Windows\System32\fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x72180000 Library C:\Windows\System32\winrnr.dll (LDAP RnR Provider DLL/Microsoft Corporation) 0x73590000 Library C:\Windows\system32\napinsp.dll (E-mail Naming Shim Provider/Microsoft Corporation) 0x73580000 Process C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 1012 Library C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00F60000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x75F00000 Library C:\Windows\System32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library c:\windows\system32\audiosrv.dll (Windows Audio Service/Microsoft Corporation) 0x74290000 Library c:\windows\system32\POWRPROF.dll (Power Profile Helper DLL/Microsoft Corporation) 0x74260000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x766F0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x75AB0000 Library c:\windows\system32\MMDevAPI.DLL (MMDevice API/Microsoft Corporation) 0x74460000 Library c:\windows\system32\PROPSYS.dll (Microsoft Property System/Microsoft Corporation) 0x74770000 Library c:\windows\system32\AVRT.dll (Multimedia Realtime Runtime/Microsoft Corporation) 0x74E90000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library c:\windows\system32\cscsvc.dll (CSC Service DLL/Microsoft Corporation) 0x73DF0000 Library c:\windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library c:\windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\System32\pcwum.dll (Performance Counters for Windows Native DLL/Microsoft Corporation) 0x74F90000 Library C:\Windows\System32\PeerDist.dll (BranchCache Client Library/Microsoft Corporation) 0x73CD0000 Library C:\Windows\System32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x755A0000 Library C:\Windows\system32\taskschd.dll (Task Scheduler COM API/Microsoft Corporation) 0x73B90000 Library C:\Windows\System32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\System32\mstask.dll (Task Scheduler interface DLL/Microsoft Corporation) 0x73B10000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\COMCTL32.dll (User Experience Controls Library/Microsoft Corporation) 0x74870000 Library C:\Windows\System32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\System32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\System32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x74F80000 Library C:\Windows\System32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74FC0000 Library C:\Windows\System32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library c:\windows\system32\uxsms.dll (Microsoft User Experience Session Management Service/Microsoft Corporation) 0x737B0000 Library c:\windows\system32\wudfsvc.dll (Windows Driver Foundation - User-mode Driver Framework Service/Microsoft Corporation) 0x737D0000 Library c:\windows\system32\WUDFPlatform.dll (Windows Driver Foundation - User-mode Platform Library/Microsoft Corporation) 0x73770000 Library c:\windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Library c:\windows\system32\wevtapi.dll (Eventing Consumption and Configuration API/Microsoft Corporation) 0x755D0000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x75A50000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75890000 Library c:\windows\system32\wlansvc.dll (Windows WLAN AutoConfig Service DLL/Microsoft Corporation) 0x72050000 Library c:\windows\system32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75540000 Library c:\windows\system32\dsrole.dll (DS Role Client DLL/Microsoft Corporation) 0x73C30000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library c:\windows\system32\WLANMSM.DLL (Windows Wireless LAN 802.11 MSM DLL/Microsoft Corporation) 0x71FE0000 Library c:\windows\system32\WLANSEC.dll (Windows Wireless LAN 802.11 MSM Security Module DLL/Microsoft Corporation) 0x71F50000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library c:\windows\system32\OneX.DLL (IEEE 802.1X supplicant library/Microsoft Corporation) 0x71F00000 Library c:\windows\system32\eappprxy.dll (Microsoft EAPHost Peer Client DLL/Microsoft Corporation) 0x71EE0000 Library c:\windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x71FC0000 Library c:\windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x722D0000 Library c:\windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x722C0000 Library c:\windows\system32\eappcfg.dll (Eap Peer Config/Microsoft Corporation) 0x71EB0000 Library c:\windows\system32\wlgpclnt.dll (802.11 Group Policy Client/Microsoft Corporation) 0x71E90000 Library c:\windows\system32\l2gpstore.dll (Policy Storage dll/Microsoft Corporation) 0x71E70000 Library c:\windows\system32\wlanutil.dll (Windows Wireless LAN 802.11 Utility DLL/Microsoft Corporation) 0x71E60000 Library c:\windows\system32\SYSNTFY.dll (Windows Notifications Dynamic Link Library/Microsoft Corporation) 0x756E0000 Library c:\windows\system32\WinSCard.dll (Microsoft Smart Card API/Microsoft Corporation) 0x71CF0000 Library C:\Windows\System32\msxml6.dll (MSXML 6.0 SP3/Microsoft Corporation) 0x71B90000 Library C:\Windows\System32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\System32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\system32\kerberos.DLL (Kerberos Security Package/Microsoft Corporation) 0x75450000 Library C:\Windows\System32\cryptdll.dll (Cryptography Manager/Microsoft Corporation) 0x75630000 Library C:\Windows\system32\netcfgx.dll (Network Configuration Objects/Microsoft Corporation) 0x71D90000 Library C:\Windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x73C10000 Library C:\Windows\System32\devrtl.DLL (Device Management Run Time Library/Microsoft Corporation) 0x751B0000 Library c:\windows\system32\sysmain.dll (Superfetch Service Host/Microsoft Corporation) 0x70FF0000 Library c:\windows\system32\trkwks.dll (Distributed Link Tracking Client/Microsoft Corporation) 0x70D20000 Library C:\Windows\System32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x73EC0000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x75DC0000 Library c:\windows\system32\wdi.dll (Windows Diagnostic Infrastructure/Microsoft Corporation) 0x729F0000 Library C:\Windows\system32\PortableDeviceApi.dll (Windows Portable Device API Components/Microsoft Corporation) 0x72F50000 Library C:\Windows\System32\portabledeviceconnectapi.dll (Portable Device Connection API Components/Microsoft Corporation) 0x72820000 Library C:\Windows\SYSTEM32\APPHLPDM.DLL (Application Compatibility Help Module/Microsoft Corporation) 0x727E0000 Library C:\Windows\System32\wer.dll (Windows Error Reporting DLL/Microsoft Corporation) 0x6F6D0000 Library C:\Windows\system32\cscobj.dll (In-proc COM object used by clients of CSC API/Microsoft Corporation) 0x72480000 Library c:\windows\system32\netman.dll (Network Connections Manager/Microsoft Corporation) 0x6CFF0000 Library C:\Windows\System32\netshell.dll (Network Connections Shell/Microsoft Corporation) 0x730E0000 Library C:\Windows\System32\nlaapi.dll (Network Location Awareness 2/Microsoft Corporation) 0x73D00000 Library C:\Windows\System32\RASDLG.dll (Remote Access Common Dialog API/Microsoft Corporation) 0x736A0000 Library C:\Windows\System32\MPRAPI.dll (Windows NT MP Router Administration DLL/Microsoft Corporation) 0x6DE20000 Library C:\Windows\System32\RASAPI32.dll (Remote Access API/Microsoft Corporation) 0x73080000 Library C:\Windows\System32\rasman.dll (Remote Access Connection Manager/Microsoft Corporation) 0x741A0000 Library C:\Windows\System32\rtutils.dll (Routing Utilities/Microsoft Corporation) 0x73FC0000 Library C:\Windows\system32\hnetcfg.dll (Home Networking Configuration Manager/Microsoft Corporation) 0x708F0000 Library C:\Windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73C80000 Library C:\Windows\system32\wbem\wbemprox.dll (WMI/Microsoft Corporation) 0x70CF0000 Library C:\Windows\system32\wbemcomn.dll (WMI/Microsoft Corporation) 0x70F60000 Library C:\Windows\system32\wbem\wbemsvc.dll (WMI/Microsoft Corporation) 0x707A0000 Library C:\Windows\system32\wbem\fastprox.dll (WMI Custom Marshaller/Microsoft Corporation) 0x70E90000 Library C:\Windows\system32\NTDSAPI.dll (Active Directory Domain Services API/Microsoft Corporation) 0x70D00000 Library c:\windows\system32\listsvc.dll (Windows HomeGroup/Microsoft Corporation) 0x6A4E0000 Library C:\Windows\system32\FirewallAPI.dll (Windows Firewall API/Microsoft Corporation) 0x74E10000 Library C:\Windows\system32\actxprxy.dll (ActiveX Interface Marshaling Library/Microsoft Corporation) 0x717A0000 Library C:\Windows\System32\IdListen.dll (Identity Listener/Microsoft Corporation) 0x6C9D0000 Library C:\Windows\System32\XmlLite.dll (Microsoft XmlLite Library/Microsoft Corporation) 0x74410000 Library C:\Windows\System32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x74120000 Library C:\Windows\System32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x74110000 Library C:\Windows\System32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x756F0000 Library C:\Windows\System32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x74100000 Library C:\Windows\System32\SAMCLI.DLL (Security Accounts Manager Client DLL/Microsoft Corporation) 0x740F0000 Library C:\Windows\System32\ncrypt.dll (Windows cryptographic library/Microsoft Corporation) 0x75560000 Library C:\Windows\system32\hgprint.dll (HomeGroup Printing Support/Microsoft Corporation) 0x6A400000 Library C:\Windows\system32\WINSPOOL.DRV (Windows Spooler Driver/Microsoft Corporation) 0x70590000 Library c:\windows\system32\pcasvc.dll (Program Compatibility Assistant Service/Microsoft Corporation) 0x69F10000 Library c:\windows\system32\AEPIC.dll (Application Experience Program Cache/Microsoft Corporation) 0x72A40000 Library c:\windows\system32\sfc.dll (Windows File Protection/Microsoft Corporation) 0x72A30000 Library c:\windows\system32\sfc_os.DLL (Windows File Protection/Microsoft Corporation) 0x72A20000 Library C:\Windows\System32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x74EB0000 Library C:\Windows\System32\shacct.dll (Shell Accounts Classes/Microsoft Corporation) 0x74ED0000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7600.16385_none_ebf82fc36c758ad5\COMCTL32.dll (Common Controls Library/Microsoft Corporation) 0x75BF0000 Library C:\Program Files\Windows Media Player\WMPMediaSharing.dll (Windows Media Player Media Sharing Interface DLL/Microsoft Corporation) 0x68050000 Library C:\Windows\System32\cscapi.dll (Offline Files Win32 API/Microsoft Corporation) 0x6F8B0000 Process C:\Windows\Explorer.EXE (Windows Explorer/Microsoft Corporation) 1024 Library C:\Windows\Explorer.EXE (Windows Explorer/Microsoft Corporation) 0x00DE0000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\EXPLORERFRAME.dll (ExplorerFrame/Microsoft Corporation) 0x6FC10000 Library C:\Windows\system32\DUser.dll (Windows DirectUser Engine/Microsoft Corporation) 0x74CD0000 Library C:\Windows\system32\DUI70.dll (Windows DirectUI Engine/Microsoft Corporation) 0x744E0000 Library C:\Windows\system32\IMM32.dll (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74730000 Library C:\Windows\system32\POWRPROF.dll (Power Profile Helper DLL/Microsoft Corporation) 0x74260000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x766F0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x75AB0000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74440000 Library C:\Windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x73C10000 Library C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf 861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) 0x745A0000 Library C:\Windows\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\PROPSYS.dll (Microsoft Property System/Microsoft Corporation) 0x74770000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x75F00000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x74870000 Library C:\Windows\system32\WindowsCodecs.dll (Microsoft Windows Codecs Library/Microsoft Corporation) 0x74310000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75890000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\EhStorShell.dll (Windows Enhanced Storage Shell Extension DLL/Microsoft Corporation) 0x6FAE0000 Library C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft SharePoint Workspace Extensions/Microsoft Corporation) 0x6F290000 Library C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4926_none_508ed732bcbc0e5 a\MSVCR90.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x6FA00000 Library C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4926_none_508ed732bcbc0e5 a\MSVCP90.dll (Microsoft® C++ Runtime Library/Microsoft Corporation) 0x6F970000 Library C:\Windows\WinSxS\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_51ca66a2bbe7680 6\ATL90.DLL (ATL Module for Windows (Unicode)/Microsoft Corporation) 0x6F940000 Library C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf 0x6EE80000 Library C:\PROGRA~1\MICROS~2\Office14\1033\GrooveIntlResource.dll 0x6E610000 Library C:\Windows\System32\cscui.dll (Client Side Caching UI/Microsoft Corporation) 0x6F8D0000 Library C:\Windows\System32\CSCDLL.dll (Offline Files Temporary Shim/Microsoft Corporation) 0x6F8C0000 Library C:\Windows\system32\CSCAPI.dll (Offline Files Win32 API/Microsoft Corporation) 0x6F8B0000 Library C:\Windows\system32\ntshrui.dll (Shell extensions for sharing/Microsoft Corporation) 0x6F840000 Library C:\Windows\system32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x756F0000 Library C:\Windows\system32\IconCodecService.dll (Converts a PNG part of the icon to a legacy bmp icon/Microsoft Corporation) 0x6F830000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\SndVolSSO.DLL (SCA Volume/Microsoft Corporation) 0x744A0000 Library C:\Windows\system32\HID.DLL (Hid User Library/Microsoft Corporation) 0x74EA0000 Library C:\Windows\System32\MMDevApi.dll (MMDevice API/Microsoft Corporation) 0x74460000 Library C:\Windows\system32\timedate.cpl (Time Date Control Panel Applet/Microsoft Corporation) 0x70B00000 Library C:\Windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73C80000 Library C:\Windows\system32\actxprxy.dll (ActiveX Interface Marshaling Library/Microsoft Corporation) 0x717A0000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x73EC0000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x75DC0000 Library C:\Windows\System32\shdocvw.dll (Shell Doc Object and Control Library/Microsoft Corporation) 0x70AD0000 Library C:\Windows\system32\LINKINFO.dll (Windows Volume Tracking/Microsoft Corporation) 0x70AC0000 Library C:\Windows\system32\msiltcfg.dll (Windows Installer Configuration API Stub/Microsoft Corporation) 0x70AB0000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Library C:\Windows\system32\msi.dll (Windows Installer/Microsoft Corporation) 0x6E3D0000 Library C:\PROGRA~1\Zune\ZUNETA~1.DLL (Zune Taskbar DLL/Microsoft Corporation) 0x70A90000 Library C:\Windows\system32\MSIMG32.dll (GDIEXT Client DLL/Microsoft Corporation) 0x737A0000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\System32\shacct.dll (Shell Accounts Classes/Microsoft Corporation) 0x74ED0000 Library C:\Windows\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x74EB0000 Library C:\Windows\system32\samcli.dll (Security Accounts Manager Client DLL/Microsoft Corporation) 0x740F0000 Library C:\Windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x74110000 Library C:\Windows\System32\gameux.dll (Games Explorer/Microsoft Corporation) 0x6E150000 Library C:\Windows\System32\XmlLite.dll (Microsoft XmlLite Library/Microsoft Corporation) 0x74410000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\System32\wer.dll (Windows Error Reporting DLL/Microsoft Corporation) 0x6F6D0000 Library C:\Windows\system32\MsftEdit.dll (Rich Text Edit Control, v4.1/Microsoft Corporation) 0x6E0B0000 Library C:\Windows\system32\msls31.dll (Microsoft Line Services library file/Microsoft Corporation) 0x6F6A0000 Library C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll (Tablet PC Input Panel Text Services Framework/Microsoft Corporation) 0x6E050000 Library C:\Windows\system32\authui.dll (Windows Authentication UI/Microsoft Corporation) 0x74B10000 Library C:\Windows\system32\CRYPTUI.dll (Microsoft Trust UI Provider/Microsoft Corporation) 0x74A10000 Library C:\Windows\system32\NetworkExplorer.dll (Network Explorer/Microsoft Corporation) 0x6DE70000 Library C:\Windows\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x76890000 Library C:\Windows\system32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 0x75FB0000 Library C:\Windows\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x73E80000 Library C:\Windows\system32\wdmaud.drv (Winmm audio system driver/Microsoft Corporation) 0x73DC0000 Library C:\Windows\system32\ksuser.dll (User CSA Library/Microsoft Corporation) 0x73D10000 Library C:\Windows\system32\AVRT.dll (Multimedia Realtime Runtime/Microsoft Corporation) 0x74E90000 Library C:\Windows\system32\AUDIOSES.DLL (Audio Session/Microsoft Corporation) 0x73C40000 Library C:\Windows\system32\msacm32.drv (Microsoft Sound Mapper/Microsoft Corporation) 0x73B80000 Library C:\Windows\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x73B60000 Library C:\Windows\system32\midimap.dll (Microsoft MIDI Mapper/Microsoft Corporation) 0x73B50000 Library C:\Windows\system32\msutb.dll (MSUTB Server DLL/Microsoft Corporation) 0x6FAB0000 Library C:\Windows\system32\stobject.dll (Systray shell service object/Microsoft Corporation) 0x73FE0000 Library C:\Windows\system32\BatMeter.dll (Battery Meter Helper DLL/Microsoft Corporation) 0x73F00000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x74F80000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x75A50000 Library C:\Windows\system32\es.dll (COM+/Microsoft Corporation) 0x73AC0000 Library C:\Windows\system32\prnfldr.dll (prnfldr dll/Microsoft Corporation) 0x73480000 Library C:\Windows\system32\WINSPOOL.DRV (Windows Spooler Driver/Microsoft Corporation) 0x70590000 Library C:\Windows\system32\dxp.dll (Device Stage Shell Extension/Microsoft Corporation) 0x734F0000 Library C:\Windows\system32\Syncreg.dll (Microsoft Synchronization Framework Registration/Microsoft Corporation) 0x74200000 Library C:\Windows\ehome\ehSSO.dll (Windows Media Center Shell Service Object/Microsoft Corporation) 0x741F0000 Library C:\Windows\System32\netshell.dll (Network Connections Shell/Microsoft Corporation) 0x730E0000 Library C:\Windows\System32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x722D0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\System32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x722C0000 Library C:\Windows\System32\nlaapi.dll (Network Location Awareness 2/Microsoft Corporation) 0x73D00000 Library C:\Windows\System32\AltTab.dll (Windows Shell Alt Tab/Microsoft Corporation) 0x741C0000 Library C:\Windows\system32\wpdshserviceobj.dll (Windows Portable Device Shell Service Object/Microsoft Corporation) 0x73010000 Library C:\Windows\system32\PortableDeviceTypes.dll (Windows Portable Device (Parameter) Types Component/Microsoft Corporation) 0x72FE0000 Library C:\Windows\system32\PortableDeviceApi.dll (Windows Portable Device API Components/Microsoft Corporation) 0x72F50000 Library C:\Windows\System32\pnidui.dll (Network System Icon/Microsoft Corporation) 0x72580000 Library C:\Windows\System32\QUtil.dll (Quarantine Utilities/Microsoft Corporation) 0x724B0000 Library C:\Windows\System32\wevtapi.dll (Eventing Consumption and Configuration API/Microsoft Corporation) 0x755D0000 Library C:\Windows\System32\cscobj.dll (In-proc COM object used by clients of CSC API/Microsoft Corporation) 0x72480000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x71FC0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x71F40000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\System32\srchadmin.dll (Indexing Options/Microsoft Corporation) 0x6DAB0000 Library C:\Windows\System32\Actioncenter.dll (Action Center/Microsoft Corporation) 0x6D950000 Library C:\Windows\system32\fxsst.dll (Fax Service/Microsoft Corporation) 0x6D850000 Library C:\Windows\system32\FXSAPI.dll (Microsoft Fax API Support DLL/Microsoft Corporation) 0x6D810000 Library C:\Windows\system32\FXSRESM.DLL (Microsoft Fax Resource DLL/Microsoft Corporation) 0x6D720000 Library C:\Program Files\Google\Google Desktop Search\GoogleDesktopDeskbar2.dll (Google Desktop/Google) 0x6D040000 Library C:\Program Files\Google\Google Desktop Search\GoogleDesktopResources_en.dll (Google Desktop/Google) 0x74050000 Library C:\Program Files\Google\Google Desktop Search\GoogleDesktopCommon.dll (Google Desktop/Google) 0x74140000 Library C:\Windows\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\Normaliz.dll (Unicode Normalization DLL/Microsoft Corporation) 0x77970000 Library C:\Windows\system32\asycfilt.dll (Microsoft Corporation) 0x72800000 Library C:\Program Files\Google\Google Desktop Search\GoogleDesktopHyper.dll (Google Desktop/Google) 0x6D070000 Library C:\Windows\system32\mssprxy.dll (Microsoft Search Proxy/Microsoft Corporation) 0x6D0B0000 Library C:\Windows\System32\npmproxy.dll (Network List Manager Proxy/Microsoft Corporation) 0x727F0000 Library C:\Windows\system32\Wlanapi.dll (Windows WLAN AutoConfig Client Side API DLL/Microsoft Corporation) 0x73060000 Library C:\Windows\system32\wlanutil.dll (Windows Wireless LAN 802.11 Utility DLL/Microsoft Corporation) 0x71E60000 Library C:\Windows\system32\wwanapi.dll (Mbnapi/Microsoft Corporation) 0x6CF00000 Library C:\Windows\system32\wwapi.dll (WWAN API/Microsoft Corporation) 0x73690000 Library C:\Windows\System32\QAgent.dll (Quarantine Agent Proxy/Microsoft Corporation) 0x6C900000 Library C:\Windows\System32\bthprops.cpl (Bluetooth Control Panel Applet/Microsoft Corporation) 0x6CCB0000 Library C:\Windows\System32\ieframe.dll (Internet Browser/Microsoft Corporation) 0x6BE40000 Library C:\Windows\System32\OLEACC.dll (Active Accessibility Core Component/Microsoft Corporation) 0x72CF0000 Library C:\Windows\System32\UIAnimation.dll (Windows Animation Manager/Microsoft Corporation) 0x6D590000 Library C:\Windows\System32\SyncCenter.dll (Microsoft Sync Center/Microsoft Corporation) 0x6A520000 Library C:\Windows\system32\imapi2.dll (Image Mastering API v2/Microsoft Corporation) 0x6CAC0000 Library C:\Windows\System32\hgcpl.dll (HomeGroup Control Panel/Microsoft Corporation) 0x6CA70000 Library C:\Windows\System32\provsvc.dll (Windows HomeGroup/Microsoft Corporation) 0x6CA40000 Library C:\Windows\system32\SXS.DLL (Fusion 2.5/Microsoft Corporation) 0x758F0000 Library C:\Windows\System32\netprofm.dll (Network List Manager/Microsoft Corporation) 0x70940000 Library C:\Windows\system32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x74100000 Library C:\Windows\system32\DEVRTL.dll (Device Management Run Time Library/Microsoft Corporation) 0x751B0000 Library C:\Windows\system32\MPR.dll (Multiple Provider Router DLL/Microsoft Corporation) 0x70C50000 Library C:\Program Files\Internet Explorer\ieproxy.dll (IE ActiveX Interface Marshaling Library/Microsoft Corporation) 0x6A3D0000 Library C:\Windows\system32\MLANG.dll (Multi Language Support DLL/Microsoft Corporation) 0x6CA10000 Library C:\Windows\System32\wscinterop.dll (Windows Health Center WSC Interop/Microsoft Corporation) 0x67A80000 Library C:\Windows\System32\WSCAPI.dll (Windows Security Center API/Microsoft Corporation) 0x67A70000 Library C:\Windows\System32\wscui.cpl (Action Center/Microsoft Corporation) 0x67950000 Library C:\Windows\System32\werconcpl.dll (PRS CPL/Microsoft Corporation) 0x67840000 Library C:\Windows\System32\framedynos.dll (WMI SDK Provider Framework/Microsoft Corporation) 0x67710000 Library C:\Windows\System32\wercplsupport.dll (Problem Reports and Solutions/Microsoft Corporation) 0x676F0000 Library C:\Windows\System32\msxml6.dll (MSXML 6.0 SP3/Microsoft Corporation) 0x71B90000 Library C:\Windows\system32\dnsapi.DLL (DNS Client API DLL/Microsoft Corporation) 0x752B0000 Library C:\Windows\System32\hcproviders.dll (Action Center Providers/Microsoft Corporation) 0x676E0000 Library C:\Windows\System32\drprov.dll (Microsoft Remote Desktop Session Host Server Network Provider/Microsoft Corporation) 0x69FE0000 Library C:\Windows\System32\ntlanman.dll (Microsoft® Lan Manager/Microsoft Corporation) 0x69FC0000 Library C:\Windows\System32\davclnt.dll (Web DAV Client DLL/Microsoft Corporation) 0x69FA0000 Library C:\Windows\System32\DAVHLPR.dll (DAV Helper DLL/Microsoft Corporation) 0x69F90000 Library C:\Windows\system32\twext.dll (Previous Versions property page/Microsoft Corporation) 0x739F0000 Library C:\Program Files\WinRAR\rarext.dll 0x73910000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\shellex.dll (Windows Shell Extension/Kaspersky Lab ZAO) 0x03330000 Library C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b 5\MSVCR80.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x71880000 Library C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b 5\MSVCP80.dll (Microsoft® C++ Runtime Library/Microsoft Corporation) 0x717F0000 Library C:\Windows\system32\mssvp.dll (MSSearch Vista Platform/Microsoft Corporation) 0x73860000 Library C:\Windows\system32\MAPI32.dll (Extended MAPI 1.0 for Windows NT/Microsoft Corporation) 0x6C8C0000 Library C:\Windows\System32\appwiz.cpl (Shell Application Manager/Microsoft Corporation) 0x6F780000 Library C:\Windows\System32\osbaseln.dll (Service Reporting API/Microsoft Corporation) 0x74250000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\prremote.dll (PR_REMOTE/Kaspersky Lab ZAO) 0x71580000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\prloader.dll (Prague Loader/Kaspersky Lab ZAO) 0x039C0000 Library C:\Windows\system32\syncui.dll (Windows Briefcase/Microsoft Corporation) 0x6F750000 Library C:\Windows\system32\SYNCENG.dll (Windows Briefcase Engine/Microsoft Corporation) 0x739D0000 Library C:\Windows\system32\thumbcache.dll (Microsoft Thumbnail Cache/Microsoft Corporation) 0x72420000 Library C:\Windows\system32\EhStorAPI.dll (Windows Enhanced Storage API/Microsoft Corporation) 0x69FF0000 Library C:\Windows\system32\dsrole.dll (DS Role Client DLL/Microsoft Corporation) 0x73C30000 Library C:\Windows\system32\ACLUI.dll (Security Descriptor Editor/Microsoft Corporation) 0x6DDF0000 Library C:\Windows\system32\NTDSAPI.dll (Active Directory Domain Services API/Microsoft Corporation) 0x70D00000 Library C:\Windows\system32\UIAutomationCore.dll (Microsoft UI Automation Core/Microsoft Corporation) 0x60560000 Library C:\Windows\system32\SPP.dll (Microsoft® Windows Shared Protection Point Library/Microsoft Corporation) 0x670E0000 Library C:\Windows\system32\VSSAPI.DLL (Microsoft® Volume Shadow Copy Requestor/Writer Services API DLL/Microsoft Corporation) 0x715C0000 Library C:\Windows\system32\VssTrace.DLL (Microsoft® Volume Shadow Copy Service Tracing Library/Microsoft Corporation) 0x715B0000 Library C:\Windows\System32\sdengin2.dll (Microsoft® Windows Backup Engine/Microsoft Corporation) 0x60470000 Library C:\Windows\System32\credui.dll (Credential Manager User Interface/Microsoft Corporation) 0x66E10000 Library C:\Windows\system32\sxproxy.dll (Microsoft® Windows System Protection Proxy Library/Microsoft Corporation) 0x70BC0000 Library C:\Windows\system32\nv3dappshext.dll (NVIDIA Shell Extensions/NVIDIA Corporation) 0x10000000 Library C:\Windows\system32\nvapi.dll (NVIDIA NVAPI Library, Version 257.21 /NVIDIA Corporation) 0x050C0000 Library C:\Windows\system32\acppage.dll (Compatibility Tab Shell Extension Library/Microsoft Corporation) 0x73850000 Library C:\Windows\system32\sfc.dll (Windows File Protection/Microsoft Corporation) 0x72A30000 Library C:\Windows\system32\sfc_os.DLL (Windows File Protection/Microsoft Corporation) 0x72A20000 Library C:\Windows\system32\CmdLineExt03.dll

Breaker934

Post #10September 2, 2010, 2:24 PM UTC

Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 1052 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00F60000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library c:\windows\system32\gpsvc.dll (Group Policy Client/Microsoft Corporation) 0x73D20000 Library c:\windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74FC0000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x75DC0000 Library c:\windows\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library c:\windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library c:\windows\system32\SYSNTFY.dll (Windows Notifications Dynamic Link Library/Microsoft Corporation) 0x756E0000 Library c:\windows\system32\nlaapi.dll (Network Location Awareness 2/Microsoft Corporation) 0x73D00000 Library c:\windows\system32\profsvc.dll (ProfSvc/Microsoft Corporation) 0x73CA0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library c:\windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library c:\windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library c:\windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73C80000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\dsrole.dll (DS Role Client DLL/Microsoft Corporation) 0x73C30000 Library c:\windows\system32\themeservice.dll (Windows Shell Theme Service Dll/Microsoft Corporation) 0x73C20000 Library C:\Windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x73C10000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library c:\windows\system32\sens.dll (System Event Notification Service (SENS)/Microsoft Corporation) 0x739B0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x74EB0000 Library C:\Windows\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74730000 Library c:\windows\system32\eapsvc.dll (Microsoft EAPHost service/Microsoft Corporation) 0x721C0000 Library C:\Windows\system32\eapphost.dll (Microsoft EAPHost Peer service/Microsoft Corporation) 0x72140000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\system32\umb.dll (User Mode Bus Driver Interface Dll/Microsoft Corporation) 0x72120000 Library c:\windows\system32\shsvcs.dll (Windows Shell Services Dll/Microsoft Corporation) 0x71E00000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library c:\windows\system32\schedsvc.dll (Task Scheduler Service/Microsoft Corporation) 0x71AD0000 Library c:\windows\system32\pcwum.dll (Performance Counters for Windows Native DLL/Microsoft Corporation) 0x74F90000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library c:\windows\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x74120000 Library c:\windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x74110000 Library c:\windows\system32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x756F0000 Library c:\windows\system32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x74100000 Library c:\windows\system32\wevtapi.dll (Eventing Consumption and Configuration API/Microsoft Corporation) 0x755D0000 Library c:\windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x755A0000 Library c:\windows\system32\UBPM.dll (Unified Background Process Manager DLL/Microsoft Corporation) 0x750A0000 Library c:\windows\system32\ktmw32.dll (Windows KTM Win32 Client DLL/Microsoft Corporation) 0x71D80000 Library c:\windows\system32\XmlLite.dll (Microsoft XmlLite Library/Microsoft Corporation) 0x74410000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x766F0000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x75AB0000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x75A50000 Library C:\Windows\system32\taskcomp.dll (Task Scheduler Backward Compatibility Plug-in/Microsoft Corporation) 0x71D30000 Library C:\Windows\system32\FVEAPI.dll (Windows BitLocker Drive Encryption API/Microsoft Corporation) 0x71A80000 Library C:\Windows\system32\tbs.dll (TBS/Microsoft Corporation) 0x71A70000 Library C:\Windows\system32\FVECERTS.dll (BitLocker Certificates Library/Microsoft Corporation) 0x71A60000 Library C:\Windows\system32\LOGONCLI.DLL (Net Logon Client DLL/Microsoft Corporation) 0x75280000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x73EC0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x753F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74F60000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x753E0000 Library C:\Windows\system32\netjoin.dll (Domain Join DLL/Microsoft Corporation) 0x75500000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x74F80000 Library C:\Windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x722D0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x722C0000 Library C:\Windows\system32\wiarpc.dll (Windows Image Acquisition RPC client DLL/Microsoft Corporation) 0x71D20000 Library c:\windows\system32\certprop.dll (Microsoft Smartcard Certificate Propagation Service/Microsoft Corporation) 0x71720000 Library c:\windows\system32\WinSCard.dll (Microsoft Smart Card API/Microsoft Corporation) 0x71CF0000 Library c:\windows\system32\ncrypt.dll (Windows cryptographic library/Microsoft Corporation) 0x75560000 Library c:\windows\system32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75540000 Library c:\windows\system32\WMsgAPI.dll (WinLogon IPC Client/Microsoft Corporation) 0x75620000 Library c:\windows\system32\ikeext.dll (IKE extension/Microsoft Corporation) 0x71450000 Library c:\windows\system32\fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x72180000 Library C:\Windows\system32\bcryptprimitives.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75110000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x71FC0000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x71F40000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x74870000 Library C:\Windows\system32\PROPSYS.dll (Microsoft Property System/Microsoft Corporation) 0x74770000 Library c:\windows\system32\wbem\wmisvc.dll (WMI/Microsoft Corporation) 0x70FC0000 Library C:\Windows\system32\wbemcomn.dll (WMI/Microsoft Corporation) 0x70F60000 Library c:\windows\system32\iphlpsvc.dll (Service that offers IPv6 connectivity over an IPv4 network./Microsoft Corporation) 0x70E10000 Library c:\windows\system32\FirewallAPI.dll (Windows Firewall API/Microsoft Corporation) 0x74E10000 Library c:\windows\system32\rtutils.dll (Routing Utilities/Microsoft Corporation) 0x73FC0000 Library c:\windows\system32\sqmapi.dll (SQM Client/Microsoft Corporation) 0x70DD0000 Library c:\windows\system32\WDSCORE.dll (Panther Engine Module/Microsoft Corporation) 0x70D90000 Library c:\windows\system32\srvsvc.dll (Server Service DLL/Microsoft Corporation) 0x70D60000 Library c:\windows\system32\browser.dll (Computer Browser Service DLL/Microsoft Corporation) 0x70D40000 Library C:\Windows\system32\SSCORE.DLL (Server Service Core DLL/Microsoft Corporation) 0x70CE0000 Library C:\Windows\system32\devrtl.DLL (Device Management Run Time Library/Microsoft Corporation) 0x751B0000 Library C:\Windows\system32\VSSAPI.DLL (Microsoft® Volume Shadow Copy Requestor/Writer Services API DLL/Microsoft Corporation) 0x715C0000 Library C:\Windows\system32\VssTrace.DLL (Microsoft® Volume Shadow Copy Service Tracing Library/Microsoft Corporation) 0x715B0000 Library C:\Windows\system32\CLUSAPI.DLL (Cluster API Library/Microsoft Corporation) 0x70CA0000 Library C:\Windows\system32\cryptdll.dll (Cryptography Manager/Microsoft Corporation) 0x75630000 Library C:\Windows\system32\RESUTILS.DLL (Microsoft Cluster Resource Utility DLL/Microsoft Corporation) 0x70A30000 Library C:\Windows\System32\netprofm.dll (Network List Manager/Microsoft Corporation) 0x70940000 Library C:\Windows\system32\hnetcfg.dll (Home Networking Configuration Manager/Microsoft Corporation) 0x708F0000 Library C:\Windows\system32\wbem\wbemprox.dll (WMI/Microsoft Corporation) 0x70CF0000 Library C:\Windows\system32\samcli.dll (Security Accounts Manager Client DLL/Microsoft Corporation) 0x740F0000 Library C:\Windows\system32\NCI.dll (CoInstaller: NET/Microsoft Corporation) 0x708D0000 Library C:\Windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x752B0000 Library C:\Windows\system32\wbem\wbemcore.dll (Windows Management Instrumentation/Microsoft Corporation) 0x70800000 Library C:\Windows\system32\wbem\esscli.dll (WMI/Microsoft Corporation) 0x707B0000 Library C:\Windows\system32\wbem\FastProx.dll (WMI Custom Marshaller/Microsoft Corporation) 0x70E90000 Library C:\Windows\system32\NTDSAPI.dll (Active Directory Domain Services API/Microsoft Corporation) 0x70D00000 Library C:\Windows\system32\wbem\wbemsvc.dll (WMI/Microsoft Corporation) 0x707A0000 Library C:\Windows\system32\wbem\wmiutils.dll (WMI/Microsoft Corporation) 0x70780000 Library C:\Windows\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x70770000 Library C:\Windows\system32\wbem\repdrvfs.dll (WMI Repository Driver/Microsoft Corporation) 0x70720000 Library C:\Windows\system32\SXS.DLL (Fusion 2.5/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\SPINF.dll (Windows SPINF/Microsoft Corporation) 0x75000000 Library C:\Windows\system32\wbem\wmiprvsd.dll (WMI/Microsoft Corporation) 0x73600000 Library C:\Windows\system32\NCObjAPI.DLL (Microsoft Corporation) 0x73FD0000 Library C:\Windows\system32\wbem\wbemess.dll (WMI/Microsoft Corporation) 0x735A0000 Library c:\windows\system32\qmgr.dll (Background Intelligent Transfer Service/Microsoft Corporation) 0x72C50000 Library c:\windows\system32\bitsperf.dll (Perfmon Counter Access/Microsoft Corporation) 0x741E0000 Library C:\Windows\system32\bitsigd.dll (Background Intelligent Transfer Service IGD Support/Microsoft Corporation) 0x741D0000 Library C:\Windows\system32\WINHTTP.dll (Windows HTTP Services/Microsoft Corporation) 0x71380000 Library C:\Windows\system32\webio.dll (Web Transfer Protocols API/Microsoft Corporation) 0x71130000 Library C:\Windows\System32\npmproxy.dll (Network List Manager Proxy/Microsoft Corporation) 0x727F0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75890000 Library C:\Windows\system32\peerdist.dll (BranchCache Client Library/Microsoft Corporation) 0x73CD0000 Library C:\Windows\system32\MPR.dll (Multiple Provider Router DLL/Microsoft Corporation) 0x70C50000 Library C:\Windows\system32\wbem\ncprov.dll (Non-COM WMI Event Provision APIs/Microsoft Corporation) 0x6E040000 Library c:\windows\system32\wuaueng.dll (Windows Update Agent/Microsoft Corporation) 0x67500000 Library c:\windows\system32\ESENT.dll (Extensible Storage Engine for Microsoft® Windows®/Microsoft Corporation) 0x6D0D0000 Library c:\windows\system32\WINSPOOL.DRV (Windows Spooler Driver/Microsoft Corporation) 0x70590000 Library c:\windows\system32\Cabinet.dll (Microsoft® Cabinet File API/Microsoft Corporation) 0x71780000 Library c:\windows\system32\mspatcha.dll (Microsoft File Patch Application API/Microsoft Corporation) 0x674F0000 Library C:\Windows\system32\psapi.dll (Process Status Helper/Microsoft Corporation) 0x75F00000 Library C:\Windows\system32\wer.dll (Windows Error Reporting DLL/Microsoft Corporation) 0x6F6D0000 Library C:\Windows\system32\wups2.dll (Windows Update client proxy stub 2/Microsoft Corporation) 0x670C0000 Library C:\Windows\system32\RasApi32.dll (Remote Access API/Microsoft Corporation) 0x73080000 Library C:\Windows\system32\rasman.dll (Remote Access Connection Manager/Microsoft Corporation) 0x741A0000 Library c:\windows\system32\aelupsvc.dll (Application Experience Service/Microsoft Corporation) 0x6F730000 Library c:\windows\system32\appinfo.dll (Application Information Service/Microsoft Corporation) 0x74240000 Library c:\windows\system32\mmcss.dll (Multimedia Class Scheduler Service/Microsoft Corporation) 0x70C00000 Library c:\windows\system32\AVRT.dll (Multimedia Realtime Runtime/Microsoft Corporation) 0x74E90000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 1216 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00F60000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library c:\windows\system32\es.dll (COM+/Microsoft Corporation) 0x73AC0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library c:\windows\system32\nsisvc.dll (Network Store Interface RPC server/Microsoft Corporation) 0x722A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\SXS.DLL (Fusion 2.5/Microsoft Corporation) 0x758F0000 Library c:\windows\system32\wdi.dll (Windows Diagnostic Infrastructure/Microsoft Corporation) 0x729F0000 Library c:\windows\system32\netprofm.dll (Network List Manager/Microsoft Corporation) 0x70940000 Library c:\windows\system32\nlaapi.dll (Network Location Awareness 2/Microsoft Corporation) 0x73D00000 Library C:\Windows\system32\perftrack.dll (Microsoft Performance PerfTrack/Microsoft Corporation) 0x72960000 Library C:\Windows\system32\wer.dll (Windows Error Reporting DLL/Microsoft Corporation) 0x6F6D0000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74440000 Library C:\Windows\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\AEPIC.dll (Application Experience Program Cache/Microsoft Corporation) 0x72A40000 Library C:\Windows\system32\sfc.dll (Windows File Protection/Microsoft Corporation) 0x72A30000 Library C:\Windows\system32\sfc_os.DLL (Windows File Protection/Microsoft Corporation) 0x72A20000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75890000 Library C:\Windows\System32\npmproxy.dll (Network List Manager Proxy/Microsoft Corporation) 0x727F0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x722D0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x722C0000 Library C:\Windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74FC0000 Library C:\Windows\system32\winhttp.dll (Windows HTTP Services/Microsoft Corporation) 0x71380000 Library C:\Windows\system32\webio.dll (Web Transfer Protocols API/Microsoft Corporation) 0x71130000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x752B0000 Library C:\Windows\System32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x753F0000 Library C:\Windows\System32\winrnr.dll (LDAP RnR Provider DLL/Microsoft Corporation) 0x73590000 Library C:\Windows\system32\napinsp.dll (E-mail Naming Shim Provider/Microsoft Corporation) 0x73580000 Library C:\Windows\system32\pnrpnsp.dll (PNRP Name Space Provider/Microsoft Corporation) 0x73560000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74F60000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x753E0000 Library C:\Windows\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x70770000 Library C:\Windows\System32\fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x72180000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x71FC0000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x71F40000 Library c:\windows\system32\fdphost.dll (Function Discovery Provider host service/Microsoft Corporation) 0x6D580000 Library C:\Windows\system32\fdwsd.dll (Function Discovery WS Discovery Provider Dll/Microsoft Corporation) 0x6D3E0000 Library C:\Windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73C80000 Library C:\Windows\system32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75540000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\system32\MLANG.dll (Multi Language Support DLL/Microsoft Corporation) 0x6CA10000 Library C:\Windows\system32\wsdapi.dll (Web Services for Devices API DLL/Microsoft Corporation) 0x71500000 Library C:\Windows\system32\webservices.dll (Windows Web Services Runtime/Microsoft Corporation) 0x712B0000 Library C:\Windows\system32\FirewallAPI.dll (Windows Firewall API/Microsoft Corporation) 0x74E10000 Library C:\Windows\system32\fdssdp.dll (Function Discovery SSDP Provider Dll/Microsoft Corporation) 0x6CD80000 Library C:\Windows\system32\SSDPAPI.dll (SSDP Client API DLL/Microsoft Corporation) 0x71110000 Library C:\Windows\system32\fdproxy.dll (Function Discovery Proxy Dll/Microsoft Corporation) 0x6CA00000 Library C:\Windows\system32\bcryptprimitives.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75110000 Library C:\Windows\system32\XmlLite.dll (Microsoft XmlLite Library/Microsoft Corporation) 0x74410000 Library C:\Windows\system32\FunDisc.dll (Function Discovery Dll/Microsoft Corporation) 0x71280000 Library C:\Windows\System32\msxml6.dll (MSXML 6.0 SP3/Microsoft Corporation) 0x71B90000 Library C:\Windows\system32\propsys.dll (Microsoft Property System/Microsoft Corporation) 0x74770000 Library C:\Program Files\Internet Explorer\ieproxy.dll (IE ActiveX Interface Marshaling Library/Microsoft Corporation) 0x6A3D0000 Process C:\Windows\system32\AUDIODG.EXE (Windows Audio Device Graph Isolation /Microsoft Corporation) 1256 Library C:\Windows\system32\AUDIODG.EXE (Windows Audio Device Graph Isolation /Microsoft Corporation) 0x002C0000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\System32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\System32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\System32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\System32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\System32\MMDevAPI.DLL (MMDevice API/Microsoft Corporation) 0x74460000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\System32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\System32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\System32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\System32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\System32\PROPSYS.dll (Microsoft Property System/Microsoft Corporation) 0x74770000 Library C:\Windows\System32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\System32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x73EC0000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x75DC0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\System32\audioses.dll (Audio Session/Microsoft Corporation) 0x73C40000 Library C:\Windows\System32\audioeng.dll (Audio Engine/Microsoft Corporation) 0x5EDE0000 Library C:\Windows\System32\AVRT.dll (Multimedia Realtime Runtime/Microsoft Corporation) 0x74E90000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x766F0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x75AB0000 Library C:\Windows\System32\audiokse.dll (Audio Ks Endpoint/Microsoft Corporation) 0x5ED60000 Library C:\Windows\System32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\System32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\System32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x75A50000 Library C:\Windows\System32\ksuser.dll (User CSA Library/Microsoft Corporation) 0x73D10000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\WMALFXGFXDSP.dll (SysFx DSP/Microsoft Corporation) 0x5EC00000 Library C:\Windows\system32\mfplat.DLL (Media Foundation Platform DLL/Microsoft Corporation) 0x737F0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Process C:\Windows\system32\nvvsvc.exe (NVIDIA Driver Helper Service, Version 257.21/NVIDIA Corporation) 1324 Library C:\Windows\system32\nvvsvc.exe (NVIDIA Driver Helper Service, Version 257.21/NVIDIA Corporation) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x74F80000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x766F0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x75AB0000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x75F00000 Library C:\Windows\system32\NVSVC.DLL (NVIDIA Driver Helper Service, Version 257.21/NVIDIA Corporation) 0x10000000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Library C:\Windows\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x73E80000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\COMCTL32.dll (User Experience Controls Library/Microsoft Corporation) 0x74870000 Library C:\Windows\system32\MSIMG32.dll (GDIEXT Client DLL/Microsoft Corporation) 0x737A0000 Library C:\Windows\system32\POWRPROF.dll (Power Profile Helper DLL/Microsoft Corporation) 0x74260000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74440000 Library C:\Windows\system32\COMDLG32.dll (Common Dialogs DLL/Microsoft Corporation) 0x77750000 Library C:\Windows\system32\nvapi.dll (NVIDIA NVAPI Library, Version 257.21 /NVIDIA Corporation) 0x01240000 Library C:\Windows\system32\NVSVCR.DLL (NVIDIA Driver Helper Service, Version 257.21/NVIDIA Corporation) 0x014E0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x75A50000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74730000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75890000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 1444 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00F60000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library c:\windows\system32\sdrsvc.dll (Microsoft® Windows Backup Service/Microsoft Corporation) 0x66DE0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library c:\windows\system32\SXSHARED.dll (Microsoft® Windows SX Shared Library/Microsoft Corporation) 0x70A80000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x73EC0000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x75DC0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\sxproxy.dll (Microsoft® Windows System Protection Proxy Library/Microsoft Corporation) 0x70BC0000 Library C:\Windows\System32\sdengin2.dll (Microsoft® Windows Backup Engine/Microsoft Corporation) 0x60470000 Library C:\Windows\System32\MPR.dll (Multiple Provider Router DLL/Microsoft Corporation) 0x70C50000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x766F0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x75AB0000 Library C:\Windows\System32\msi.dll (Windows Installer/Microsoft Corporation) 0x6E3D0000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\System32\SPP.dll (Microsoft® Windows Shared Protection Point Library/Microsoft Corporation) 0x670E0000 Library C:\Windows\System32\VSSAPI.DLL (Microsoft® Volume Shadow Copy Requestor/Writer Services API DLL/Microsoft Corporation) 0x715C0000 Library C:\Windows\System32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73C80000 Library C:\Windows\System32\VssTrace.DLL (Microsoft® Volume Shadow Copy Service Tracing Library/Microsoft Corporation) 0x715B0000 Library C:\Windows\System32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x73C10000 Library C:\Windows\System32\wer.dll (Windows Error Reporting DLL/Microsoft Corporation) 0x6F6D0000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\System32\credui.dll (Credential Manager User Interface/Microsoft Corporation) 0x66E10000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x74870000 Process C:\Windows\system32\WUDFHost.exe (Windows Driver Foundation - User-mode Driver Framework Host Process/Microsoft Corporation) 1448 Library C:\Windows\system32\WUDFHost.exe (Windows Driver Foundation - User-mode Driver Framework Host Process/Microsoft Corporation) 0x00C80000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\WUDFPlatform.dll (Windows Driver Foundation - User-mode Platform Library/Microsoft Corporation) 0x73770000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x766F0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x75AB0000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x75F00000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Library C:\Windows\system32\wevtapi.dll (Eventing Consumption and Configuration API/Microsoft Corporation) 0x755D0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x75A50000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\system32\WINUSB.DLL (Windows USB Driver User Library/Microsoft Corporation) 0x737C0000 Library C:\Windows\system32\WUDFx.dll (WDF:UMDF Framework Library/Microsoft Corporation) 0x72380000 Library C:\Windows\System32\drivers\UMDF\WUDFUsbccidDriver.dll (WDF:UMDF USBCCID User-Mode Driver/Microsoft Corporation) 0x72360000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 1552 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00F60000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library c:\windows\system32\dnsrslvr.dll (DNS Caching Resolver Service/Microsoft Corporation) 0x721E0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library c:\windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x752B0000 Library c:\windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x722C0000 Library C:\Windows\system32\Fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x72180000 Library C:\Windows\System32\dnsext.dll (DNS extension DLL/Microsoft Corporation) 0x72130000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74FC0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x753F0000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x753E0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x722D0000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x71FC0000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x71F40000 Library c:\windows\system32\wkssvc.dll (Workstation Service DLL/Microsoft Corporation) 0x72340000 Library c:\windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x74110000 Library c:\windows\system32\netjoin.dll (Domain Join DLL/Microsoft Corporation) 0x75500000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74F60000 Library c:\windows\system32\cryptsvc.dll (Cryptographic Services/Microsoft Corporation) 0x71740000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\system32\VSSAPI.DLL (Microsoft® Volume Shadow Copy Requestor/Writer Services API DLL/Microsoft Corporation) 0x715C0000 Library C:\Windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73C80000 Library C:\Windows\system32\VssTrace.DLL (Microsoft® Volume Shadow Copy Service Tracing Library/Microsoft Corporation) 0x715B0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library c:\windows\system32\nlasvc.dll (Network Location Awareness 2/Microsoft Corporation) 0x71410000 Library c:\windows\system32\wevtapi.dll (Eventing Consumption and Configuration API/Microsoft Corporation) 0x755D0000 Library c:\windows\system32\ncsi.dll (Network Connectivity Status Indicator/Microsoft Corporation) 0x713E0000 Library c:\windows\system32\WINHTTP.dll (Windows HTTP Services/Microsoft Corporation) 0x71380000 Library c:\windows\system32\webio.dll (Web Transfer Protocols API/Microsoft Corporation) 0x71130000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\system32\cryptsp.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\samcli.dll (Security Accounts Manager Client DLL/Microsoft Corporation) 0x740F0000 Library C:\Windows\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x74EB0000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\system32\ssdpapi.dll (SSDP Client API DLL/Microsoft Corporation) 0x71110000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\es.dll (COM+/Microsoft Corporation) 0x73AC0000 Library C:\Windows\system32\PROPSYS.dll (Microsoft Property System/Microsoft Corporation) 0x74770000 Library C:\Windows\system32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x74100000 Library C:\Windows\system32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75540000 Library C:\Windows\system32\bcryptprimitives.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75110000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\peerdist.dll (BranchCache Client Library/Microsoft Corporation) 0x73CD0000 Library C:\Windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x755A0000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x74F80000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library C:\Windows\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x70770000 Library C:\Windows\system32\ESENT.dll (Extensible Storage Engine for Microsoft® Windows®/Microsoft Corporation) 0x6D0D0000 Library C:\Windows\system32\psapi.dll (Process Status Helper/Microsoft Corporation) 0x75F00000 Process C:\Windows\system32\Dwm.exe (Desktop Window Manager/Microsoft Corporation) 1568 Library C:\Windows\system32\Dwm.exe (Desktop Window Manager/Microsoft Corporation) 0x00BA0000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74730000 Library C:\Windows\system32\IMM32.dll (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\dwmredir.dll (Microsoft Desktop Window Manager Redirection Component/Microsoft Corporation) 0x70570000 Library C:\Windows\system32\dwmcore.dll (Microsoft DWM Core Library/Microsoft Corporation) 0x70410000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\WindowsCodecs.dll (Microsoft Windows Codecs Library/Microsoft Corporation) 0x74310000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\d3d10_1.dll (Direct3D 10.1 Runtime/Microsoft Corporation) 0x703C0000 Library C:\Windows\system32\d3d10_1core.dll (Direct3D 10.1 Runtime/Microsoft Corporation) 0x70380000 Library C:\Windows\system32\dxgi.dll (DirectX Graphics Infrastructure/Microsoft Corporation) 0x702F0000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74440000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x75A50000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\system32\nvwgf2um.dll (NVIDIA Compatible D3D10 Driver, Version 257.21 /NVIDIA Corporation) 0x6FD80000 Library C:\Windows\system32\uDWM.dll (Microsoft Desktop Window Manager/Microsoft Corporation) 0x6FB20000 Library C:\Windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x73C10000 Process C:\Windows\System32\spoolsv.exe (Spooler SubSystem App/Microsoft Corporation) 1672 Library C:\Windows\System32\spoolsv.exe (Spooler SubSystem App/Microsoft Corporation) 0x00800000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\System32\POWRPROF.dll (Power Profile Helper DLL/Microsoft Corporation) 0x74260000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x766F0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x75AB0000 Library C:\Windows\System32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x752B0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\System32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\System32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x73C10000 Library C:\Windows\System32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\System32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\System32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\System32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\System32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x74F80000 Library C:\Windows\System32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library C:\Windows\System32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x722D0000 Library C:\Windows\System32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x722C0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x753F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74F60000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x753E0000 Library C:\Windows\System32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x70770000 Library C:\Windows\System32\fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x72180000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\umb.dll (User Mode Bus Driver Interface Dll/Microsoft Corporation) 0x72120000 Library C:\Windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73C80000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x75A50000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\System32\localspl.dll (Local Spooler DLL/Microsoft Corporation) 0x705F0000 Library C:\Windows\System32\SPOOLSS.DLL (Spooler SubSystem DLL/Microsoft Corporation) 0x70700000 Library C:\Windows\System32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x756F0000 Library C:\Windows\system32\winspool.drv (Windows Spooler Driver/Microsoft Corporation) 0x70590000 Library C:\Windows\System32\PrintIsolationProxy.dll (Print Sandbox COM Proxy Stub/Microsoft Corporation) 0x706F0000 Library C:\Windows\System32\FXSMON.DLL (Microsoft Fax Print Monitor/Microsoft Corporation) 0x706E0000 Library C:\Windows\System32\tcpmon.dll (Standard TCP/IP Port Monitor DLL/Microsoft Corporation) 0x706B0000 Library C:\Windows\System32\snmpapi.dll (SNMP Utility Library/Microsoft Corporation) 0x70400000 Library C:\Windows\System32\wsnmp32.dll (Microsoft WinSNMP v2.0 Manager API/Microsoft Corporation) 0x703F0000 Library C:\Windows\System32\msxml6.dll (MSXML 6.0 SP3/Microsoft Corporation) 0x71B90000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\System32\usbmon.dll (Standard Dynamic Printing Port Monitor DLL/Microsoft Corporation) 0x702E0000 Library C:\Windows\system32\wls0wndh.dll (Session0 Viewer Window Hook DLL/Microsoft Corporation) 0x702A0000 Library C:\Windows\System32\WSDMon.dll (WSD Printer Port Monitor/Microsoft Corporation) 0x70270000 Library C:\Windows\System32\wsdapi.dll (Web Services for Devices API DLL/Microsoft Corporation) 0x71500000 Library C:\Windows\System32\webservices.dll (Windows Web Services Runtime/Microsoft Corporation) 0x712B0000 Library C:\Windows\System32\FirewallAPI.dll (Windows Firewall API/Microsoft Corporation) 0x74E10000 Library C:\Windows\System32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Library C:\Windows\system32\FunDisc.dll (Function Discovery Dll/Microsoft Corporation) 0x71280000 Library C:\Windows\system32\fdPnp.dll (Pnp Provider Dll/Microsoft Corporation) 0x70260000 Library C:\Windows\system32\spool\PRTPROCS\W32X86\winprint.dll (Windows Print Processor DLL/Microsoft Corporation) 0x70250000 Library C:\Windows\System32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\System32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\System32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74FC0000 Library C:\Windows\System32\dsrole.dll (DS Role Client DLL/Microsoft Corporation) 0x73C30000 Library C:\Windows\System32\win32spl.dll (Client Side Rendering Print Provider/Microsoft Corporation) 0x6FB90000 Library C:\Windows\System32\DEVRTL.dll (Device Management Run Time Library/Microsoft Corporation) 0x751B0000 Library C:\Windows\System32\SPINF.dll (Windows SPINF/Microsoft Corporation) 0x75000000 Library C:\Windows\System32\inetpp.dll (Internet Print Provider DLL/Microsoft Corporation) 0x702B0000 Library C:\Windows\System32\netprofm.dll (Network List Manager/Microsoft Corporation) 0x70940000 Library C:\Windows\System32\nlaapi.dll (Network Location Awareness 2/Microsoft Corporation) 0x73D00000 Library C:\Windows\System32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\System32\cscapi.dll (Offline Files Win32 API/Microsoft Corporation) 0x6F8B0000 Library C:\Windows\System32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x74110000 Library C:\Windows\System32\npmproxy.dll (Network List Manager Proxy/Microsoft Corporation) 0x727F0000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 1720 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00F60000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library c:\windows\system32\scardsvr.dll (Smart Card Resource Management Server/Microsoft Corporation) 0x71A30000 Library c:\windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x755A0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library c:\windows\system32\fdrespub.dll (Function Discovery Resource Publication Service/Microsoft Corporation) 0x71710000 Library c:\windows\system32\wsdapi.dll (Web Services for Devices API DLL/Microsoft Corporation) 0x71500000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library c:\windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x722D0000 Library c:\windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x722C0000 Library c:\windows\system32\webservices.dll (Windows Web Services Runtime/Microsoft Corporation) 0x712B0000 Library c:\windows\system32\FirewallAPI.dll (Windows Firewall API/Microsoft Corporation) 0x74E10000 Library c:\windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\FunDisc.dll (Function Discovery Dll/Microsoft Corporation) 0x71280000 Library C:\Windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73C80000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x71FC0000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x71F40000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x753F0000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x753E0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74F60000 Library C:\Windows\system32\WINHTTP.dll (Windows HTTP Services/Microsoft Corporation) 0x71380000 Library C:\Windows\system32\webio.dll (Web Transfer Protocols API/Microsoft Corporation) 0x71130000 Library C:\Windows\system32\HTTPAPI.dll (HTTP Protocol Stack API/Microsoft Corporation) 0x71120000 Library C:\Windows\system32\pcwum.dll (Performance Counters for Windows Native DLL/Microsoft Corporation) 0x74F90000 Library C:\Windows\system32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x74100000 Library C:\Windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x74110000 Library C:\Windows\System32\msxml6.dll (MSXML 6.0 SP3/Microsoft Corporation) 0x71B90000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\XmlLite.dll (Microsoft XmlLite Library/Microsoft Corporation) 0x74410000 Library c:\windows\system32\ssdpsrv.dll (SSDP Service DLL/Microsoft Corporation) 0x6CFC0000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library c:\windows\system32\upnphost.dll (UPnP Device Host/Microsoft Corporation) 0x6A020000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library c:\windows\system32\SSDPAPI.dll (SSDP Client API DLL/Microsoft Corporation) 0x71110000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\System32\msxml3.dll (MSXML 3.0 SP11/Microsoft Corporation) 0x6D5E0000 Library C:\Windows\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x76890000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\system32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 0x75FB0000 Library C:\Windows\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\Normaliz.dll (Unicode Normalization DLL/Microsoft Corporation) 0x77970000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x74870000 Library C:\Windows\system32\dnsapi.DLL (DNS Client API DLL/Microsoft Corporation) 0x752B0000 Library C:\Windows\system32\udhisapi.dll (UPnP Device Host ISAPI Extension/Microsoft Corporation) 0x6C930000 Process C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 1732 Library C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00F60000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library c:\windows\system32\pnrpsvc.dll (PNRP Service Dll/Microsoft Corporation) 0x6A380000 Library C:\Windows\System32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\System32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\System32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74FC0000 Library C:\Windows\System32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\System32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\System32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\System32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\System32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x753F0000 Library C:\Windows\system32\user32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x75F00000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x753E0000 Library C:\Windows\System32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x722D0000 Library C:\Windows\System32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x722C0000 Library C:\Windows\System32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x71FC0000 Library C:\Windows\System32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x71F40000 Library C:\Windows\System32\sqmapi.dll (SQM Client/Microsoft Corporation) 0x70DD0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\System32\SSDPAPI.DLL (SSDP Client API DLL/Microsoft Corporation) 0x71110000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\System32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\System32\ncrypt.dll (Windows cryptographic library/Microsoft Corporation) 0x75560000 Library C:\Windows\System32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75540000 Library c:\windows\system32\p2psvc.dll (Peer-to-Peer Services/Microsoft Corporation) 0x6A1A0000 Library c:\windows\system32\P2PGRAPH.dll (Peer-to-Peer Graphing/Microsoft Corporation) 0x6A140000 Library c:\windows\system32\ESENT.dll (Extensible Storage Engine for Microsoft® Windows®/Microsoft Corporation) 0x01170000 Library c:\windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x73C10000 Library c:\windows\system32\XmlLite.dll (Microsoft XmlLite Library/Microsoft Corporation) 0x74410000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\System32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x755A0000 Library C:\Windows\system32\pnrpnsp.dll (PNRP Name Space Provider/Microsoft Corporation) 0x73560000 Library C:\Windows\System32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x70770000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x73EC0000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x75DC0000 Library C:\Windows\system32\schannel.DLL (TLS / SSL Security Provider/Microsoft Corporation) 0x75240000 Library C:\Windows\System32\drttransport.dll (Distributed Routing Table Transport Provider/Microsoft Corporation) 0x69F80000 Library C:\Windows\System32\drt.dll (Distributed Routing Table/Microsoft Corporation) 0x69F40000 Library C:\Windows\System32\pcwum.dll (Performance Counters for Windows Native DLL/Microsoft Corporation) 0x74F90000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 1764 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00F60000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library c:\windows\system32\bfe.dll (Base Filtering Engine/Microsoft Corporation) 0x719B0000 Library c:\windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x755A0000 Library c:\windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x73C10000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\pcwum.dll (Performance Counters for Windows Native DLL/Microsoft Corporation) 0x74F90000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library c:\windows\system32\mpssvc.dll (Microsoft Protection Service/Microsoft Corporation) 0x71920000 Library c:\windows\system32\FirewallAPI.dll (Windows Firewall API/Microsoft Corporation) 0x74E10000 Library c:\windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Library c:\windows\system32\fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x72180000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74FC0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x722D0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x722C0000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x71FC0000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x71F40000 Library C:\Windows\system32\wfapigp.dll (Windows Firewall GPO Helper dll/Microsoft Corporation) 0x72330000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x73EC0000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x75DC0000 Library c:\windows\system32\dps.dll (WDI Diagnostic Policy Service/Microsoft Corporation) 0x716E0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\taskschd.dll (Task Scheduler COM API/Microsoft Corporation) 0x73B90000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x753F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74F60000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x753E0000 Library C:\Windows\system32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75540000 Library C:\Windows\system32\wdi.dll (Windows Diagnostic Infrastructure/Microsoft Corporation) 0x729F0000 Library C:\Windows\system32\diagperf.dll (Microsoft Performance Diagnostics/Microsoft Corporation) 0x72860000 Library C:\Windows\system32\pnpts.dll (PlugPlay Troubleshooter/Microsoft Corporation) 0x72A10000 Library C:\Windows\system32\pots.dll (Power Troubleshooter/Microsoft Corporation) 0x727D0000 Library C:\Windows\system32\tdh.dll (Event Trace Helper Library/Microsoft Corporation) 0x72730000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x766F0000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x75AB0000 Library C:\Windows\system32\wdiasqmmodule.dll (Adaptive SQM WDI Plugin/Microsoft Corporation) 0x72410000 Library C:\Windows\System32\netprofm.dll (Network List Manager/Microsoft Corporation) 0x70940000 Library C:\Windows\System32\nlaapi.dll (Network Location Awareness 2/Microsoft Corporation) 0x73D00000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\radardt.dll (Microsoft Windows Resource Exhaustion Detector/Microsoft Corporation) 0x6D930000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x74F80000 Library C:\Windows\System32\npmproxy.dll (Network List Manager Proxy/Microsoft Corporation)

Breaker934

Post #11September 2, 2010, 2:24 PM UTC

Process C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Anti-Virus/Kaspersky Lab ZAO) 1884 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Anti-Virus/Kaspersky Lab ZAO) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x74F80000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b 5\MSVCR80.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x71880000 Library C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b 5\MSVCP80.dll (Microsoft® C++ Runtime Library/Microsoft Corporation) 0x717F0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x75F00000 Library C:\Windows\system32\wintrust.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x75A50000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\imagehlp.dll (Windows NT Image Helper/Microsoft Corporation) 0x766C0000 Library C:\Windows\system32\ncrypt.dll (Windows cryptographic library/Microsoft Corporation) 0x75560000 Library C:\Windows\system32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75540000 Library C:\Windows\system32\bcryptprimitives.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75110000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74FC0000 Library C:\Windows\system32\cryptnet.dll (Crypto Network Related API/Microsoft Corporation) 0x72310000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x75DC0000 Library C:\Windows\system32\SensApi.dll (SENS Connectivity API DLL/Microsoft Corporation) 0x72300000 Library C:\Windows\system32\Cabinet.dll (Microsoft® Cabinet File API/Microsoft Corporation) 0x71780000 Library C:\Windows\system32\DEVRTL.dll (Device Management Run Time Library/Microsoft Corporation) 0x751B0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\fssync.dll (FSSYNC.DLL/Kaspersky Lab ZAO) 0x6C650000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\FLTLIB.DLL (Filter Library/Microsoft Corporation) 0x71770000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\DumpWriter.dll (Kaspersky Dump Writer DLL/Kaspersky Lab ZAO) 0x6C500000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\memmng.dll (Memmng module/Kaspersky Lab ZAO) 0x6D430000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\Ushata.dll (Ushata module/Kaspersky Lab ZAO) 0x6DA80000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\CLLDR.DLL (CLLDR/Kaspersky Lab ZAO) 0x6C460000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\prremote.dll (PR_REMOTE/Kaspersky Lab ZAO) 0x71580000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\prloader.dll (Prague Loader/Kaspersky Lab ZAO) 0x6D640000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\pxstub.ppl (Proxy Stubs/Kaspersky Lab ZAO) 0x6E9B0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\params.ppl (Structure Serializer/Kaspersky Lab ZAO) 0x71180000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\winreg.ppl (WINREG/Kaspersky Lab ZAO) 0x70C20000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\hashmd5.ppl (HASHMD5/Kaspersky Lab ZAO) 0x70C90000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\nfio.ppl (NFIO/Kaspersky Lab ZAO) 0x70C70000 Library C:\Windows\system32\MPR.dll (Multiple Provider Router DLL/Microsoft Corporation) 0x70C50000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\fsdrvplg.ppl (Plugin for FSDrv/Kaspersky Lab ZAO) 0x70C40000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\thpimpl.ppl (Thread Pool/Kaspersky Lab ZAO) 0x70C30000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\tm.ppl (Task Manager/Kaspersky Lab ZAO) 0x70B80000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\service.dll (Component service provider/Kaspersky Lab ZAO) 0x6D700000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\eka_meta.dll (EKA_META/Kaspersky Lab ZAO) 0x6C520000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\esmgr.dll (ESMgr/Kaspersky Lab ZAO) 0x6C5C0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\bl.ppl (AVP2005 Product Business Logic/Kaspersky Lab ZAO) 0x6DF50000 Library C:\Windows\system32\iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x722D0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x722C0000 Library C:\Windows\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x74120000 Library C:\Windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x74110000 Library C:\Windows\system32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x756F0000 Library C:\Windows\system32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x74100000 Library C:\Windows\system32\SAMCLI.DLL (Security Accounts Manager Client DLL/Microsoft Corporation) 0x740F0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\wmihlpr.ppl (wmi helper/Kaspersky Lab ZAO) 0x70A70000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\vercheck.ppl (VERCHECK/Kaspersky Lab ZAO) 0x6EFB0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\regmap.ppl (REGISTRY_MAPPER/Kaspersky Lab ZAO) 0x70A60000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ndetect.ppl (Nertwork Detection/Kaspersky Lab ZAO) 0x70A50000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\crpthlpr.ppl (CryptoHelper/Kaspersky Lab ZAO) 0x6E0D0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\dtreg.ppl (DTREG/Kaspersky Lab ZAO) 0x70A10000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\sfdb.ppl (SFDB/Kaspersky Lab ZAO) 0x70A00000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\qb.ppl (QBStorage/Kaspersky Lab ZAO) 0x709F0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\report.ppl (Report System/Kaspersky Lab ZAO) 0x709E0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\schedule.ppl (Scheduler/Kaspersky Lab ZAO) 0x709D0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\timer.ppl (Timer/Kaspersky Lab ZAO) 0x709C0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\reportdb.ppl (Report DB System/Kaspersky Lab ZAO) 0x709A0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\propmap.ppl (PROPMAP/Kaspersky Lab ZAO) 0x00AE0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\lic.ppl (Licensing Library/Kaspersky Lab ZAO) 0x6E3C0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\cbi.dll (AVP2011 CBI DLL/Kaspersky Lab ZAO) 0x10000000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klifpp.dll (klif driver interfaces/Kaspersky Lab ZAO) 0x6D0E0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\stat.ppl (Statistics module/Kaspersky Lab ZAO) 0x6DDB0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ThreatsManager.dll (threats manager/Kaspersky Lab ZAO) 0x6D8A0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\prutil.ppl (Utility Object Library/Kaspersky Lab ZAO) 0x74230000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\filemap.ppl (File Mapping Helper/Kaspersky Lab ZAO) 0x74220000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\procmon.ppl (Process Monitor/Kaspersky Lab ZAO) 0x6E850000 Library C:\Windows\system32\WSOCK32.dll (Windows Socket 32-Bit DLL/Microsoft Corporation) 0x74210000 Library C:\Windows\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\netwatch.ppl (Network Watcher/Kaspersky Lab ZAO) 0x6E500000 Library C:\Windows\system32\RASAPI32.dll (Remote Access API/Microsoft Corporation) 0x73080000 Library C:\Windows\system32\rasman.dll (Remote Access Connection Manager/Microsoft Corporation) 0x741A0000 Library C:\Windows\system32\wlanapi.dll (Windows WLAN AutoConfig Client Side API DLL/Microsoft Corporation) 0x73060000 Library C:\Windows\system32\wlanutil.dll (Windows Wireless LAN 802.11 Utility DLL/Microsoft Corporation) 0x71E60000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\oas.ppl (File Monitor/Kaspersky Lab ZAO) 0x73030000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\volenum.ppl (Volume enumeration/Kaspersky Lab ZAO) 0x6EFC0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\hips.ppl (HIPS/Kaspersky Lab ZAO) 0x6E1B0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\CKAHUM.dll (Kaspersky Anti-Hacker User Mode Component/Kaspersky Lab ZAO) 0x72EF0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\CKAHComm.dll (Kaspersky Anti-Hacker Communication Library/Kaspersky Lab ZAO) 0x74190000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ckahrule.dll (Kaspersky Anti-Hacker Rules Manager/Kaspersky Lab ZAO) 0x72ED0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\CKAHStat.dll (Kaspersky Anti-Hacker Statistic Componet/Kaspersky Lab ZAO) 0x72EB0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\antispam.ppl (AntiSpam mail fiter/Kaspersky Lab ZAO) 0x6DB00000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\mc.ppl (Mail Monitor/Kaspersky Lab ZAO) 0x72EA0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\sc.ppl (ScriptChecker/Kaspersky Lab ZAO) 0x6EC30000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\imc.ppl (IM Checker Monitor/Kaspersky Lab ZAO) 0x6E360000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\pdm2rt.ppl (Behavior PDM2rt/Kaspersky Lab ZAO) 0x72E30000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\httpscan.ppl (HTTP Scanner/Kaspersky Lab ZAO) 0x72DB0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ahids.ppl (ids task/Kaspersky Lab ZAO) 0x6DAF0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ekasyswatch.dll (EKA task for System Watcher2/Kaspersky Lab ZAO) 0x6C5A0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avs.ppl (AV Server/Kaspersky Lab ZAO) 0x72D50000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avspm.ppl (AV Server Performance Monitor/Kaspersky Lab ZAO) 0x72D40000 Library C:\Windows\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x76890000 Library C:\Windows\system32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 0x75FB0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\sandbox.ppl (Virtual environment for executing applications/Kaspersky Lab ZAO) 0x6EBF0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\dmap.ppl (Direct Mapper plugin/Kaspersky Lab ZAO) 0x72D30000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\excludemanager.dll (file and activity exclude manager/Kaspersky Lab ZAO) 0x6C610000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75890000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x74870000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x766F0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x75AB0000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x71FC0000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x73EC0000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x71F40000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\smtpprtc.ppl (SMTP Protocoller/Kaspersky Lab ZAO) 0x72850000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\pop3prtc.ppl (POP3 Protocoller/Kaspersky Lab ZAO) 0x72840000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\trafmon2.ppl (Traffic Monitor/Kaspersky Lab ZAO) 0x72B20000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\imapprtc.ppl (IMAP Protocoller/Kaspersky Lab ZAO) 0x72B00000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\nntpprtc.ppl (NNTP Protocoller/Kaspersky Lab ZAO) 0x72AE0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\urlflt.ppl (UrlFiltering/Kaspersky Lab ZAO) 0x724D0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\icuuc40.dll (IBM ICU Common DLL/IBM Corporation and others) 0x6CB80000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\icudt40.dll (ICU Data DLL/IBM Corporation and others) 0x6C790000 Library C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\klavasyswatch.dll.c5268e6250d6c790bc622be19461bd13 (Heuristics proactive detection module/Kaspersky Lab ZAO) 0x58000000 Library C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\avengine.dll.b58b1ccf29426fd55e1170589acc4ed1 (AV engine loader/Kaspersky Lab ZAO) 0x58200000 Library C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\kavbase.kdl.e9df80be9f0878e7a3b6bb2e98ce5d12 (AV engine/Kaspersky Lab ZAO) 0x07F80000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\webnetstat.ppl (Web Network Statistics/Kaspersky Lab ZAO) 0x6DA10000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ksn_client.dll (KSN client service/Kaspersky Lab ZAO) 0x6D290000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\transport_provider.dll (Network transport service/Kaspersky Lab ZAO) 0x6D8D0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\CryptoStaticProvider.dll (CryptoProvider library/Kaspersky Lab ZAO) 0x6C470000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x753F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74F60000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\aphishex.ppl (AntiPhishingEx Component/Kaspersky Lab ZAO) 0x6DB50000 Library C:\Windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x752B0000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x753E0000 Library C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\klavemu.kdl.06ecd24ad0bcecb5db8a94e329f97363 (Heuristics engine/Kaspersky Lab ZAO) 0x38400000 Library C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\kjim.kdl.fa306d735d3e94b879d3dd42aa355183 (Script Heuristics Engine/Kaspersky Lab ZAO) 0x38800000 Library C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\vlns.kdl.002d59a92d55ccbddcca8fba8ea8340d (Vulnerability scanner/Kaspersky Lab) 0x38200000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avzkrnl.dll 0x6C180000 Library C:\Windows\system32\winspool.drv (Windows Spooler Driver/Microsoft Corporation) 0x70590000 Library C:\Windows\system32\wininet.dll (Internet Extensions for Win32/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\Normaliz.dll (Unicode Normalization DLL/Microsoft Corporation) 0x09B00000 Library C:\Windows\system32\comdlg32.dll (Common Dialogs DLL/Microsoft Corporation) 0x77750000 Library C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\mark.kdl.4d0f31801e5ff37724e32cbec01eef17 (Anti-Rootkit Engine/Kaspersky Lab ZAO) 0x38300000 Library C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\qscan.kdl.72dc07f54416a6025b514fa359528ce8 (Initial Scan Engine/Kaspersky Lab ZAO) 0x38C00000 Library C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\kavsys.kdl.b45acade5360ab4998f63b238a6e3afb (Set of system interfaces/Kaspersky Lab ZAO) 0x38D00000 Library C:\Windows\system32\msi.dll (Windows Installer/Microsoft Corporation) 0x0EA60000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ichecker.dll (ichecker and iswift tech/Kaspersky Lab ZAO) 0x6C740000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\EXTLprtc.ppl (External Protocoller task/Kaspersky Lab ZAO) 0x6CF60000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\httpanlz.ppl (HTTP Protocoller/Kaspersky Lab ZAO) 0x6CE80000 Library C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\pdm.kdl.1bd33ed9403c75ff4568442422fbd9ce (AV engine/Kaspersky Lab) 0x6CE40000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ICQprtc.dll (ICQ Protocoller/Kaspersky Lab ZAO) 0x6CE10000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\FTPprtc.dll (FTP Protocoller/Kaspersky Lab ZAO) 0x6C670000 Library C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\uds.dll.e852cb8a5b005a688b30be8611504185 (Urgent Detection System/Kaspersky Lab ZAO) 0x58500000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\md5_cache.dll (MD5 checksum library/Kaspersky Lab ZAO) 0x6D420000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\MSNprtc.dll (MSN Protocoller/Kaspersky Lab ZAO) 0x6CDF0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\appcat.ppl (Application Categorizer/Kaspersky Lab ZAO) 0x6DB70000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\JbrPrtc.dll (Jabber Protocoller/Kaspersky Lab ZAO) 0x6CCA0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\uniarc.ppl (UniArchiver plugin/Kaspersky Lab ZAO) 0x73680000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\minizip.ppl (ZIP MiniArchiver plugin/Kaspersky Lab ZAO) 0x6CF50000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\cab.ppl (CAB MiniArchiver plugin/Kaspersky Lab ZAO) 0x6CDD0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\arj.ppl (ARJ MiniArchiver plugin/Kaspersky Lab ZAO) 0x6CDC0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\IRCPrtc.dll (IRC Protocoller/Kaspersky Lab ZAO) 0x6CC80000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\rar.ppl (RAR/Kaspersky Lab ZAO) 0x0EE30000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\swpragueplugin.dll (EKA proxy to prague for SW2/Kaspersky Lab ZAO) 0x6D810000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\lha.ppl (LHA Repacker/Kaspersky Lab ZAO) 0x0EE90000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\mdb.ppl (MDB/Kaspersky Lab ZAO) 0x0EF30000 Library C:\Windows\system32\mapi32.dll (Extended MAPI 1.0 for Windows NT/Microsoft Corporation) 0x0EFC0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\msoe.ppl (MSOE/Kaspersky Lab ZAO) 0x6CDA0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\Yhoprtc.dll (Yahoo Protocoller/Kaspersky Lab ZAO) 0x6DAB0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\mailmsg.ppl (MAILMSG/Kaspersky Lab ZAO) 0x6CD60000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\MMPprtc.dll (Mail.Ru Agent Protocoller/Kaspersky Lab ZAO) 0x6D460000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\wdiskio.ppl (WDiskIO.ppl/Kaspersky Lab ZAO) 0x6EFD0000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\proxydet.ppl (TRANSPOR/Kaspersky Lab ZAO) 0x6E900000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\Updater.dll (updater.EXE/Kaspersky Lab ZAO) 0x04EA0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\diffs.dll (DIFFS/Kaspersky Lab ZAO) 0x6C490000 Library C:\Windows\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x70770000 Library C:\Windows\System32\fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x72180000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ksnhelper.dll (KSN_Helper Library/Kaspersky Lab ZAO) 0x6D2F0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\packed_io.dll (Lib to work with packed files/Kaspersky Lab ZAO) 0x6D630000 Library C:\ProgramData\Kaspersky Lab\AVP11\Bases\Cache\dns_client.dll.0aabb54501c9e2915f66fe05533fd6b7 (DNS Resolver library/Kaspersky Lab ZAO) 0x58400000 Process C:\Windows\system32\taskhost.exe (Host Process for Windows Tasks/Microsoft Corporation) 2056 Library C:\Windows\system32\taskhost.exe (Host Process for Windows Tasks/Microsoft Corporation) 0x00290000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74730000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74440000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\System32\PlaySndSrv.dll (PlaySound Service/Microsoft Corporation) 0x6FB70000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\MsCtfMonitor.dll (MsCtfMonitor DLL/Microsoft Corporation) 0x6FB60000 Library C:\Windows\system32\MSUTB.dll (MSUTB Server DLL/Microsoft Corporation) 0x6FAB0000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x74F80000 Library C:\Windows\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x73E80000 Library C:\Windows\system32\dimsjob.dll (DIMS Job DLL/Microsoft Corporation) 0x6DA50000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\taskschd.dll (Task Scheduler COM API/Microsoft Corporation) 0x73B90000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\System32\netprofm.dll (Network List Manager/Microsoft Corporation) 0x70940000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\System32\nlaapi.dll (Network Location Awareness 2/Microsoft Corporation) 0x73D00000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\System32\npmproxy.dll (Network List Manager Proxy/Microsoft Corporation) 0x727F0000 Library C:\Windows\system32\dsrole.dll (DS Role Client DLL/Microsoft Corporation) 0x73C30000 Process C:\Program Files\Zune\ZuneLauncher.exe (Zune Auto-Launcher/Microsoft Corporation) 2364 Library C:\Program Files\Zune\ZuneLauncher.exe (Zune Auto-Launcher/Microsoft Corporation) 0x679D0000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Program Files\Zune\ZuneCfg.DLL (Zune Configuration/Microsoft Corporation) 0x70710000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75890000 Library C:\Windows\AppPatch\AcLayers.DLL (Windows Compatibility DLL/Microsoft Corporation) 0x6DD20000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\WINSPOOL.DRV (Windows Spooler Driver/Microsoft Corporation) 0x70590000 Library C:\Windows\system32\MPR.dll (Multiple Provider Router DLL/Microsoft Corporation) 0x70C50000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74730000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74440000 Library C:\Program Files\Zune\ZuneShellExt.dll (Zune Shell extension/Microsoft Corporation) 0x6DD00000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Process C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google Desktop/Google) 2412 Library C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google Desktop/Google) 0x01260000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Program Files\Google\Google Desktop Search\GoogleServices.DLL (Google Desktop/Google) 0x6DB00000 Library C:\Program Files\Google\Google Desktop Search\GoogleDesktopCommon.dll (Google Desktop/Google) 0x74140000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\Normaliz.dll (Unicode Normalization DLL/Microsoft Corporation) 0x77970000 Library C:\Windows\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x76890000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\system32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 0x75FB0000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\COMCTL32.dll (User Experience Controls Library/Microsoft Corporation) 0x74870000 Library C:\Windows\system32\IMM32.dll (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x75F00000 Library C:\Program Files\Google\Google Desktop Search\GoogleDesktopResources_en.dll (Google Desktop/Google) 0x74050000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74730000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x73EC0000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x75DC0000 Library C:\Windows\system32\wtsapi32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x74F80000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74440000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75890000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x753F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74F60000 Library C:\Program Files\Google\Google Desktop Search\GoogleDesktopAPI2.dll (Google Desktop/Google) 0x73350000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\SXS.DLL (Fusion 2.5/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library C:\Windows\system32\shell32.DLL (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library C:\Windows\system32\propsys.dll (Microsoft Property System/Microsoft Corporation) 0x74770000 Library C:\Windows\System32\msxml3.dll (MSXML 3.0 SP11/Microsoft Corporation) 0x6D5E0000 Library C:\Windows\System32\netprofm.dll (Network List Manager/Microsoft Corporation) 0x70940000 Library C:\Windows\System32\nlaapi.dll (Network Location Awareness 2/Microsoft Corporation) 0x73D00000 Library C:\Windows\System32\npmproxy.dll (Network List Manager Proxy/Microsoft Corporation) 0x727F0000 Library C:\Program Files\Google\Google Desktop Search\GoogleDesktopHyper.dll (Google Desktop/Google) 0x6D070000 Library C:\Windows\system32\asycfilt.dll (Microsoft Corporation) 0x72800000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\dnsapi.DLL (DNS Client API DLL/Microsoft Corporation) 0x752B0000 Library C:\Windows\system32\iphlpapi.DLL (IP Helper API/Microsoft Corporation) 0x722D0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x722C0000 Library C:\Windows\system32\RASAPI32.dll (Remote Access API/Microsoft Corporation) 0x73080000 Library C:\Windows\system32\rasman.dll (Remote Access Connection Manager/Microsoft Corporation) 0x741A0000 Library C:\Windows\system32\rtutils.dll (Routing Utilities/Microsoft Corporation) 0x73FC0000 Library C:\Windows\system32\sensapi.dll (SENS Connectivity API DLL/Microsoft Corporation) 0x72300000 Library C:\Windows\system32\wintrust.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x75A50000 Library C:\Windows\system32\schannel.DLL (TLS / SSL Security Provider/Microsoft Corporation) 0x75240000 Library C:\Windows\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x70770000 Library C:\Windows\System32\winrnr.dll (LDAP RnR Provider DLL/Microsoft Corporation) 0x73590000 Library C:\Windows\system32\napinsp.dll (E-mail Naming Shim Provider/Microsoft Corporation) 0x73580000 Library C:\Windows\system32\pnrpnsp.dll (PNRP Name Space Provider/Microsoft Corporation) 0x73560000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x753E0000 Library C:\Windows\System32\fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x72180000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\system32\ncrypt.dll (Windows cryptographic library/Microsoft Corporation) 0x75560000 Library C:\Windows\system32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75540000 Library C:\Windows\system32\bcryptprimitives.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75110000 Library C:\Windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74FC0000 Library C:\Windows\system32\cryptnet.dll (Crypto Network Related API/Microsoft Corporation) 0x72310000 Library C:\Windows\system32\Cabinet.dll (Microsoft® Cabinet File API/Microsoft Corporation) 0x71780000 Library C:\Windows\system32\DEVRTL.dll (Device Management Run Time Library/Microsoft Corporation) 0x751B0000 Process C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Anti-Virus/Kaspersky Lab ZAO) 2420 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Anti-Virus/Kaspersky Lab ZAO) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x74F80000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b 5\MSVCR80.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x71880000 Library C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b 5\MSVCP80.dll (Microsoft® C++ Runtime Library/Microsoft Corporation) 0x717F0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x75F00000 Library C:\Windows\system32\wintrust.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x75A50000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\imagehlp.dll (Windows NT Image Helper/Microsoft Corporation) 0x766C0000 Library C:\Windows\system32\ncrypt.dll (Windows cryptographic library/Microsoft Corporation) 0x75560000 Library C:\Windows\system32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75540000 Library C:\Windows\system32\bcryptprimitives.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75110000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74FC0000 Library C:\Windows\system32\cryptnet.dll (Crypto Network Related API/Microsoft Corporation) 0x72310000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x75DC0000 Library C:\Windows\system32\SensApi.dll (SENS Connectivity API DLL/Microsoft Corporation) 0x72300000 Library C:\Windows\system32\Cabinet.dll (Microsoft® Cabinet File API/Microsoft Corporation) 0x71780000 Library C:\Windows\system32\DEVRTL.dll (Device Management Run Time Library/Microsoft Corporation) 0x751B0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\fssync.dll (FSSYNC.DLL/Kaspersky Lab ZAO) 0x6C650000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\FLTLIB.DLL (Filter Library/Microsoft Corporation) 0x71770000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\DumpWriter.dll (Kaspersky Dump Writer DLL/Kaspersky Lab ZAO) 0x6C500000 Library C:\Windows\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74730000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\memmng.dll (Memmng module/Kaspersky Lab ZAO) 0x6D430000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74440000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\Ushata.dll (Ushata module/Kaspersky Lab ZAO) 0x6DA80000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\CLLDR.DLL (CLLDR/Kaspersky Lab ZAO) 0x6C460000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\prremote.dll (PR_REMOTE/Kaspersky Lab ZAO) 0x71580000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\prloader.dll (Prague Loader/Kaspersky Lab ZAO) 0x6D640000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\pxstub.ppl (Proxy Stubs/Kaspersky Lab ZAO) 0x6E9B0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\params.ppl (Structure Serializer/Kaspersky Lab ZAO) 0x71180000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\winreg.ppl (WINREG/Kaspersky Lab ZAO) 0x70C20000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\hashmd5.ppl (HASHMD5/Kaspersky Lab ZAO) 0x70C90000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\nfio.ppl (NFIO/Kaspersky Lab ZAO) 0x70C70000 Library C:\Windows\system32\MPR.dll (Multiple Provider Router DLL/Microsoft Corporation) 0x70C50000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\fsdrvplg.ppl (Plugin for FSDrv/Kaspersky Lab ZAO) 0x70C40000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avpgui.ppl (Kaspersky Anti-Virus GUI Logic/Kaspersky Lab ZAO) 0x6DBB0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\service.dll (Component service provider/Kaspersky Lab ZAO) 0x6D700000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\eka_meta.dll (EKA_META/Kaspersky Lab ZAO) 0x6C520000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\esmgr.dll (ESMgr/Kaspersky Lab ZAO) 0x6C5C0000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\basegui.ppl (Kaspersky Anti-Virus GUI Windows part/Kaspersky Lab ZAO) 0x6DDB0000 Library C:\Windows\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x74120000 Library C:\Windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x74110000 Library C:\Windows\system32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x756F0000 Library C:\Windows\system32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x74100000 Library C:\Windows\system32\SAMCLI.DLL (Security Accounts Manager Client DLL/Microsoft Corporation) 0x740F0000 Library C:\Windows\system32\MSIMG32.dll (GDIEXT Client DLL/Microsoft Corporation) 0x737A0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\Comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x74870000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\thpimpl.ppl (Thread Pool/Kaspersky Lab ZAO) 0x70C30000 Library C:\Windows\system32\RICHED20.DLL (Rich Text Edit Control, v3.1/Microsoft Corporation) 0x72A60000 Process C:\Windows\system32\wuauclt.exe (Windows Update/Microsoft Corporation) 2536 Library C:\Windows\system32\wuauclt.exe (Windows Update/Microsoft Corporation) 0x00030000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\wucltux.dll (Windows Update Client User Experience/Microsoft Corporation) 0x669F0000 Library C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf 861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) 0x745A0000 Library C:\Windows\system32\MSIMG32.dll (GDIEXT Client DLL/Microsoft Corporation) 0x737A0000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library C:\Windows\system32\OLEACC.dll (Active Accessibility Core Component/Microsoft Corporation) 0x72CF0000 Library C:\Windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x73C10000 Library C:\Windows\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74730000 Library C:\Windows\system32\DUser.dll (Windows DirectUser Engine/Microsoft Corporation) 0x74CD0000 Library C:\Windows\system32\Cabinet.dll (Microsoft® Cabinet File API/Microsoft Corporation) 0x71780000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x75A50000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x74870000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\wups2.dll (Windows Update client proxy stub 2/Microsoft Corporation) 0x670C0000 Process C:\Users\Nick\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe (Main program for Octoshape client/Octoshape ApS) 2584 Library C:\Users\Nick\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe (Main program for Octoshape client/Octoshape ApS) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x75F00000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\dssenh.dll (Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider/Microsoft Corporation) 0x74020000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Users\Nick\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1008042-0-libOctoshapeClient.dll (Octoshape SUA/Octoshape ApS) 0x10000000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\COMCTL32.dll (User Experience Controls Library/Microsoft Corporation) 0x74870000 Library C:\Windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x722D0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x722C0000 Library C:\Windows\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Library C:\Windows\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x73E80000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\WinHttp.dll (Windows HTTP Services/Microsoft Corporation) 0x71380000 Library C:\Windows\system32\webio.dll (Web Transfer Protocols API/Microsoft Corporation) 0x71130000 Library C:\Windows\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74730000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74440000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x753F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74F60000 Library C:\Windows\system32\NLAapi.dll (Network Location Awareness 2/Microsoft Corporation) 0x73D00000 Library C:\Windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x752B0000 Library C:\Windows\System32\winrnr.dll (LDAP RnR Provider DLL/Microsoft Corporation) 0x73590000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\system32\napinsp.dll (E-mail Naming Shim Provider/Microsoft Corporation) 0x73580000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x71FC0000 Library C:\Windows\system32\pnrpnsp.dll (PNRP Name Space Provider/Microsoft Corporation) 0x73560000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x71F40000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\System32\fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x72180000 Library C:\Windows\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x70770000 Process C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google Desktop/Google) 2812 Library C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google Desktop/Google) 0x01260000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Program Files\Google\Google Desktop Search\GoogleServices.DLL (Google Desktop/Google) 0x6DB00000 Library C:\Program Files\Google\Google Desktop Search\GoogleDesktopCommon.dll (Google Desktop/Google) 0x74140000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\Normaliz.dll (Unicode Normalization DLL/Microsoft Corporation) 0x77970000 Library C:\Windows\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x76890000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\system32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 0x75FB0000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\COMCTL32.dll (User Experience Controls Library/Microsoft Corporation) 0x74870000 Library C:\Windows\system32\IMM32.dll (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x75F00000 Library C:\Program Files\Google\Google Desktop Search\GoogleDesktopResources_en.dll (Google Desktop/Google) 0x74050000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74730000 Library C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf 861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) 0x745A0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Program Files\Google\Google Desktop Search\GoogleUIEngine.dll (Google Desktop/Google) 0x733D0000 Library C:\Windows\system32\comdlg32.dll (Common Dialogs DLL/Microsoft Corporation) 0x77750000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library C:\Windows\system32\MSIMG32.dll (GDIEXT Client DLL/Microsoft Corporation) 0x737A0000 Library C:\Windows\system32\OLEACC.dll (Active Accessibility Core Component/Microsoft Corporation) 0x72CF0000 Library C:\Windows\system32\RICHED20.dll (Rich Text Edit Control, v3.1/Microsoft Corporation) 0x72A60000 Library C:\Windows\system32\asycfilt.dll (Microsoft Corporation) 0x72800000 Library C:\Windows\system32\WindowsCodecs.dll (Microsoft Windows Codecs Library/Microsoft Corporation) 0x74310000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74440000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x73EC0000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x75DC0000 Library C:\Program Files\Google\Google Desktop Search\GoogleDesktopSSD.dll (Google Desktop/Google) 0x6D5B0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75890000 Library C:\Windows\system32\EhStorShell.dll (Windows Enhanced Storage Shell Extension DLL/Microsoft Corporation) 0x6FAE0000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x766F0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x75AB0000 Library C:\Windows\system32\PROPSYS.dll (Microsoft Property System/Microsoft Corporation) 0x74770000 Library C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft SharePoint Workspace Extensions/Microsoft Corporation) 0x6F290000 Library C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4926_none_508ed732bcbc0e5 a\MSVCR90.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x6FA00000 Library C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4926_none_508ed732bcbc0e5 a\MSVCP90.dll (Microsoft® C++ Runtime Library/Microsoft Corporation) 0x6F970000 Library C:\Windows\WinSxS\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_51ca66a2bbe7680 6\ATL90.DLL (ATL Module for Windows (Unicode)/Microsoft Corporation) 0x6F940000 Library C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf 0x6EE80000 Library C:\PROGRA~1\MICROS~2\Office14\1033\GrooveIntlResource.dll 0x6E610000 Library C:\Windows\System32\cscui.dll (Client Side Caching UI/Microsoft Corporation) 0x6F8D0000 Library C:\Windows\System32\CSCDLL.dll (Offline Files Temporary Shim/Microsoft Corporation) 0x6F8C0000 Library C:\Windows\system32\CSCAPI.dll (Offline Files Win32 API/Microsoft Corporation) 0x6F8B0000 Library C:\Windows\system32\ntshrui.dll (Shell extensions for sharing/Microsoft Corporation) 0x6F840000 Library C:\Windows\system32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x756F0000 Library C:\Windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x73C10000 Library C:\Program Files\Google\Google Desktop Search\GoogleDesktopDeskbar2.dll (Google Desktop/Google) 0x6D040000 Process dllhost.exe (COM Surrogate/Microsoft Corporation) 3104 Process C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 3280 Library C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00F60000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library c:\windows\system32\wersvc.dll (Windows Error Reporting Service/Microsoft Corporation) 0x69EF0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Process C:\Windows\system32\SearchIndexer.exe (Microsoft Windows Search Indexer/Microsoft Corporation) 3284 Library C:\Windows\system32\SearchIndexer.exe (Microsoft Windows Search Indexer/Microsoft Corporation) 0x00CA0000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\TQUERY.DLL (tquery.dll/Microsoft Corporation) 0x6D400000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\MSSRCH.DLL (mssrch.dll/Microsoft Corporation) 0x6D280000 Library C:\Windows\system32\ESENT.dll (Extensible Storage Engine for Microsoft® Windows®/Microsoft Corporation) 0x6D0D0000 Library C:\Windows\system32\IMM32.dll (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x75F00000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75870000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\Msidle.dll (User Idle Monitor/Microsoft Corporation) 0x6D0C0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\mssprxy.dll (Microsoft Search Proxy/Microsoft Corporation) 0x6D0B0000 Library C:\Windows\system32\propsys.dll (Microsoft Property System/Microsoft Corporation) 0x74770000 Library C:\Windows\system32\en-us\tQuery.dll.mui (tquery.dll/Microsoft Corporation) 0x6CF80000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x73EC0000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x75DC0000 Library C:\Windows\system32\VSSAPI.DLL (Microsoft® Volume Shadow Copy Requestor/Writer Services API DLL/Microsoft Corporation) 0x715C0000 Library C:\Windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73C80000 Library C:\Windows\system32\VssTrace.DLL (Microsoft® Volume Shadow Copy Service Tracing Library/Microsoft Corporation) 0x715B0000 Library C:\Windows\system32\samcli.dll (Security Accounts Manager Client DLL/Microsoft Corporation) 0x740F0000 Library C:\Windows\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x74EB0000 Library C:\Windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x74110000 Library C:\Windows\system32\es.dll (COM+/Microsoft Corporation) 0x73AC0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x74F80000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\system32\SXS.DLL (Fusion 2.5/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75890000 Library C:\Windows\System32\NaturalLanguage6.dll (Natural Language Development Platform 6/Microsoft Corporation) 0x66D00000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\System32\NLSData0009.dll (Microsoft English Natural Language Server Data and Code/Microsoft Corporation) 0x66540000 Library C:\Windows\System32\NLSLexicons0009.dll (Microsoft English Natural Language Server Data and Code/Microsoft Corporation) 0x662B0000 Library C:\Windows\system32\elscore.dll (Els Core Platform DLL/Microsoft Corporation) 0x670D0000 Library C:\Windows\system32\ElsLad.dll (ELS Language Detection/Microsoft Corporation) 0x66C70000 Library C:\Windows\System32\NLSData0000.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x66130000 Library C:\Windows\System32\NLSData0024.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x65F40000 Library C:\Windows\System32\NLSLexicons0024.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x657A0000 Library C:\Windows\System32\NLSData0003.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x655B0000 Library C:\Windows\System32\NLSLexicons0003.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x65440000 Library C:\Windows\System32\NLSData001d.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x64FE0000 Library C:\Windows\System32\NLSLexicons001d.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x649D0000 Library C:\Windows\System32\NLSData001a.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x647E0000 Library C:\Windows\System32\NLSLexicons001a.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x64220000 Library C:\Windows\System32\NLSData0013.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x63EC0000 Library C:\Windows\System32\NLSLexicons0013.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x639F0000 Library C:\Windows\System32\NLSData0007.dll (Microsoft German Natural Language Server Data and Code/Microsoft Corporation) 0x637C0000 Library C:\Windows\System32\NLSLexicons0007.dll (Microsoft German Natural Language Server Data and Code/Microsoft Corporation) 0x62C40000 Library C:\Windows\System32\NLSData0010.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x627E0000 Library C:\Windows\System32\NLSLexicons0010.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x623E0000 Library C:\Windows\System32\NLSData0026.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x66EC0000 Library C:\Windows\System32\NLSLexicons0026.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x61E50000 Library C:\Windows\System32\NLSData003e.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x61C80000 Library C:\Windows\System32\NLSLexicons003e.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x618A0000 Library C:\Windows\System32\NLSData0011.dll (Microsoft Japanese Natural Language Server Data and Code/Microsoft Corporation) 0x61610000 Library C:\Windows\System32\NLSLexicons0011.dll (Microsoft Japanese Natural Language Server Data and Code/Microsoft Corporation) 0x613B0000 Library C:\Windows\System32\NLSModels0011.dll (Microsoft Japanese Natural Language Server Data and Code/Microsoft Corporation) 0x60ED0000 Library C:\Windows\system32\korwbrkr.dll (korwbrkr/Microsoft Corporation) 0x73A70000 Library C:\Windows\system32\chtbrkr.dll (Chinese Traditional Word Breaker/Microsoft Corporation) 0x608F0000 Library C:\Windows\system32\query.dll (Content Index Utility DLL/Microsoft Corporation) 0x60790000 Library C:\Windows\system32\chsbrkr.dll (Simplified Chinese Word Breaker/Microsoft Corporation) 0x605F0000 Library C:\Windows\System32\NLSData000c.dll (Microsoft French Natural Language Server Data and Code/Microsoft Corporation) 0x601E0000 Library C:\Windows\System32\NLSLexicons000c.dll (Microsoft French Natural Language Server Data and Code/Microsoft Corporation) 0x5FBE0000 Library C:\Windows\System32\NLSData0416.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x5F780000 Library C:\Windows\System32\NLSLexicons0416.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x5F2A0000 Library C:\Windows\System32\NLSData0021.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x5F0D0000 Library C:\Windows\System32\NLSLexicons0021.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x5EEC0000 Process C:\Windows\system32\SearchProtocolHost.exe (Microsoft Windows Search Protocol Host/Microsoft Corporation) 3352 Library C:\Windows\system32\SearchProtocolHost.exe (Microsoft Windows Search Protocol Host/Microsoft Corporation) 0x00B80000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\TQUERY.DLL (tquery.dll/Microsoft Corporation) 0x6D400000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\MSSHooks.dll (MSSHooks.dll/Microsoft Corporation) 0x670B0000 Library C:\Windows\system32\IMM32.dll (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\Msidle.dll (User Idle Monitor/Microsoft Corporation) 0x6D0C0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\mssprxy.dll (Microsoft Search Proxy/Microsoft Corporation) 0x6D0B0000 Library C:\Windows\system32\mssph.dll (Microsoft Search Protocol Handler/Microsoft Corporation) 0x66E50000 Library C:\Windows\system32\MAPI32.dll (Extended MAPI 1.0 for Windows NT/Microsoft Corporation) 0x6C8C0000 Library C:\Windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x755A0000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x73EC0000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x75DC0000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x74870000 Library C:\Windows\system32\propsys.dll (Microsoft Property System/Microsoft Corporation) 0x74770000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x766F0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x75AB0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\ntshrui.dll (Shell extensions for sharing/Microsoft Corporation) 0x6F840000 Library C:\Windows\system32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x756F0000 Library C:\Windows\system32\cscapi.dll (Offline Files Win32 API/Microsoft Corporation) 0x6F8B0000 Library C:\Windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x73C10000 Process C:\Windows\system32\SearchFilterHost.exe (Microsoft Windows Search Filter Host/Microsoft Corporation) 3704 Library C:\Windows\system32\SearchFilterHost.exe (Microsoft Windows Search Filter Host/Microsoft Corporation) 0x00600000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\TQUERY.DLL (tquery.dll/Microsoft Corporation) 0x6D400000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\IMM32.dll (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\MSSHooks.dll (MSSHooks.dll/Microsoft Corporation) 0x670B0000 Library C:\Windows\system32\mscoree.dll (Microsoft .NET Runtime Execution Engine/Microsoft Corporation) 0x73A20000 Library C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll (Microsoft .NET Runtime Execution Engine/Microsoft Corporation) 0x73940000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\mssprxy.dll (Microsoft Search Proxy/Microsoft Corporation) 0x6D0B0000 Process C:\Program Files\Windows Media Player\wmpnetwk.exe (Windows Media Player Network Sharing Service/Microsoft Corporation) 3820 Library C:\Program Files\Windows Media Player\wmpnetwk.exe (Windows Media Player Network Sharing Service/Microsoft Corporation) 0x00210000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77830000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x77980000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75A00000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x769D0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75CA0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x75EE0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x764B0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x76560000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x75F10000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x76310000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x776C0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x761B0000 Library C:\Windows\system32\WSOCK32.dll (Windows Socket 32-Bit DLL/Microsoft Corporation) 0x74210000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x76680000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x722D0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x722C0000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75D50000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74FE0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75980000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x74F80000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x75C80000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x765B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x75970000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75070000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x73EC0000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x75DC0000 Library C:\Windows\system32\wmdrmdev.dll (Windows Media DRM for Network Devices Registration DLL/Microsoft Corporation) 0x6CC30000 Library C:\Windows\system32\drmv2clt.dll (DRMv2 Client DLL/Microsoft Corporation) 0x6CB30000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74F50000 Library C:\Windows\system32\MFPlat.DLL (Media Foundation Platform DLL/Microsoft Corporation) 0x737F0000 Library C:\Windows\system32\AVRT.dll (Multimedia Realtime Runtime/Microsoft Corporation) 0x74E90000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x766F0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A80000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x75AB0000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76A70000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x75A50000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75AD0000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x759F0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x75F20000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75430000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x751D0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x758E0000 Library C:\Windows\system32\upnp.dll (UPnP Control Point API/Microsoft Corporation) 0x72440000 Library C:\Windows\system32\WINHTTP.dll (Windows HTTP Services/Microsoft Corporation) 0x71380000 Library C:\Windows\system32\webio.dll (Web Transfer Protocols API/Microsoft Corporation) 0x71130000 Library C:\Windows\system32\SSDPAPI.dll (SSDP Client API DLL/Microsoft Corporation) 0x71110000 Library C:\Windows\system32\SXS.DLL (Fusion 2.5/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x71FC0000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x71F40000 Library C:\Windows\system32\wmp.dll (Windows Media Player/Microsoft Corporation) 0x6B340000 Library C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf 861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) 0x745A0000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74440000 Library C:\Windows\system32\wmploc.dll (Windows Media Player Resources/Microsoft Corporation) 0x6A730000 Library C:\Program Files\Internet Explorer\ieproxy.dll (IE ActiveX Interface Marshaling Library/Microsoft Corporation) 0x6A3D0000 Library C:\Windows\system32\windowscodecs.dll (Microsoft Windows Codecs Library/Microsoft Corporation) 0x74310000 Library C:\Windows\System32\provsvc.dll (Windows HomeGroup/Microsoft Corporation) 0x6CA40000 Library C:\Windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x73C10000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75950000 Library C:\Windows\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x74120000 Library C:\Windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x74110000 Library C:\Windows\system32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x756F0000 Library C:\Windows\system32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x74100000 Library C:\Windows\System32\wmpps.dll (Windows Media Player Proxy Stub Dll/Microsoft Corporation) 0x6C960000 Library C:\Windows\system32\wmpmde.dll (WMPMDE DLL/Microsoft Corporation) 0x6A200000 Library C:\Windows\system32\HTTPAPI.dll (HTTP Protocol Stack API/Microsoft Corporation) 0x71120000 Library C:\Windows\system32\pcwum.dll (Performance Counters for Windows Native DLL/Microsoft Corporation) 0x74F90000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x753F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74F60000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x753E0000 Library \\?\C:\ProgramData\Microsoft\Windows\DRM\Cache\Indiv_SID_S-1-5-20\Indiv01.key (Individualized Black Box DLL/Microsoft Corporation) 0x0AC00000 Library C:\Windows\system32\WinSATAPI.dll (Windows System Assessment Tool API/Microsoft Corporation) 0x6A320000 Library C:\Windows\system32\dxgi.dll (DirectX Graphics Infrastructure/Microsoft Corporation) 0x702F0000 Library C:\Windows\System32\msxml6.dll (MSXML 6.0 SP3/Microsoft Corporation) 0x71B90000 Library C:\Windows\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\Normaliz.dll (Unicode Normalization DLL/Microsoft Corporation) 0x77970000 Library C:\Windows\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x76890000 Library C:\Windows\system32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 0x75FB0000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x74870000 Library C:\Windows\system32\dnsapi.DLL (DNS Client API DLL/Microsoft Corporation) 0x752B0000 Library C:\Windows\system32\PROPSYS.dll (Microsoft Property System/Microsoft Corporation) 0x74770000 Library C:\Windows\System32\msmpeg2enc.dll (Microsoft MPEG-2 Encoder/Microsoft Corporation) 0x6A070000 Library C:\Windows\system32\devenum.dll (Device enumeration./Microsoft Corporation) 0x6C940000 Library C:\Windows\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x73E80000 Library C:\Windows\system32\msdmo.dll (DMO Runtime/Microsoft Corporation) 0x6C990000 Library C:\Windows\System32\netprofm.dll (Network List Manager/Microsoft Corporation) 0x70940000 Library C:\Windows\System32\nlaapi.dll (Network Location Awareness 2/Microsoft Corporation) 0x73D00000 Library C:\Windows\System32\npmproxy.dll (Network List Manager Proxy/Microsoft Corporation) 0x727F0000 Library C:\Windows\system32\upnphost.dll (UPnP Device Host/Microsoft Corporation) 0x6A020000 Library C:\Windows\system32\wbem\wbemprox.dll (WMI/Microsoft Corporation) 0x70CF0000 Library C:\Windows\system32\wbemcomn.dll (WMI/Microsoft Corporation) 0x70F60000 Library C:\Windows\system32\wbem\wbemsvc.dll (WMI/Microsoft Corporation) 0x707A0000 Library C:\Windows\system32\wbem\fastprox.dll (WMI Custom Marshaller/Microsoft Corporation) 0x70E90000 Library C:\Windows\system32\NTDSAPI.dll (Active Directory Domain Services API/Microsoft Corporation) 0x70D00000 Library C:\Windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74FC0000 Library C:\Windows\system32\FirewallAPI.dll (Windows Firewall API/Microsoft Corporation) 0x74E10000 Library C:\Windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x755A0000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x750D0000 Library C:\Windows\System32\msxml3.dll (MSXML 3.0 SP11/Microsoft Corporation) 0x6D5E0000 Library C:\Windows\system32\XmlLite.dll (Microsoft XmlLite Library/Microsoft Corporation) 0x74410000 Library C:\Windows\system32\LINKINFO.dll (Windows Volume Tracking/Microsoft Corporation) 0x70AC0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75890000 Library C:\Windows\system32\NetworkExplorer.dll (Network Explorer/Microsoft Corporation) 0x6DE70000 Library C:\Windows\system32\MPR.dll (Multiple Provider Router DLL/Microsoft Corporation) 0x70C50000 Library C:\Windows\System32\drprov.dll (Microsoft Remote Desktop Session Host Server Network Provider/Microsoft Corporation) 0x69FE0000 Library C:\Windows\System32\ntlanman.dll (Microsoft® Lan Manager/Microsoft Corporation) 0x69FC0000 Library C:\Windows\System32\davclnt.dll (Web DAV Client DLL/Microsoft Corporation) 0x69FA0000 Library C:\Windows\System32\DAVHLPR.dll (DAV Helper DLL/Microsoft Corporation) 0x69F90000 Library C:\Windows\system32\dsrole.dll (DS Role Client DLL/Microsoft Corporation) 0x73C30000 Library C:\Windows\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x74EB0000 Library C:\Windows\system32\PhotoMetadataHandler.dll (Photo Metadata Handler/Microsoft Corporation) 0x6A2C0000 Library C:\Windows\system32\ntshrui.dll (Shell extensions for sharing/Microsoft Corporation) 0x6F840000 Library C:\Windows\system32\cscapi.dll (Offline Files Win32 API/Microsoft Corporation) 0x6F8B0000 Library C:\Windows\System32\mf.dll (Media Foundation DLL/Microsoft Corporation) 0x67150000 Library C:\Windows\System32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73C80000 Library C:\Windows\System32\ksuser.dll (User CSA Library/Microsoft Corporation)

Breaker934

Post #12September 2, 2010, 2:26 PM UTC

—- Services - GMER 1.0.15 —- Service .NET CLR Data Service .NET CLR Networking Service .NET CLR Networking 4.0.0.0 Service .NET Data Provider for Oracle Service .NET Data Provider for SqlServer Service .NETFramework Service C:\Windows\system32\DRIVERS\1394ohci.sys (1394 OpenHCI Driver/Microsoft Corporation) [MANUAL] 1394ohci Service C:\Windows\system32\DRIVERS\ACPI.sys (ACPI Driver for NT/Microsoft Corporation) [BOOT] ACPI Service C:\Windows\system32\DRIVERS\acpipmi.sys (ACPI Power Metering Driver/Microsoft Corporation) [MANUAL] AcpiPmi Service C:\Windows\system32\DRIVERS\adp94xx.sys (Adaptec Windows SAS/SATA Storport Driver/Adaptec, Inc.) [MANUAL] adp94xx Service C:\Windows\system32\DRIVERS\adpahci.sys (Adaptec Windows SATA Storport Driver/Adaptec, Inc.) [MANUAL] adpahci Service C:\Windows\system32\DRIVERS\adpu320.sys (Adaptec StorPort Ultra320 SCSI Driver/Adaptec, Inc.) [MANUAL] adpu320 Service adsi Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] AeLookupSvc Service C:\Windows\system32\drivers\afd.sys (Ancillary Function Driver for WinSock/Microsoft Corporation) [SYSTEM] AFD Service C:\Windows\system32\DRIVERS\agp440.sys (440 NT AGP Filter/Microsoft Corporation) [MANUAL] agp440 Service C:\Windows\system32\DRIVERS\djsvs.sys (Adaptec Ultra SCSI miniport/Adaptec, Inc.) [MANUAL] aic78xx Service C:\Windows\System32\alg.exe (Application Layer Gateway Service/Microsoft Corporation) [MANUAL] ALG Service C:\Windows\system32\DRIVERS\aliide.sys (ALi mini IDE Driver/Acer Laboratories Inc.) [MANUAL] aliide Service C:\Windows\system32\DRIVERS\amdagp.sys (AMD NT AGP Filter/Microsoft Corporation) [MANUAL] amdagp Service C:\Windows\system32\DRIVERS\amdide.sys (AMD IDE Driver/Microsoft Corporation) [MANUAL] amdide Service C:\Windows\system32\DRIVERS\amdk8.sys (Processor Device Driver/Microsoft Corporation) [MANUAL] AmdK8 Service C:\Windows\system32\DRIVERS\amdppm.sys (Processor Device Driver/Microsoft Corporation) [MANUAL] AmdPPM Service C:\Windows\system32\DRIVERS\amdsata.sys (AHCI 1.2 Device Driver/Advanced Micro Devices) [MANUAL] amdsata Service C:\Windows\system32\DRIVERS\amdsbs.sys (AMD Technology AHCI Compatible Controller Driver for Windows family/AMD Technologies Inc.) [MANUAL] amdsbs Service C:\Windows\system32\DRIVERS\amdxata.sys (Storage Filter Driver/Advanced Micro Devices) [BOOT] amdxata Service C:\Windows\system32\drivers\appid.sys (AppID Driver/Microsoft Corporation) [MANUAL] AppID Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] AppIDSvc Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] Appinfo Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] AppMgmt Service C:\Windows\system32\DRIVERS\arc.sys (Adaptec RAID Storport Driver/Adaptec, Inc.) [MANUAL] arc Service C:\Windows\system32\DRIVERS\arcsas.sys (Adaptec SAS RAID WS03 Driver/Adaptec, Inc.) [MANUAL] arcsas Service C:\Windows\system32\DRIVERS\asyncmac.sys (MS Remote Access serial network driver/Microsoft Corporation) [MANUAL] AsyncMac Service C:\Windows\system32\DRIVERS\atapi.sys (ATAPI IDE Miniport Driver/Microsoft Corporation) [BOOT] atapi Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] AudioEndpointBuilder Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] Audiosrv Service C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Anti-Virus/Kaspersky Lab ZAO) [AUTO] AVP Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] AxInstSV Service C:\Windows\system32\DRIVERS\bxvbdx.sys (Broadcom NetXtreme II GigE VBD/Broadcom Corporation) [MANUAL] b06bdrv Service C:\Windows\system32\DRIVERS\b57nd60x.sys (Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver./Broadcom Corporation) [MANUAL] b57nd60x Service (Battery Class Driver/Microsoft Corporation) BattC Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] BDESVC Service (BEEP Driver/Microsoft Corporation) [SYSTEM] Beep Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] BFE Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] BITS Service C:\Windows\system32\DRIVERS\blbdrive.sys (BLB Drive Driver/Microsoft Corporation) [SYSTEM] blbdrive Service C:\Windows\system32\DRIVERS\bowser.sys (NT Lan Manager Datagram Receiver Driver/Microsoft Corporation) [MANUAL] bowser Service C:\Windows\system32\DRIVERS\BrFiltLo.sys (Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver/Brother Industries, Ltd.) [MANUAL] BrFiltLo Service C:\Windows\system32\DRIVERS\BrFiltUp.sys (Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver/Brother Industries, Ltd.) [MANUAL] BrFiltUp Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] Browser Service C:\Windows\System32\Drivers\Brserid.sys (Brotehr Serial I/F Driver (WDM)/Brother Industries Ltd.) [MANUAL] Brserid Service C:\Windows\System32\Drivers\BrSerWdm.sys (Brother Serial driver (WDM version)/Brother Industries Ltd.) [MANUAL] BrSerWdm Service C:\Windows\System32\Drivers\BrUsbMdm.sys (Brother USB MDM Driver /Brother Industries Ltd.) [MANUAL] BrUsbMdm Service C:\Windows\System32\Drivers\BrUsbSer.sys (Brother USB Serial Driver/Brother Industries Ltd.) [MANUAL] BrUsbSer Service C:\Windows\system32\DRIVERS\bthmodem.sys (Bluetooth Communications Driver/Microsoft Corporation) [MANUAL] BTHMODEM Service BTHPORT Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] bthserv Service C:\Windows\system32\DRIVERS\cdfs.sys (CD-ROM File System Driver/Microsoft Corporation) [DISABLED] cdfs Service C:\Windows\system32\DRIVERS\cdrom.sys (SCSI CD-ROM Driver/Microsoft Corporation) [SYSTEM] cdrom Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] CertPropSvc Service C:\Windows\system32\DRIVERS\circlass.sys (Consumer IR Class Driver for eHome/Microsoft Corporation) [MANUAL] circlass Service C:\Windows\System32\CLFS.sys (Common Log File System Driver/Microsoft Corporation) [BOOT] CLFS Service C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (.NET Runtime Optimization Service/Microsoft Corporation) [DISABLED] clr_optimization_v2.0.50727_32 Service C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (.NET Runtime Optimization Service/Microsoft Corporation) [AUTO] clr_optimization_v4.0.30319_32 Service C:\Windows\system32\DRIVERS\CmBatt.sys (Control Method Battery Driver/Microsoft Corporation) [MANUAL] CmBatt Service C:\Windows\system32\DRIVERS\cmdide.sys (CMD PCI IDE Bus Driver/CMD Technology, Inc.) [MANUAL] cmdide Service C:\Windows\System32\Drivers\cng.sys (Kernel Cryptography, Next Generation/Microsoft Corporation) [BOOT] CNG Service C:\Windows\system32\DRIVERS\compbatt.sys (Composite Battery Driver/Microsoft Corporation) [BOOT] Compbatt Service C:\Windows\system32\DRIVERS\CompositeBus.sys (Multi-Transport Composite Bus Enumerator/Microsoft Corporation) [MANUAL] CompositeBus Service C:\Windows\system32\dllhost.exe (COM Surrogate/Microsoft Corporation) [MANUAL] COMSysApp Service C:\Windows\system32\DRIVERS\crcdisk.sys (Disk Block Verification Filter Driver/Microsoft Corporation) [DISABLED] crcdisk Service crypt32 Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] CryptSvc Service C:\Windows\system32\drivers\csc.sys (Windows Client Side Caching Driver/Microsoft Corporation) [SYSTEM] CSC Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] CscService Service DCLocator Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] DcomLaunch Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] defragsvc Service C:\Windows\System32\Drivers\dfsc.sys (DFS Namespace Client Driver/Microsoft Corporation) [SYSTEM] DfsC Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] Dhcp Service C:\Windows\System32\drivers\discache.sys (System Indexer/Cache Driver/Microsoft Corporation) [SYSTEM] discache Service C:\Windows\system32\DRIVERS\disk.sys (PnP Disk Driver/Microsoft Corporation) [BOOT] Disk Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] Dnscache Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] dot3svc Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] DPS Service C:\Windows\system32\drivers\drmkaud.sys (Microsoft Trusted Audio Drivers/Microsoft Corporation) [MANUAL] drmkaud Service C:\Windows\System32\drivers\dxgkrnl.sys (DirectX Graphics Kernel/Microsoft Corporation) [MANUAL] DXGKrnl Service C:\Windows\system32\DRIVERS\E1G60I32.sys (Intel® PRO/1000 Adapter NDIS 6 deserialized driver/Intel Corporation) [MANUAL] E1G60 Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] EapHost Service C:\Windows\system32\DRIVERS\evbdx.sys (Broadcom NetXtreme II 10 GigE VBD/Broadcom Corporation) [MANUAL] ebdrv Service C:\Windows\System32\lsass.exe (Local Security Authority Process/Microsoft Corporation) [MANUAL] EFS Service C:\Windows\ehome\ehRecvr.exe (Windows Media Center Receiver Service/Microsoft Corporation) [MANUAL] ehRecvr Service C:\Windows\ehome\ehsched.exe (Windows Media Center Scheduler Service/Microsoft Corporation) [MANUAL] ehSched Service C:\Windows\system32\DRIVERS\elxstor.sys (Storport Miniport Driver for LightPulse HBAs/Emulex) [MANUAL] elxstor Service C:\Windows\system32\DRIVERS\errdev.sys (Error Device Driver/Microsoft Corporation) [MANUAL] ErrDev Service ESENT Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] eventlog Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] EventSystem Service (Microsoft Extended FAT File System/Microsoft Corporation) [MANUAL] exfat Service (Fast FAT File System Driver/Microsoft Corporation) [MANUAL] fastfat Service C:\Windows\system32\fxssvc.exe (Fax Service/Microsoft Corporation) [MANUAL] Fax Service C:\Windows\system32\DRIVERS\fdc.sys (Floppy Disk Controller Driver/Microsoft Corporation) [MANUAL] fdc Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] fdPHost Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] FDResPub Service C:\Windows\system32\drivers\fileinfo.sys (FileInfo Filter Driver/Microsoft Corporation) [BOOT] FileInfo Service C:\Windows\system32\drivers\filetrace.sys (File Trace Filter Driver/Microsoft Corporation) [MANUAL] Filetrace Service C:\Windows\system32\DRIVERS\flpydisk.sys (Floppy Driver/Microsoft Corporation) [MANUAL] flpydisk Service C:\Windows\system32\drivers\fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation) [BOOT] FltMgr Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] FontCache Service C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (PresentationFontCache.exe/Microsoft Corporation) [MANUAL] FontCache3.0.0.0 Service C:\Windows\System32\drivers\FsDepends.sys (File System Dependency Manager Mini Filter Driver/Microsoft Corporation) [MANUAL] FsDepends Service (File System Recognizer Driver/Microsoft Corporation) [BOOT] Fs_Rec Service C:\Windows\System32\DRIVERS\fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) [BOOT] fvevol Service C:\Windows\system32\DRIVERS\gagp30kx.sys (MS Generic AGPv3.0 Filter for K8/9 Processor Platforms/Microsoft Corporation) [MANUAL] gagp30kx Service C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google Desktop/Google) [MANUAL] GoogleDesktopManager-051210-111108 Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] gpsvc Service C:\Windows\system32\drivers\hcw85cir.sys (Hauppauge WinTV 885 Consumer IR Driver for eHome/Hauppauge Computer Works, Inc.) [MANUAL] hcw85cir Service C:\Windows\system32\drivers\HdAudio.sys (High Definition Audio Function Driver/Microsoft Corporation) [MANUAL] HdAudAddService Service C:\Windows\system32\DRIVERS\HDAudBus.sys (High Definition Audio Bus Driver/Microsoft Corporation) [MANUAL] HDAudBus Service C:\Windows\system32\DRIVERS\HidBatt.sys (Hid Battery Driver/Microsoft Corporation) [MANUAL] HidBatt Service C:\Windows\system32\DRIVERS\hidbth.sys (Bluetooth Miniport Driver for HID Devices/Microsoft Corporation) [MANUAL] HidBth Service C:\Windows\system32\DRIVERS\hidir.sys (Infrared Miniport Driver for Input Devices/Microsoft Corporation) [MANUAL] HidIr Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] hidserv Service C:\Windows\system32\DRIVERS\hidusb.sys (USB Miniport Driver for Input Devices/Microsoft Corporation) [MANUAL] HidUsb Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] hkmsvc Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] HomeGroupListener Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] HomeGroupProvider Service C:\Windows\system32\DRIVERS\HpSAMD.sys (Smart Array SAS/SATA Controller Media Driver/Hewlett-Packard Company) [MANUAL] HpSAMD Service C:\Windows\system32\drivers\HTTP.sys (HTTP Protocol Stack/Microsoft Corporation) [MANUAL] HTTP Service C:\Windows\System32\drivers\hwpolicy.sys (Hardware Policy Driver/Microsoft Corporation) [BOOT] hwpolicy Service C:\Windows\system32\DRIVERS\i8042prt.sys (i8042 Port Driver/Microsoft Corporation) [MANUAL] i8042prt Service C:\Windows\system32\DRIVERS\iaStorV.sys (Intel Matrix Storage Manager driver - ia32/Intel Corporation) [MANUAL] iaStorV Service C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Windows CardSpace/Microsoft Corporation) [MANUAL] idsvc Service C:\Windows\system32\DRIVERS\iirsp.sys (Intel/ICP Raid Storport Driver/Intel Corp./ICP vortex GmbH) [MANUAL] iirsp Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] IKEEXT Service inetaccs Service C:\Windows\system32\DRIVERS\intelide.sys (Intel PCI IDE Driver/Microsoft Corporation) [BOOT] intelide Service C:\Windows\system32\DRIVERS\intelppm.sys (Processor Device Driver/Microsoft Corporation) [MANUAL] intelppm Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] IPBusEnum Service C:\Windows\system32\DRIVERS\ipfltdrv.sys (IP FILTER DRIVER/Microsoft Corporation) [MANUAL] IpFilterDriver Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] iphlpsvc Service C:\Windows\system32\DRIVERS\IPMIDrv.sys (WMI IPMI DRIVER/Microsoft Corporation) [MANUAL] IPMIDRV Service C:\Windows\System32\drivers\ipnat.sys (IP Network Address Translator/Microsoft Corporation) [MANUAL] IPNAT Service C:\Windows\system32\drivers\irenum.sys (Infra-Red Bus Enumerator/Microsoft Corporation) [MANUAL] IRENUM Service C:\Windows\system32\DRIVERS\isapnp.sys (PNP ISA Bus Driver/Microsoft Corporation) [MANUAL] isapnp Service C:\Windows\system32\DRIVERS\msiscsi.sys (Microsoft iSCSI Initiator Driver/Microsoft Corporation) [MANUAL] iScsiPrt Service C:\Windows\system32\DRIVERS\kbdclass.sys (Keyboard Class Driver/Microsoft Corporation) [MANUAL] kbdclass Service C:\Windows\system32\DRIVERS\kbdhid.sys (HID Keyboard Filter Driver/Microsoft Corporation) [MANUAL] kbdhid Service C:\Windows\system32\lsass.exe (Local Security Authority Process/Microsoft Corporation) [MANUAL] KeyIso Service C:\Windows\system32\DRIVERS\kl1.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) [BOOT] KL1 Service C:\Windows\system32\DRIVERS\kl2.sys (Kaspersky Unified Driver/Kaspersky Lab ZAO) [SYSTEM] kl2 Service C:\Windows\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wlh_x86]/Kaspersky Lab) [SYSTEM] KLIF Service C:\Windows\system32\DRIVERS\klim6.sys (Kaspersky Lab Intermediate Network Driver/Kaspersky Lab ZAO) [SYSTEM] KLIM6 Service C:\Windows\system32\DRIVERS\klmouflt.sys (KLMOUFLT Mouse Device Filter [fre_wlh_x86]/Kaspersky Lab) [MANUAL] klmouflt Service C:\Windows\System32\Drivers\ksecdd.sys (Kernel Security Support Provider Interface/Microsoft Corporation) [BOOT] KSecDD Service C:\Windows\System32\Drivers\ksecpkg.sys (Kernel Security Support Provider Interface Packages/Microsoft Corporation) [BOOT] KSecPkg Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] KtmRm Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] LanmanServer Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] LanmanWorkstation Service ldap Service C:\Windows\system32\DRIVERS\lltdio.sys (Link-Layer Topology Mapper I/O Driver/Microsoft Corporation) [AUTO] lltdio Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] lltdsvc Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] lmhosts Service Lsa Service C:\Windows\system32\DRIVERS\lsi_fc.sys (LSI Fusion-MPT FC Driver (StorPort)/LSI Corporation) [MANUAL] LSI_FC Service C:\Windows\system32\DRIVERS\lsi_sas.sys (LSI Fusion-MPT SAS Driver (StorPort)/LSI Corporation) [MANUAL] LSI_SAS Service C:\Windows\system32\DRIVERS\lsi_sas2.sys (LSI SAS Gen2 Driver (StorPort)/LSI Corporation) [MANUAL] LSI_SAS2 Service C:\Windows\system32\DRIVERS\lsi_scsi.sys (LSI Fusion-MPT SCSI Driver (StorPort)/LSI Corporation) [MANUAL] LSI_SCSI Service C:\Windows\system32\drivers\luafv.sys (LUA File Virtualization Filter Driver/Microsoft Corporation) [AUTO] luafv Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [DISABLED] Mcx2Svc Service C:\Windows\system32\DRIVERS\megasas.sys (MEGASAS RAID Controller Driver for Windows 7 for x86/LSI Corporation) [MANUAL] megasas Service C:\Windows\system32\DRIVERS\MegaSR.sys (LSI MegaRAID Software RAID Driver/LSI Corporation, Inc.) [MANUAL] MegaSR Service C:\Program Files\Microsoft Office\Office14\GROOVE.EXE (Microsoft SharePoint Workspace/Microsoft Corporation) [MANUAL] Microsoft SharePoint Workspace Audit Service Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] MMCSS Service C:\Windows\system32\drivers\modem.sys (Modem Device Driver/Microsoft Corporation) [MANUAL] Modem Service C:\Windows\system32\DRIVERS\monitor.sys (Monitor Driver/Microsoft Corporation) [MANUAL] monitor Service C:\Windows\system32\DRIVERS\mouclass.sys (Mouse Class Driver/Microsoft Corporation) [MANUAL] mouclass Service C:\Windows\system32\DRIVERS\mouhid.sys (HID Mouse Filter Driver/Microsoft Corporation) [MANUAL] mouhid Service C:\Windows\System32\drivers\mountmgr.sys (Mount Point Manager/Microsoft Corporation) [BOOT] mountmgr Service C:\Windows\system32\DRIVERS\mpio.sys (MultiPath Support Bus-Driver/Microsoft Corporation) [MANUAL] mpio Service C:\Windows\System32\drivers\mpsdrv.sys (Microsoft Protection Service Driver/Microsoft Corporation) [MANUAL] mpsdrv Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] MpsSvc Service C:\Windows\system32\drivers\mrxdav.sys (Windows NT WebDav Minirdr/Microsoft Corporation) [MANUAL] MRxDAV Service C:\Windows\system32\DRIVERS\mrxsmb.sys (Windows NT SMB Minirdr/Microsoft Corporation) [MANUAL] mrxsmb Service C:\Windows\system32\DRIVERS\mrxsmb10.sys (Longhorn SMB Downlevel SubRdr/Microsoft Corporation) [MANUAL] mrxsmb10 Service C:\Windows\system32\DRIVERS\mrxsmb20.sys (Longhorn SMB 2.0 Redirector/Microsoft Corporation) [MANUAL] mrxsmb20 Service C:\Windows\system32\DRIVERS\msahci.sys (MS AHCI 1.0 Standard Driver/Microsoft Corporation) [MANUAL] msahci Service C:\Windows\system32\DRIVERS\msdsm.sys (Microsoft Device Specific Module/Microsoft Corporation) [MANUAL] msdsm Service C:\Windows\System32\msdtc.exe (Microsoft Distributed Transaction Coordinator Service/Microsoft Corporation) [MANUAL] MSDTC Service MSDTC Bridge 3.0.0.0 Service MSDTC Bridge 4.0.0.0 Service (Mailslot driver/Microsoft Corporation) [SYSTEM] Msfs Service C:\Windows\System32\drivers\mshidkmdf.sys (Pass-through HID to KMDF Filter Driver/Microsoft Corporation) [MANUAL] mshidkmdf Service C:\Windows\system32\DRIVERS\msisadrv.sys (ISA Driver/Microsoft Corporation) [BOOT] msisadrv Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] MSiSCSI Service C:\Windows\system32\msiexec.exe (Windows® installer/Microsoft Corporation) [MANUAL] msiserver Service C:\Windows\system32\drivers\MSKSSRV.sys (MS KS Server/Microsoft Corporation) [MANUAL] MSKSSRV Service C:\Windows\system32\drivers\MSPCLOCK.sys (MS Proxy Clock/Microsoft Corporation) [MANUAL] MSPCLOCK Service C:\Windows\system32\drivers\MSPQM.sys (MS Proxy Quality Manager/Microsoft Corporation) [MANUAL] MSPQM Service (Kernel Remote Procedure Call Provider/Microsoft Corporation) [MANUAL] MsRPC Service MSSCNTRS Service C:\Windows\system32\DRIVERS\mssmbios.sys (System Management BIOS Driver/Microsoft Corporation) [SYSTEM] mssmbios Service C:\Windows\system32\drivers\MSTEE.sys (WDM Tee/Communication Transform Filter /Microsoft Corporation) [MANUAL] MSTEE Service C:\Windows\system32\DRIVERS\MTConfig.sys (Microsoft Multi-Touch HID Driver/Microsoft Corporation) [MANUAL] MTConfig Service C:\Windows\System32\Drivers\mup.sys (Multiple UNC Provider Driver/Microsoft Corporation) [BOOT] Mup Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] napagent Service C:\Windows\system32\DRIVERS\nwifi.sys (NativeWiFi Miniport Driver/Microsoft Corporation) [MANUAL] NativeWifiP Service C:\Windows\system32\drivers\ndis.sys (NDIS 6.20 driver/Microsoft Corporation) [BOOT] NDIS Service C:\Windows\system32\DRIVERS\ndiscap.sys (NDIS Packet Capture Filter Driver/Microsoft Corporation) [MANUAL] NdisCap Service C:\Windows\system32\DRIVERS\ndistapi.sys (NDIS 3.0 connection wrapper driver/Microsoft Corporation) [MANUAL] NdisTapi Service C:\Windows\system32\DRIVERS\ndisuio.sys (NDIS User mode I/O driver/Microsoft Corporation) [MANUAL] Ndisuio Service C:\Windows\system32\DRIVERS\ndiswan.sys (MS PPP Framing Driver (Strong Encryption)/Microsoft Corporation) [MANUAL] NdisWan Service (NDIS Proxy/Microsoft Corporation) [MANUAL] NDProxy Service C:\Windows\system32\DRIVERS\netbios.sys (NetBIOS interface driver/Microsoft Corporation) [SYSTEM] NetBIOS Service C:\Windows\System32\DRIVERS\netbt.sys (MBT Transport driver/Microsoft Corporation) [SYSTEM] NetBT Service C:\Windows\system32\lsass.exe (Local Security Authority Process/Microsoft Corporation) [MANUAL] Netlogon Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] Netman Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] netprofm Service C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (SMSvcHost.exe/Microsoft Corporation) [DISABLED] NetTcpPortSharing Service C:\Windows\system32\DRIVERS\netw5v32.sys (Intel® Wireless WiFi Link Driver/Intel Corporation) [MANUAL] netw5v32 Service C:\Windows\system32\DRIVERS\nfrd960.sys (IBM ServeRAID Controller Driver/IBM Corporation) [MANUAL] nfrd960 Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] NlaSvc Service (NPFS Driver/Microsoft Corporation) [SYSTEM] Npfs Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] nsi Service C:\Windows\system32\drivers\nsiproxy.sys (NSI Proxy/Microsoft Corporation) [SYSTEM] nsiproxy Service NTDS Service (NT File System Driver/Microsoft Corporation) [MANUAL] Ntfs Service (NULL Driver/Microsoft Corporation) [SYSTEM] Null Service C:\Windows\system32\DRIVERS\nvlddmkm.sys (NVIDIA Windows Kernel Mode Driver, Version 257.21 /NVIDIA Corporation) [MANUAL] nvlddmkm Service C:\Windows\system32\DRIVERS\nvraid.sys (NVIDIA® nForce™ RAID Driver/NVIDIA Corporation) [MANUAL] nvraid Service C:\Windows\system32\DRIVERS\nvstor.sys (NVIDIA® nForce™ Sata Performance Driver/NVIDIA Corporation) [MANUAL] nvstor Service C:\Windows\system32\nvvsvc.exe (NVIDIA Driver Helper Service, Version 257.21/NVIDIA Corporation) [AUTO] nvsvc Service C:\Windows\system32\DRIVERS\nv_agp.sys (NForce NT AGP Filter/Microsoft Corporation) [MANUAL] nv_agp Service C:\Windows\system32\DRIVERS\ohci1394.sys (1394 OpenHCI Port Driver/Microsoft Corporation) [MANUAL] ohci1394 Service C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Office Source Engine/Microsoft Corporation) [MANUAL] ose Service C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Office Software Protection Platform Service/Microsoft Corporation) [MANUAL] osppsvc Service Outlook Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] p2pimsvc Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] p2psvc Service C:\Windows\system32\DRIVERS\parport.sys (Parallel Port Driver/Microsoft Corporation) [MANUAL] Parport Service C:\Windows\System32\drivers\partmgr.sys (Partition Management Driver/Microsoft Corporation) [BOOT] partmgr Service C:\Windows\system32\DRIVERS\parvdm.sys (VDM Parallel Driver/Microsoft Corporation) [AUTO] Parvdm Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] PcaSvc Service C:\Windows\system32\DRIVERS\pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) [BOOT] pci Service C:\Windows\system32\DRIVERS\pciide.sys (Generic PCI IDE Bus Driver/Microsoft Corporation) [MANUAL] pciide Service C:\Windows\system32\DRIVERS\pcmcia.sys (PCMCIA Bus Driver/Microsoft Corporation) [BOOT] pcmcia Service C:\Windows\System32\drivers\pcw.sys (Performance Counters for Windows Driver/Microsoft Corporation) [BOOT] pcw Service C:\Windows\system32\drivers\peauth.sys (Protected Environment Authentication and Authorization Export Driver/Microsoft Corporation) [AUTO] PEAUTH Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] PeerDistSvc Service PerfDisk Service PerfNet Service PerfOS Service PerfProc Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] pla Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] PlugPlay Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] PNRPAutoReg Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] PNRPsvc Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] PolicyAgent Service PortProxy Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] Power Service C:\Windows\system32\DRIVERS\raspptp.sys (Peer-to-Peer Tunneling Protocol/Microsoft Corporation) [MANUAL] PptpMiniport Service C:\Windows\system32\DRIVERS\processr.sys (Processor Device Driver/Microsoft Corporation) [MANUAL] Processor Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] ProfSvc Service C:\Windows\system32\lsass.exe (Local Security Authority Process/Microsoft Corporation) [MANUAL] ProtectedStorage Service C:\Windows\system32\DRIVERS\pacer.sys (QoS Packet Scheduler/Microsoft Corporation) [SYSTEM] Psched Service C:\Windows\system32\DRIVERS\ql2300.sys (QLogic Fibre Channel Stor Miniport Driver/QLogic Corporation) [MANUAL] ql2300 Service C:\Windows\system32\DRIVERS\ql40xx.sys (QLogic iSCSI Storport Miniport Driver/QLogic Corporation) [MANUAL] ql40xx Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] QWAVE Service C:\Windows\system32\drivers\qwavedrv.sys (Microsoft Quality Windows Audio Video Experience (qWave) Support Driver/Microsoft Corporation) [MANUAL] QWAVEdrv Service C:\Windows\System32\DRIVERS\rasacd.sys (RAS Automatic Connection Driver/Microsoft Corporation) [MANUAL] RasAcd Service C:\Windows\system32\DRIVERS\AgileVpn.sys (RAS Agile Vpn Miniport Call Manager/Microsoft Corporation) [MANUAL] RasAgileVpn Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] RasAuto Service C:\Windows\system32\DRIVERS\rasl2tp.sys (RAS L2TP mini-port/call-manager driver/Microsoft Corporation) [MANUAL] Rasl2tp Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] RasMan Service C:\Windows\system32\DRIVERS\raspppoe.sys (RAS PPPoE mini-port/call-manager driver/Microsoft Corporation) [MANUAL] RasPppoe Service C:\Windows\system32\DRIVERS\rassstp.sys (RAS SSTP Miniport Call Manager/Microsoft Corporation) [MANUAL] RasSstp Service C:\Windows\system32\DRIVERS\rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) [SYSTEM] rdbss Service C:\Windows\system32\DRIVERS\rdpbus.sys (Microsoft RDP Bus Device driver/Microsoft Corporation) [MANUAL] rdpbus Service C:\Windows\System32\DRIVERS\RDPCDD.sys (RDP Miniport/Microsoft Corporation) [SYSTEM] RDPCDD Service RDPDD Service C:\Windows\System32\drivers\rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) [MANUAL] RDPDR Service C:\Windows\system32\drivers\rdpencdd.sys (RDP Encoder Miniport/Microsoft Corporation) [SYSTEM] RDPENCDD Service RDPNP Service C:\Windows\system32\drivers\rdprefmp.sys (RDP Reflector Driver Miniport/Microsoft Corporation) [SYSTEM] RDPREFMP Service (RDP Terminal Stack Driver/Microsoft Corporation) [MANUAL] RDPWD Service C:\Windows\System32\drivers\rdyboost.sys (ReadyBoost Driver/Microsoft Corporation) [BOOT] rdyboost Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [DISABLED] RemoteAccess Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] RemoteRegistry Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] RpcEptMapper Service C:\Windows\system32\locator.exe (Rpc Locator/Microsoft Corporation) [MANUAL] RpcLocator Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] RpcSs Service C:\Windows\system32\DRIVERS\rspndr.sys (Link-Layer Topology Responder Driver for NDIS 6/Microsoft Corporation) [AUTO] rspndr Service C:\Windows\system32\DRIVERS\vms3cap.sys (Microsoft S3 Emulated Device Cap Driver/Microsoft Corporation) [MANUAL] s3cap Service C:\Windows\system32\lsass.exe (Local Security Authority Process/Microsoft Corporation) [AUTO] SamSs Service C:\Windows\system32\DRIVERS\sbp2port.sys (SBP-2 Protocol Driver/Microsoft Corporation) [MANUAL] sbp2port Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] SCardSvr Service C:\Windows\System32\DRIVERS\scfilter.sys (Microsoft Smart Card Reader Filter Driver/Microsoft Corporation) [MANUAL] scfilter Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] Schedule Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] SCPolicySvc Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] SDRSVC Service (Macrovision SECURITY Driver/Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [AUTO] secdrv Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] seclogon Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] SENS Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] SensrSvc Service C:\Windows\system32\DRIVERS\serenum.sys (Serial Port Enumerator/Microsoft Corporation) [MANUAL] Serenum Service C:\Windows\system32\DRIVERS\serial.sys (Serial Device Driver/Microsoft Corporation) [SYSTEM] Serial Service C:\Windows\system32\DRIVERS\sermouse.sys (Serial Mouse Filter Driver/Microsoft Corporation) [MANUAL] sermouse Service ServiceModelEndpoint 3.0.0.0 Service ServiceModelOperation 3.0.0.0 Service ServiceModelService 3.0.0.0 Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] SessionEnv Service C:\Windows\system32\DRIVERS\sffdisk.sys (Small Form Factor Disk Driver/Microsoft Corporation) [MANUAL] sffdisk Service C:\Windows\system32\DRIVERS\sffp_mmc.sys (Small Form Factor MMC Protocol Driver/Microsoft Corporation) [MANUAL] sffp_mmc Service C:\Windows\system32\DRIVERS\sffp_sd.sys (Small Form Factor SD Protocol Driver/Microsoft Corporation) [MANUAL] sffp_sd Service C:\Windows\system32\DRIVERS\sfloppy.sys (SCSI Floppy Driver/Microsoft Corporation) [MANUAL] sfloppy Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [DISABLED] SharedAccess Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] ShellHWDetection Service C:\Windows\system32\DRIVERS\sisagp.sys (SIS NT AGP Filter/Microsoft Corporation) [MANUAL] sisagp Service C:\Windows\system32\DRIVERS\SiSRaid2.sys (SiS RAID Stor Miniport Driver/Silicon Integrated Systems Corp.) [MANUAL] SiSRaid2 Service C:\Windows\system32\DRIVERS\sisraid4.sys (SiS AHCI Stor-Miniport Driver/Silicon Integrated Systems) [MANUAL] SiSRaid4 Service C:\Windows\system32\DRIVERS\smb.sys (SMB Transport driver/Microsoft Corporation) [MANUAL] Smb Service SMSvcHost 3.0.0.0 Service SMSvcHost 4.0.0.0 Service C:\Windows\System32\snmptrap.exe (SNMP Trap/Microsoft Corporation) [MANUAL] SNMPTRAP Service (loader for security processor/Microsoft Corporation) [BOOT] spldr Service C:\Windows\System32\spoolsv.exe (Spooler SubSystem App/Microsoft Corporation) [AUTO] Spooler Service C:\Windows\system32\sppsvc.exe (Microsoft Software Protection Platform Service/Microsoft Corporation) [AUTO] sppsvc Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] sppuinotify Service C:\Windows\System32\Drivers\sptd.sys (SCSI Pass Through Direct Host/Duplex Secure Ltd.) [DISABLED] sptd Service C:\Windows\System32\DRIVERS\srv.sys (Server driver/Microsoft Corporation) [MANUAL] srv Service C:\Windows\System32\DRIVERS\srv2.sys (Smb 2.0 Server driver/Microsoft Corporation) [MANUAL] srv2 Service C:\Windows\system32\DRIVERS\VSTAZL3.SYS (HSF_HWAZL WDM driver/Conexant Systems, Inc.) [MANUAL] SrvHsfHDA Service C:\Windows\system32\DRIVERS\VSTDPV3.SYS (HSF_DP driver/Conexant Systems, Inc.) [MANUAL] SrvHsfV92 Service C:\Windows\system32\DRIVERS\VSTCNXT3.SYS (HSF_CNXT driver/Conexant Systems, Inc.) [MANUAL] SrvHsfWinac Service C:\Windows\System32\DRIVERS\srvnet.sys (Server Network driver/Microsoft Corporation) [MANUAL] srvnet Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] SSDPSRV Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] SstpSvc Service C:\Windows\system32\DRIVERS\stexstor.sys (Promise SuperTrak EX Series Driver for Windows /Promise Technology) [MANUAL] stexstor Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] StiSvc Service C:\Windows\system32\DRIVERS\vmstorfl.sys (Virtual Storage Filter Driver/Microsoft Corporation) [BOOT] storflt Service C:\Windows\system32\DRIVERS\storvsc.sys (Storage VSC Driver/Microsoft Corporation) [MANUAL] storvsc Service C:\Windows\system32\DRIVERS\swenum.sys (Plug and Play Software Device Enumerator/Microsoft Corporation) [MANUAL] swenum Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] swprv Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] SysMain Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] TabletInputService Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] TapiSrv Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] TBS Service C:\Windows\System32\drivers\tcpip.sys (TCP/IP Driver/Microsoft Corporation) [BOOT] Tcpip Service C:\Windows\system32\DRIVERS\tcpip.sys (TCP/IP Driver/Microsoft Corporation) [MANUAL] TCPIP6 Service TCPIP6TUNNEL Service C:\Windows\System32\drivers\tcpipreg.sys (TCP/IP Registry Compatibility Driver/Microsoft Corporation) [AUTO] tcpipreg Service TCPIPTUNNEL Service C:\Windows\system32\drivers\tdpipe.sys (Named Pipe Transport Driver/Microsoft Corporation) [MANUAL] TDPIPE Service C:\Windows\system32\drivers\tdtcp.sys (TCP Transport Driver/Microsoft Corporation) [MANUAL] TDTCP Service C:\Windows\system32\DRIVERS\tdx.sys (TDI Translation Driver/Microsoft Corporation) [SYSTEM] tdx Service C:\Windows\system32\DRIVERS\termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) [SYSTEM] TermDD Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] TermService Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] Themes Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] THREADORDER Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] TrkWks Service C:\Windows\servicing\TrustedInstaller.exe (Windows Modules Installer/Microsoft Corporation) [MANUAL] TrustedInstaller Service TSDDD Service C:\Windows\System32\DRIVERS\tssecsrv.sys (TS Security Filter Driver/Microsoft Corporation) [MANUAL] tssecsrv Service C:\Windows\system32\DRIVERS\tunnel.sys (Microsoft Tunnel Interface Driver/Microsoft Corporation) [MANUAL] tunnel Service C:\Windows\system32\DRIVERS\uagp35.sys (MS AGPv3.5 Filter/Microsoft Corporation) [MANUAL] uagp35 Service C:\Windows\system32\DRIVERS\udfs.sys (UDF File System Driver/Microsoft Corporation) [DISABLED] udfs Service UGatherer Service UGTHRSVC Service C:\Windows\system32\UI0Detect.exe (Interactive services detection/Microsoft Corporation) [MANUAL] UI0Detect Service C:\Windows\system32\DRIVERS\uliagpkx.sys (ULi AGPv3.0 Filter for K8/9 Processor Platforms/Microsoft Corporation) [MANUAL] uliagpkx Service C:\Windows\system32\DRIVERS\umbus.sys (User-Mode Bus Enumerator/Microsoft Corporation) [MANUAL] umbus Service C:\Windows\system32\DRIVERS\umpass.sys (Generic pass-through driver/Microsoft Corporation) [MANUAL] UmPass Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] UmRdpService Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] upnphost Service C:\Windows\system32\DRIVERS\usbccgp.sys (USB Common Class Generic Parent Driver/Microsoft Corporation) [MANUAL] usbccgp Service C:\Windows\system32\DRIVERS\usbcir.sys (USB Consumer IR Driver for eHome/Microsoft Corporation) [MANUAL] usbcir Service C:\Windows\system32\DRIVERS\usbehci.sys (EHCI eUSB Miniport Driver/Microsoft Corporation) [MANUAL] usbehci Service C:\Windows\system32\DRIVERS\usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) [MANUAL] usbhub Service C:\Windows\system32\DRIVERS\usbohci.sys (OHCI USB Miniport Driver/Microsoft Corporation) [MANUAL] usbohci Service C:\Windows\system32\DRIVERS\usbprint.sys (USB Printer driver/Microsoft Corporation) [MANUAL] usbprint Service C:\Windows\system32\DRIVERS\USBSTOR.SYS (USB Mass Storage Class Driver/Microsoft Corporation) [MANUAL] USBSTOR Service C:\Windows\system32\DRIVERS\usbuhci.sys (UHCI USB Miniport Driver/Microsoft Corporation) [MANUAL] usbuhci Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] UxSms Service C:\Windows\system32\lsass.exe (Local Security Authority Process/Microsoft Corporation) [MANUAL] VaultSvc Service C:\Windows\system32\DRIVERS\vdrvroot.sys (Virtual Drive Root Enumerator/Microsoft Corporation) [BOOT] vdrvroot Service C:\Windows\System32\vds.exe (Virtual Disk Service/Microsoft Corporation) [MANUAL] vds Service C:\Windows\system32\DRIVERS\vgapnp.sys (VGA/Super VGA Video Driver/Microsoft Corporation) [MANUAL] vga Service C:\Windows\System32\drivers\vga.sys (VGA/Super VGA Video Driver/Microsoft Corporation) [SYSTEM] VgaSave Service C:\Windows\system32\DRIVERS\vhdmp.sys (VHD Miniport Driver/Microsoft Corporation) [MANUAL] vhdmp Service C:\Windows\system32\DRIVERS\viaagp.sys (VIA NT AGP Filter/Microsoft Corporation) [MANUAL] viaagp Service C:\Windows\system32\DRIVERS\viac7.sys (Processor Device Driver/Microsoft Corporation) [MANUAL] ViaC7 Service C:\Windows\system32\DRIVERS\viaide.sys (VIA Generic PCI IDE Bus Driver/VIA Technologies, Inc.) [MANUAL] viaide Service C:\Windows\system32\DRIVERS\vmbus.sys (Virtual Machine Bus/Microsoft Corporation) [MANUAL] vmbus Service C:\Windows\system32\DRIVERS\VMBusHID.sys (Microsoft VMBus HID Miniport/Microsoft Corporation) [MANUAL] VMBusHID Service C:\Windows\system32\DRIVERS\volmgr.sys (Volume Manager Driver/Microsoft Corporation) [BOOT] volmgr Service C:\Windows\System32\drivers\volmgrx.sys (Volume Manager Extension Driver/Microsoft Corporation) [BOOT] volmgrx Service C:\Windows\system32\DRIVERS\volsnap.sys (Volume Shadow Copy Driver/Microsoft Corporation) [BOOT] volsnap Service C:\Windows\system32\DRIVERS\vsmraid.sys (VIA RAID DRIVER FOR AMD-X86-64/VIA Technologies Inc.,Ltd) [MANUAL] vsmraid Service C:\Windows\system32\vssvc.exe (Microsoft® Volume Shadow Copy Service/Microsoft Corporation) [MANUAL] VSS Service C:\Windows\System32\drivers\vwifibus.sys (Virtual WiFi Bus Driver/Microsoft Corporation) [MANUAL] vwifibus Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] W32Time Service W3SVC Service C:\Windows\system32\DRIVERS\wacompen.sys (Wacom Serial Pen Tablet HID Driver/Microsoft Corporation) [MANUAL] WacomPen Service C:\Windows\system32\DRIVERS\wanarp.sys (MS Remote Access and Routing ARP Driver/Microsoft Corporation) [MANUAL] WANARP Service C:\Windows\system32\DRIVERS\wanarp.sys (MS Remote Access and Routing ARP Driver/Microsoft Corporation) [SYSTEM] Wanarpv6 Service C:\Windows\system32\wbengine.exe (Microsoft® Block Level Backup Engine Service EXE/Microsoft Corporation) [MANUAL] wbengine Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] WbioSrvc Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] wcncsvc Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] WcsPlugInService Service C:\Windows\system32\DRIVERS\wd.sys (Microsoft Watchdog Timer Driver/Microsoft Corporation) [MANUAL] Wd Service C:\Windows\system32\drivers\Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation) [BOOT] Wdf01000 Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] WdiServiceHost Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] WdiSystemHost Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] WebClient Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] Wecsvc Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] wercplsupport Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] WerSvc Service C:\Windows\system32\DRIVERS\wfplwf.sys (WFP NDIS 6.20 Lightweight Filter Driver/Microsoft Corporation) [SYSTEM] WfpLwf Service C:\Windows\system32\drivers\wimmount.sys (Wim file system Driver/Microsoft Corporation) [MANUAL] WIMMount Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] WinDefend Service Windows Workflow Foundation 3.0.0.0 Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] WinHttpAutoProxySvc Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] Winmgmt Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] WinRM Service [MANUAL] Winsock Service WinSock2 Service C:\Windows\system32\DRIVERS\WinUSB.sys (Windows USB Class Driver BETA/Microsoft Corporation) [MANUAL] WinUsb Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] Wlansvc Service C:\Windows\system32\DRIVERS\wmiacpi.sys (Windows Management Interface for ACPI/Microsoft Corporation) [MANUAL] WmiAcpi Service WmiApRpl Service C:\Windows\system32\wbem\WmiApSrv.exe (WMI Performance Reverse Adapter/Microsoft Corporation) [MANUAL] wmiApSrv Service C:\Program Files\Windows Media Player\wmpnetwk.exe (Windows Media Player Network Sharing Service/Microsoft Corporation) [AUTO] WMPNetworkSvc Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] WPCSvc Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] WPDBusEnum Service C:\Windows\system32\drivers\ws2ifsl.sys (Winsock2 IFS Layer/Microsoft Corporation) [DISABLED] ws2ifsl Service C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] wscsvc Service C:\Windows\system32\SearchIndexer.exe (Microsoft Windows Search Indexer/Microsoft Corporation) [AUTO] WSearch Service WSearchIdxPi Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] wuauserv Service C:\Windows\system32\drivers\WudfPf.sys (Windows Driver Foundation - User-mode Driver Framework Platform Driver/Microsoft Corporation) [MANUAL] WudfPf Service C:\Windows\system32\DRIVERS\WUDFRd.sys (Windows Driver Foundation - User-mode Driver Framework Reflector/Microsoft Corporation) [MANUAL] WUDFRd Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [AUTO] wudfsvc Service C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) [MANUAL] WwanSvc Service xmlprov Service C:\Program Files\Zune\ZuneNss.exe (Zune Network Sharing Service/Microsoft Corporation) [MANUAL] ZuneNetworkSvc Service C:\Windows\system32\ZuneWlanCfgSvc.exe (Zune Wireless Configuration Service/Microsoft Corporation) [MANUAL] ZuneWlanCfgSvc Service {AAA3F172-9256-4BBD-BEF2-1B69899ED0C6} Service {C3B85141-B0BC-4A43-8B33-E9367BE560D2} Service C:\Users\Nick\AppData\Local\Temp\kxldqpoc.sys [MANUAL] kxldqpoc —- Registry - GMER 1.0.15 —- Reg HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\ Reg HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 … Reg HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0 Reg HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x01 0xD2 0x6B 0x88 … Reg HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 … Reg HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xB8 0xE6 0xD5 0x7A … Reg HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x6D 0xD3 0x5F 0x6B … Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\ Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 … Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0 Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x0C 0x88 0xF0 0x73 … Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 … Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xB8 0xE6 0xD5 0x7A … Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x6D 0xD3 0x5F 0x6B … Reg HKLM\SYSTEM\ControlSet003\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\ Reg HKLM\SYSTEM\ControlSet003\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 … Reg HKLM\SYSTEM\ControlSet003\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0 Reg HKLM\SYSTEM\ControlSet003\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x0C 0x88 0xF0 0x73 … Reg HKLM\SYSTEM\ControlSet003\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 … Reg HKLM\SYSTEM\ControlSet003\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xB8 0xE6 0xD5 0x7A … Reg HKLM\SYSTEM\ControlSet003\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x6D 0xD3 0x5F 0x6B … —- EOF - GMER 1.0.15 —- Sorry about all the posts, just wanted to make sure it would fit =-x

JonTom

Post #13September 2, 2010, 8:22 PM UTC

Hello Breaker934

Thank you for the logs.

Please open OTL

Copy and paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL.

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
[2010/08/27 11:38:17 | 000,000,056 | -H– | M] () – C:\ProgramData\ezsidmv.dat

:Commands
[purity]
[emptytemp]
[emptyflash]
[start explorer]
[Reboot]

Once you have pasted the information into the Custom Scans/Fixes box, click the "Run Fix" button at the top.
Allow the program to run unhindered.
Your machine will re-start itself. This is normal.
A log will be created after your machine reboots. Please post the contents of the log in your next reply.

Please perform the following scan:
- Please download MalwareBytes AntiMalware by clicking here and save the file (called mbam-setup.exe) to your desktop.
- Right click on the mbam-setup.exe icon and select "Run as Administrator" to install the program.
- Follow the prompts during installation and have the Installation Wizzard create a desktop icon.
- Once installed, Right click on the MalwareBytes AntiMalware icon and select "Run as Administrator" to launch the program.
- Click on the "Update" tab and then on "Check for Updates".
- The program will now install the latest Malware definition files.
- Once complete, click on the "Scanner" tab, select "Perform full scan"and then click on "Scan".
- Once the program has scanned your computer, a log file will be created in Notepad.
- Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
- If the scan detects any Malware-related objects, make sure that everything is checked, and click "Remove Selected" <– Very Important.
- When disinfection is completed, a log will open in Notepad and you may be prompted to restart your computer.
- The log is automatically saved by MBAM and can be viewed by clicking the "Logs" tab.
- Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process. If asked to restart your computer, please do so immediately.
- Come back here to this thread and Paste the log in your next reply.
In your next reply, please post the OTL log and the MBAM log.

How is your machine behaving now?

Breaker934

Post #14September 3, 2010, 5:38 AM UTC

Here are the OTL and Malwarebyte's logs: All processes killed ========== OTL ========== No active process named explorer.exe was found! Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ deleted successfully. C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found. File C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\localhost\ deleted successfully. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\GD\\http deleted successfully. C:\ProgramData\ezsidmv.dat moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Nick ->Temp folder emptied: 201316143 bytes ->Temporary Internet Files folder emptied: 27006813 bytes ->FireFox cache emptied: 32949333 bytes ->Google Chrome cache emptied: 220737461 bytes ->Flash cache emptied: 129516 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 24632662 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 483.00 mb [EMPTYFLASH] User: All Users User: Default User: Default User User: Nick ->Flash cache emptied: 0 bytes User: Public Total Flash Files Cleaned = 0.00 mb OTL by OldTimer - Version 3.2.11.0 log created on 09022010_171326 Files\Folders moved on Reboot… File\Folder C:\Windows\temp\klsB388.tmp not found! Registry entries deleted on Reboot… ————– Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4532 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 9/3/2010 1:36:04 AM mbam-log-2010-09-03 (01-36-04).txt Scan type: Full scan (C:\|) Objects scanned: 260953 Time elapsed: 7 hour(s), 20 minute(s), 44 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) It took so long 'cause my comp went into sleep mode haha. Also my computer seems to be running better, but Kaspersky stills says that threats are detected =[

JonTom

Post #15September 3, 2010, 5:47 AM UTC

Hello Breaker934

Thank you for the logs.

my comp went into sleep mode

You may need to temporarily disable the sleep mode function as some of our scans can take quite a long time.

but Kaspersky stills says that threats are detected

Before we continue, what exactly is Kaspersky telling you? Is there a warning message popup?

Please update your Kaspersky AV definitions and run a full system scan then post the log created.

✨ Ask AI

Ask AI