What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Suspicious.mystic

127 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
So I downloaded Norton to scan for viruses and what not, and it told me I had suspicious.mystic and that it couldn't be removed. I googled how to remove it, but was unable to do so, it told me to open the task manager, go to process tab, and close programs that had suspicious.mystic in it or something along those lines, and I did not have any. It told me to also go to run and type in regedit, and look for a certain key or whatever that has suspicious.mystic as well, but I did not have it either.

Later it told me that suspicious.mystic was removed from Norton, and it told me to restart my computer. I did so, and could not get back on. I did a system restore from using the feature at start up, and managed to get back on my computer. But I still have suspicous.mystic. I'm not sure what to do at this point.

Right now, it doesn't seem to be doing anything to my computer, to my knowledge. At times, it freezes my webbrowser and i can't do much of anything else, and I'm forced to restart. I would just like to remove it so it doesn't actually do any real harm. >_<


OTL:

OTL logfile created on: 9/16/2010 12:00:01 PM - Run 1
OTL by OldTimer - Version 3.2.12.1 Folder = C:\Users\Esaul\Downloads
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 37.00% Memory free
8.00 Gb Paging File | 7.00 Gb Available in Paging File | 83.00% Paging File free
Paging file location(s): [Binary data over 100 bytes]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 148.88 Gb Total Space | 85.22 Gb Free Space | 57.24% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 232.85 Gb Total Space | 137.39 Gb Free Space | 59.00% Space Free | Partition Type: FAT32
Drive F: | 465.76 Gb Total Space | 408.26 Gb Free Space | 87.66% Space Free | Partition Type: NTFS
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: ESAUL-PC
Current User Name: Esaul
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Users\Esaul\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgam.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Safari\Safari.exe (Apple Inc.)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\LimeWire2\LimeWire.exe (Lime Wire, LLC)
PRC - C:\Program Files\MyWebSearch\bar\3.bin\MWSSVC.EXE (MyWebSearch.com)
PRC - C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\18.1.0.37\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
PRC - C:\Windows\explorer.exe ()
PRC - C:\Program Files\Java\jre6\bin\jucheck.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe (Broadcom Corporation.)
PRC - C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation)
PRC - C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Windows\System32\sppsvc.exe (Microsoft Corporation)
PRC - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Program Files\Nuance\NaturallySpeaking10\Program\natspeak.exe (Nuance Communications, Inc.)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Windows\System32\AERTSrv.exe (Andrea Electronics Corporation)


========== Modules (SafeList) ==========

MOD - C:\Users\Esaul\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Windows\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
MOD - C:\Windows\System32\sspicli.dll (Microsoft Corporation)
MOD - C:\Windows\System32\sechost.dll (Microsoft Corporation)
MOD - C:\Windows\System32\samcli.dll (Microsoft Corporation)
MOD - C:\Windows\System32\profapi.dll (Microsoft Corporation)
MOD - C:\Windows\System32\netutils.dll (Microsoft Corporation)
MOD - C:\Windows\System32\KernelBase.dll (Microsoft Corporation)
MOD - C:\Windows\System32\dwmapi.dll (Microsoft Corporation)
MOD - C:\Windows\System32\devobj.dll (Microsoft Corporation)
MOD - C:\Windows\System32\cryptbase.dll (Microsoft Corporation)
MOD - C:\Windows\System32\cfgmgr32.dll (Microsoft Corporation)
MOD - C:\Windows\System32\msscript.ocx (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (Akamai) – c:\Program Files\Common Files\Akamai\rswin_3746.dll ()
SRV - (avg9wd) – C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (Apple Mobile Device) – C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (MyWebSearchService) – C:\Program Files\MyWebSearch\bar\3.bin\MWSSVC.EXE (MyWebSearch.com)
SRV - (NIS) – C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\18.1.0.37\ccSvcHst.exe (Symantec Corporation)
SRV - (npggsvc) – C:\Windows\System32\GameMon.des (INCA Internet Co., Ltd.)
SRV - (SeaPort) – C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (SwitchBoard) – C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (ZuneWlanCfgSvc) – C:\Windows\System32\ZuneWlanCfgSvc.exe (Microsoft Corporation)
SRV - (ZuneNetworkSvc) – c:\Program Files\Zune\ZuneNss.exe (Microsoft Corporation)
SRV - (FLEXnet Licensing Service) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (btwdins) – C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe (Broadcom Corporation.)
SRV - (osppsvc) – C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation)
SRV - (wlidsvc) – C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation)
SRV - (WwanSvc) – C:\Windows\System32\wwansvc.dll (Microsoft Corporation)
SRV - (WbioSrvc) – C:\Windows\System32\wbiosrvc.dll (Microsoft Corporation)
SRV - (Power) – C:\Windows\System32\umpo.dll (Microsoft Corporation)
SRV - (Themes) – C:\Windows\System32\themeservice.dll (Microsoft Corporation)
SRV - (sppuinotify) – C:\Windows\System32\sppuinotify.dll (Microsoft Corporation)
SRV - (RpcEptMapper) – C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation)
SRV - (SensrSvc) – C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) – C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (PNRPsvc) – C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation)
SRV - (p2pimsvc) – C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation)
SRV - (HomeGroupProvider) – C:\Windows\System32\provsvc.dll (Microsoft Corporation)
SRV - (PNRPAutoReg) – C:\Windows\System32\pnrpauto.dll (Microsoft Corporation)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (HomeGroupListener) – C:\Windows\System32\ListSvc.dll (Microsoft Corporation)
SRV - (FontCache) – C:\Windows\System32\FntCache.dll (Microsoft Corporation)
SRV - (Dhcp) – C:\Windows\System32\dhcpcore.dll (Microsoft Corporation)
SRV - (defragsvc) – C:\Windows\System32\defragsvc.dll (Microsoft Corporation)
SRV - (BDESVC) – C:\Windows\System32\bdesvc.dll (Microsoft Corporation)
SRV - (AxInstSV) ActiveX Installer (AxInstSV) – C:\Windows\System32\AxInstSv.dll (Microsoft Corporation)
SRV - (AppIDSvc) – C:\Windows\System32\appidsvc.dll (Microsoft Corporation)
SRV - (sppsvc) – C:\Windows\System32\sppsvc.exe (Microsoft Corporation)
SRV - (YahooAUService) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (AERTFilters) – C:\Windows\System32\AERTSrv.exe (Andrea Electronics Corporation)


========== Driver Services (SafeList) ==========

DRV - (XDva344) – C:\Windows\System32\XDva344.sys File not found
DRV - (icsak) – C:\Program Files\CheckPoint\ZAForceField\AK\icsak.sys File not found
DRV - (SymEvent) – C:\Windows\System32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (AvgTdiX) – C:\Windows\System32\Drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgMfx86) – C:\Windows\System32\Drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgLdx86) – C:\Windows\System32\Drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgRkx86) – C:\Windows\System32\Drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (NAVEX15) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20100813.009\NAVEX15.SYS (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20100813.009\NAVENG.SYS (Symantec Corporation)
DRV - (BHDrvx86) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20100810.004\BHDrvx86.sys (Symantec Corporation)
DRV - (SymEFA) – C:\Windows\system32\drivers\NIS\1201000.025\SYMEFA.SYS (Symantec Corporation)
DRV - (SRTSP) – C:\Windows\system32\drivers\NIS\1201000.025\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\Windows\system32\drivers\NIS\1201000.025\SRTSPX.SYS (Symantec Corporation)
DRV - (SymNetS) – C:\Windows\system32\drivers\NIS\1201000.025\SYMNETS.SYS (Symantec Corporation)
DRV - (SymIRON) – C:\Windows\system32\drivers\NIS\1201000.025\Ironx86.SYS (Symantec Corporation)
DRV - (IDSVix86) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20100706.002\IDSVix86.sys (Symantec Corporation)
DRV - (SymDS) – C:\Windows\system32\drivers\NIS\1201000.025\SYMDS.SYS (Symantec Corporation)
DRV - (sptd) – C:\Windows\System32\Drivers\sptd.sys ()
DRV - (atksgt) – C:\Windows\System32\drivers\atksgt.sys ()
DRV - (lirsgt) – C:\Windows\System32\drivers\lirsgt.sys ()
DRV - (KSecPkg) – C:\Windows\System32\Drivers\ksecpkg.sys (Microsoft Corporation)
DRV - (btwrchid) – C:\Windows\System32\drivers\btwrchid.sys (Broadcom Corporation.)
DRV - (btwavdt) – C:\Windows\System32\drivers\btwavdt.sys (Broadcom Corporation.)
DRV - (btwaudio) – C:\Windows\System32\drivers\btwaudio.sys (Broadcom Corporation.)
DRV - (btwl2cap) – C:\Windows\System32\drivers\btwl2cap.sys (Broadcom Corporation.)
DRV - (nvlddmkm) – C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (cmdide) – C:\Windows\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
DRV - (adpahci) – C:\Windows\system32\DRIVERS\adpahci.sys (Adaptec, Inc.)
DRV - (adp94xx) – C:\Windows\system32\DRIVERS\adp94xx.sys (Adaptec, Inc.)
DRV - (amdsbs) – C:\Windows\system32\DRIVERS\amdsbs.sys (AMD Technologies Inc.)
DRV - (adpu320) – C:\Windows\system32\DRIVERS\adpu320.sys (Adaptec, Inc.)
DRV - (arcsas) – C:\Windows\system32\DRIVERS\arcsas.sys (Adaptec, Inc.)
DRV - (amdsata) – C:\Windows\system32\DRIVERS\amdsata.sys (Advanced Micro Devices)
DRV - (arc) – C:\Windows\system32\DRIVERS\arc.sys (Adaptec, Inc.)
DRV - (amdxata) – C:\Windows\system32\DRIVERS\amdxata.sys (Advanced Micro Devices)
DRV - (aliide) – C:\Windows\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (nvstor) – C:\Windows\system32\DRIVERS\nvstor.sys (NVIDIA Corporation)
DRV - (nvraid) – C:\Windows\system32\DRIVERS\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) – C:\Windows\system32\DRIVERS\nfrd960.sys (IBM Corporation)
DRV - (LSI_SAS) – C:\Windows\system32\DRIVERS\lsi_sas.sys (LSI Corporation)
DRV - (iaStorV) – C:\Windows\system32\DRIVERS\iaStorV.sys (Intel Corporation)
DRV - (MegaSR) – C:\Windows\system32\DRIVERS\MegaSR.sys (LSI Corporation, Inc.)
DRV - (LSI_SCSI) – C:\Windows\system32\DRIVERS\lsi_scsi.sys (LSI Corporation)
DRV - (LSI_FC) – C:\Windows\system32\DRIVERS\lsi_fc.sys (LSI Corporation)
DRV - (LSI_SAS2) – C:\Windows\system32\DRIVERS\lsi_sas2.sys (LSI Corporation)
DRV - (iirsp) – C:\Windows\system32\DRIVERS\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (megasas) – C:\Windows\system32\DRIVERS\megasas.sys (LSI Corporation)
DRV - (hwpolicy) – C:\Windows\System32\drivers\hwpolicy.sys (Microsoft Corporation)
DRV - (elxstor) – C:\Windows\system32\DRIVERS\elxstor.sys (Emulex)
DRV - (aic78xx) – C:\Windows\system32\DRIVERS\djsvs.sys (Adaptec, Inc.)
DRV - (HpSAMD) – C:\Windows\system32\DRIVERS\HpSAMD.sys (Hewlett-Packard Company)
DRV - (FsDepends) – C:\Windows\System32\drivers\fsdepends.sys (Microsoft Corporation)
DRV - (vsmraid) – C:\Windows\system32\DRIVERS\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (vmbus) – C:\Windows\system32\DRIVERS\vmbus.sys (Microsoft Corporation)
DRV - (vhdmp) – C:\Windows\system32\DRIVERS\vhdmp.sys (Microsoft Corporation)
DRV - (storflt) – C:\Windows\system32\DRIVERS\vmstorfl.sys (Microsoft Corporation)
DRV - (vdrvroot) – C:\Windows\system32\DRIVERS\vdrvroot.sys (Microsoft Corporation)
DRV - (storvsc) – C:\Windows\system32\DRIVERS\storvsc.sys (Microsoft Corporation)
DRV - (WIMMount) – C:\Windows\System32\drivers\wimmount.sys (Microsoft Corporation)
DRV - (viaide) – C:\Windows\system32\DRIVERS\viaide.sys (VIA Technologies, Inc.)
DRV - (ql2300) – C:\Windows\system32\DRIVERS\ql2300.sys (QLogic Corporation)
DRV - (rdyboost) – C:\Windows\System32\drivers\rdyboost.sys (Microsoft Corporation)
DRV - (ql40xx) – C:\Windows\system32\DRIVERS\ql40xx.sys (QLogic Corporation)
DRV - (SiSRaid4) – C:\Windows\system32\DRIVERS\sisraid4.sys (Silicon Integrated Systems)
DRV - (pcw) – C:\Windows\System32\drivers\pcw.sys (Microsoft Corporation)
DRV - (SiSRaid2) – C:\Windows\system32\DRIVERS\SiSRaid2.sys (Silicon Integrated Systems Corp.)
DRV - (stexstor) – C:\Windows\system32\DRIVERS\stexstor.sys (Promise Technology)
DRV - (CNG) – C:\Windows\System32\Drivers\cng.sys (Microsoft Corporation)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) – C:\Windows\System32\Drivers\Brserid.sys (Brother Industries Ltd.)
DRV - (rdpbus) – C:\Windows\System32\drivers\rdpbus.sys (Microsoft Corporation)
DRV - (RDPREFMP) – C:\Windows\System32\drivers\RDPREFMP.sys (Microsoft Corporation)
DRV - (RDPENCDD) – C:\Windows\System32\drivers\RDPENCDD.sys ()
DRV - (RasAgileVpn) WAN Miniport (IKEv2) – C:\Windows\System32\drivers\agilevpn.sys (Microsoft Corporation)
DRV - (WfpLwf) – C:\Windows\System32\drivers\wfplwf.sys (Microsoft Corporation)
DRV - (NdisCap) – C:\Windows\System32\drivers\ndiscap.sys (Microsoft Corporation)
DRV - (vwifibus) – C:\Windows\System32\drivers\vwifibus.sys (Microsoft Corporation)
DRV - (1394ohci) – C:\Windows\system32\DRIVERS\1394ohci.sys (Microsoft Corporation)
DRV - (UmPass) – C:\Windows\System32\drivers\umpass.sys (Microsoft Corporation)
DRV - (usbaudio) USB Audio Driver (WDM) – C:\Windows\System32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (WinUsb) – C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (mshidkmdf) – C:\Windows\System32\drivers\mshidkmdf.sys (Microsoft Corporation)
DRV - (MTConfig) – C:\Windows\system32\DRIVERS\MTConfig.sys (Microsoft Corporation)
DRV - (CompositeBus) – C:\Windows\System32\drivers\CompositeBus.sys (Microsoft Corporation)
DRV - (AppID) – C:\Windows\system32\drivers\appid.sys (Microsoft Corporation)
DRV - (scfilter) – C:\Windows\System32\drivers\scfilter.sys (Microsoft Corporation)
DRV - (s3cap) – C:\Windows\system32\DRIVERS\vms3cap.sys (Microsoft Corporation)
DRV - (VMBusHID) – C:\Windows\system32\DRIVERS\VMBusHID.sys (Microsoft Corporation)
DRV - (discache) – C:\Windows\System32\drivers\discache.sys (Microsoft Corporation)
DRV - (HidBatt) – C:\Windows\system32\DRIVERS\HidBatt.sys (Microsoft Corporation)
DRV - (AcpiPmi) – C:\Windows\system32\DRIVERS\acpipmi.sys (Microsoft Corporation)
DRV - (AmdPPM) – C:\Windows\system32\DRIVERS\amdppm.sys (Microsoft Corporation)
DRV - (hcw85cir) – C:\Windows\system32\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (BrUsbMdm) – C:\Windows\System32\Drivers\BrUsbMdm.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) – C:\Windows\System32\Drivers\BrUsbSer.sys (Brother Industries Ltd.)
DRV - (BrSerWdm) – C:\Windows\System32\Drivers\BrSerWdm.sys (Brother Industries Ltd.)
DRV - (BrFiltLo) – C:\Windows\system32\DRIVERS\BrFiltLo.sys (Brother Industries, Ltd.)
DRV - (BrFiltUp) – C:\Windows\system32\DRIVERS\BrFiltUp.sys (Brother Industries, Ltd.)
DRV - (VSTHWBS2) – C:\Windows\System32\drivers\VSTBS23.SYS (Conexant Systems, Inc.)
DRV - (VST_DPV) – C:\Windows\System32\drivers\VSTDPV3.SYS (Conexant Systems, Inc.)
DRV - (winachsf) – C:\Windows\System32\drivers\VSTCNXT3.SYS (Conexant Systems, Inc.)
DRV - (atikmdag) – C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (NVENETFD) – C:\Windows\System32\drivers\nvm62x32.sys (NVIDIA Corporation)
DRV - (b57nd60x) – C:\Windows\System32\drivers\b57nd60x.sys (Broadcom Corporation)
DRV - (ebdrv) – C:\Windows\system32\DRIVERS\evbdx.sys (Broadcom Corporation)
DRV - (b06bdrv) – C:\Windows\system32\DRIVERS\bxvbdx.sys (Broadcom Corporation)
DRV - (PID_0928) Logitech QuickCam Express(PID_0928) – C:\Windows\System32\drivers\LV561AV.SYS (Logitech Inc.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (xusb21) – C:\Windows\System32\drivers\xusb21.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\URLSearchHook: {03402f96-3dc7-4285-bc50-9e81fefafe43} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL Inc.)
IE - HKLM\..\URLSearchHook: {70df8d13-bdd3-448e-944c-efde21b77161} - C:\Program Files\ClixSense.com\tbCli1.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - C:\Program Files\PHPNukeEN\tbPHP1.dll (Conduit Ltd.)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.plusnetwork.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\3.bin\MWSSRCAS.DLL (MyWebSearch.com)
IE - HKCU\..\URLSearchHook: {03402f96-3dc7-4285-bc50-9e81fefafe43} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL Inc.)
IE - HKCU\..\URLSearchHook: {70df8d13-bdd3-448e-944c-efde21b77161} - C:\Program Files\ClixSense.com\tbCli1.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.845
FF - prefs.js..extensions.enabledItems: {01A8CA0A-4C96-465b-A49B-65C46FAD54F9}:6.0
FF - prefs.js..extensions.enabledItems: {27182e60-b5f3-411c-b545-b44205977502}:1.0
FF - prefs.js..extensions.enabledItems: [removed]:4.5

FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/09/16 12:50:08 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG9\Firefox [2010/09/16 12:49:52 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\TrustChecker
FF - HKLM\software\mozilla\Firefox\Extensions\\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}: C:\Program Files\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2010/09/16 12:48:08 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010/09/16 12:50:18 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\MyWebSearch\bar\3.bin [2010/09/16 12:50:20 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPlgn\ [2010/09/16 11:38:05 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\coFFPlgn\ [2010/09/16 11:35:06 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/09/16 12:50:19 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/09/16 12:50:20 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0b1\extensions\\Components: C:\Program Files\Mozilla Firefox 4.0 Beta 1\components [2010/09/16 12:50:18 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0b1\extensions\\Plugins: C:\Program Files\Mozilla Firefox 4.0 Beta 1\plugins

[2010/09/16 10:54:53 | 000,000,000 | —D | M] – C:\Users\Esaul\AppData\Roaming\Mozilla\Extensions
[2010/09/16 10:55:24 | 000,000,000 | —D | M] – C:\Users\Esaul\AppData\Roaming\Mozilla\Firefox\Profiles\er33tiw2.default\extensions
[2010/09/16 10:55:24 | 000,000,000 | —D | M] (No name found) – C:\Users\Esaul\AppData\Roaming\Mozilla\Firefox\Profiles\er33tiw2.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/09/16 10:55:23 | 000,000,000 | —D | M] – C:\Users\Esaul\AppData\Roaming\Mozilla\Firefox\Profiles\er33tiw2.default\extensions\staged-xpis
[2010/09/16 12:31:44 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions
[2010/09/16 12:50:20 | 000,000,000 | —D | M] (Skype extension for Firefox) – C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010/03/27 18:06:04 | 000,067,032 | —- | M] (Adobe Systems, Inc.) – C:\Program Files\Mozilla Firefox\plugins\npContribute.dll
[2009/12/15 20:45:56 | 000,416,584 | —- | M] (Lala Media) – C:\Program Files\Mozilla Firefox\plugins\nplalaDl.dll
[2010/03/27 18:14:40 | 000,238,776 | —- | M] (Pando Networks) – C:\Program Files\Mozilla Firefox\plugins\npPandoWebInst.dll

O1 HOSTS File: ([2010/02/07 17:11:52 | 000,001,255 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 hl2rcv.adobe.com
O2 - BHO: (MyWebSearch Search Assistant BHO) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\3.bin\MWSSRCAS.DLL (MyWebSearch.com)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
O2 - BHO: (mwsBar BHO) - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL (MyWebSearch.com)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (msupd Class) - {3D976574-2977-49E2-BCB5-CB4B6475F5CD} - C:\Program Files\ScreensCorner\Common\msudt.dll (Zest Tech)
O2 - BHO: (UrlHelper Class) - {474597C5-AB09-49d6-A4D5-2E8D7341384E} - C:\Program Files\iMesh Applications\MediaBar\DataMngr\IEBHO.dll (iMesh, Inc)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\18.1.0.37\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\18.1.0.37\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (ClixSense.com Toolbar) - {70df8d13-bdd3-448e-944c-efde21b77161} - C:\Program Files\ClixSense.com\tbCli1.dll (Conduit Ltd.)
O2 - BHO: (MediaBar) - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - C:\Program Files\iMesh Applications\MediaBar\ToolBar\iMeshMediaBarDx.dll ()
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (AIM Toolbar Loader) - {b0cda128-b425-4eef-a174-61a11ac5dbf8} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (MSN Toolbar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\4.0.0379.0\npwinext.dll File not found
O2 - BHO: (PHPNukeEN Toolbar) - {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - C:\Program Files\PHPNukeEN\tbPHP1.dll (Conduit Ltd.)
O2 - BHO: (SMTTB2009 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\WebScout Toolbar\tbcore3.dll ()
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3 - HKLM\..\Toolbar: (My Web Search) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL (MyWebSearch.com)
O3 - HKLM\..\Toolbar: (WebScout Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\WebScout Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
O3 - HKLM\..\Toolbar: (AIM Toolbar) - {61539ecd-cc67-4437-a03c-9aaccbd14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL Inc.)
O3 - HKLM\..\Toolbar: (ClixSense.com Toolbar) - {70df8d13-bdd3-448e-944c-efde21b77161} - C:\Program Files\ClixSense.com\tbCli1.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\18.1.0.37\CoIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (MSN Toolbar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\4.0.0379.0\npwinext.dll File not found
O3 - HKLM\..\Toolbar: (MediaBar) - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - C:\Program Files\iMesh Applications\MediaBar\ToolBar\iMeshMediaBarDx.dll ()
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKLM\..\Toolbar: (PHPNukeEN Toolbar) - {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - C:\Program Files\PHPNukeEN\tbPHP1.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (My Web Search) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL (MyWebSearch.com)
O3 - HKCU\..\Toolbar\WebBrowser: (WebScout Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\WebScout Toolbar\tbcore3.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (AIM Toolbar) - {61539ECD-CC67-4437-A03C-9AACCBD14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (ClixSense.com Toolbar) - {70DF8D13-BDD3-448E-944C-EFDE21B77161} - C:\Program Files\ClixSense.com\tbCli1.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (PHPNukeEN Toolbar) - {DD02A4EB-4AFD-4D60-99D8-E67F964CA813} - C:\Program Files\PHPNukeEN\tbPHP1.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll File not found
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [My Web Search Bar Search Scope Monitor] C:\Program Files\MyWebSearch\bar\3.bin\M3SRCHMN.EXE (MyWebSearch.com)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKCU..\Run: [ISUSPM Startup] C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (InstallShield Software Corporation)
O4 - Startup: C:\Users\Esaul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dragon NaturallySpeaking.lnk = C:\Program Files\Nuance\NaturallySpeaking10\Program\natspeak.exe (Nuance Communications, Inc.)
O4 - Startup: C:\Users\Esaul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LimeWire On Startup.lnk = C:\Program Files\LimeWire2\LimeWire.exe (Lime Wire, LLC)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Send image to &Bluetooth Device… - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth Device… - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @C:\Program Files\ThinkPad\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @C:\Program Files\ThinkPad\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} http://download.microsoft.com/download/C/B…/OGAControl.cab (Office Genuine Advantage Validation Tool)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5…heckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} http://ak.exe.imgfarm.com/images/nocache/f…etup1.0.1.1.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 93.188.162.235,93.188.161.235
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\IMESHA~1\MediaBar\DataMngr\datamngr.dll) - C:\Program Files\iMesh Applications\MediaBar\DataMngr\datamngr.dll (iMesh, Inc)
O20 - AppInit_DLLs: (avgrsstx.dll) - C:\Windows\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe ()
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O24 - Desktop WallPaper: C:\Users\Esaul\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Esaul\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O30 - LSA: Authentication Packages - (mliged.dll) - File not found
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (livessp) - C:\Windows\System32\livessp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 17:42:20 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
NetSvcs: Themes - C:\Windows\System32\themeservice.dll (Microsoft Corporation)
NetSvcs: BDESVC - C:\Windows\System32\bdesvc.dll (Microsoft Corporation)

Drivers32: msacm.ac3filter - C:\Windows\System32\ac3filter.acm ()
Drivers32: msacm.avis - C:\Windows\System32\ff_acm.acm ()
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.siren - C:\Windows\System32\sirenacm.dll (Microsoft Corporation)
Drivers32: MSVideo - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FFDS - C:\Windows\System32\ff_vfw.dll ()
Drivers32: VIDC.I420 - C:\Windows\System32\lvcodec2.dll (Logitech Inc.)
Drivers32: vidc.tscc - C:\Windows\System32\tsccvid.dll (TechSmith Corporation)
Drivers32: VIDC.XFR1 - C:\Windows\System32\xfcodec.dll ()
Drivers32: vidc.XVID - C:\Windows\System32\xvidvfw.dll ()
Drivers32: vidc.yv12 - C:\Windows\System32\DivX.dll (DivX, Inc.)

========== Files/Folders - Created Within 30 Days ==========

[2015/10/24 10:18:16 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Silverlight
[2015/10/24 10:05:02 | 000,000,000 | —D | C] – C:\Users\Esaul\AppData\Local\Apple Computer
[2015/10/24 10:03:02 | 000,107,368 | —- | C] (GEAR Software Inc.) – C:\Windows\System32\GEARAspi.dll
[2015/10/24 10:02:56 | 000,000,000 | —D | C] – C:\Windows\System32\DRVSTORE
[2015/10/24 10:00:24 | 000,000,000 | —D | C] – C:\ProgramData\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2015/10/24 10:00:23 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2015/10/23 11:10:55 | 000,000,000 | —D | C] – C:\Users\Esaul\AppData\Local\Mozilla
[2015/10/23 11:09:15 | 000,000,000 | —D | C] – C:\Program Files\Mozilla Firefox
[2015/10/22 21:20:00 | 000,000,000 | —D | C] – C:\Users\Esaul\Documents\OneNote Notebooks
[2015/10/22 20:09:10 | 000,000,000 | —D | C] – C:\Users\Esaul\AppData\Local\Meebo
[2015/10/22 19:57:17 | 000,032,592 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msonpmon.dll
[2015/10/22 19:54:20 | 000,000,000 | —D | C] – C:\Users\Esaul\AppData\Local\Microsoft Games
[2015/10/22 19:50:49 | 000,000,000 | —D | C] – C:\Users\Esaul\AppData\Local\Microsoft Help
[2015/10/22 19:50:27 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2015/10/22 19:50:25 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft Help
[2015/10/22 19:15:59 | 000,000,000 | -H-D | C] – C:\$AVG
[2015/10/22 19:15:22 | 000,000,000 | —D | C] – C:\Windows\System32\drivers\Avg
[2015/10/22 19:15:16 | 000,000,000 | —D | C] – C:\ProgramData\AVG Security Toolbar
[2015/10/22 19:13:39 | 000,000,000 | —D | C] – C:\Program Files\AVG
[2015/10/22 19:13:26 | 000,000,000 | —D | C] – C:\ProgramData\avg9
[2015/10/22 19:04:44 | 000,000,000 | —D | C] – C:\Users\Esaul\Documents\Downloads
[2015/10/22 19:04:26 | 000,000,000 | —D | C] – C:\Windows\System32\Macromed
[2015/10/22 19:03:37 | 000,000,000 | —D | C] – C:\Users\Esaul\AppData\Local\Google
[2015/10/22 19:03:10 | 000,000,000 | —D | C] – C:\Users\Esaul\AppData\Local\Apps
[2015/10/22 19:01:43 | 000,000,000 | —D | C] – C:\Users\Esaul\AppData\Local\AOL
[2015/10/22 19:01:43 | 000,000,000 | —D | C] – C:\Users\Esaul\AppData\Local\AIM
[2015/10/22 19:01:40 | 000,000,000 | —D | C] – C:\ProgramData\AIM
[2015/10/22 19:01:37 | 000,000,000 | —D | C] – C:\Program Files\AIM
[2015/10/22 19:01:25 | 000,000,000 | —D | C] – C:\Program Files\Common Files\AOL
[2015/10/22 18:59:42 | 000,000,000 | R–D | C] – C:\Users\Esaul\Contacts
[2015/10/22 18:59:39 | 000,000,000 | —D | C] – C:\Users\Esaul\AppData\Local\VirtualStore
[2015/10/22 18:43:11 | 000,000,000 | —D | C] – C:\Windows\SoftwareDistribution
[2010/09/16 11:51:56 | 000,000,000 | —D | C] – C:\Users\Esaul\AppData\Roaming\LimeWire
[2010/09/16 11:37:28 | 000,126,512 | —- | C] (Symantec Corporation) – C:\Windows\System32\drivers\SYMEVENT.SYS
[2010/09/16 11:37:27 | 000,000,000 | —D | C] – C:\Program Files\Symantec
[2010/09/16 11:36:18 | 000,294,448 | R— | C] (Symantec Corporation) – C:\Windows\System32\drivers\NIS\1201000.025\symnets.sys
[2010/09/16 11:36:17 | 000,666,672 | R— | C] (Symantec Corporation) – C:\Windows\System32\drivers\NIS\1201000.025\SymEFA.sys
[2010/09/16 11:36:17 | 000,489,008 | R— | C] (Symantec Corporation) – C:\Windows\System32\drivers\NIS\1201000.025\srtsp.sys
[2010/09/16 11:36:17 | 000,339,504 | R— | C] (Symantec Corporation) – C:\Windows\System32\drivers\NIS\1201000.025\SymDS.sys
[2010/09/16 11:36:17 | 000,050,096 | R— | C] (Symantec Corporation) – C:\Windows\System32\drivers\NIS\1201000.025\srtspx.sys
[2010/09/16 11:36:16 | 000,134,704 | R— | C] (Symantec Corporation) – C:\Windows\System32\drivers\NIS\1201000.025\Ironx86.sys
[2010/09/16 11:35:11 | 000,000,000 | —D | C] – C:\Windows\System32\drivers\NIS
[2010/09/16 11:35:11 | 000,000,000 | —D | C] – C:\Windows\System32\drivers\NIS\1201000.025
[2010/09/16 10:52:34 | 000,000,000 | —D | C] – C:\Users\Esaul\AppData\Roaming\Mozilla
[2010/09/16 10:43:36 | 000,000,000 | —D | C] – C:\Users\Esaul\AppData\Roaming\Skype
[2010/09/16 10:42:46 | 000,000,000 | —D | C] – C:\Users\Esaul\AppData\Roaming\Nuance
[2010/09/16 09:42:33 | 000,000,000 | —D | C] – C:\Users\Esaul\AppData\Roaming\Macromedia
[2010/09/16 09:42:33 | 000,000,000 | —D | C] – C:\Users\Esaul\AppData\Roaming\Adobe
[2010/09/15 16:43:49 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Symantec Shared
[2010/09/15 16:42:04 | 000,000,000 | —D | C] – C:\Program Files\Norton Internet Security
[2010/09/15 16:42:03 | 000,000,000 | —D | C] – C:\ProgramData\Norton
[2010/09/15 16:41:31 | 000,000,000 | —D | C] – C:\ProgramData\NortonInstaller
[2010/09/15 16:41:31 | 000,000,000 | —D | C] – C:\Program Files\NortonInstaller
[2010/09/15 14:36:19 | 000,000,000 | —D | C] – C:\ProgramData\Spybot - Search & Destroy
[2010/09/15 14:36:19 | 000,000,000 | —D | C] – C:\Program Files\Spybot - Search & Destroy
[2010/09/15 10:52:32 | 000,000,000 | —D | C] – C:\Users\Esaul\Documents\Camtasia Studio
[2010/09/12 10:25:46 | 000,000,000 | —D | C] – C:\Users\Esaul\New folder
[2010/09/12 05:47:33 | 000,000,000 | —D | C] – C:\Users\Esaul\Desktop\windows
[2010/09/10 22:20:29 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Software Update Utility
[2010/09/10 22:00:58 | 000,000,000 | —D | C] – C:\ProgramData\3A20E
[2010/09/10 19:13:12 | 000,000,000 | —D | C] – C:\Program Files\ScreensCorner
[2010/09/10 19:12:35 | 000,000,000 | -H-D | C] – C:\Users\Public\Documents\Server
[2010/09/05 13:04:26 | 000,000,000 | —D | C] – C:\Users\Esaul\Documents\iMesh
[2010/09/05 13:04:25 | 000,000,000 | —D | C] – C:\Users\Esaul\AppData\Local\iMesh
[2010/09/02 08:02:35 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2010/09/02 07:57:36 | 000,000,000 | —D | C] – C:\Program Files\QuickTime
[2010/09/02 07:56:11 | 000,000,000 | —D | C] – C:\Program Files\Apple Software Update
[2010/09/02 07:54:23 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2010/08/31 10:00:07 | 000,000,000 | —D | C] – C:\ProgramData\ScanSoft
[2010/08/31 10:00:06 | 000,000,000 | —D | C] – C:\Program Files\Common Files\ScanSoft Shared
[2010/08/31 10:00:01 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Nuance
[2010/08/31 09:59:01 | 000,000,000 | —D | C] – C:\ProgramData\Nuance
[2010/08/31 09:59:01 | 000,000,000 | —D | C] – C:\Program Files\Nuance
[2010/08/28 07:36:51 | 000,012,536 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\Windows\System32\avgrsstx.dll
[2010/08/27 10:36:42 | 000,000,000 | —D | C] – C:\ProgramData\2A47
[2010/08/23 22:25:20 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Skype
[2010/08/23 22:25:18 | 000,000,000 | R–D | C] – C:\Program Files\Skype
[2010/08/23 22:25:08 | 000,000,000 | —D | C] – C:\ProgramData\Skype
[1 C:\Windows\System32\drivers\*.tmp files -> C:\Windows\System32\drivers\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2015/10/22 18:43:41 | 000,000,367 | -H– | M] () – C:\Boot.BAK
[2010/09/16 12:05:27 | 007,077,888 | -HS- | M] () – C:\Users\Esaul\ntuser.dat
[2010/09/16 12:04:06 | 000,000,908 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1166118285-3902792895-1103815034-1000UA.job
[2010/09/16 12:01:18 | 000,006,304 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/09/16 12:01:18 | 000,006,304 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/09/16 11:50:17 | 000,000,286 | -H– | M] () – C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2010/09/16 11:49:57 | 000,065,536 | —- | M] () – C:\Windows\System32\Ikeext.etl
[2010/09/16 11:49:55 | 000,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2010/09/16 11:49:46 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/09/16 11:49:34 | 1559,093,248 | -HS- | M] () – C:\hiberfil.sys
[2010/09/16 11:38:32 | 000,965,854 | —- | M] () – C:\Windows\System32\drivers\NIS\1201000.025\Cat.DB
[2010/09/16 11:37:28 | 000,126,512 | —- | M] (Symantec Corporation) – C:\Windows\System32\drivers\SYMEVENT.SYS
[2010/09/16 11:37:28 | 000,007,456 | —- | M] () – C:\Windows\System32\drivers\SYMEVENT.CAT
[2010/09/16 11:37:28 | 000,000,805 | —- | M] () – C:\Windows\System32\drivers\SYMEVENT.INF
[2010/09/16 11:36:58 | 000,002,878 | —- | M] () – C:\Users\Public\Desktop\Norton Internet Security.lnk
[2010/09/16 09:10:48 | 064,691,171 | —- | M] () – C:\Windows\System32\drivers\Avg\incavi.avm
[2010/09/16 09:08:15 | 000,002,503 | —- | M] () – C:\Users\Esaul\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2010/09/16 09:08:15 | 000,002,479 | —- | M] () – C:\Users\Public\Desktop\Safari.lnk
[2010/09/16 09:04:50 | 000,524,288 | -HS- | M] () – C:\Users\Esaul\ntuser.dat{d0d777bf-c192-11df-b4b7-000272ab42b3}.TMContainer00000000000000000002.regtrans-ms
[2010/09/16 09:04:50 | 000,524,288 | -HS- | M] () – C:\Users\Esaul\ntuser.dat{d0d777bf-c192-11df-b4b7-000272ab42b3}.TMContainer00000000000000000001.regtrans-ms
[2010/09/16 09:04:49 | 000,065,536 | -HS- | M] () – C:\Users\Esaul\ntuser.dat{d0d777bf-c192-11df-b4b7-000272ab42b3}.TM.blf
[2010/09/15 15:58:01 | 001,181,603 | -H– | M] () – C:\Users\Esaul\AppData\Local\IconCache.db
[2010/09/14 18:04:08 | 000,000,856 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1166118285-3902792895-1103815034-1000Core.job
[2010/09/12 06:05:06 | 000,001,890 | —- | M] () – C:\Windows\diagwrn.xml
[2010/09/12 06:05:06 | 000,001,890 | —- | M] () – C:\Windows\diagerr.xml
[2010/09/12 02:37:39 | 000,000,362 | RHS- | M] () – C:\ProgramData\ntuser.pol
[2010/09/10 22:58:29 | 000,000,238 | -H– | M] () – C:\Windows\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
[2010/09/10 21:15:56 | 000,274,255 | —- | M] () – C:\Users\Esaul\Desktop\tyler.png
[2010/09/08 10:08:07 | 001,696,528 | —- | M] () – C:\Users\Esaul\Desktop\Linkin-Park-A-Thousand-Suns-Promo-linkin-park-14356298-1691-1315.jpg
[2010/09/03 18:48:37 | 000,002,689 | -H– | M] () – C:\IPH.PH
[2010/09/03 18:48:36 | 000,001,923 | —- | M] () – C:\Users\Esaul\Application Data\Microsoft\Internet Explorer\Quick Launch\AIM.lnk
[2010/09/03 18:48:36 | 000,001,899 | —- | M] () – C:\Users\Public\Desktop\AIM.lnk
[2010/08/31 10:05:40 | 000,001,213 | —- | M] () – C:\Users\Esaul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dragon NaturallySpeaking.lnk
[2010/08/31 10:05:08 | 000,002,787 | —- | M] () – C:\Users\Public\Desktop\Dragon NaturallySpeaking 10.0.lnk
[2010/08/28 07:36:52 | 000,243,024 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Windows\System32\drivers\avgtdix.sys
[2010/08/28 07:36:51 | 000,029,584 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Windows\System32\drivers\avgmfx86.sys
[2010/08/28 07:36:51 | 000,012,536 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Windows\System32\avgrsstx.dll
[2010/08/28 07:36:46 | 000,216,400 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Windows\System32\drivers\avgldx86.sys
[2010/08/28 07:36:45 | 000,052,872 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Windows\System32\drivers\avgrkx86.sys
[2010/08/28 07:32:49 | 000,142,495 | —- | M] () – C:\Windows\System32\drivers\Avg\microavi.avg
[2010/08/28 07:25:07 | 000,524,288 | -HS- | M] () – C:\Users\Esaul\ntuser.dat{3c7aa94a-b200-11df-a4f1-000272ab42b3}.TMContainer00000000000000000002.regtrans-ms
[2010/08/28 07:25:07 | 000,524,288 | -HS- | M] () – C:\Users\Esaul\ntuser.dat{3c7aa94a-b200-11df-a4f1-000272ab42b3}.TMContainer00000000000000000001.regtrans-ms
[2010/08/28 07:25:07 | 000,065,536 | -HS- | M] () – C:\Users\Esaul\ntuser.dat{3c7aa94a-b200-11df-a4f1-000272ab42b3}.TM.blf
[2010/08/27 13:48:40 | 000,001,852 | —- | M] () – C:\Users\Public\Desktop\AVG 9.0.lnk
[2010/08/27 12:57:41 | 000,000,711 | —- | M] () – C:\ProgramData\.wtav
[2010/08/27 03:16:37 | 000,524,288 | -HS- | M] () – C:\Users\Esaul\ntuser.dat{594ea8f4-b13e-11df-9725-000272ab42b3}.TMContainer00000000000000000002.regtrans-ms
[2010/08/27 03:16:37 | 000,524,288 | -HS- | M] () – C:\Users\Esaul\ntuser.dat{594ea8f4-b13e-11df-9725-000272ab42b3}.TMContainer00000000000000000001.regtrans-ms
[2010/08/27 03:16:37 | 000,065,536 | -HS- | M] () – C:\Users\Esaul\ntuser.dat{594ea8f4-b13e-11df-9725-000272ab42b3}.TM.blf
[2010/08/23 22:29:05 | 000,000,056 | -H– | M] () – C:\Windows\System32\ezsidmv.dat
[2010/08/23 22:25:20 | 000,002,503 | —- | M] () – C:\Users\Public\Desktop\Skype.lnk
[2010/08/19 20:52:32 | 000,001,456 | —- | M] () – C:\Users\Esaul\AppData\Local\Adobe Save for Web 12.0 Prefs
[2010/08/19 20:43:02 | 000,030,495 | —- | M] () – C:\Users\Esaul\Desktop\a_thousand_suns-album_cover(Black).jpg
[2010/08/19 20:41:33 | 000,192,194 | —- | M] () – C:\Users\Esaul\Desktop\ats_1080p_black.jpg
[2010/08/19 20:38:44 | 002,697,354 | —- | M] () – C:\Users\Esaul\Desktop\071710-230610_the-catalyst-single-cover.png
[2010/08/18 10:01:59 | 000,000,172 | —- | M] () – C:\Windows\System32\drivers\NIS\1201000.025\isolate.ini
[1 C:\Windows\System32\drivers\*.tmp files -> C:\Windows\System32\drivers\*.tmp -> ]

========== Files Created - No Company Name ==========

[2015/10/22 18:59:31 | 000,000,286 | -HS- | C] () – C:\Users\Esaul\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop (1).ini
[2010/09/16 11:37:35 | 000,965,854 | —- | C] () – C:\Windows\System32\drivers\NIS\1201000.025\Cat.DB
[2010/09/16 11:37:28 | 000,007,456 | —- | C] () – C:\Windows\System32\drivers\SYMEVENT.CAT
[2010/09/16 11:37:28 | 000,000,805 | —- | C] () – C:\Windows\System32\drivers\SYMEVENT.INF
[2010/09/16 11:36:58 | 000,002,878 | —- | C] () – C:\Users\Public\Desktop\Norton Internet Security.lnk
[2010/09/16 11:35:33 | 000,003,373 | R— | C] () – C:\Windows\System32\drivers\NIS\1201000.025\SymEFA.inf
[2010/09/16 11:35:33 | 000,002,792 | R— | C] () – C:\Windows\System32\drivers\NIS\1201000.025\SymDS.inf
[2010/09/16 11:35:33 | 000,001,445 | R— | C] () – C:\Windows\System32\drivers\NIS\1201000.025\SymNet.inf
[2010/09/16 11:35:33 | 000,001,389 | R— | C] () – C:\Windows\System32\drivers\NIS\1201000.025\srtspx.inf
[2010/09/16 11:35:33 | 000,001,383 | R— | C] () – C:\Windows\System32\drivers\NIS\1201000.025\srtsp.inf
[2010/09/16 11:35:33 | 000,000,741 | R— | C] () – C:\Windows\System32\drivers\NIS\1201000.025\Iron.inf
[2010/09/16 11:35:12 | 000,007,446 | R— | C] () – C:\Windows\System32\drivers\NIS\1201000.025\SymNet.cat
[2010/09/16 11:35:12 | 000,007,444 | R— | C] () – C:\Windows\System32\drivers\NIS\1201000.025\SymEFA.cat
[2010/09/16 11:35:12 | 000,007,438 | R— | C] () – C:\Windows\System32\drivers\NIS\1201000.025\SymDS.cat
[2010/09/16 11:35:11 | 000,007,442 | R— | C] () – C:\Windows\System32\drivers\NIS\1201000.025\srtspx.cat
[2010/09/16 11:35:11 | 000,007,438 | R— | C] () – C:\Windows\System32\drivers\NIS\1201000.025\srtsp.cat
[2010/09/16 11:35:11 | 000,007,438 | R— | C] () – C:\Windows\System32\drivers\NIS\1201000.025\iron.cat
[2010/09/16 11:35:11 | 000,000,172 | —- | C] () – C:\Windows\System32\drivers\NIS\1201000.025\isolate.ini
[2010/09/16 09:04:50 | 000,524,288 | -HS- | C] () – C:\Users\Esaul\ntuser.dat{d0d777bf-c192-11df-b4b7-000272ab42b3}.TMContainer00000000000000000002.regtrans-ms
[2010/09/16 09:04:50 | 000,524,288 | -HS- | C] () – C:\Users\Esaul\ntuser.dat{d0d777bf-c192-11df-b4b7-000272ab42b3}.TMContainer00000000000000000001.regtrans-ms
[2010/09/16 09:04:49 | 000,065,536 | -HS- | C] () – C:\Users\Esaul\ntuser.dat{d0d777bf-c192-11df-b4b7-000272ab42b3}.TM.blf
[2010/09/14 07:59:12 | 000,002,479 | —- | C] () – C:\Users\Public\Desktop\Safari.lnk
[2010/09/10 22:58:27 | 000,000,238 | -H– | C] () – C:\Windows\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
[2010/09/10 21:15:56 | 000,274,255 | —- | C] () – C:\Users\Esaul\Desktop\tyler.png
[2010/09/10 19:13:59 | 000,000,286 | -H– | C] () – C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2010/09/08 10:08:07 | 001,696,528 | —- | C] () – C:\Users\Esaul\Desktop\Linkin-Park-A-Thousand-Suns-Promo-linkin-park-14356298-1691-1315.jpg
[2010/09/03 18:48:36 | 000,001,923 | —- | C] () – C:\Users\Esaul\Application Data\Microsoft\Internet Explorer\Quick Launch\AIM.lnk
[2010/08/31 10:05:40 | 000,001,213 | —- | C] () – C:\Users\Esaul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dragon NaturallySpeaking.lnk
[2010/08/31 10:05:08 | 000,002,787 | —- | C] () – C:\Users\Public\Desktop\Dragon NaturallySpeaking 10.0.lnk
[2010/08/27 13:48:40 | 000,001,852 | —- | C] () – C:\Users\Public\Desktop\AVG 9.0.lnk
[2010/08/27 13:27:51 | 000,524,288 | -HS- | C] () – C:\Users\Esaul\ntuser.dat{3c7aa94a-b200-11df-a4f1-000272ab42b3}.TMContainer00000000000000000002.regtrans-ms
[2010/08/27 13:27:51 | 000,524,288 | -HS- | C] () – C:\Users\Esaul\ntuser.dat{3c7aa94a-b200-11df-a4f1-000272ab42b3}.TMContainer00000000000000000001.regtrans-ms
[2010/08/27 13:27:51 | 000,065,536 | -HS- | C] () – C:\Users\Esaul\ntuser.dat{3c7aa94a-b200-11df-a4f1-000272ab42b3}.TM.blf
[2010/08/27 10:22:20 | 000,000,711 | —- | C] () – C:\ProgramData\.wtav
[2010/08/26 14:31:06 | 000,524,288 | -HS- | C] () – C:\Users\Esaul\ntuser.dat{594ea8f4-b13e-11df-9725-000272ab42b3}.TMContainer00000000000000000002.regtrans-ms
[2010/08/26 14:31:04 | 000,524,288 | -HS- | C] () – C:\Users\Esaul\ntuser.dat{594ea8f4-b13e-11df-9725-000272ab42b3}.TMContainer00000000000000000001.regtrans-ms
[2010/08/26 14:31:02 | 000,065,536 | -HS- | C] () – C:\Users\Esaul\ntuser.dat{594ea8f4-b13e-11df-9725-000272ab42b3}.TM.blf
[2010/08/23 22:29:05 | 000,000,056 | -H– | C] () – C:\Windows\System32\ezsidmv.dat
[2010/08/23 22:25:20 | 000,002,503 | —- | C] () – C:\Users\Public\Desktop\Skype.lnk
[2010/08/19 20:43:02 | 000,030,495 | —- | C] () – C:\Users\Esaul\Desktop\a_thousand_suns-album_cover(Black).jpg
[2010/08/19 20:41:32 | 000,192,194 | —- | C] () – C:\Users\Esaul\Desktop\ats_1080p_black.jpg
[2010/08/19 20:38:44 | 002,697,354 | —- | C] () – C:\Users\Esaul\Desktop\071710-230610_the-catalyst-single-cover.png
[2010/07/25 02:56:09 | 000,002,774 | —- | C] () – C:\Users\Esaul\AppData\Local\Bqogezaxijo.dat
[2010/06/01 10:44:07 | 000,000,739 | —- | C] () – C:\ProgramData\hpzinstall.log
[2010/05/23 15:16:57 | 000,230,752 | —- | C] () – C:\Windows\patchw32.dll
[2010/05/23 15:16:51 | 000,118,176 | —- | C] () – C:\Windows\patchw.dll
[2010/05/03 13:33:02 | 000,001,456 | —- | C] () – C:\Users\Esaul\AppData\Local\Adobe Save for Web 12.0 Prefs
[2010/04/25 16:18:08 | 000,691,696 | —- | C] () – C:\Windows\System32\drivers\sptd.sys
[2010/04/19 22:05:25 | 000,000,093 | —- | C] () – C:\Users\Esaul\AppData\Local\fusioncache.dat
[2010/04/19 16:26:02 | 000,000,025 | -H– | C] () – C:\ProgramData\.811261211181235583101118113995
[2010/04/08 17:40:04 | 000,019,968 | —- | C] () – C:\Users\Esaul\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/26 23:10:46 | 000,000,362 | RHS- | C] () – C:\ProgramData\ntuser.pol
[2010/02/28 12:52:26 | 000,271,360 | —- | C] () – C:\Windows\System32\drivers\atksgt.sys
[2010/02/28 12:51:50 | 000,018,048 | —- | C] () – C:\Windows\System32\drivers\lirsgt.sys
[2010/02/21 04:48:22 | 000,085,504 | —- | C] () – C:\Windows\System32\ff_vfw.dll
[2010/02/10 07:17:02 | 000,000,118 | —- | C] () – C:\Windows\System32\MRT.INI
[2009/11/30 15:33:46 | 000,041,872 | —- | C] () – C:\Windows\System32\xfcodec.dll
[2009/11/27 00:01:15 | 000,000,030 | —- | C] () – C:\Windows\Q3version.ini
[2009/11/05 17:48:05 | 000,138,184 | —- | C] () – C:\Windows\System32\drivers\PnkBstrK.sys
[2009/10/25 17:14:08 | 000,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2009/08/16 10:08:36 | 000,178,176 | —- | C] () – C:\Windows\System32\unrar.dll
[2009/08/03 15:07:42 | 000,403,816 | —- | C] () – C:\Windows\System32\OGACheckControl.DLL
[2009/07/13 20:01:39 | 000,006,656 | —- | C] () – C:\Windows\System32\drivers\RDPENCDD.sys
[2009/07/13 19:51:43 | 000,073,728 | —- | C] () – C:\Windows\System32\BthpanContextHandler.dll
[2009/07/13 19:42:10 | 000,064,000 | —- | C] () – C:\Windows\System32\BWContextHandler.dll
[2009/05/29 15:52:26 | 000,204,800 | —- | C] () – C:\Windows\System32\xvidvfw.dll
[2009/05/29 15:47:06 | 000,881,664 | —- | C] () – C:\Windows\System32\xvidcore.dll
[2009/05/01 01:39:36 | 000,082,289 | —- | C] () – C:\Windows\System32\lvcoinst.ini
[2007/07/23 12:03:32 | 000,053,248 | —- | C] () – C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2007/07/23 12:03:32 | 000,053,248 | —- | C] () – C:\Windows\System32\AgCPanelSwedish.dll
[2007/07/23 12:03:32 | 000,053,248 | —- | C] () – C:\Windows\System32\AgCPanelSpanish.dll
[2007/07/23 12:03:30 | 000,053,248 | —- | C] () – C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2007/07/23 12:03:30 | 000,053,248 | —- | C] () – C:\Windows\System32\AgCPanelPortugese.dll
[2007/07/23 12:03:30 | 000,053,248 | —- | C] () – C:\Windows\System32\AgCPanelKorean.dll
[2007/07/23 12:03:30 | 000,053,248 | —- | C] () – C:\Windows\System32\AgCPanelJapanese.dll
[2007/07/23 12:03:30 | 000,053,248 | —- | C] () – C:\Windows\System32\AgCPanelGerman.dll
[2007/07/23 12:03:30 | 000,053,248 | —- | C] () – C:\Windows\System32\AgCPanelFrench.dll
[2007/02/05 20:05:26 | 000,000,038 | —- | C] () – C:\Windows\AviSplitter.INI
[2005/12/07 13:45:26 | 000,009,371 | -H– | C] () – C:\Users\Esaul\AppData\Roaming\logs.dat

========== LOP Check ==========

[2010/09/16 11:52:48 | 000,000,000 | —D | M] – C:\Users\Esaul\AppData\Roaming\LimeWire
[2010/09/16 10:42:46 | 000,000,000 | —D | M] – C:\Users\Esaul\AppData\Roaming\Nuance
[2010/03/23 12:01:19 | 000,000,000 | RHSD | M] – C:\Users\Esaul\AppData\Roaming\Windows Root Keys
[2010/09/02 21:59:07 | 000,032,626 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2010/09/16 11:50:17 | 000,000,286 | -H– | M] () – C:\Windows\Tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2010/09/10 22:58:29 | 000,000,238 | -H– | M] () – C:\Windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2009/06/10 17:42:20 | 000,000,024 | —- | M] () – C:\autoexec.bat
[2015/10/22 18:43:41 | 000,000,367 | -H– | M] () – C:\Boot.BAK
[2010/03/25 16:14:30 | 000,000,367 | RHS- | M] () – C:\boot.ini
[2010/03/25 16:14:30 | 000,000,367 | RHS- | M] () – C:\Boot.ini.saved
[2009/07/13 21:38:58 | 000,383,562 | RHS- | M] () – C:\bootmgr
[2010/03/25 16:14:34 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK
[2009/06/10 17:42:20 | 000,000,010 | —- | M] () – C:\config.sys
[2009/08/02 04:59:51 | 000,171,136 | RHS- | M] () – C:\grldr
[2010/09/16 11:49:34 | 1559,093,248 | -HS- | M] () – C:\hiberfil.sys
[2009/03/08 06:41:27 | 000,004,128 | —- | M] () – C:\INFCACHE.1
[2004/08/10 13:04:08 | 000,000,000 | -H– | M] () – C:\IO.SYS
[2010/09/03 18:48:37 | 000,002,689 | -H– | M] () – C:\IPH.PH
[2004/08/10 13:04:08 | 000,000,000 | -H– | M] () – C:\MSDOS.SYS
[2004/08/04 05:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2004/08/04 05:00:00 | 000,250,032 | RHS- | M] () – C:\ntldr
[2010/09/16 11:49:33 | 3218,079,744 | -HS- | M] () – C:\pagefile.sys
[2010/04/19 21:24:07 | 001,637,448 | —- | M] () – C:\profile_43.txt
[2008/04/24 16:47:44 | 000,000,071 | —- | M] () – C:\SystemInfo.ini
[2009/07/30 14:32:52 | 000,000,000 | —- | M] () – C:\testwma.raw
[2009/09/22 14:57:19 | 000,001,700 | —- | M] () – C:\Windows Police Pro
[2010/07/25 02:54:15 | 000,000,150 | —- | M] () – C:\zrpt.xml

< %systemroot%\Fonts\*.com >
[2009/07/14 00:52:25 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 00:52:25 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 00:52:25 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 00:52:25 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 17:31:19 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2009/07/13 21:15:05 | 000,071,168 | —- | M] (CANON INC.) – C:\Windows\System32\spool\prtprocs\w32x86\CNBPP4.DLL
[2008/10/06 19:37:30 | 000,315,392 | —- | M] (Hewlett-Packard Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\hpfpp083.dll
[2009/07/13 21:15:35 | 000,022,528 | —- | M] (Microsoft Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\jnwppr.dll
[2006/10/26 22:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll
[2009/07/13 21:16:19 | 000,029,696 | —- | M] (Microsoft Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\winprint.dll

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/14 00:41:57 | 000,000,174 | -HS- | M] () – C:\Program Files\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2009/11/09 22:31:45 | 000,000,286 | -HS- | M] () – C:\Users\Esaul\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop (1).ini
[2010/03/25 13:32:23 | 000,000,221 | -HS- | M] () – C:\Users\Esaul\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-08-28 07:01:49

========== Alternate Data Streams ==========

@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:F35A93AD

< End of report >


Extra:

OTL Extras logfile created on: 9/16/2010 12:00:01 PM - Run 1
OTL by OldTimer - Version 3.2.12.1 Folder = C:\Users\Esaul\Downloads
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 37.00% Memory free
8.00 Gb Paging File | 7.00 Gb Available in Paging File | 83.00% Paging File free
Paging file location(s): [Binary data over 100 bytes]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 148.88 Gb Total Space | 85.22 Gb Free Space | 57.24% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 232.85 Gb Total Space | 137.39 Gb Free Space | 59.00% Space Free | Partition Type: FAT32
Drive F: | 465.76 Gb Total Space | 408.26 Gb Free Space | 87.66% Space Free | Partition Type: NTFS
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: ESAUL-PC
Current User Name: Esaul
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile – "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] – "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] – C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe ()
Folder [open] – %SystemRoot%\Explorer.exe ()
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe ()

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0076E1AC-9E7B-4B9F-A62A-4CC9511AD8E3}" = Zune Language Pack (FR)
"{024521CF-C07E-4F8E-8481-0D75695E03AF}" = PxMergeModule
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{06A1D88C-E102-4527-AF70-29FFD7AF215A}" = Scan
"{06E6E30D-B498-442F-A943-07DE41D7F785}" = Microsoft Search Enhancement Pack
"{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}" = hpWLPGInstaller
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0B0B300F-4DAD-4A36-4337-6FE3B050AB00}" = Pandora
"{0CA72D12-F6C6-4D43-A2A0-41F5AA17E2B6}" = Netflix in Windows Media Center
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1E99F5D7-4262-4C7C-9135-F066E7485811}" = System Requirements Lab
"{20140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010 (Beta)
"{20140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010 (Beta)
"{20140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010 (Beta)
"{20140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010 (Beta)
"{20140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010 (Beta)
"{20140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010 (Beta)
"{20140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010 (Beta)
"{20140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010 (Beta)
"{20140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010 (Beta)
"{20140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010 (Beta)
"{20140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010 (Beta)
"{20140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010 (Beta)
"{20140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010 (Beta)
"{20140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010 (Beta)
"{20140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010 (Beta)
"{20140000-011A-0000-0000-0000000FF1CE}" = Microsoft Office Send-a-Smile
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{20ACB2F8-3BCA-45A8-80A2-9D3CB5C25F43}" = Safari
"{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}" = DeviceDiscovery
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2656D0AB-9EA4-4C58-A117-635F3CED8B93}" = Microsoft UI Engine
"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java™ 6 Update 17
"{288DB08D-0708-4A94-B055-55B99E39EB62}" = Adobe Creative Suite 5 Master Collection
"{292F0F52-B62D-4E71-921B-89A682402201}" = Toolbox
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{34A350D1-64FB-36D8-9D0C-1CD8E392DBA5}" = Google Talk Plugin
"{350FB27C-CF62-4EF3-AF9D-70FF313FE221}" = iTunes
"{370BCBBA-67D7-4535-ADCD-58CD1C8DEC99}" = Zune Language Pack (DE)
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3C8E6416-90F8-445E-B2BF-8D4809F41C6E}" = Adobe Setup
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{40EC6323-497B-44DA-8A88-74578622D9B3}" = Zune Language Pack (IT)
"{43B0D334-9A1B-4257-9E51-D3813BD8B9D0}" = GoGear ARIA Device Manager
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{45235788-142C-44BE-8A4D-DDE9A84492E5}" = AGEIA PhysX v7.09.13
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{4A5A427F-BA39-4BF0-9A47-9999FBE60C9F}" = Visual C++ Runtime for Dragon NaturallySpeaking
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{53FA9A9F-3C19-4D43-AD6B-DEF365D469BA}" = Camtasia Studio 7
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{61BEA823-ECAF-49F1-8378-A59B3B8AD247}" = Microsoft Default Manager
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{68A10D12-0D0F-4212-BDE6-D87FAD32A8FA}" = SmartWebPrinting
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}" = Adobe Flash Player 10 ActiveX
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo Client
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7C3C895B-AE02-4F30-8A6A-051D37A38DD0}" = Final Draft
"{7F8D5FF5-71BE-49CA-A9DA-1F00BBC6ECE5}" = GlitterComm Beta v1.09.0420
"{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8429A3E7-F308-47D5-9025-9823848D724C}" = Lala Music Mover
"{859D40CF-8491-44AD-8FA8-7389CB418C64}" = 32 Bit HP CIO Components Installer
"{888FFC82-688D-46AB-A776-B417885432B6}" = Zune
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C0CAA7A-3272-4991-A808-2C7559DE3409}" = Win7codecs
"{8E7D9DFC-D3AF-49EC-AE07-7BA08FA8009F}" = Unreal Tournament 3 Black
"{8EAD600D-1912-4DEF-92B5-0C7525E17ED2}" = F4400
"{8FB495A1-4A3F-4C1D-BD27-3F3AB2E66763}" = iMesh
"{92127AF5-FDD8-4ADF-BC40-C356C9EE0B7D}" = 32 Bit HP CIO Components Installer
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D318C86-AF4C-409F-A6AC-7183FF4CF424}" = Internet TV for Windows Media Center
"{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}" = ThinkPad Bluetooth with Enhanced Data Rate Software
"{A65F7CF8-6F76-40CE-B44D-D5A89D9881C7}" = MSN Toolbar Platform
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A800FCC9-8E1E-4D84-9CED-47870701FDE1}" = HP Deskjet F4400 Printer Driver 14.0 Rel. 5
"{A835C187-691C-4827-BCEA-1611179C96B9}" = DJ_AIO_05_F4400_Software_Min
"{A85FD55B-891B-4314-97A5-EA96C0BD80B5}" = Windows Live Messenger
"{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3.2
"{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}" = Status
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{C4124E95-5061-4776-8D5D-E3D931C778E1}" = Microsoft VC9 runtime libraries
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C75CDBA2-3C86-481e-BD10-BDDA758F9DFF}" = hpPrintProjects
"{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CCA1EEA3-555E-4D05-AC46-4B49C6C5D887}" = Apple Mobile Device Support
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support
"{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}" = TrayApp
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{E127B28D-1A2A-45C4-A74E-C817E0A74E3E}" = Fiesta
"{E7712E53-7A7F-46EB-AA13-70D5987D30F2}" = Dragon NaturallySpeaking 10
"{EB900AF8-CC61-4E15-871B-98D1EA3E8025}" = QuickTime
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{EE4ACABF-531E-419A-9225-B8E0FA4955AF}" = Zune Language Pack (ES)
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
"{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}" = ooVoo
"{FAF26102-09D7-4C58-AB01-0D59A2E517CA}" = Copy
"{FBA1239D-189F-4855-88B6-4DBE606D30A5}" = Fiesta
"{FD9E03B5-AEEA-4D59-B512-6CE4AA0281D4}" = Byki
"{FF1C31AE-0CDC-40CE-AB85-406F8B70D643}" = Bonjour
"15b35190-c6f9-11d9-9669-0800200c9a66_is1" = Dungeons & Dragons Online ®: Eberron Unlimited ™ v01.11.00.812
"4shared Desktop" = 4shared Desktop
"755087041320E005CB1E8A67C5C55A260EB81B90" = Windows Driver Package - Broadcom Bluetooth (09/11/2009 6.2.0.9407)
"A6A8668C0A13640CA28FE2A7D9654BE4AE478B13" = Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_a6ee7809a2267098a2ba2aebaa7d7d3" = Adobe Soundbooth CS4 Codecs
"AIM MusicLink 4.0.0.0" = AIM MusicLink 4.0.0.0
"AIM MusicLink [removed]" = AIM MusicLink [removed]
"AIM Toolbar" = AIM Toolbar
"AIM_7" = AIM 7
"Akamai" = Akamai NetSession Interface
"Ask.com Search Assistant" = Ask.com Search Assistant 1.0.2
"AVG9Uninstall" = AVG 9.0
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.3
"AVS4YOU Video Converter 6_is1" = AVS Video Converter 6
"BF20603967CFDCB2BBF91950E8A56DFBC5C833FE" = Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800)
"CCenter" = CCenter
"CDisplay_is1" = CDisplay 1.8
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"ClixSense.com Toolbar" = ClixSense.com Toolbar
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"com.pandora.desktop.FB9956FD96E03239939108614098AD95535EE674.1" = Pandora
"ComicRack" = ComicRack v0.9.118
"EndItAll_is1" = EndItAll 2.0
"FileZilla Client" = FileZilla Client [removed]
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Print Projects" = HP Print Projects 1.0
"HP Smart Web Printing" = HP Smart Web Printing 4.5
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"iMesh" = iMesh
"iMesh MediaBar" = MediaBar
"LimeWire" = LimeWire 5.5.13
"LimeWire Turbo Accelerator" = LimeWire Turbo Accelerator
"LUNA_US_09122301" = LUNA Online v1.2.0
"LyricsSeeker plugins" = LyricsSeeker plugins 2.3
"Messenger Plus! Live" = Messenger Plus! Live
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox (3.6.8)" = Mozilla Firefox (3.6.8)
"Mozilla Firefox (4.0b1)" = Mozilla Firefox (4.0b1)
"MyWebSearch bar Uninstall" = My Web Search
"NIS" = Norton Internet Security
"NVIDIA Drivers" = NVIDIA Drivers
"Office14.SingleImage" = Microsoft Office Professional 2010
"PHPNukeEN Toolbar" = PHPNukeEN Toolbar
"QuickPar" = QuickPar 0.9
"Shop for HP Supplies" = Shop for HP Supplies
"SoftwareUpdUtility" = Download Updater (AOL LLC)
"The Game Of Life" = The Game Of Life
"TidySongs" = TidySongs (remove only)
"TreeSize Free_is1" = TreeSize Free V2.4
"Virtual DJ - Atomix Productions" = Virtual DJ - Atomix Productions
"VobSub" = VobSub v2.23 (Remove Only)
"Warhammer Online - Age of Reckoning" = Warhammer Online - Age of Reckoning
"WebScout Toolbar" = WebScout Toolbar
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver
"World of Warcraft" = World of Warcraft
"World of Warcraft Public Test" = World of Warcraft Public Test
"wxPython2.8-unicode-py26_is1" = wxPython [removed] (unicode) for Python 2.6
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Software Update" = Yahoo! Software Update
"Zune" = Zune
"Zygor Guides" = Zygor Guides

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"090215de958f1060" = Curse Client
"Google Chrome" = Google Chrome
"Move Media Player" = Move Media Player
"UnityWebPlayer" = Unity Web Player
"WinDirStat" = WinDirStat 1.1.2

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 9/15/2010 9:02:12 PM | Computer Name = Esaul-PC | Source = WinMgmt | ID = 10
Description =

Error - 9/15/2010 9:06:31 PM | Computer Name = Esaul-PC | Source = WinMgmt | ID = 10
Description =

Error - 9/15/2010 10:19:25 PM | Computer Name = Esaul-PC | Source = WinMgmt | ID = 10
Description =

Error - 9/15/2010 10:29:27 PM | Computer Name = Esaul-PC | Source = WinMgmt | ID = 10
Description =

Error - 9/16/2010 5:19:02 AM | Computer Name = Esaul-PC | Source = WinMgmt | ID = 10
Description =

Error - 9/16/2010 9:05:45 AM | Computer Name = Esaul-PC | Source = WinMgmt | ID = 10
Description =

Error - 9/16/2010 9:12:53 AM | Computer Name = Esaul-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files\Last.fm\LastFM.exe".
Dependent
Assembly Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 9/16/2010 10:42:14 AM | Computer Name = Esaul-PC | Source = WinMgmt | ID = 10
Description =

Error - 9/16/2010 11:25:34 AM | Computer Name = Esaul-PC | Source = WinMgmt | ID = 10
Description =

Error - 9/16/2010 11:50:56 AM | Computer Name = Esaul-PC | Source = WinMgmt | ID = 10
Description =

[ Media Center Events ]
Error - 4/30/2010 10:38:43 AM | Computer Name = Esaul-PC | Source = Microsoft-Windows-Media Center Extender | ID = 301
Description =

Error - 5/25/2010 1:24:36 AM | Computer Name = Esaul-PC | Source = Microsoft-Windows-Media Center Extender | ID = 104
Description =

Error - 5/26/2010 4:03:40 AM | Computer Name = Esaul-PC | Source = Microsoft-Windows-Media Center Extender | ID = 104
Description =

Error - 6/10/2010 10:15:55 AM | Computer Name = Esaul-PC | Source = MCUpdate | ID = 0
Description = 10:15:48 AM - Error connecting to the internet. 10:15:48 AM - Unable
to contact server..

Error - 7/7/2010 4:23:40 PM | Computer Name = Esaul-PC | Source = MCUpdate | ID = 0
Description = 1:07:52 PM - Error connecting to the internet. 1:08:02 PM - Unable
to contact server..

Error - 7/7/2010 11:18:34 PM | Computer Name = Esaul-PC | Source = MCUpdate | ID = 0
Description = 11:14:56 PM - Failed to retrieve Directory (Error: The underlying
connection was closed: Could not establish trust relationship for the SSL/TLS secure
channel.)

Error - 7/22/2010 10:48:14 PM | Computer Name = Esaul-PC | Source = MCUpdate | ID = 0
Description = 10:48:13 PM - Failed to retrieve SportsV2 (Error: Unable to connect
to the remote server)

Error - 7/22/2010 10:48:22 PM | Computer Name = Esaul-PC | Source = MCUpdate | ID = 0
Description = 10:48:14 PM - Failed to retrieve Broadband (Error: The remote name
could not be resolved: 'data.tvdownload.microsoft.com')

Error - 8/26/2010 11:55:01 AM | Computer Name = Esaul-PC | Source = MCUpdate | ID = 0
Description = 11:26:53 AM - Failed to retrieve SportsSchedule (Error: The underlying
connection was closed: An unexpected error occurred on a receive.)

Error - 8/31/2010 10:21:14 AM | Computer Name = Esaul-PC | Source = MCUpdate | ID = 0
Description = 10:20:41 AM - Error connecting to the internet. 10:20:44 AM - Unable
to contact server..

[ System Events ]
Error - 9/16/2010 10:41:09 AM | Computer Name = Esaul-PC | Source = Application Popup | ID = 875
Description = Driver atksgt.sys has been blocked from loading.

Error - 9/16/2010 10:41:09 AM | Computer Name = Esaul-PC | Source = Service Control Manager | ID = 7000
Description = The atksgt service failed to start due to the following error: %%1275

Error - 9/16/2010 11:24:11 AM | Computer Name = Esaul-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 11:22:10 AM on ?9/?16/?2010 was unexpected.

Error - 9/16/2010 11:24:15 AM | Computer Name = Esaul-PC | Source = Service Control Manager | ID = 7000
Description = The adfs service failed to start due to the following error: %%2

Error - 9/16/2010 11:24:15 AM | Computer Name = Esaul-PC | Source = Application Popup | ID = 875
Description = Driver atksgt.sys has been blocked from loading.

Error - 9/16/2010 11:24:15 AM | Computer Name = Esaul-PC | Source = Service Control Manager | ID = 7000
Description = The atksgt service failed to start due to the following error: %%1275

Error - 9/16/2010 11:49:48 AM | Computer Name = Esaul-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 11:48:12 AM on ?9/?16/?2010 was unexpected.

Error - 9/16/2010 11:49:56 AM | Computer Name = Esaul-PC | Source = Service Control Manager | ID = 7000
Description = The adfs service failed to start due to the following error: %%2

Error - 9/16/2010 11:49:56 AM | Computer Name = Esaul-PC | Source = Application Popup | ID = 875
Description = Driver atksgt.sys has been blocked from loading.

Error - 9/16/2010 11:49:56 AM | Computer Name = Esaul-PC | Source = Service Control Manager | ID = 7000
Description = The atksgt service failed to start due to the following error: %%1275


< End of report >
Post #2
Hello,
Welcome to WhatTheTech. My name is mowman, and I will be helping you fix your problems.

If you do not make a reply in 3 days, we will have to close your topic.

You may want to keep the link to this topic in your favorites. Alternatively, you can click the Options button at the top bar of this topic and Track this topic. The topics you are tracking can be found by clicking on My Topics at the top of any page.

Please take note of some guidelines for this fix:

•Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools. Doing so could cause changes to the directions I have to give you and prolong the time required. Further more, you should not be taking any advice relating to this computer from any other source throughout the course of this fix.
•If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
•Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean". We do not want to clean you part-way, only to have the system re-infect itself.
•Please reply using the button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply.
Only attach them if requested or if they do not fit into the post
•Please be aware that I am still in training, and all of my replies to you will be checked for accuracy by one of our experts to ensure that I am giving you the best possible advice.
•This may cause a delay in response time, but I will do my best to keep it as short as possible.
•I will reply back shortly with instructions.
Post #3
Okay. I've been asked by Norton once more to restart my computer, I haven't done so, just 'case I don't want to repeat what had happened to me before, and I'm electing to wait to restart my computer unless I'm directed to do so by your instructions.
Post #4
Norton seems to be causing problems,please disable it until we are finished here.



Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
  • The application window will appear
  • Click the Disable button to disable your CD Emulation drivers
  • Click Yes to continue
  • A 'Finished!' message will appear
  • Click OK
  • DeFogger will now ask to reboot the machine - click OK
IMPORTANT! If you receive an error message while running DeFogger, please post the log defogger_disable which will appear on your desktop.

Do not re-enable these drivers until otherwise instructed.




Run OTL.exe
  • Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

    :OTL
PRC - C:\Program Files\MyWebSearch\bar\3.bin\MWSSVC.EXE (MyWebSearch.com)
O2 - BHO: (MyWebSearch Search Assistant BHO) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\3.bin\MWSSRCAS.DLL (MyWebSearch.com)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (mwsBar BHO) - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL (MyWebSearch.com)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O3 - HKLM\..\Toolbar: (My Web Search) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL (MyWebSearch.com)
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (My Web Search) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL (MyWebSearch.com)
O4 - HKLM..\Run: [My Web Search Bar Search Scope Monitor] C:\Program Files\MyWebSearch\bar\3.bin\M3SRCHMN.EXE (MyWebSearch.com)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 93.188.162.235,93.188.161.235
O30 - LSA: Authentication Packages - (mliged.dll) - File not found
[2010/09/16 11:50:17 | 000,000,286 | -H– | M] () – C:\Windows\Tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2010/09/10 22:58:29 | 000,000,238 | -H– | M] () – C:\Windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
[2009/09/22 14:57:19 | 000,001,700 | —- | M] () – C:\Windows Police Pro
[2010/07/25 02:54:15 | 000,000,150 | —- | M] () – C:\zrpt.xml


:Files
ipconfig /flushdns /c

:Commands
[emptytemp]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot when it is done
  • Then post a new OTL log ( don't check the boxes beside LOP Check or Purity this time )





[external image: Posted Image]
Download GMER Rootkit Scanner from here or here.
  • Extract the contents of the zipped file to desktop.
  • Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
  • If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.

    [external image: Posted Image]
    Click the image to enlarge it
  • In the right panel, you will see several boxes that have been checked. Uncheck the following …
    • IAT/EAT
    • Drives/Partition other than Systemdrive (typically C:\)
    • Show All (don't miss this one)
  • Then click the Scan button & wait for it to finish.
  • Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
  • Save it where you can easily find it, such as your desktop, and attach it in your reply.
**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries

If GMER won't run try with devices unchecked.If still no go try in safe mode.
Post #5
First, when I did the restart, I had the same problem as before, not being able to log in. I was able to do a system restore.
Second, I'm able to restart effectively, and I do not have Norton running as you requested.
Third, I'm not sure if the log looks right, but you'd probably be able to decipher it better than myself anyway:


All processes killed
========== OTL ==========
Process MWSSVC.EXE killed successfully!
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}\ deleted successfully.
C:\Program Files\MyWebSearch\bar\3.bin\MWSSRCAS.DLL moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}\ deleted successfully.
C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{07B18EA9-A523-4961-B6BB-170DE4475CCA} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}\ deleted successfully.
File C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{07B18EA9-A523-4961-B6BB-170DE4475CCA} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}\ not found.
File C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\My Web Search Bar Search Scope Monitor deleted successfully.
C:\Program Files\MyWebSearch\bar\3.bin\M3SRCHMN.EXE moved successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\\NameServer| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\Authentication Packages:mliged.dll deleted successfully.
C:\Windows\Tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job moved successfully.
C:\Windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job moved successfully.
File C:\Windows Police Pro not found.
C:\zrpt.xml moved successfully.
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\Esaul\Downloads\cmd.bat deleted successfully.
C:\Users\Esaul\Downloads\cmd.txt deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56504 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Esaul
->Temp folder emptied: 3180464941 bytes
->Temporary Internet Files folder emptied: 29936641 bytes
->Java cache emptied: 102286339 bytes
->FireFox cache emptied: 99122320 bytes
->Google Chrome cache emptied: 856432 bytes
->Apple Safari cache emptied: 183804928 bytes
->Flash cache emptied: 59555 bytes

User: Mcx1-ESAUL-PC
->Temp folder emptied: 997059 bytes
->Temporary Internet Files folder emptied: 9895643 bytes
->Flash cache emptied: 456 bytes

User: Miharu
->Temp folder emptied: 6610253 bytes
->Temporary Internet Files folder emptied: 17685862 bytes
->FireFox cache emptied: 28522115 bytes
->Flash cache emptied: 58298 bytes

User: Pat

User: Pat.Esaul-PC
->Temp folder emptied: 4181015 bytes
->Temporary Internet Files folder emptied: 52798722 bytes
->Java cache emptied: 36889553 bytes
->FireFox cache emptied: 41369270 bytes
->Apple Safari cache emptied: 10696704 bytes
->Flash cache emptied: 10603 bytes

User: Public

User: Tyler

User: Tyler.Esaul-PC

User: Yoite

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 4194816 bytes
Windows Temp folder emptied: 884206821 bytes
RecycleBin emptied: 632 bytes

Total Files Cleaned = 4,477.00 mb


OTL by OldTimer - Version 3.2.12.1 log created on 09172010_195427

Files\Folders moved on Reboot…

Registry entries deleted on Reboot…
Post #9
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-09-17 20:32:11
Windows 6.1.7600
Running: gmer.exe; Driver: C:\Users\Esaul\AppData\Local\Temp\pglcapog.sys


—- System - GMER 1.0.15 —-

SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAcceptConnectPort [0x830AD159]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheck [0x82F0623B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckAndAuditAlarm [0x83058EB4]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckByType [0x82E71701]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckByTypeAndAuditAlarm [0x830CDEFE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckByTypeResultList [0x82F4A496]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckByTypeResultListAndAuditAlarm [0x83136BEB]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckByTypeResultListAndAuditAlarmByHandle [0x83136C34]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAddAtom [0x8304432D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAddBootEntry [0x8315047C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAddDriverEntry [0x831516D5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAdjustGroupsToken [0x8305274D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAdjustPrivilegesToken [0x8305A8DB]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlertResumeThread [0x831299D5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlertThread [0x830D77A8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAllocateLocallyUniqueId [0x8305B202]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAllocateReserveObject [0x82FEECAF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAllocateUserPhysicalPages [0x8311BB94]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAllocateUuids [0x83045CD3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAllocateVirtualMemory [0x83098E9B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcAcceptConnectPort [0x830CBD86]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcCancelMessage [0x83027D97]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcConnectPort [0x830A08AD]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcCreatePort [0x8303B415]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcCreatePortSection [0x83057A9B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcCreateResourceReserve [0x8303A0EA]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcCreateSectionView [0x830577D9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcCreateSecurityContext [0x830604B1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcDeletePortSection [0x83065189]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcDeleteResourceReserve [0x83116B4B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcDeleteSectionView [0x830C0996]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcDeleteSecurityContext [0x8305FBD5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcDisconnectPort [0x830C4868]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcImpersonateClientOfPort [0x830C06ED]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcOpenSenderProcess [0x8304F2F5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcOpenSenderThread [0x83041324]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcQueryInformation [0x83052B10]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcQueryInformationMessage [0x830AB415]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcRevokeSecurityContext [0x83116C73]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcSendWaitReceivePort [0x830C2133]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlpcSetInformation [0x83040856]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwApphelpCacheControl [0x830CFE70]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAreMappedFilesTheSame [0x8301C338]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAssignProcessToJobObject [0x83044764]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCallbackReturn [0x82EBD220]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCancelIoFile [0x83017D8D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCancelIoFileEx [0x830434DB]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCancelSynchronousIoFile [0x831066C8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCancelTimer [0x82E7B2B2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwClearEvent [0x83083174]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwClose [0x8309411C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCloseObjectAuditAlarm [0x830CDC6D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCommitComplete [0x8313E5FE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCommitEnlistment [0x8313E31E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCommitTransaction [0x830203C5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCompactKeys [0x830EA8CD]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCompareTokens [0x83040134]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCompleteConnectPort [0x8303C61D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCompressKey [0x830EAB3B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwConnectPort [0x830C5924]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwContinue [0x82E93F6C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateDebugObject [0x830FC383]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateDirectoryObject [0x8305C2AD]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateEnlistment [0x83015D47]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateEvent [0x830AE669]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateEventPair [0x8315617C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateFile [0x83097F0E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateIoCompletion [0x830B1225]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateJobObject [0x8304520F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateJobSet [0x8312B75C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateKey [0x8305BA65]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateKeyedEvent [0x830D2BB2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateKeyTransacted [0x8302073D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateMailslotFile [0x8305C38C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateMutant [0x830CBCA5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateNamedPipeFile [0x830D7116]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreatePagingFile [0x82FDD667]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreatePort [0x830421AC]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreatePrivateNamespace [0x8302421D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateProcess [0x83127E61]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateProcessEx [0x83127EAC]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateProfile [0x83156C0F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateProfileEx [0x83156BD5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateResourceManager [0x82FE9E82]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateSection [0x8307DD63]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateSemaphore [0x830CE099]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateSymbolicLinkObject [0x8305C0BF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateThread [0x83127C6A]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateThreadEx [0x83085DD1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateTimer [0x8304719B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateToken [0x8305D4A2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateTransaction [0x8302468C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateTransactionManager [0x82FEA127]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateUserProcess [0x830A2E6C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateWaitablePort [0x82FED3A3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateWorkerFactory [0x830B0FC8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDebugActiveProcess [0x830FD23C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDebugContinue [0x830FD8FD]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDelayExecution [0x8307E6DF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteAtom [0x83039684]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteBootEntry [0x831504AF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteDriverEntry [0x83151707]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteFile [0x83007A0E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteKey [0x8304A26F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteObjectAuditAlarm [0x830DF2CC]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeletePrivateNamespace [0x830E3D9B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteValueKey [0x830301ED]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeviceIoControlFile [0x830AA510]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDisableLastKnownGood [0x831139CE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDisplayString [0x8314E6F3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDrawText [0x82F60B05]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDuplicateObject [0x830C9152]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDuplicateToken [0x83089285]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnableLastKnownGood [0x83113AAF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnumerateBootEntries [0x831506B1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnumerateDriverEntries [0x83151907]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnumerateKey [0x830B2ABF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnumerateSystemEnvironmentValuesEx [0x8315028F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnumerateTransactionObject [0x8313F13E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnumerateValueKey [0x830AA69E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwExtendSection [0x83119D95]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFilterToken [0x83031105]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFindAtom [0x8303E250]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushBuffersFile [0x8306BCE3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushInstallUILanguage [0x82FE65A6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushInstructionCache [0x8303B9D5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushKey [0x8302B2F5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushProcessWriteBuffers [0x82E71507]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushVirtualMemory [0x8302C197]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushWriteBuffer [0x8311CC3F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFreeUserPhysicalPages [0x8311C2AF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFreeVirtualMemory [0x82F00831]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFreezeRegistry [0x82F1E9BC]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFreezeTransactions [0x8313F58E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFsControlFile [0x830B0D6E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetContextThread [0x830E6205]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetCurrentProcessorNumber [0x8302BEC9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetDevicePowerState [0x83124EA7]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetMUIRegistryInfo [0x830C6957]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetNextProcess [0x83129BCC]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetNextThread [0x830E0B18]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetNlsSectionPtr [0x83040FEC]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetNotificationResourceManager [0x8313F6EE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetPlugPlayEvent [0x83004288]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetWriteWatch [0x82F3772B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwImpersonateAnonymousToken [0x8303FF96]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwImpersonateClientOfPort [0x83115C95]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwImpersonateThread [0x830A56C9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwInitializeNlsFiles [0x830CF169]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwInitializeRegistry [0x83007288]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwInitiatePowerAction [0x830DEA6A]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwIsProcessInJob [0x830E204B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwIsSystemResumeAutomatic [0x83124E8E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwIsUILanguageComitted [0x82FE762F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwListenPort [0x82FE10E3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLoadDriver [0x82FEE291]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLoadKey [0x82FE4AD1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLoadKey2 [0x82FCB137]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLoadKeyEx [0x83009DC6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLockFile [0x830608F2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLockProductActivationKeys [0x82FC494C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLockRegistryKey [0x82FC06E1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLockVirtualMemory [0x82E6FDC1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwMakePermanentObject [0x830DBCE4]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwMakeTemporaryObject [0x830543B9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwMapCMFModule [0x830AEFBE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwMapUserPhysicalPages [0x8311AE55]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwMapUserPhysicalPagesScatter [0x8311B42B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwMapViewOfSection [0x830CBF67]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwModifyBootEntry [0x83150680]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwModifyDriverEntry [0x831518D8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwNotifyChangeDirectoryFile [0x8303B6A5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwNotifyChangeKey [0x83046D3B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwNotifyChangeMultipleKeys [0x830460E5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwNotifyChangeSession [0x82FEB9C9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenDirectoryObject [0x830CB474]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenEnlistment [0x8313DB85]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenEvent [0x830CE5F7]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenEventPair [0x8315627D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenFile [0x830C7654]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenIoCompletion [0x831063BD]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenJobObject [0x8312B0D3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenKey [0x8308F784]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenKeyEx [0x8308675F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenKeyedEvent [0x831565B3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenKeyTransacted [0x830244F8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenKeyTransactedEx [0x83024488]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenMutant [0x83069747]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenObjectAuditAlarm [0x8302A7C6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenPrivateNamespace [0x830280A6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenProcess [0x830CE5C1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenProcessToken [0x83089971]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenProcessTokenEx [0x830890BE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenResourceManager [0x82FCADC0]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenSection [0x830CC24A]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenSemaphore [0x830313EE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenSession [0x83050D1E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenSymbolicLinkObject [0x830CB51A]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenThread [0x830CCF18]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenThreadToken [0x830891D5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenThreadTokenEx [0x83088CA9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenTimer [0x83155F23]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenTransaction [0x8313E8E3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenTransactionManager [0x8313FB83]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPlugPlayControl [0x83035288]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPowerInformation [0x8308687C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPrepareComplete [0x8313E48E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPrepareEnlistment [0x8313E1AC]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPrePrepareComplete [0x8313E546]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPrePrepareEnlistment [0x8313E266]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPrivilegeCheck [0x830480B2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPrivilegedServiceAuditAlarm [0x830109DE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPrivilegeObjectAuditAlarm [0x8302B063]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPropagationComplete [0x831402DE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPropagationFailed [0x831403A6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwProtectVirtualMemory [0x830CCCD1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPulseEvent [0x830E3CD2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryAttributesFile [0x830AFBD8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryBootEntryOrder [0x83150B52]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryBootOptions [0x83150F97]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryDebugFilterState [0x82F0FC8A]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryDefaultLocale [0x830D1503]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryDefaultUILanguage [0x82FECF4B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryDirectoryFile [0x830C76BF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryDirectoryObject [0x830D590A]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryDriverEntryOrder [0x83151495]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryEaFile [0x82FE6B58]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryEvent [0x83041BD2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryFullAttributesFile [0x830AF881]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationAtom [0x8303953B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationEnlistment [0x8313DD90]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationFile [0x830A97A6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationJobObject [0x830E000D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationPort [0x83115CC8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationProcess [0x830960C3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationResourceManager [0x8313F7F8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationThread [0x830B480D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationToken [0x8308F99C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationTransaction [0x8313EAD6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationTransactionManager [0x82FCA8C8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationWorkerFactory [0x82F61743]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInstallUILanguage [0x8302B567]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryIntervalProfile [0x83156F7F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryIoCompletion [0x83106480]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryKey [0x830A3785]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryLicenseValue [0x8305835B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryMultipleValueKey [0x83041F17]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryMutant [0x83156690]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryObject [0x83059D17]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryOpenSubKeys [0x830EA3BF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryOpenSubKeysEx [0x830D938B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryPerformanceCounter [0x830CD5A9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryPortInformationProcess [0x8312832C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryQuotaInformationFile [0x83107A61]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySection [0x830B8F94]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySecurityAttributesToken [0x83042C7B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySecurityObject [0x83059099]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySemaphore [0x8314F510]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySymbolicLinkObject [0x830CED95]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySystemEnvironmentValue [0x8314F6E7]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySystemEnvironmentValueEx [0x8314FCDB]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySystemInformation [0x83083496]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySystemInformationEx [0x830B130F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySystemTime [0x830CD4C2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryTimer [0x83155FE2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryTimerResolution [0x8303A8BB]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryValueKey [0x830C879E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryVirtualMemory [0x830C6093]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryVolumeInformationFile [0x8309E44A]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueueApcThread [0x83039B48]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueueApcThreadEx [0x83039B6C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRaiseException [0x82E93FB4]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRaiseHardError [0x830289FE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReadFile [0x8309C8E4]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReadFileScatter [0x8300229E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReadOnlyEnlistment [0x8313E76E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReadRequestData [0x83115DAD]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReadVirtualMemory [0x830D0C09]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRecoverEnlistment [0x8313DD36]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRecoverResourceManager [0x82FEB975]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRecoverTransactionManager [0x82FE9798]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRegisterProtocolAddressInformation [0x83140132]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRegisterThreadTerminatePort [0x8312910A]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReleaseKeyedEvent [0x830D77F9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReleaseMutant [0x8307E5E3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReleaseSemaphore [0x83068502]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReleaseWorkerFactoryWorker [0x82EBF0E7]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRemoveIoCompletion [0x83058106]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRemoveIoCompletionEx [0x8305A62E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRemoveProcessDebug [0x830FD387]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRenameKey [0x830EA605]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRenameTransactionManager [0x8313FDCE]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReplaceKey [0x830EA152]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReplacePartitionUnit [0x82F28197]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReplyPort [0x8303E38E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReplyWaitReceivePort [0x830C3BBD]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReplyWaitReceivePortEx [0x830BA072]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReplyWaitReplyPort [0x83115F79]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRequestPort [0x830D7DC1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRequestWaitReplyPort [0x830C3B5B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwResetEvent [0x8302C6CA]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwResetWriteWatch [0x82F37D7C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRestoreKey [0x830E2FE5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwResumeProcess [0x8312996F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwResumeThread [0x830BF05F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRollbackComplete [0x8313E826]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRollbackEnlistment [0x8313E3D6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRollbackTransaction [0x83013EC3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRollforwardTransactionManager [0x8313FF30]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSaveKey [0x830E10F6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSaveKeyEx [0x830E1C29]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSaveMergedKeys [0x830E9477]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSecureConnectPort [0x830ACA8F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSerializeBoot [0x82FD7085]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetBootEntryOrder [0x83150D93]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetBootOptions [0x8315127F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetContextThread [0x83128D6F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetDebugFilterState [0x82FBD9C9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetDefaultHardErrorPort [0x82FDD0E7]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetDefaultLocale [0x82FEBCF0]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetDefaultUILanguage [0x82FECF1E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetDriverEntryOrder [0x83151D09]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetEaFile [0x831074F2]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetEvent [0x83083067]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetEventBoostPriority [0x8314F1BB]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetHighEventPair [0x83156549]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetHighWaitLowEventPair [0x8315647B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationDebugObject [0x830FDAC3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationEnlistment [0x8313DFD6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationFile [0x8309CF3F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationJobObject [0x8303E8FB]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationKey [0x830E9C67]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationObject [0x8305BED9]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationProcess [0x8309A495]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationResourceManager [0x8313FA06]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationThread [0x830B683A]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationToken [0x83066FA8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationTransaction [0x8313F338]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationTransactionManager [0x8313FFF5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationWorkerFactory [0x82EEEAD0]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetIntervalProfile [0x83156F5C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetIoCompletion [0x8303018B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetIoCompletionEx [0x831065A6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetLdtEntries [0x8312AD93]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetLowEventPair [0x831564E6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetLowWaitHighEventPair [0x83156410]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetQuotaInformationFile [0x83108077]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetSecurityObject [0x8306308B]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetSystemEnvironmentValue [0x8314F9E1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetSystemEnvironmentValueEx [0x8314FFF3]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetSystemInformation [0x830D7E85]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetSystemPowerState [0x8316E355]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetSystemTime [0x830DC668]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetThreadExecutionState [0x830E639C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetTimer [0x82EBEF94]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetTimerEx [0x82EE5664]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetTimerResolution [0x8303D27D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetUuidSeed [0x82FE691E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetValueKey [0x8304D607]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetVolumeInformationFile [0x83108091]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwShutdownSystem [0x8314E6B1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwShutdownWorkerFactory [0x830B200F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSignalAndWaitForSingleObject [0x82F171B5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSinglePhaseReject [0x8313E6B6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwStartProfile [0x83156C98]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwStopProfile [0x83156E8F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSuspendProcess [0x8312990F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSuspendThread [0x830E66E6]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSystemDebugControl [0x83056362]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTerminateJobObject [0x8303F800]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTerminateProcess [0x830AEBCD]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTerminateThread [0x830C1974]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTestAlert [0x830BF128]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwThawRegistry [0x82F1EA1F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwThawTransactions [0x8313F66E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTraceControl [0x8309F2D5]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTraceEvent [0x82E7FE34]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTranslateFilePath [0x83151F0D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUmsThreadYield [0x83115C3F]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnloadDriver [0x831088E7]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnloadKey [0x830D9371]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnloadKey2 [0x830DAAE4]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnloadKeyEx [0x830E960D]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnlockFile [0x83060D47]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnlockVirtualMemory [0x82E845D8]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnmapViewOfSection [0x830C8D6C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwVdmControl [0x83143AF7]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitForDebugEvent [0x830FD5E1]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitForKeyedEvent [0x83098424]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitForMultipleObjects [0x8307F344]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitForMultipleObjects32 [0x8311FB2C]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitForSingleObject [0x8307E4CF]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitForWorkViaWorkerFactory [0x82EBEB64]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitHighEventPair [0x831563A7]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitLowEventPair [0x8315633E]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWorkerFactoryWorkerReady [0x82EFEF97]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWriteFile [0x8308B134]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWriteFileGather [0x830027F7]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWriteRequestData [0x83115E1A]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWriteVirtualMemory [0x830D4645]
SSDT \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwYieldExecution [0x82E78148]
Post #10
INT 0x00 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E91220 INT 0x01 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E913B0 INT 0x03 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E91820 INT 0x04 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E919A8 INT 0x05 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E91B08 INT 0x06 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E91C7C INT 0x07 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E92278 INT 0x09 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E926D8 INT 0x0A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E927FC INT 0x0B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9293C INT 0x0C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E92B9C INT 0x0D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E92E8C INT 0x0E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9355C INT 0x0F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E93910 INT 0x10 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E93A34 INT 0x11 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E93B74 INT 0x13 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E93CE0 INT 0x14 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E93910 INT 0x15 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E93910 INT 0x16 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E93910 INT 0x17 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E93910 INT 0x18 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E93910 INT 0x19 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E93910 INT 0x1A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E93910 INT 0x1B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E93910 INT 0x1C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E93910 INT 0x1D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E93910 INT 0x1E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E93910 INT 0x1F \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E30AF8 INT 0x2A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9089A INT 0x2B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E90A20 INT 0x2C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E90B5C INT 0x2D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E916F8 INT 0x2E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9024E INT 0x2F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E93910 INT 0x30 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F910 INT 0x31 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F91A INT 0x32 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F924 INT 0x33 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F92E INT 0x34 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F938 INT 0x35 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F942 INT 0x36 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F94C INT 0x37 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E30104 INT 0x38 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F960 INT 0x39 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F96A INT 0x3A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F974 INT 0x3B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F97E INT 0x3C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F988 INT 0x3D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F992 INT 0x3E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F99C INT 0x3F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F9A6 INT 0x40 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F9B0 INT 0x41 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F9BA INT 0x42 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F9C4 INT 0x43 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F9CE INT 0x44 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F9D8 INT 0x45 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F9E2 INT 0x46 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F9EC INT 0x47 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8F9F6 INT 0x48 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FA00 INT 0x49 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FA0A INT 0x4A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FA14 INT 0x4B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FA1E INT 0x4C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FA28 INT 0x4D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FA32 INT 0x4E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FA3C INT 0x4F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FA46 INT 0x50 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FA50 INT 0x51 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FA5A INT 0x52 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FA64 INT 0x53 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FA6E INT 0x54 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FA78 INT 0x55 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FA82 INT 0x56 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FA8C INT 0x57 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FA96 INT 0x58 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FAA0 INT 0x59 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FAAA INT 0x5A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FAB4 INT 0x5B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FABE INT 0x5C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FAC8 INT 0x5D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FAD2 INT 0x5E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FADC INT 0x5F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FAE6 INT 0x60 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FAF0 INT 0x61 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FAFA INT 0x63 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FB0E INT 0x64 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FB18 INT 0x65 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FB22 INT 0x66 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FB2C INT 0x67 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FB36 INT 0x68 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FB40 INT 0x69 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FB4A INT 0x6A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FB54 INT 0x6B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FB5E INT 0x6C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FB68 INT 0x6D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FB72 INT 0x6E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FB7C INT 0x6F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FB86 INT 0x70 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FB90 INT 0x71 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FB9A INT 0x73 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FBAE INT 0x74 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FBB8 INT 0x75 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FBC2 INT 0x76 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FBCC INT 0x77 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FBD6 INT 0x78 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FBE0 INT 0x79 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FBEA INT 0x7A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FBF4 INT 0x7B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FBFE INT 0x7C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FC08 INT 0x7D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FC12 INT 0x7E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FC1C INT 0x7F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FC26 INT 0x80 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FC30 INT 0x81 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FC3A INT 0x83 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FC4E INT 0x84 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FC58 INT 0x85 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FC62 INT 0x86 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FC6C INT 0x87 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FC76 INT 0x88 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FC80 INT 0x89 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FC8A INT 0x8A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FC94 INT 0x8B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FC9E INT 0x8C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FCA8 INT 0x8D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FCB2 INT 0x8E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FCBC INT 0x8F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FCC6 INT 0x90 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FCD0 INT 0x91 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FCDA INT 0x93 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FCEE INT 0x94 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FCF8 INT 0x95 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FD02 INT 0x96 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FD0C INT 0x97 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FD16 INT 0x98 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FD20 INT 0x99 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FD2A INT 0x9A \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FD34 INT 0x9B \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FD3E INT 0x9C \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FD48 INT 0x9D \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FD52 INT 0x9E \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FD5C INT 0x9F \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FD66 INT 0xA0 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FD70 INT 0xA1 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FD7A INT 0xA3 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FD8E INT 0xA4 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FD98 INT 0xA5 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FDA2 INT 0xA6 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FDAC INT 0xA7 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FDB6 INT 0xA8 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FDC0 INT 0xA9 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FDCA INT 0xAA \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FDD4 INT 0xAB \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FDDE INT 0xAC \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FDE8 INT 0xAD \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FDF2 INT 0xAE \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FDFC INT 0xAF \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FE06 INT 0xB3 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FE2E INT 0xB4 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FE38 INT 0xB5 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FE42 INT 0xB6 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FE4C INT 0xB7 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FE56 INT 0xB8 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FE60 INT 0xB9 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FE6A INT 0xBA \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FE74 INT 0xBB \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FE7E INT 0xBC \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FE88 INT 0xBD \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FE92 INT 0xBE \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FE9C INT 0xBF \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FEA6 INT 0xC0 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FEB0 INT 0xC1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E303F4 INT 0xC2 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FEC4 INT 0xC3 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FECE INT 0xC4 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FED8 INT 0xC5 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FEE2 INT 0xC6 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FEEC INT 0xC7 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FEF6 INT 0xC8 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FF00 INT 0xC9 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FF0A INT 0xCA \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FF14 INT 0xCB \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FF1E INT 0xCC \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FF28 INT 0xCD \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FF32 INT 0xCE \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FF3C INT 0xCF \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FF46 INT 0xD0 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FF50 INT 0xD1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E18634 INT 0xD2 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E18898 INT 0xD3 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FF6E INT 0xD4 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FF78 INT 0xD5 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FF82 INT 0xD6 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FF8C INT 0xD7 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FF96 INT 0xD8 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FFA0 INT 0xD9 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FFAA INT 0xDA \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FFB4 INT 0xDB \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FFBE INT 0xDC \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FFC8 INT 0xDD \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FFD2 INT 0xDE \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FFDC INT 0xDF \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E301DC INT 0xE0 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E8FFF0 INT 0xE1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E30958 INT 0xE2 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E90004 INT 0xE3 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E306F8 INT 0xE4 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E90018 INT 0xE5 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E90022 INT 0xE6 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9002C INT 0xE7 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E90036 INT 0xE8 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E90040 INT 0xE9 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9004A INT 0xEA \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E90054 INT 0xEB \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9005E INT 0xEC \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E90068 INT 0xED \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E90072 INT 0xEE \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E90079 INT 0xEF \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E90080 INT 0xF0 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E90087 INT 0xF1 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9008E INT 0xF2 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E90095 INT 0xF3 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E9009C INT 0xF4 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E900A3 INT 0xF5 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E900AA INT 0xF6 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E900B1 INT 0xF7 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E900B8 INT 0xF8 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E900BF INT 0xF9 \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E900C6 INT 0xFA \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E900CD INT 0xFB \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E900D4 INT 0xFC \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E900DB INT 0xFD \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E30F2C INT 0xFE \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E311A8 INT 0xFF \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E900F0
Post #11
SYSENTER \SystemRoot\system32\ntkrnlpa.exe 82E90320 —- Kernel code sections - GMER 1.0.15 —- .text ntkrnlpa.exe!RtlPrefetchMemoryNonTemporal 82E8CE88 1 Byte [90] .text ntkrnlpa.exe!ZwSaveKeyEx + 13AD 82E90599 1 Byte [06] .text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82EB4F52 1 Byte [E0] .text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82EB4F52 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, …] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3} .text ntkrnlpa.exe!KiDispatchInterrupt + 5B7 82EB4F67 1 Byte [D9] .text ntkrnlpa.exe!KiDispatchInterrupt + 5BF 82EB4F6F 1 Byte [00] .text C:\Windows\system32\DRIVERS\atikmdag.sys section is writeable [0x8FE27000, 0x227A14, 0xE8000020] .text C:\Windows\system32\DRIVERS\lirsgt.sys section is writeable [0x9A3F1300, 0x1B7E, 0xE8000020] .text peauth.sys 9EA0AC9D 28 Bytes [1E, 08, 66, D2, E4, DD, 1F, …] .text peauth.sys 9EA0ACC1 28 Bytes [1E, 08, 66, D2, E4, DD, 1F, …] PAGE peauth.sys 9EA10B9B 33 Bytes [67, 82, A3, EB, 23, 72, BC, …] PAGE peauth.sys 9EA10BBD 38 Bytes [8F, 00, A5, 98, B8, 9E, 60, …] PAGE peauth.sys 9EA10BEC 111 Bytes [50, 56, 18, 69, D3, 81, F0, …] PAGE … PAGE spsys.sys!?SPRevision@@3PADA + 4F90 9EAF1000 290 Bytes [8B, FF, 55, 8B, EC, 33, C0, …] PAGE spsys.sys!?SPRevision@@3PADA + 50B3 9EAF1123 32 Bytes [C5, AE, 9E, FE, 05, 34, C5, …] PAGE spsys.sys!?SPRevision@@3PADA + 50D4 9EAF1144 596 Bytes [AE, 9E, A0, 34, C5, AE, 9E, …] PAGE spsys.sys!?SPRevision@@3PADA + 5329 9EAF1399 101 Bytes [6A, 28, 59, A5, 5E, C6, 03, …] PAGE spsys.sys!?SPRevision@@3PADA + 538F 9EAF13FF 148 Bytes [18, 5D, C2, 14, 00, 8B, FF, …] PAGE … —- User code sections - GMER 1.0.15 —- .text C:\Windows\system32\svchost.exe[928] MSOXMLMF.DLL!DllGetClassObject + FFFFD042 69901B9C 4 Bytes [1E, 9D, 39, 6B] UPX1 C:\Users\Esaul\Desktop\gmer.exe[3040] C:\Users\Esaul\Desktop\gmer.exe entry point in "UPX1" section [0x004B3F40] .text1 C:\Program Files\Nuance\NaturallySpeaking10\Program\natspeak.exe[3604] C:\Program Files\Nuance\NaturallySpeaking10\Program\natspeak.exe section is writeable [0x0073E000, 0x50000, 0xE0000020] .adata C:\Program Files\Nuance\NaturallySpeaking10\Program\natspeak.exe[3604] C:\Program Files\Nuance\NaturallySpeaking10\Program\natspeak.exe entry point in ".adata" section [0x0078E000] .text C:\Windows\Explorer.EXE[3720] ONFILTER.DLL!?priEmailAttachNotes@PropertySpace_JotMain@Jot@@3UPropertyInfo@MsoCF@@B + FFF4DD8C 666E0DB8 4 Bytes [88, 27, 59, 43] {MOV [EDI], AH; POP ECX; INC EBX} .text C:\Windows\Explorer.EXE[3720] MSOXMLMF.DLL!DllGetClassObject + FFFFD042 69901B9C 4 Bytes [BA, A7, CA, 74] .text C:\Windows\Explorer.EXE[3720] MAPISHELL.DLL!DllUnregisterServer + FFFE2E4D 69066700 4 Bytes [26, 11, 28, 77] .text C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3760] MSCTF.dll!DllCanUnloadNow + 45C 75B54440 4 Bytes [01, A5, 56, 72] .text C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3760] MSCTF.dll!DllCanUnloadNow + 464 75B54448 4 Bytes [1C, A4, 56, 72] .text C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3760] MSCTF.dll!DllCanUnloadNow + 47C 75B54460 4 Bytes [F1, 70, 56, 72] .text C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3760] MSCTF.dll!TF_InvalidAssemblyListCacheIfExist + 9C4 75B566C4 4 Bytes [01, A5, 56, 72] .text C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3760] MSCTF.dll!TF_InvalidAssemblyListCacheIfExist + 9CC 75B566CC 4 Bytes [1C, A4, 56, 72] .text C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3760] MSCTF.dll!TF_InvalidAssemblyListCacheIfExist + B0C 75B5680C 4 Bytes [01, A5, 56, 72] .text C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3760] MSCTF.dll!TF_InvalidAssemblyListCacheIfExist + B14 75B56814 4 Bytes [1C, A4, 56, 72] .text C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3760] MSCTF.dll!TF_InvalidAssemblyListCacheIfExist + 11D0 75B56ED0 4 Bytes [01, A5, 56, 72] .text … .text C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3760] MSCTF.dll!TF_CreateThreadMgr + C54 75B58838 4 Bytes [01, A5, 56, 72] .text C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3760] MSCTF.dll!TF_CreateThreadMgr + C5C 75B58840 4 Bytes [1C, A4, 56, 72] .text C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3760] MSCTF.dll!TF_CreateThreadMgr + C68 75B5884C 4 Bytes [01, A5, 56, 72] .text C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3760] MSCTF.dll!TF_CreateThreadMgr + C70 75B58854 4 Bytes [1C, A4, 56, 72] .text C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3760] MSCTF.dll!DllGetClassObject + 2E3 75B68298 4 Bytes [01, A5, 56, 72] .text C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3760] MSCTF.dll!DllGetClassObject + 2EB 75B682A0 8 Bytes [1C, A4, 56, 72, A4, A5, 56, …] .text C:\Program Files\Safari\Safari.exe[5576] USER32.dll!EndPaint 76467B73 5 Bytes JMP 6441EA60 C:\Program Files\Common Files\Apple\Apple Application Support\WebKit.dll (WebKit Dynamic Link Library/Apple Inc.) .text C:\Program Files\Safari\Safari.exe[5576] USER32.dll!BeginPaint 76467B87 5 Bytes JMP 6441E9F0 C:\Program Files\Common Files\Apple\Apple Application Support\WebKit.dll (WebKit Dynamic Link Library/Apple Inc.) —- Devices - GMER 1.0.15 —- Device \FileSystem\Ntfs \Ntfs Ntfs.sys (NT File System Driver/Microsoft Corporation) Device \FileSystem\Ntfs \Ntfs ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Ntfs \Ntfs Ntfs.sys (NT File System Driver/Microsoft Corporation) Device \FileSystem\Ntfs \Ntfs ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \ Device \Driver\KSecDD \Device\KsecDD ksecdd.sys (Kernel Security Support Provider Interface/Microsoft Corporation) Device \Driver\KSecDD \Device\KsecDD ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\NDIS \Device\Ndis ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid1 rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid1 rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \Driver\Beep \Device\Beep Beep.SYS (BEEP Driver/Microsoft Corporation) Device \Driver\Beep \Device\Beep ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\srvnet \Device\SrvNet srvnet.sys (Server Network driver/Microsoft Corporation) Device \Driver\WudfPf \Device\WUDFLpcDevice WudfPf.sys (Windows Driver Foundation - User-mode Driver Framework Platform Driver/Microsoft Corporation) Device \Driver\rdpbus \Device\RdpBus rdpbus.sys (Microsoft RDP Bus Device driver/Microsoft Corporation) Device \Device\00000032 Device \Device\00000025 Device \Device\00000019 Device \Driver\BthPan \Device\NDMP10 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid2 rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid2 rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \Driver\RasAgileVpn \Device\AgileVPN ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \FileSystem\NetBIOS \Device\Netbios netbios.sys (NetBIOS interface driver/Microsoft Corporation) Device \FileSystem\NetBIOS \Device\Netbios ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000033 Device \Device\00000026 Device \Driver\RDPDR \Device\FakeVid3 rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid3 rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \Driver\volsnap \Device\HarddiskVolumeShadowCopy1 volsnap.sys (Volume Shadow Copy Driver/Microsoft Corporation) Device \Driver\PnpManager \Device\00000040 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000040 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000040 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000034 Device \Device\00000027 Device \Driver\kbdclass \Device\KeyboardClass0 kbdclass.sys (Keyboard Class Driver/Microsoft Corporation) Device \Driver\kbdclass \Device\KeyboardClass0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RDPCDD \Device\Video0 VIDEOPRT.SYS (Video Port Driver/Microsoft Corporation) Device \Driver\RDPCDD \Device\Video0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid4 rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid4 rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \Driver\volsnap \Device\HarddiskVolumeShadowCopy2 volsnap.sys (Volume Shadow Copy Driver/Microsoft Corporation) Device \Driver\Wdf01000 \Device\KMDF0 Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation) Device \Driver\Wdf01000 \Device\KMDF0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\WMIxWDM \Device\WMIAdminDevice ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\WMIxWDM \Device\WMIAdminDevice ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000041 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000041 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000041 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000035 Device \Device\00000028 Device \Device\KeyboardClass1 Device \Driver\BthPan \Device\BthPan ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\RDPREFMP \Device\Video1 VIDEOPRT.SYS (Video Port Driver/Microsoft Corporation) Device \Driver\RDPREFMP \Device\Video1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid5 rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid5 rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \Driver\WudfPf \Device\ProcessManagement WudfPf.sys (Windows Driver Foundation - User-mode Driver Framework Platform Driver/Microsoft Corporation) Device \Driver\BthEnum \Device\BthModem0 BthEnum.sys (Bluetooth Bus Extender/Microsoft Corporation) Device \Driver\NDProxy \Device\NDProxy NDProxy.SYS (NDIS Proxy/Microsoft Corporation) Device \Driver\NDProxy \Device\NDProxy ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\volsnap \Device\HarddiskVolumeShadowCopy3 volsnap.sys (Volume Shadow Copy Driver/Microsoft Corporation) Device \Driver\volmgr \Device\VolMgrControl volmgr.sys (Volume Manager Driver/Microsoft Corporation) Device \Driver\volmgr \Device\VolMgrControl ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000042 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000042 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000042 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000036 Device \Device\00000029 Device \Device\Video2 Device \Device\RdpDrDvMgr Device \Driver\RDPDR \Device\FakeVid6 rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid6 rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \FileSystem\srvnet \Device\SrvAdmin srvnet.sys (Server Network driver/Microsoft Corporation) Device \Driver\btwavdt \Device\BTWAVDT btwavdt.sys (Broadcom Bluetooth AVDT Service/Broadcom Corporation.) Device \Driver\mouclass \Device\PointerClass0 mouclass.sys (Mouse Class Driver/Microsoft Corporation) Device \Driver\mouclass \Device\PointerClass0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\KeyboardClass2 Device \Driver\volsnap \Device\HarddiskVolumeShadowCopy4 volsnap.sys (Volume Shadow Copy Driver/Microsoft Corporation) Device \Driver\ACPI \Device\00000050 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\PnpManager \Device\00000043 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000043 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000043 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000037 Device \Device\0000000a Device \Driver\NetBT \Device\NetBT_Tcpip_{07EEDA75-C74C-4AB2-9E76-FE3B1D2698D5} netbt.sys (MBT Transport driver/Microsoft Corporation) Device \Driver\NetBT \Device\NetBT_Tcpip_{07EEDA75-C74C-4AB2-9E76-FE3B1D2698D5} ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\atikmdag \Device\Video3 dxgkrnl.sys (DirectX Graphics Kernel/Microsoft Corporation) Device \Driver\atikmdag \Device\Video3 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\atikmdag \Device\Video3 dxgkrnl.sys (DirectX Graphics Kernel/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid7 rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid7 rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \Driver\usbohci \Device\USBPDO-0 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbohci \Device\USBPDO-0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbohci \Device\USBPDO-0 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Device\PointerClass1 Device \Driver\volsnap \Device\HarddiskVolumeShadowCopy5 volsnap.sys (Volume Shadow Copy Driver/Microsoft Corporation) Device \Driver\ACPI \Device\00000051 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\PnpManager \Device\00000044 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000044 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000044 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000038 Device \Device\0000000b Device \Driver\AvgLdx86 \Device\AvgAviLdrDev avgldx86.sys (AVG AVI Loader Driver/AVG Technologies CZ, s.r.o.) Device \Driver\AvgLdx86 \Device\AvgAviLdrDev ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\spldr \Device\SPDevice spldr.sys (loader for security processor/Microsoft Corporation) Device \Driver\spldr \Device\SPDevice ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\WMIxWDM \Device\WMIDataDevice ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\WMIxWDM \Device\WMIDataDevice ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\atikmdag \Device\Video4 dxgkrnl.sys (DirectX Graphics Kernel/Microsoft Corporation) Device \Driver\atikmdag \Device\Video4 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\atikmdag \Device\Video4 dxgkrnl.sys (DirectX Graphics Kernel/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid8 rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid8 rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \Driver\usbehci \Device\USBPDO-1 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbehci \Device\USBPDO-1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbehci \Device\USBPDO-1 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Device\PointerClass2 Device \Driver\PnpManager \Device\00000045 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000045 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000045 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\volsnap \Device\HarddiskVolumeShadowCopy6 volsnap.sys (Volume Shadow Copy Driver/Microsoft Corporation) Device \Driver\ACPI \Device\00000052 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \FileSystem\RAW \Device\RawTape ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\RAW \Device\RawTape ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\RAW \Device\RawTape ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000039 Device \Device\0000000c Device \Driver\RDPDR \Device\RdpDrPort rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\RdpDrPort rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid9 rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid9 rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \FileSystem\AvgRkx86 \Device\AvgAntiRootkit avgrkx86.sys (AVG Anti-Rootkit Driver/AVG Technologies CZ, s.r.o.) Device \FileSystem\AvgRkx86 \Device\AvgAntiRootkit ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PEAUTH \Device\PEAuth Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation) Device \Driver\usbhub \Device\USBPDO-2 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\USBPDO-2 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000046 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000046 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000046 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\nvlddmkm \Device\Video5 dxgkrnl.sys (DirectX Graphics Kernel/Microsoft Corporation) Device \Driver\nvlddmkm \Device\Video5 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\nvlddmkm \Device\Video5 dxgkrnl.sys (DirectX Graphics Kernel/Microsoft Corporation) Device \Driver\volsnap \Device\HarddiskVolumeShadowCopy7 volsnap.sys (Volume Shadow Copy Driver/Microsoft Corporation) Device \Device\00000053 Device \Device\NTPNP_PCI0000 Device \Device\0000001a Device \Device\0000000d Device \Driver\nvstor \Device\00000060 storport.sys (Microsoft Storage Port Driver/Microsoft Corporation) Device \Driver\nvstor \Device\00000060 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\MPS Device \Device\USBPDO-3 Device \Device\00000054 Device \Driver\pci \Device\NTPNP_PCI0001 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0001 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\PnpManager \Device\00000047 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000047 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000047 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\0000001b Device \Device\0000000e Device \Driver\PnpManager \Device\00000048 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000048 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000048 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbhub \Device\USBPDO-4 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\USBPDO-4 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Psched \Device\Psched ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Device\00000055 Device \Device\NTPNP_PCI0002 Device \Device\0000001c Device \Device\0000000f Device \Driver\tdx \Device\Tcp tdx.sys (TDI Translation Driver/Microsoft Corporation) Device \Driver\tdx \Device\Tcp ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\DfsC \Device\DfsClient dfsc.sys (DFS Namespace Client Driver/Microsoft Corporation) Device \FileSystem\DfsC \Device\DfsClient ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\AvgTdiX \Device\AvgTdi avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.) Device \Driver\usbhub \Device\USBPDO-5 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\USBPDO-5 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbhub \Device\00000062 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\00000062 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000056 Device \Driver\pci \Device\NTPNP_PCI0010 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0010 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Device\NTPNP_PCI0003 Device \Driver\PnpManager \Device\00000049 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000049 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000049 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\0000001d Device \Driver\HidUsb \Device\00000070 HIDCLASS.SYS (Hid Class Library/Microsoft Corporation) Device \Driver\HidUsb \Device\00000070 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\USBPDO-6 Device \Driver\usbhub \Device\00000063 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\00000063 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Tcpip \Device\eQoS tcpip.sys (TCP/IP Driver/Microsoft Corporation) Device \Driver\Tcpip \Device\eQoS ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000057 Device \Driver\pci \Device\NTPNP_PCI0011 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0011 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0004 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0004 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Device\0000002a Device \Device\0000001e Device \Driver\volmgr \Device\HarddiskVolume1 volmgr.sys (Volume Manager Driver/Microsoft Corporation) Device \Driver\volmgr \Device\HarddiskVolume1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Post #12
AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) Device \FileSystem\AvgMfx86 \Device\Avg7Rs avgmfx86.sys (AVG Resident Shield Minifilter Driver/AVG Technologies CZ, s.r.o.) Device \FileSystem\AvgMfx86 \Device\Avg7Rs ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\NVENETFD \Device\NDMP1 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Device\Http\ReqQueue Device \Device\Http\Communication Device \Device\i Device \Driver\tssecsrv \Device\tssecsrv tssecsrv.sys (TS Security Filter Driver/Microsoft Corporation) Device \Driver\usbhub \Device\00000071 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\00000071 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0005 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0005 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\volmgr \Device\HarddiskVolume2 volmgr.sys (Volume Manager Driver/Microsoft Corporation) Device \Driver\volmgr \Device\HarddiskVolume2 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) Device \Driver\usbhub \Device\USBPDO-8 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\USBPDO-8 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\TermDD \Device\Termdd termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\RasAgileVpn \Device\NDMP2 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\blbdrive \Device\BlbControl blbdrive.sys (BLB Drive Driver/Microsoft Corporation) Device \FileSystem\rdbss \Device\FsWrap rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \FileSystem\rdbss \Device\FsWrap ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0020 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0020 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0014 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0014 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\atikmdag \Device\00000066 dxgkrnl.sys (DirectX Graphics Kernel/Microsoft Corporation) Device \Driver\atikmdag \Device\00000066 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\atikmdag \Device\00000066 dxgkrnl.sys (DirectX Graphics Kernel/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort0 ataport.SYS (ATAPI Driver Extension/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort1 ataport.SYS (ATAPI Driver Extension/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pciide \Device\Ide\PciIde0Channel0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pciide \Device\Ide\PciIde0Channel0 PCIIDEX.SYS (PCI IDE Bus Driver Extension/Microsoft Corporation) Device \Driver\pciide \Device\Ide\PciIde0Channel1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pciide \Device\Ide\PciIde0Channel1 PCIIDEX.SYS (PCI IDE Bus Driver Extension/Microsoft Corporation) Device \Device\Ide\PciIde0 Device \Driver\tdx \Device\RawIp6 tdx.sys (TDI Translation Driver/Microsoft Corporation) Device \Driver\tdx \Device\RawIp6 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0007 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0007 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\HidUsb \Device\00000074 HIDCLASS.SYS (Hid Class Library/Microsoft Corporation) Device \Driver\HidUsb \Device\00000074 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\umbus \Device\00000080 Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation) Device \Driver\NdisWan \Device\NDMP4 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\CNG \Device\CNG cng.sys (Kernel Cryptography, Next Generation/Microsoft Corporation) Device \Driver\CNG \Device\CNG ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\NetBT \Device\NetBT_Tcpip_{FDD67FF4-1C17-4E47-AD30-1C7F4C1C30BE} netbt.sys (MBT Transport driver/Microsoft Corporation) Device \Driver\NetBT \Device\NetBT_Tcpip_{FDD67FF4-1C17-4E47-AD30-1C7F4C1C30BE} ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\umbus \Device\00000081 Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation) Device \Driver\BTHUSB \Device\00000075 bthport.sys (Bluetooth Bus Driver/Microsoft Corporation) Device \Driver\BTHUSB \Device\00000075 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\NdisWan \Device\NDMP5 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\usbccgp \Device\00000068 usbccgp.sys (USB Common Class Generic Parent Driver/Microsoft Corporation) Device \Driver\usbccgp \Device\00000068 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo0 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\PxHelp20 \Device\PxHelperDevice0 PxHelp20.sys (Px Engine Device Driver for Windows 2000/XP/Sonic Solutions) Device \Driver\pci \Device\NTPNP_PCI0009 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pci \Device\NTPNP_PCI0009 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003c ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003c ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003c ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RFCOMM \Device\BTHMS_RFCOMM rfcomm.sys (Bluetooth RFCOMM Driver/Microsoft Corporation) Device \Driver\tdx \Device\Tcp6 tdx.sys (TDI Translation Driver/Microsoft Corporation) Device \Driver\tdx \Device\Tcp6 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\umbus \Device\00000082 Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation) Device \Driver\secdrv \Device\Secdrv secdrv.SYS (Macrovision SECURITY Driver/Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) Device \Driver\secdrv \Device\Secdrv ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\NdisWan \Device\NDMP6 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo10 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo1 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\NetBT \Device\NetBt_Wins_Export netbt.sys (MBT Transport driver/Microsoft Corporation) Device \Driver\NetBT \Device\NetBt_Wins_Export ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\BTHUSB \Device\00000077 bthport.sys (Bluetooth Bus Driver/Microsoft Corporation) Device \Driver\BTHUSB \Device\00000077 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RasPppoe \Device\NDMP7 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo11 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo2 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\PnpManager \Device\0000004a ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000004a ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000004a ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003e ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003e ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003e ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pglcapog \Device\pglcapog pglcapog.sys Device \Driver\pglcapog \Device\pglcapog ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Tcpip \Device\WFP tcpip.sys (TCP/IP Driver/Microsoft Corporation) Device \Driver\Tcpip \Device\WFP ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\BTHMODEM \Device\00000078 bthmodem.sys (Bluetooth Communications Driver/Microsoft Corporation) Device \Driver\BTHMODEM \Device\00000078 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PptpMiniport \Device\NDMP8 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo12 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo3 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\ACPI_HAL \Device\0000004b ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003f ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003f ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003f ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RasSstp \Device\NDMP9 ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\RasSstp \Device\NDMP9 rassstp.sys (RAS SSTP Miniport Call Manager/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo13 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo4 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo14 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo5 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\ACPI \Device\0000005a ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\ACPI \Device\0000004d ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\mountmgr \Device\MountPointManager mountmgr.sys (Mount Point Manager/Microsoft Corporation) Device \Driver\mountmgr \Device\MountPointManager ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\tdx \Device\Tdx tdx.sys (TDI Translation Driver/Microsoft Corporation) Device \Driver\tdx \Device\Tdx ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo15 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo6 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \FileSystem\Mup \Device\Mup mup.sys (Multiple UNC Provider Driver/Microsoft Corporation) Device \Driver\nsiproxy \Device\Nsi nsiproxy.sys (NSI Proxy/Microsoft Corporation) Device \FileSystem\srv \Device\LanmanServer srv.sys (Server driver/Microsoft Corporation) Device \FileSystem\srv2 \Device\Srv2 srv2.sys (Smb 2.0 Server driver/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo7 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\Wanarpv6 \Device\WANARP wanarp.sys (MS Remote Access and Routing ARP Driver/Microsoft Corporation) Device \Driver\nvstor \Device\RaidPort0 storport.sys (Microsoft Storage Port Driver/Microsoft Corporation) Device \Driver\nvstor \Device\RaidPort0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\partmgr \Device\PartmgrControl partmgr.sys (Partition Management Driver/Microsoft Corporation) Device \Driver\tdx \Device\Udp tdx.sys (TDI Translation Driver/Microsoft Corporation) Device \Driver\tdx \Device\Udp ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\nvstor \Device\RaidPort1 storport.sys (Microsoft Storage Port Driver/Microsoft Corporation) Device \Driver\nvstor \Device\RaidPort1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo8 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\Disk \Device\Harddisk0\DR0 CLASSPNP.SYS (SCSI Class System Dll/Microsoft Corporation) Device \Driver\Disk \Device\Harddisk0\DR0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\tdx \Device\RawIp tdx.sys (TDI Translation Driver/Microsoft Corporation) Device \Driver\tdx \Device\RawIp ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\nvstor \Device\0000005e storport.sys (Microsoft Storage Port Driver/Microsoft Corporation) Device \Driver\nvstor \Device\0000005e ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\TermDD \Device\RemoteVideo9 termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) Device \Driver\Disk \Device\Harddisk1\DR1 CLASSPNP.SYS (SCSI Class System Dll/Microsoft Corporation) Device \Driver\Disk \Device\Harddisk1\DR1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\TDTCP \Device\tdtcp tdtcp.sys (TCP Transport Driver/Microsoft Corporation) Device \FileSystem\RAW \Device\RawDisk ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\RAW \Device\RawDisk ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\RAW \Device\RawDisk ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\HidUsb \Device\0000006c HIDCLASS.SYS (Hid Class Library/Microsoft Corporation) Device \Driver\HidUsb \Device\0000006c ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbohci \Device\USBFDO-0 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbohci \Device\USBFDO-0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbohci \Device\USBFDO-0 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\Null \Device\Null Null.SYS (NULL Driver/Microsoft Corporation) Device \Driver\Null \Device\Null ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RDPWD \Device\rdpwd RDPWD.SYS (RDP Terminal Stack Driver/Microsoft Corporation) Device \Driver\lirsgt \Device\lirsgt lirsgt.sys Device \Driver\lirsgt \Device\lirsgt ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000003 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000003 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000003 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid10 rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid10 rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \Driver\Tcpip \Device\NXTIPSEC tcpip.sys (TCP/IP Driver/Microsoft Corporation) Device \Driver\Tcpip \Device\NXTIPSEC ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbccgp \Device\0000006d usbccgp.sys (USB Common Class Generic Parent Driver/Microsoft Corporation) Device \Driver\usbccgp \Device\0000006d ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbehci \Device\USBFDO-1 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbehci \Device\USBFDO-1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbehci \Device\USBFDO-1 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\PnpManager \Device\00000004 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000004 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000004 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\bowser \Device\LanmanDatagramReceiver bowser.sys (NT Lan Manager Datagram Receiver Driver/Microsoft Corporation) Device \Driver\tdx \Device\Udp6 tdx.sys (TDI Translation Driver/Microsoft Corporation) Device \Driver\tdx \Device\Udp6 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid11 rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid11 rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \Driver\secdrv \Device\AscKmd secdrv.SYS (Macrovision SECURITY Driver/Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) Device \Driver\secdrv \Device\AscKmd ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\btwl2cap \Device\BTWL2CAP btwl2cap.sys (Broadcom Bluetooth L2CAP Service/Broadcom Corporation.) Device \Driver\BthEnum \Device\0000007b BthEnum.sys (Bluetooth Bus Extender/Microsoft Corporation) Device \Driver\NdisWan \Device\NdisWan ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\NdisTapi \Device\NdisTapi ndistapi.sys (NDIS 3.0 connection wrapper driver/Microsoft Corporation) Device \Driver\NdisTapi \Device\NdisTapi ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid12 rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid12 rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \Driver\BthEnum \Device\BthEnum0 BthEnum.sys (Bluetooth Bus Extender/Microsoft Corporation) Device \Driver\DXGKrnl \Device\DxgKrnl dxgkrnl.sys (DirectX Graphics Kernel/Microsoft Corporation) Device \Driver\DXGKrnl \Device\DxgKrnl ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Npfs \Device\NamedPipe Npfs.SYS (NPFS Driver/Microsoft Corporation) Device \FileSystem\Npfs \Device\NamedPipe ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid13 rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid13 rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \FileSystem\Msfs \Device\Mailslot Msfs.SYS (Mailslot driver/Microsoft Corporation) Device \FileSystem\Msfs \Device\Mailslot ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid14 rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid14 rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \Driver\AFD \Device\Afd afd.sys (Ancillary Function Driver for WinSock/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid15 rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid15 rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \Driver\RasSstp \Device\SstpDrv ndis.sys (NDIS 6.20 driver/Microsoft Corporation) Device \Driver\RasSstp \Device\SstpDrv rassstp.sys (RAS SSTP Miniport Call Manager/Microsoft Corporation) Device \FileSystem\RAW \Device\RawCdRom ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\RAW \Device\RawCdRom ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\RAW \Device\RawCdRom ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pcw \Device\PcwDrv pcw.sys (Performance Counters for Windows Driver/Microsoft Corporation) Device \Driver\pcw \Device\PcwDrv ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RDPDR \Device\DrDynVc rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\DrDynVc rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \Driver\Tcpip \Device\WfpAle tcpip.sys (TCP/IP Driver/Microsoft Corporation) Device \Driver\Tcpip \Device\WfpAle ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\rdyboost \Device\RdyBoost rdyboost.sys (ReadyBoost Driver/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid0 rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\RDPDR \Device\FakeVid0 rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \Driver\Tcpip \Device\IPSECDOSP tcpip.sys (TCP/IP Driver/Microsoft Corporation) Device \Driver\Tcpip \Device\IPSECDOSP ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\ExFatRecognizer Fs_Rec.sys (File System Recognizer Driver/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\ExFatRecognizer ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\UdfsCdRomRecognizer Fs_Rec.sys (File System Recognizer Driver/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\UdfsCdRomRecognizer ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Filters\FltMgrMsg Device \FileSystem\FltMgr \FileSystem\Filters\FltMgr fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\FatCdRomRecognizer Fs_Rec.sys (File System Recognizer Driver/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\FatCdRomRecognizer ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\CdfsRecognizer Fs_Rec.sys (File System Recognizer Driver/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\CdfsRecognizer ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\FatDiskRecognizer Fs_Rec.sys (File System Recognizer Driver/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\FatDiskRecognizer ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\UdfsDiskRecognizer Fs_Rec.sys (File System Recognizer Driver/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\UdfsDiskRecognizer ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) —- Modules - GMER 1.0.15 —- Module \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 82E4D000-8325D000 (4259840 bytes) Module \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82E16000-82E4D000 (225280 bytes) Module \SystemRoot\system32\kdcom.dll (Serial Kernel Debugger/Microsoft Corporation) 80BCE000-80BD6000 (32768 bytes) Module \SystemRoot\system32\mcupdate_AuthenticAMD.dll (AMD Microcode Update Library/Microsoft Corporation) 88625000-88630000 (45056 bytes) Module \SystemRoot\system32\PSHED.dll (Platform Specific Hardware Error Driver/Microsoft Corporation) 88630000-88641000 (69632 bytes) Module \SystemRoot\system32\BOOTVID.dll (VGA Boot Driver/Microsoft Corporation) 88641000-88649000 (32768 bytes) Module \SystemRoot\system32\CLFS.SYS (Common Log File System Driver/Microsoft Corporation) 88649000-8868B000 (270336 bytes) Module \SystemRoot\system32\CI.dll (Code Integrity Module/Microsoft Corporation) 8868B000-88736000 (700416 bytes) Module \SystemRoot\system32\drivers\Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation) 88736000-887A7000 (462848 bytes) Module \SystemRoot\system32\drivers\WDFLDR.SYS (Kernel Mode Driver Framework Loader/Microsoft Corporation) 887A7000-887B5000 (57344 bytes) Module \SystemRoot\system32\DRIVERS\ACPI.sys (ACPI Driver for NT/Microsoft Corporation) 887B5000-887FD000 (294912 bytes) Module \SystemRoot\system32\DRIVERS\WMILIB.SYS (WMILIB WMI support library Dll/Microsoft Corporation) 88600000-88609000 (36864 bytes) Module \SystemRoot\system32\DRIVERS\msisadrv.sys (ISA Driver/Microsoft Corporation) 88609000-88611000 (32768 bytes) Module \SystemRoot\system32\DRIVERS\vdrvroot.sys (Virtual Drive Root Enumerator/Microsoft Corporation) 88611000-8861C000 (45056 bytes) Module \SystemRoot\system32\DRIVERS\pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) 88814000-8883E000 (172032 bytes) Module \SystemRoot\System32\drivers\partmgr.sys (Partition Management Driver/Microsoft Corporation) 8883E000-8884F000 (69632 bytes) Module \SystemRoot\system32\DRIVERS\volmgr.sys (Volume Manager Driver/Microsoft Corporation) 8884F000-8885F000 (65536 bytes) Module \SystemRoot\System32\drivers\volmgrx.sys (Volume Manager Extension Driver/Microsoft Corporation) 8885F000-888AA000 (307200 bytes) Module \SystemRoot\system32\DRIVERS\pciide.sys (Generic PCI IDE Bus Driver/Microsoft Corporation) 888AA000-888B1000 (28672 bytes) Module \SystemRoot\system32\DRIVERS\PCIIDEX.SYS (PCI IDE Bus Driver Extension/Microsoft Corporation) 888B1000-888BF000 (57344 bytes) Module \SystemRoot\System32\drivers\mountmgr.sys (Mount Point Manager/Microsoft Corporation) 888BF000-888D5000 (90112 bytes) Module \SystemRoot\system32\DRIVERS\atapi.sys (ATAPI IDE Miniport Driver/Microsoft Corporation) 888D5000-888DE000 (36864 bytes) Module \SystemRoot\system32\DRIVERS\ataport.SYS (ATAPI Driver Extension/Microsoft Corporation) 888DE000-88901000 (143360 bytes) Module \SystemRoot\system32\DRIVERS\nvstor.sys (NVIDIA® nForce™ Sata Performance Driver/NVIDIA Corporation) 88901000-88926000 (151552 bytes) Module \SystemRoot\system32\DRIVERS\storport.sys (Microsoft Storage Port Driver/Microsoft Corporation) 88926000-8896D000 (290816 bytes) Module \SystemRoot\system32\DRIVERS\amdxata.sys (Storage Filter Driver/Advanced Micro Devices) 8896D000-88976000 (36864 bytes) Module \SystemRoot\system32\drivers\fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation) 88976000-889AA000 (212992 bytes) Module \SystemRoot\system32\drivers\fileinfo.sys (FileInfo Filter Driver/Microsoft Corporation) 889AA000-889BB000 (69632 bytes) Module \SystemRoot\System32\Drivers\PxHelp20.sys (Px Engine Device Driver for Windows 2000/XP/Sonic Solutions) 889BB000-889C5000 (40960 bytes) Module \SystemRoot\System32\Drivers\Ntfs.sys (NT File System Driver/Microsoft Corporation) 88A25000-88B54000 (1241088 bytes) Module \SystemRoot\System32\Drivers\msrpc.sys (Kernel Remote Procedure Call Provider/Microsoft Corporation) 88B54000-88B7F000 (176128 bytes) Module \SystemRoot\System32\Drivers\ksecdd.sys (Kernel Security Support Provider Interface/Microsoft Corporation) 88B7F000-88B92000 (77824 bytes) Module \SystemRoot\System32\Drivers\cng.sys (Kernel Cryptography, Next Generation/Microsoft Corporation) 88B92000-88BEF000 (380928 bytes) Module \SystemRoot\System32\drivers\pcw.sys (Performance Counters for Windows Driver/Microsoft Corporation) 88BEF000-88BFD000 (57344 bytes) Module \SystemRoot\System32\Drivers\Fs_Rec.sys (File System Recognizer Driver/Microsoft Corporation) 88A00000-88A09000 (36864 bytes) Module \SystemRoot\system32\drivers\ndis.sys (NDIS 6.20 driver/Microsoft Corporation) 88C03000-88CBA000 (749568 bytes) Module \SystemRoot\system32\drivers\NETIO.SYS (Network I/O Subsystem/Microsoft Corporation) 88CBA000-88CF8000 (253952 bytes) Module \SystemRoot\System32\Drivers\ksecpkg.sys (Kernel Security Support Provider Interface Packages/Microsoft Corporation) 88CF8000-88D1D000 (151552 bytes) Module \SystemRoot\System32\drivers\tcpip.sys (TCP/IP Driver/Microsoft Corporation) 88E1B000-88F64000 (1347584 bytes) Module \SystemRoot\System32\drivers\fwpkclnt.sys (FWP/IPsec Kernel-Mode API/Microsoft Corporation) 88F64000-88F95000 (200704 bytes) Module \SystemRoot\system32\DRIVERS\vmstorfl.sys (Virtual Storage Filter Driver/Microsoft Corporation) 88F95000-88F9E000 (36864 bytes) Module \SystemRoot\system32\DRIVERS\volsnap.sys (Volume Shadow Copy Driver/Microsoft Corporation) 88F9E000-88FDD000 (258048 bytes) Module \SystemRoot\System32\Drivers\spldr.sys (loader for security processor/Microsoft Corporation) 88FDD000-88FE5000 (32768 bytes) Module \SystemRoot\System32\drivers\rdyboost.sys (ReadyBoost Driver/Microsoft Corporation) 88D1D000-88D4A000 (184320 bytes) Module \SystemRoot\System32\Drivers\mup.sys (Multiple UNC Provider Driver/Microsoft Corporation) 88FE5000-88FF5000 (65536 bytes) Module \SystemRoot\System32\drivers\hwpolicy.sys (Hardware Policy Driver/Microsoft Corporation) 88FF5000-88FFD000 (32768 bytes) Module \SystemRoot\System32\DRIVERS\fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) 88D4A000-88D7C000 (204800 bytes) Module \SystemRoot\system32\DRIVERS\disk.sys (PnP Disk Driver/Microsoft Corporation) 88E00000-88E11000 (69632 bytes) Module \SystemRoot\system32\DRIVERS\CLASSPNP.SYS (SCSI Class System Dll/Microsoft Corporation) 88D7C000-88DA1000 (151552 bytes) Module \SystemRoot\System32\Drivers\avgrkx86.sys (AVG Anti-Rootkit Driver/AVG Technologies CZ, s.r.o.) 88DA1000-88DAD000 (49152 bytes) Module \SystemRoot\System32\Drivers\Null.SYS (NULL Driver/Microsoft Corporation) 88DF0000-88DF7000 (28672 bytes) Module \SystemRoot\System32\Drivers\Beep.SYS (BEEP Driver/Microsoft Corporation) 88DF7000-88DFE000 (28672 bytes) Module \SystemRoot\System32\drivers\vga.sys (VGA/Super VGA Video Driver/Microsoft Corporation) 88A09000-88A15000 (49152 bytes) Module \SystemRoot\System32\drivers\VIDEOPRT.SYS (Video Port Driver/Microsoft Corporation) 889C5000-889E6000 (135168 bytes) Module \SystemRoot\System32\drivers\watchdog.sys (Watchdog Driver/Microsoft Corporation) 88A15000-88A22000 (53248 bytes) Module \SystemRoot\System32\DRIVERS\RDPCDD.sys (RDP Miniport/Microsoft Corporation) 889E6000-889EE000 (32768 bytes) Module \SystemRoot\system32\drivers\rdprefmp.sys (RDP Reflector Driver Miniport/Microsoft Corporation) 889EE000-889F6000 (32768 bytes) Module \SystemRoot\System32\Drivers\Msfs.SYS (Mailslot driver/Microsoft Corporation) 88800000-8880B000 (45056 bytes) Module \SystemRoot\System32\Drivers\Npfs.SYS (NPFS Driver/Microsoft Corporation) 8E004000-8E012000 (57344 bytes) Module \SystemRoot\system32\DRIVERS\tdx.sys (TDI Translation Driver/Microsoft Corporation) 8E012000-8E029000 (94208 bytes) Module \SystemRoot\system32\DRIVERS\TDI.SYS (TDI Wrapper/Microsoft Corporation) 8E029000-8E034000 (45056 bytes) Module \SystemRoot\System32\Drivers\avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.) 8E034000-8E06E000 (237568 bytes) Module \SystemRoot\System32\DRIVERS\netbt.sys (MBT Transport driver/Microsoft Corporation) 8E06E000-8E0A0000 (204800 bytes) Module \SystemRoot\system32\drivers\afd.sys (Ancillary Function Driver for WinSock/Microsoft Corporation) 8E0A0000-8E0FA000 (368640 bytes) Module \SystemRoot\system32\DRIVERS\wfplwf.sys (WFP NDIS 6.20 Lightweight Filter Driver/Microsoft Corporation) 8E0FA000-8E101000 (28672 bytes) Module \SystemRoot\system32\DRIVERS\pacer.sys (QoS Packet Scheduler/Microsoft Corporation) 8E101000-8E120000 (126976 bytes) Module \SystemRoot\system32\DRIVERS\netbios.sys (NetBIOS interface driver/Microsoft Corporation) 8E120000-8E12E000 (57344 bytes) Module \SystemRoot\system32\DRIVERS\wanarp.sys (MS Remote Access and Routing ARP Driver/Microsoft Corporation) 8E12E000-8E141000 (77824 bytes) Module \SystemRoot\system32\DRIVERS\termdd.sys (Remote Desktop Server Driver/Microsoft Corporation) 8E141000-8E151000 (65536 bytes) Module \SystemRoot\system32\DRIVERS\rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) 8E151000-8E192000 (266240 bytes) Module \SystemRoot\system32\drivers\nsiproxy.sys (NSI Proxy/Microsoft Corporation) 8E192000-8E19C000 (40960 bytes) Module \SystemRoot\system32\DRIVERS\mssmbios.sys (System Management BIOS Driver/Microsoft Corporation) 8E19C000-8E1A6000 (40960 bytes) Module \SystemRoot\System32\drivers\discache.sys (System Indexer/Cache Driver/Microsoft Corporation) 8E1A6000-8E1B2000 (49152 bytes) Module \SystemRoot\system32\drivers\csc.sys (Windows Client Side Caching Driver/Microsoft Corporation) 8F012000-8F076000 (409600 bytes) Module \SystemRoot\System32\Drivers\dfsc.sys (DFS Namespace Client Driver/Microsoft Corporation) 8F076000-8F08E000 (98304 bytes) Module \SystemRoot\system32\DRIVERS\blbdrive.sys (BLB Drive Driver/Microsoft Corporation) 8F08E000-8F09C000 (57344 bytes) Module \SystemRoot\System32\Drivers\avgmfx86.sys (AVG Resident Shield Minifilter Driver/AVG Technologies CZ, s.r.o.) 8F09C000-8F0A2000 (24576 bytes) Module \SystemRoot\System32\Drivers\avgldx86.sys (AVG AVI Loader Driver/AVG Technologies CZ, s.r.o.) 8F0A2000-8F0D6000 (212992 bytes) Module \SystemRoot\system32\DRIVERS\amdk8.sys (Processor Device Driver/Microsoft Corporation) 8F0D6000-8F0E8000 (73728 bytes) Module \SystemRoot\system32\DRIVERS\usbohci.sys (OHCI USB Miniport Driver/Microsoft Corporation) 8F0E8000-8F0F2000 (40960 bytes) Module \SystemRoot\system32\DRIVERS\USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) 8F0F2000-8F13D000 (307200 bytes) Module \SystemRoot\system32\DRIVERS\usbehci.sys (EHCI eUSB Miniport Driver/Microsoft Corporation) 8F13D000-8F14C000 (61440 bytes) Module \SystemRoot\system32\DRIVERS\atikmdag.sys (ATI Radeon Kernel Mode Driver/ATI Technologies Inc.) 8FE26000-9027A000 (4538368 bytes) Module \SystemRoot\System32\drivers\dxgkrnl.sys (DirectX Graphics Kernel/Microsoft Corporation) 9027A000-90331000 (749568 bytes) Module \SystemRoot\System32\drivers\dxgmms1.sys (DirectX Graphics MMS/Microsoft Corporation) 90331000-9036A000 (233472 bytes) Module \SystemRoot\system32\DRIVERS\HDAudBus.sys (High Definition Audio Bus Driver/Microsoft Corporation) 9036A000-90389000 (126976 bytes) Module \SystemRoot\system32\DRIVERS\nvm62x32.sys (NVIDIA MCP Networking Function Driver./NVIDIA Corporation) 90389000-903DE000 (348160 bytes) Module \SystemRoot\system32\DRIVERS\nvlddmkm.sys (NVIDIA Windows Kernel Mode Driver, Version 191.07 /NVIDIA Corporation) 90A01000-91312000 (9506816 bytes) Module \SystemRoot\system32\DRIVERS\nvBridge.kmd (NVIDIA Compatible Windows Vista Kernel Mode Driver, Version 191.07 /NVIDIA Corporation) 91312000-91314000 (8192 bytes) Module \SystemRoot\system32\DRIVERS\CompositeBus.sys (Multi-Transport Composite Bus Enumerator/Microsoft Corporation) 91314000-91321000 (53248 bytes) Module \SystemRoot\system32\DRIVERS\AgileVpn.sys (RAS Agile Vpn Miniport Call Manager/Microsoft Corporation) 91321000-91333000 (73728 bytes) Module \SystemRoot\system32\DRIVERS\rasl2tp.sys (RAS L2TP mini-port/call-manager driver/Microsoft Corporation) 91333000-9134B000 (98304 bytes) Module \SystemRoot\system32\DRIVERS\ndistapi.sys (NDIS 3.0 connection wrapper driver/Microsoft Corporation) 9134B000-91356000 (45056 bytes) Module \SystemRoot\system32\DRIVERS\ndiswan.sys (MS PPP Framing Driver (Strong Encryption)/Microsoft Corporation) 91356000-91378000 (139264 bytes) Module \SystemRoot\system32\DRIVERS\raspppoe.sys (RAS PPPoE mini-port/call-manager driver/Microsoft Corporation) 91378000-91390000 (98304 bytes) Module \SystemRoot\system32\DRIVERS\raspptp.sys (Peer-to-Peer Tunneling Protocol/Microsoft Corporation) 91390000-913A7000 (94208 bytes) Module \SystemRoot\system32\DRIVERS\rassstp.sys (RAS SSTP Miniport Call Manager/Microsoft Corporation) 913A7000-913BE000 (94208 bytes) Module \SystemRoot\system32\DRIVERS\rdpbus.sys (Microsoft RDP Bus Device driver/Microsoft Corporation) 913BE000-913C8000 (40960 bytes) Module \SystemRoot\system32\DRIVERS\kbdclass.sys (Keyboard Class Driver/Microsoft Corporation) 913C8000-913D5000 (53248 bytes) Module \SystemRoot\system32\DRIVERS\mouclass.sys (Mouse Class Driver/Microsoft Corporation) 913D5000-913E2000 (53248 bytes) Module \SystemRoot\system32\DRIVERS\swenum.sys (Plug and Play Software Device Enumerator/Microsoft Corporation) 913E2000-913E4000 (8192 bytes) Module \SystemRoot\system32\DRIVERS\ks.sys (Kernel CSA Library/Microsoft Corporation) 8F14C000-8F180000 (212992 bytes) Module \SystemRoot\system32\DRIVERS\umbus.sys (User-Mode Bus Enumerator/Microsoft Corporation) 913E4000-913F2000 (57344 bytes) Module \SystemRoot\system32\DRIVERS\usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) 8F180000-8F1C4000 (278528 bytes) Module \SystemRoot\System32\Drivers\NDProxy.SYS (NDIS Proxy/Microsoft Corporation) 903DE000-903EF000 (69632 bytes) Module \SystemRoot\system32\drivers\RTKVHDA.sys (Realtek® High Definition Audio Function Driver/Realtek Semiconductor Corp.) 96004000-961F9000 (2052096 bytes) Module \SystemRoot\system32\drivers\portcls.sys (Port Class (Class Driver for Port/Miniport Devices)/Microsoft Corporation) 8F1C4000-8F1F3000 (192512 bytes) Module \SystemRoot\system32\drivers\drmk.sys (Microsoft Trusted Audio Drivers/Microsoft Corporation) 8FE00000-8FE19000 (102400 bytes) Module \SystemRoot\System32\Drivers\crashdmp.sys (Crash Dump Driver/Microsoft Corporation) 913F2000-913FF000 (53248 bytes) Module \SystemRoot\System32\Drivers\dump_diskdump.sys 8FE19000-8FE23000 (40960 bytes) Module \SystemRoot\System32\Drivers\dump_nvstor.sys 8E1B2000-8E1D7000 (151552 bytes) Module \SystemRoot\System32\Drivers\dump_dumpfve.sys 903EF000-90400000 (69632 bytes) Module \SystemRoot\System32\win32k.sys (Multi-User Win32 Driver/Microsoft Corporation) 82940000-82B8A000 (2400256 bytes) Module \SystemRoot\System32\drivers\Dxapi.sys (DirectX API Driver/Microsoft Corporation) 8F1F3000-8F1FD000 (40960 bytes) Module \SystemRoot\system32\DRIVERS\monitor.sys (Monitor Driver/Microsoft Corporation) 8F000000-8F00B000 (45056 bytes) Module \SystemRoot\system32\DRIVERS\hidusb.sys (USB Miniport Driver for Input Devices/Microsoft Corporation) 8E1D7000-8E1E2000 (45056 bytes) Module \SystemRoot\system32\DRIVERS\HIDCLASS.SYS (Hid Class Library/Microsoft Corporation) 8E1E2000-8E1F5000 (77824 bytes) Module \SystemRoot\system32\DRIVERS\HIDPARSE.SYS (Hid Parsing Library/Microsoft Corporation) 961F9000-96200000 (28672 bytes) Module \SystemRoot\system32\DRIVERS\USBD.SYS (Universal Serial Bus Driver/Microsoft Corporation) 96000000-96002000 (8192 bytes) Module \SystemRoot\system32\DRIVERS\mouhid.sys (HID Mouse Filter Driver/Microsoft Corporation) 8E1F5000-8E200000 (45056 bytes) Module \SystemRoot\System32\TSDDD.dll (Framebuffer Display Driver/Microsoft Corporation) 82BA0000-82BA9000 (36864 bytes) Module \SystemRoot\System32\cdd.dll (Canonical Display Driver/Microsoft Corporation) 82BD0000-82BEE000 (122880 bytes) Module \SystemRoot\system32\DRIVERS\usbccgp.sys (USB Common Class Generic Parent Driver/Microsoft Corporation) 88DAD000-88DC4000 (94208 bytes) Module \SystemRoot\system32\DRIVERS\kbdhid.sys (HID Keyboard Filter Driver/Microsoft Corporation) 88DC4000-88DD0000 (49152 bytes) Module \SystemRoot\system32\drivers\usbaudio.sys (USB Audio Class Driver/Microsoft Corporation) 88DD0000-88DE4000 (81920 bytes) Module \SystemRoot\System32\ATMFD.DLL (Windows NT OpenType/Type 1 Font Driver/Adobe Systems Incorporated) 82800000-8284D000 (315392 bytes) Module \SystemRoot\System32\Drivers\BTHUSB.sys (Bluetooth Miniport Driver/Microsoft Corporation) 99619000-9962B000 (73728 bytes) Module \SystemRoot\System32\Drivers\bthport.sys (Bluetooth Bus Driver/Microsoft Corporation) 9962B000-9968F000 (409600 bytes) Module \SystemRoot\system32\drivers\luafv.sys (LUA File Virtualization Filter Driver/Microsoft Corporation) 9968F000-996AA000 (110592 bytes) Module \SystemRoot\system32\drivers\WudfPf.sys (Windows Driver Foundation - User-mode Driver Framework Platform Driver/Microsoft Corporation) 996AA000-996C4000 (106496 bytes) Module \SystemRoot\system32\DRIVERS\rfcomm.sys (Bluetooth RFCOMM Driver/Microsoft Corporation) 996C4000-996E8000 (147456 bytes) Module \SystemRoot\system32\DRIVERS\BthEnum.sys (Bluetooth Bus Extender/Microsoft Corporation) 996E8000-996F5000 (53248 bytes) Module \SystemRoot\system32\DRIVERS\bthpan.sys (Bluetooth Personal Area Networking/Microsoft Corporation) 996F5000-99710000 (110592 bytes) Module \SystemRoot\system32\DRIVERS\bthmodem.sys (Bluetooth Communications Driver/Microsoft Corporation) 99710000-99722000 (73728 bytes) Module \SystemRoot\system32\DRIVERS\btwavdt.sys (Broadcom Bluetooth AVDT Service/Broadcom Corporation.) 99722000-99795000 (471040 bytes) Module \SystemRoot\system32\drivers\btwaudio.sys (Bluetooth Audio Device/Broadcom Corporation.) 9A216000-9A297000 (528384 bytes) Module \SystemRoot\system32\DRIVERS\btwl2cap.sys (Broadcom Bluetooth L2CAP Service/Broadcom Corporation.) 9A297000-9A2A2000 (45056 bytes) Module \SystemRoot\system32\DRIVERS\btwrchid.sys (Bluetooth Remote Control HID Minidriver/Broadcom Corporation.) 9A2A2000-9A2A5000 (12288 bytes) Module \SystemRoot\system32\DRIVERS\lltdio.sys (Link-Layer Topology Mapper I/O Driver/Microsoft Corporation) 9A2A5000-9A2B5000 (65536 bytes) Module \SystemRoot\system32\DRIVERS\rspndr.sys (Link-Layer Topology Responder Driver for NDIS 6/Microsoft Corporation) 9A2B5000-9A2C8000 (77824 bytes) Module \SystemRoot\system32\drivers\HTTP.sys (HTTP Protocol Stack/Microsoft Corporation) 9A2C8000-9A34D000 (544768 bytes) Module \SystemRoot\system32\DRIVERS\bowser.sys (NT Lan Manager Datagram Receiver Driver/Microsoft Corporation) 9A34D000-9A366000 (102400 bytes) Module \SystemRoot\System32\drivers\mpsdrv.sys (Microsoft Protection Service Driver/Microsoft Corporation) 9A366000-9A378000 (73728 bytes) Module \SystemRoot\system32\DRIVERS\mrxsmb.sys (Windows NT SMB Minirdr/Microsoft Corporation) 9A378000-9A39B000 (143360 bytes) Module \SystemRoot\system32\DRIVERS\mrxsmb10.sys (Longhorn SMB Downlevel SubRdr/Microsoft Corporation) 9A39B000-9A3D6000 (241664 bytes) Module \SystemRoot\system32\DRIVERS\mrxsmb20.sys (Longhorn SMB 2.0 Redirector/Microsoft Corporation) 9A3D6000-9A3F1000 (110592 bytes) Module \SystemRoot\system32\DRIVERS\lirsgt.sys 9A3F1000-9A3F6000 (20480 bytes) Module \SystemRoot\system32\drivers\peauth.sys (Protected Environment Authentication and Authorization Export Driver/Microsoft Corporation) 9EA05000-9EA9C000 (618496 bytes) Module \SystemRoot\System32\Drivers\secdrv.SYS (Macrovision SECURITY Driver/Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) 9EA9C000-9EAA6000 (40960 bytes) Module \SystemRoot\System32\DRIVERS\srvnet.sys (Server Network driver/Microsoft Corporation) 9EAA6000-9EAC7000 (135168 bytes) Module \SystemRoot\System32\drivers\tcpipreg.sys (TCP/IP Registry Compatibility Driver/Microsoft Corporation) 9EAC7000-9EAD4000 (53248 bytes) Module \SystemRoot\System32\DRIVERS\srv2.sys (Smb 2.0 Server driver/Microsoft Corporation) 9EB3E000-9EB8D000 (323584 bytes) Module \SystemRoot\System32\DRIVERS\srv.sys (Server driver/Microsoft Corporation) 9EB8D000-9EBDE000 (331776 bytes) Module \SystemRoot\System32\drivers\rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) 99795000-997BA000 (151552 bytes) Module \SystemRoot\system32\drivers\tdtcp.sys (TCP Transport Driver/Microsoft Corporation) 9EBDE000-9EBE8000 (40960 bytes) Module \SystemRoot\System32\DRIVERS\tssecsrv.sys (TS Security Filter Driver/Microsoft Corporation) 9EBE8000-9EBF5000 (53248 bytes) Module \SystemRoot\System32\Drivers\RDPWD.SYS (RDP Terminal Stack Driver/Microsoft Corporation) 997BA000-997EB000 (200704 bytes) Module \??\C:\Users\Esaul\AppData\Local\Temp\pglcapog.sys (GMER) 99600000-99617000 (94208 bytes) Module \Windows\System32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 77700000-7783C000 (1294336 bytes) Module \Windows\System32\smss.exe (Windows Session Manager/Microsoft Corporation) 47CD0000-47CE3000 (77824 bytes) Module \Windows\System32\apisetschema.dll (ApiSet Schema DLL/Microsoft Corporation) 77940000-77990000 (327680 bytes) Module \Windows\System32\autochk.exe (Auto Check Utility/Microsoft Corporation) 007F0000-00896000 (679936 bytes) Module \Windows\System32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 77500000-776F9000 (2068480 bytes) Module \Windows\System32\gdi32.dll (GDI Client DLL/Microsoft Corporation) 778E0000-7792E000 (319488 bytes) Module \Windows\System32\ws2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 778A0000-778D5000 (217088 bytes) Module \Windows\System32\wininet.dll (Internet Extensions for Win32/Microsoft Corporation) 77400000-774F4000 (999424 bytes) Module \Windows\System32\usp10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 77360000-773FD000 (643072 bytes) Module \Windows\System32\imm32.dll (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 77880000-7789F000 (126976 bytes) Module \Windows\System32\shell32.dll (Windows Shell Common Dll/Microsoft Corporation) 76710000-77359000 (12881920 bytes) Module \Windows\System32\imagehlp.dll (Windows NT Image Helper/Microsoft Corporation) 77850000-7787A000 (172032 bytes) Module \Windows\System32\oleaut32.dll (Microsoft Corporation) 76680000-7670F000 (585728 bytes) Module \Windows\System32\psapi.dll (Process Status Helper/Microsoft Corporation) 77840000-77845000 (20480 bytes) Module \Windows\System32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 76520000-7667C000 (1425408 bytes) Module \Windows\System32\user32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 76450000-76519000 (823296 bytes) Module \Windows\System32\advapi32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 763B0000-76450000 (655360 bytes) Module \Windows\System32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 76270000-763A5000 (1265664 bytes) Module \Windows\System32\lpk.dll (Language Pack/Microsoft Corporation) 76260000-7626A000 (40960 bytes) Module \Windows\System32\Wldap32.dll (Win32 LDAP API DLL/Microsoft Corporation) 76210000-76255000 (282624 bytes) Module \Windows\System32\comdlg32.dll (Common Dialogs DLL/Microsoft Corporation) 76190000-7620B000 (503808 bytes) Module \Windows\System32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 76170000-76189000 (102400 bytes) Module \Windows\System32\normaliz.dll (Unicode Normalization DLL/Microsoft Corporation) 76160000-76163000 (12288 bytes) Module \Windows\System32\clbcatq.dll (COM+ Configuration Catalog/Microsoft Corporation) 760D0000-76153000 (536576 bytes) Module \Windows\System32\rpcrt4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 76020000-760C1000 (659456 bytes) Module \Windows\System32\nsi.dll (NSI User-mode interface DLL/Microsoft Corporation) 76010000-76016000 (24576 bytes) Module \Windows\System32\difxapi.dll (Driver Install Frameworks for API library module/Microsoft Corporation) 75FB0000-76002000 (335872 bytes) Module \Windows\System32\setupapi.dll (Windows Setup API/Microsoft Corporation) 75E10000-75FAD000 (1691648 bytes) Module \Windows\System32\shlwapi.dll (Shell Light-weight Utility Library/Microsoft Corporation) 75DB0000-75E07000 (356352 bytes) Module \Windows\System32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 75CD0000-75DA4000 (868352 bytes) Module \Windows\System32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 75C20000-75CCC000 (704512 bytes) Module \Windows\System32\msctf.dll (MSCTF Server DLL/Microsoft Corporation) 75B50000-75C1C000 (835584 bytes) Module \Windows\System32\KernelBase.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 75B00000-75B4A000 (303104 bytes) Module \Windows\System32\comctl32.dll (Common Controls Library/Microsoft Corporation) 75A70000-75AF4000 (540672 bytes) Module \Windows\System32\cfgmgr32.dll (Configuration Manager DLL/Microsoft Corporation) 75A40000-75A67000 (159744 bytes) Module \Windows\System32\crypt32.dll (Crypto API32/Microsoft Corporation) 75920000-75A3C000 (1163264 bytes) Module \Windows\System32\wintrust.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 758F0000-7591D000 (184320 bytes) Module \Windows\System32\devobj.dll (Device Information Set DLL/Microsoft Corporation) 758D0000-758E2000 (73728 bytes) —- Processes - GMER 1.0.15 —- Process System Idle 0 Process System 4 —- Threads - GMER 1.0.15 —- Thread System [4:2256] 9EAFEF2E Process C:\Windows\System32\smss.exe (Windows Session Manager/Microsoft Corporation) 264 Library C:\Windows\System32\smss.exe (Windows Session Manager/Microsoft Corporation) 0x47CD0000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Process C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Watchdog Service/AVG Technologies CZ, s.r.o.) 308 Library C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Watchdog Service/AVG Technologies CZ, s.r.o.) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b 5\MSVCR80.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x756B0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Program Files\AVG\AVG9\avglogx.dll (AVG Logging Library/AVG Technologies CZ, s.r.o.) 0x6BC50000 Library C:\Program Files\AVG\AVG9\avgwd.dll (AVG Watchdog Module/AVG Technologies CZ, s.r.o.) 0x6D740000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Program Files\AVG\AVG9\avgcfgx.dll (AVG Configuration Module/AVG Technologies CZ, s.r.o.) 0x6A920000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75750000 Library C:\Program Files\AVG\AVG9\avgsched.dll (AVG Scheduler Module/AVG Technologies CZ, s.r.o.) 0x6C250000 Library C:\Windows\system32\SensAPI.DLL (SENS Connectivity API DLL/Microsoft Corporation) 0x71510000 Library C:\Program Files\AVG\AVG9\avgwdwsc.dll (AVG Windows Security Center Module/AVG Technologies CZ, s.r.o.) 0x6D930000 Library C:\Program Files\AVG\AVG9\avglngx.dll (AVG Language Module/AVG Technologies CZ, s.r.o.) 0x6BBD0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\wscisvif.dll (Windows Security Center ISV API/Microsoft Corporation) 0x667F0000 Library C:\Windows\system32\WSCAPI.dll (Windows Security Center API/Microsoft Corporation) 0x666A0000 Library C:\Windows\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x76270000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 0x77500000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Library C:\Program Files\Windows Defender\MpClient.dll (Client Interface/Microsoft Corporation) 0x65780000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x758F0000 Process C:\Windows\system32\csrss.exe (Client Server Runtime Process/Microsoft Corporation) 396 Library C:\Windows\system32\csrss.exe (Client Server Runtime Process/Microsoft Corporation) 0x4A160000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\CSRSRV.dll (Client Server Runtime Process/Microsoft Corporation) 0x758B0000 Library C:\Windows\system32\basesrv.DLL (Windows NT BASE API Server DLL/Microsoft Corporation) 0x758A0000 Library C:\Windows\system32\winsrv.DLL (Multi-User Windows Server DLL/Microsoft Corporation) 0x75870000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\SYSTEM32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\sxssrv.DLL (Windows SxS Server DLL/Microsoft Corporation) 0x75860000 Library C:\Windows\system32\sxs.dll (Fusion 2.5/Microsoft Corporation) 0x757C0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Process C:\Program Files\Bonjour\mDNSResponder.exe (Bonjour Service/Apple Inc.) 416 Library C:\Program Files\Bonjour\mDNSResponder.exe (Bonjour Service/Apple Inc.) 0x00BB0000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x737C0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library C:\Windows\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x73EB0000 Library C:\Windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x73EA0000 Library C:\Windows\system32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x75600000 Library C:\Windows\system32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x73E90000 Library C:\Windows\system32\POWRPROF.dll (Power Profile Helper DLL/Microsoft Corporation) 0x73BC0000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x751E0000 Library C:\Windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x750B0000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x737F0000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x721C0000 Process C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe (Bluetooth Support Server/Broadcom Corporation.) 472 Library C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe (Bluetooth Support Server/Broadcom Corporation.) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\bthprops.cpl (Bluetooth Control Panel Applet/Microsoft Corporation) 0x73FA0000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x747E0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Process C:\Windows\system32\csrss.exe (Client Server Runtime Process/Microsoft Corporation) 480 Library C:\Windows\system32\csrss.exe (Client Server Runtime Process/Microsoft Corporation) 0x4A160000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\CSRSRV.dll (Client Server Runtime Process/Microsoft Corporation) 0x758B0000 Library C:\Windows\system32\basesrv.DLL (Windows NT BASE API Server DLL/Microsoft Corporation) 0x758A0000 Library C:\Windows\system32\winsrv.DLL (Multi-User Windows Server DLL/Microsoft Corporation) 0x75870000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\SYSTEM32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\sxssrv.DLL (Windows SxS Server DLL/Microsoft Corporation) 0x75860000 Library C:\Windows\system32\sxs.dll (Fusion 2.5/Microsoft Corporation) 0x757C0000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Process C:\Windows\system32\wininit.exe (Windows Start-Up Application/Microsoft Corporation) 488 Library C:\Windows\system32\wininit.exe (Windows Start-Up Application/Microsoft Corporation) 0x001B0000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75750000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x751E0000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Process C:\Windows\system32\winlogon.exe (Windows Logon Application/Microsoft Corporation) 524 Library C:\Windows\system32\winlogon.exe (Windows Logon Application/Microsoft Corporation) 0x004D0000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75820000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75750000 Library C:\Windows\system32\UXINIT.dll (Windows User Experience Session Initialization Dll/Microsoft Corporation) 0x73690000 Library C:\Windows\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74660000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\WindowsCodecs.dll (Microsoft Windows Codecs Library/Microsoft Corporation) 0x740F0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x73E90000 Library C:\Windows\system32\netjoin.dll (Domain Join DLL/Microsoft Corporation) 0x75300000 Library C:\Windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x73EA0000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x738A0000 Library C:\Windows\system32\MPR.dll (Multiple Provider Router DLL/Microsoft Corporation) 0x70790000 Process C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft SeaPort Search Enhancement Broker/Microsoft Corporation) 552 Library C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft SeaPort Search Enhancement Broker/Microsoft Corporation) 0x002D0000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\WSOCK32.dll (Windows Socket 32-Bit DLL/Microsoft Corporation) 0x71E10000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\WINHTTP.dll (Windows HTTP Services/Microsoft Corporation) 0x71E20000 Library C:\Windows\system32\webio.dll (Web Transfer Protocols API/Microsoft Corporation) 0x71DC0000 Library C:\Windows\system32\SensApi.dll (SENS Connectivity API DLL/Microsoft Corporation) 0x71510000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\System32\msxml6.dll (MSXML 6.0 SP3/Microsoft Corporation) 0x71700000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\ncrypt.dll (Windows cryptographic library/Microsoft Corporation) 0x75360000 Library C:\Windows\system32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75340000 Library C:\Windows\system32\bcryptprimitives.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x74ED0000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library C:\Windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74DB0000 Library C:\Windows\system32\cryptnet.dll (Crypto Network Related API/Microsoft Corporation) 0x6F990000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x737C0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x737F0000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x721C0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x750B0000 Library C:\Windows\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x71600000 Library C:\Windows\system32\Cabinet.dll (Microsoft® Cabinet File API/Microsoft Corporation) 0x6F970000 Library C:\Windows\system32\DEVRTL.dll (Device Management Run Time Library/Microsoft Corporation) 0x74FB0000 Process C:\Program Files\AVG\AVG9\avgchsvx.exe (AVG Cache Server/AVG Technologies CZ, s.r.o.) 556 Library C:\Program Files\AVG\AVG9\avgchsvx.exe (AVG Cache Server/AVG Technologies CZ, s.r.o.) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b 5\MSVCR80.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x756B0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Program Files\AVG\AVG9\avglogx.dll (AVG Logging Library/AVG Technologies CZ, s.r.o.) 0x6BC50000 Library C:\Program Files\AVG\AVG9\avgchjwx.dll (AVG Scanning Cache Module/AVG Technologies CZ, s.r.o.) 0x6E870000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Program Files\AVG\AVG9\avgcertx.dll (AVG Cert SDK/AVG Technologies CZ, s.r.o.) 0x6E780000 Library C:\Program Files\AVG\AVG9\avgclitx.dll (AVG Scanning Core Module - Lite Version/AVG Technologies CZ, s.r.o.) 0x6AA70000 Process C:\Program Files\AVG\AVG9\avgrsx.exe (AVG Resident Shield Service/AVG Technologies CZ, s.r.o.) 572 Library C:\Program Files\AVG\AVG9\avgrsx.exe (AVG Resident Shield Service/AVG Technologies CZ, s.r.o.) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b 5\MSVCR80.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x756B0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Program Files\AVG\AVG9\avglogx.dll (AVG Logging Library/AVG Technologies CZ, s.r.o.) 0x6BC50000 Library C:\Program Files\AVG\AVG9\avgcclix.dll (AVG Scanning Core Module - Client Part/AVG Technologies CZ, s.r.o.) 0x6A870000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75750000 Process C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 596 Library C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00740000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library c:\windows\system32\hpzipm12.dll (PmlDrv Module/Hewlett-Packard) 0x00020000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library c:\windows\system32\WSOCK32.dll (Windows Socket 32-Bit DLL/Microsoft Corporation) 0x71E10000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library c:\windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\System32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\System32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Process C:\Windows\system32\services.exe (Services and Controller app/Microsoft Corporation) 604 Library C:\Windows\system32\services.exe (Services and Controller app/Microsoft Corporation) 0x00860000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\scext.dll (Service Control Manager Extension DLL for non-minwin/Microsoft Corporation) 0x75680000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\system32\SCESRV.dll (Windows Security Configuration Editor Engine/Microsoft Corporation) 0x75620000 Library C:\Windows\system32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x75600000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x753A0000 Library C:\Windows\system32\UBPM.dll (Unified Background Process Manager DLL/Microsoft Corporation) 0x74E90000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75750000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x740D0000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75820000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x751E0000 Process C:\Windows\system32\lsass.exe (Local Security Authority Process/Microsoft Corporation) 612 Library C:\Windows\system32\lsass.exe (Local Security Authority Process/Microsoft Corporation) 0x009F0000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\SspiSrv.dll (LSA SSPI RPC interface DLL/Microsoft Corporation) 0x755D0000 Library C:\Windows\system32\lsasrv.dll (LSA Server DLL/Microsoft Corporation) 0x754D0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\SAMSRV.dll (SAM Server DLL/Microsoft Corporation) 0x75440000 Library C:\Windows\system32\cryptdll.dll (Cryptography Manager/Microsoft Corporation) 0x75420000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\wevtapi.dll (Eventing Consumption and Configuration API/Microsoft Corporation) 0x753D0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\cngaudit.dll (Windows Cryptographic Next Generation audit library/Microsoft Corporation) 0x753C0000 Library C:\Windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x753A0000 Library C:\Windows\system32\ncrypt.dll (Windows cryptographic library/Microsoft Corporation) 0x75360000 Library C:\Windows\system32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75340000 Library C:\Windows\system32\msprivs.DLL (Microsoft Privilege Translations/Microsoft Corporation) 0x75330000 Library C:\Windows\system32\netjoin.dll (Domain Join DLL/Microsoft Corporation) 0x75300000 Library C:\Windows\system32\negoexts.DLL (NegoExtender Security Package/Microsoft Corporation) 0x752E0000 Library C:\Windows\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\system32\cryptbase.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\kerberos.DLL (Kerberos Security Package/Microsoft Corporation) 0x75250000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x751E0000 Library C:\Windows\system32\msv1_0.DLL (Microsoft Authentication Package v1.0/Microsoft Corporation) 0x75190000 Library C:\Windows\system32\netlogon.DLL (Net Logon Services DLL/Microsoft Corporation) 0x75100000 Library C:\Windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x750B0000 Library C:\Windows\system32\logoncli.dll (Net Logon Client DLL/Microsoft Corporation) 0x75080000 Library C:\Windows\system32\schannel.DLL (TLS / SSL Security Provider/Microsoft Corporation) 0x75040000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\wdigest.DLL (Microsoft Digest Access/Microsoft Corporation) 0x75010000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\tspkg.DLL (Web Service Security Package/Microsoft Corporation) 0x74F90000 Library C:\Windows\system32\pku2u.DLL (Pku2u Security Package/Microsoft Corporation) 0x74F50000 Library C:\Windows\system32\livessp.DLL (LiveSSP/Microsoft Corporation) 0x74F10000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x77840000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\bcryptprimitives.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x74ED0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\efslsaext.dll (LSA extension for EFS/Microsoft Corporation) 0x74FC0000 Library C:\Windows\system32\scecli.DLL (Windows Security Configuration Editor Client Engine/Microsoft Corporation) 0x74E60000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75820000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library C:\Windows\system32\efssvc.dll (EFS Service/Microsoft Corporation) 0x71D30000 Library C:\Windows\system32\EFSCORE.dll (EFS Core Library/Microsoft Corporation) 0x71CF0000 Library C:\Windows\system32\EFSUTIL.dll (EFS Utility Library/Microsoft Corporation) 0x71CE0000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x738A0000 Library C:\Windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74DB0000 Library C:\Windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x737C0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library C:\Windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x73EA0000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x740D0000 Library C:\Windows\system32\samcli.dll (Security Accounts Manager Client DLL/Microsoft Corporation) 0x73E80000 Library C:\Windows\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x747A0000 Library C:\Windows\system32\dssenh.dll (Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider/Microsoft Corporation) 0x6F2C0000 Process C:\Program Files\Skype\Phone\Skype.exe (Skype /Skype Technologies S.A.) 616 Library C:\Program Files\Skype\Phone\Skype.exe (Skype /Skype Technologies S.A.) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\oleaut32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\advapi32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\wintrust.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\version.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\system32\URLMON.DLL (OLE32 Extensions for Win32/Microsoft Corporation) 0x76270000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 0x77500000 Library C:\Windows\system32\wininet.dll (Internet Extensions for Win32/Microsoft Corporation) 0x77400000 Library C:\Windows\system32\Normaliz.dll (Unicode Normalization DLL/Microsoft Corporation) 0x76160000 Library C:\Windows\system32\shell32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x747E0000 Library C:\Windows\system32\winspool.drv (Windows Spooler Driver/Microsoft Corporation) 0x74050000 Library C:\Windows\system32\comdlg32.dll (Common Dialogs DLL/Microsoft Corporation) 0x76190000 Library C:\Windows\system32\SHFolder.dll (Shell Folder Service/Microsoft Corporation) 0x70120000 Library C:\Windows\system32\oleacc.dll (Active Accessibility Core Component/Microsoft Corporation) 0x73B40000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74660000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74220000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\DSOUND.dll (DirectSound/Microsoft Corporation) 0x73F20000 Library C:\Windows\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x70C00000 Library C:\Windows\system32\POWRPROF.dll (Power Profile Helper DLL/Microsoft Corporation) 0x73BC0000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library C:\Windows\system32\pdh.dll (Windows Performance Data Helper DLL/Microsoft Corporation) 0x71D80000 Library C:\Windows\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x70950000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\Iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x737C0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library C:\Windows\system32\msimg32.dll (GDIEXT Client DLL/Microsoft Corporation) 0x749E0000 Library C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf 861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) 0x744D0000 Library C:\Windows\system32\olepro32.dll (Microsoft Corporation) 0x68ED0000 Library C:\Windows\system32\cryptui.dll (Microsoft Trust UI Provider/Microsoft Corporation) 0x73D80000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\explorerframe.dll (ExplorerFrame/Microsoft Corporation) 0x6F150000 Library C:\Windows\system32\DUser.dll (Windows DirectUser Engine/Microsoft Corporation) 0x742D0000 Library C:\Windows\system32\DUI70.dll (Windows DirectUI Engine/Microsoft Corporation) 0x74410000 Library C:\Windows\system32\mapi32.dll (Extended MAPI 1.0 for Windows NT/Microsoft Corporation) 0x6F950000 Library C:\Windows\system32\wtsapi32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x740D0000 Library C:\Windows\system32\SXS.DLL (Fusion 2.5/Microsoft Corporation) 0x757C0000 Library C:\Windows\system32\propsys.dll (Microsoft Property System/Microsoft Corporation) 0x746A0000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\wlanapi.dll (Windows WLAN AutoConfig Client Side API DLL/Microsoft Corporation) 0x69A50000 Library C:\Windows\system32\wlanutil.dll (Windows Wireless LAN 802.11 Utility DLL/Microsoft Corporation) 0x69A80000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library C:\Windows\System32\perfdisk.dll (Windows Disk Performance Objects DLL/Microsoft Corporation) 0x69390000 Library C:\Windows\system32\dxdiagn.dll (Microsoft DirectX Diagnostic Tool/Microsoft Corporation) 0x68930000 Library C:\Windows\system32\dxgi.dll (DirectX Graphics Infrastructure/Microsoft Corporation) 0x6F390000 Library C:\Windows\system32\d3d10.dll (Direct3D 10 Runtime/Microsoft Corporation) 0x68820000 Library C:\Windows\system32\d3d10core.dll (Direct3D 10 Runtime/Microsoft Corporation) 0x687B0000 Library C:\Windows\system32\d3d10_1.dll (Direct3D 10.1 Runtime/Microsoft Corporation) 0x6F460000 Library C:\Windows\system32\d3d10_1core.dll (Direct3D 10.1 Runtime/Microsoft Corporation) 0x6F420000 Library C:\Windows\system32\d3d11.dll (Direct3D 11 Runtime/Microsoft Corporation) 0x67470000 Library C:\Windows\System32\MMDevApi.dll (MMDevice API/Microsoft Corporation) 0x74240000 Library C:\Windows\system32\wbem\wbemprox.dll (WMI/Microsoft Corporation) 0x70E00000 Library C:\Windows\system32\wbemcomn.dll (WMI/Microsoft Corporation) 0x710D0000 Library C:\Windows\system32\wbem\wbemsvc.dll (WMI/Microsoft Corporation) 0x70C60000 Library C:\Windows\system32\WindowsCodecs.dll (Microsoft Windows Codecs Library/Microsoft Corporation) 0x740F0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75750000 Library C:\Windows\system32\EhStorShell.dll (Windows Enhanced Storage Shell Extension DLL/Microsoft Corporation) 0x6EC70000 Library C:\Windows\System32\cscui.dll (Client Side Caching UI/Microsoft Corporation) 0x6EC00000 Library C:\Windows\System32\CSCDLL.dll (Offline Files Temporary Shim/Microsoft Corporation) 0x6EBF0000 Library C:\Windows\system32\CSCAPI.dll (Offline Files Win32 API/Microsoft Corporation) 0x70C40000 Library C:\Windows\System32\perfos.dll (Windows System Performance Objects DLL/Microsoft Corporation) 0x68790000 Library C:\Windows\system32\ntshrui.dll (Shell extensions for sharing/Microsoft Corporation) 0x70330000 Library C:\Windows\system32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x75600000 Library C:\Windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x738A0000 Library C:\Windows\system32\wbem\fastprox.dll (WMI Custom Marshaller/Microsoft Corporation) 0x70E90000 Library C:\Windows\system32\NTDSAPI.dll (Active Directory Domain Services API/Microsoft Corporation) 0x70E20000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library C:\Windows\System32\gameux.dll (Games Explorer/Microsoft Corporation) 0x73140000 Library C:\Windows\System32\XmlLite.dll (Microsoft XmlLite Library/Microsoft Corporation) 0x741F0000 Library C:\Windows\System32\wer.dll (Windows Error Reporting DLL/Microsoft Corporation) 0x6F6D0000 Library C:\Windows\System32\shdocvw.dll (Shell Doc Object and Control Library/Microsoft Corporation) 0x74B50000 Library C:\Windows\system32\LINKINFO.dll (Windows Volume Tracking/Microsoft Corporation) 0x74B40000 Library C:\Windows\system32\RICHED20.DLL (Rich Text Edit Control, v3.1/Microsoft Corporation) 0x6AC50000 Library C:\Windows\system32\winbrand.dll (Windows Branding Resources/Microsoft Corporation) 0x67460000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x721C0000 Process C:\Windows\system32\lsm.exe (Local Session Manager Service/Microsoft Corporation) 620 Library C:\Windows\system32\lsm.exe (Local Session Manager Service/Microsoft Corporation) 0x00BF0000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\SYSNTFY.dll (Windows Notifications Dynamic Link Library/Microsoft Corporation) 0x755F0000 Library C:\Windows\system32\WMsgAPI.dll (WinLogon IPC Client/Microsoft Corporation) 0x755E0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\pcwum.dll (Performance Counters for Windows Native DLL/Microsoft Corporation) 0x74D80000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\lsmproxy.dll (LSM interfaces proxy Dll/Microsoft Corporation) 0x70E10000 Process C:\Program Files\AVG\AVG9\avgcsrvx.exe (AVG Scanning Core Module - Server Part/AVG Technologies CZ, s.r.o.) 652 Library C:\Program Files\AVG\AVG9\avgcsrvx.exe (AVG Scanning Core Module - Server Part/AVG Technologies CZ, s.r.o.) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b 5\MSVCR80.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x756B0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Program Files\AVG\AVG9\avglogx.dll (AVG Logging Library/AVG Technologies CZ, s.r.o.) 0x6BC50000 Library C:\Program Files\AVG\AVG9\avgcorex.dll (AVG Scanning Core Module/AVG Technologies CZ, s.r.o.) 0x6AB10000 Library C:\Program Files\AVG\AVG9\avgcertx.dll (AVG Cert SDK/AVG Technologies CZ, s.r.o.) 0x6E780000 Library C:\Program Files\AVG\AVG9\avgchclx.dll (AVG Cache Manager Module - Client Part/AVG Technologies CZ, s.r.o.) 0x6E700000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 896 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00740000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library c:\windows\system32\umpnpmgr.dll (User-mode Plug-and-Play Service/Microsoft Corporation) 0x74E10000 Library c:\windows\system32\SPINF.dll (Windows SPINF/Microsoft Corporation) 0x74DF0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library c:\windows\system32\DEVRTL.dll (Device Management Run Time Library/Microsoft Corporation) 0x74FB0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74DB0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library c:\windows\system32\umpo.dll (User-mode Power Service/Microsoft Corporation) 0x74D90000 Library c:\windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75820000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library c:\windows\system32\pcwum.DLL (Performance Counters for Windows Native DLL/Microsoft Corporation) 0x74D80000 Library c:\windows\system32\rpcss.dll (Distributed COM Services/Microsoft Corporation) 0x74D20000 Library c:\windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Library C:\Windows\system32\wbem\wmidcprv.dll (WMI/Microsoft Corporation) 0x71010000 Library C:\Windows\system32\wbem\FastProx.dll (WMI Custom Marshaller/Microsoft Corporation) 0x70E90000 Library C:\Windows\system32\wbemcomn.dll (WMI/Microsoft Corporation) 0x710D0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\NTDSAPI.dll (Active Directory Domain Services API/Microsoft Corporation) 0x70E20000 Library C:\Windows\system32\wbem\wbemprox.dll (WMI/Microsoft Corporation) 0x70E00000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75750000 Library C:\Windows\system32\wbem\wbemsvc.dll (WMI/Microsoft Corporation) 0x70C60000 Library C:\Windows\system32\wbem\wmiutils.dll (WMI/Microsoft Corporation) 0x70920000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x740D0000 Library C:\Windows\system32\msi.dll (Windows Installer/Microsoft Corporation) 0x728D0000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\msiltcfg.dll (Windows Installer Configuration API Stub/Microsoft Corporation) 0x74980000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\system32\SFC.DLL (Windows File Protection/Microsoft Corporation) 0x70940000 Library C:\Windows\system32\sfc_os.DLL (Windows File Protection/Microsoft Corporation) 0x708F0000 Library C:\Windows\system32\SXS.DLL (Fusion 2.5/Microsoft Corporation) 0x757C0000
Post #13
Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 928 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00740000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library c:\windows\system32\fdrespub.dll (Function Discovery Resource Publication Service/Microsoft Corporation) 0x71AB0000 Library c:\windows\system32\wsdapi.dll (Web Services for Devices API DLL/Microsoft Corporation) 0x735B0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library c:\windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x737C0000 Library c:\windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library c:\windows\system32\webservices.dll (Windows Web Services Runtime/Microsoft Corporation) 0x71AC0000 Library c:\windows\system32\FirewallAPI.dll (Windows Firewall API/Microsoft Corporation) 0x74C80000 Library c:\windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\FunDisc.dll (Function Discovery Dll/Microsoft Corporation) 0x71A80000 Library C:\Windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73CA0000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x737F0000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x721C0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x751E0000 Library C:\Windows\system32\WINHTTP.dll (Windows HTTP Services/Microsoft Corporation) 0x71E20000 Library C:\Windows\system32\webio.dll (Web Transfer Protocols API/Microsoft Corporation) 0x71DC0000 Library C:\Windows\system32\HTTPAPI.dll (HTTP Protocol Stack API/Microsoft Corporation) 0x716E0000 Library C:\Windows\system32\pcwum.dll (Performance Counters for Windows Native DLL/Microsoft Corporation) 0x74D80000 Library C:\Windows\system32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x73E90000 Library C:\Windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x73EA0000 Library C:\Windows\System32\msxml6.dll (MSXML 6.0 SP3/Microsoft Corporation) 0x71700000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\XmlLite.dll (Microsoft XmlLite Library/Microsoft Corporation) 0x741F0000 Library c:\windows\system32\ssdpsrv.dll (SSDP Service DLL/Microsoft Corporation) 0x71330000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library c:\windows\system32\mcx2svc.dll (Media Center Extender Service/Microsoft Corporation) 0x70650000 Library c:\windows\system32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75340000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library c:\windows\system32\ncrypt.dll (Windows cryptographic library/Microsoft Corporation) 0x75360000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library c:\windows\system32\WMI.dll (WMI DC and DP functionality/Microsoft Corporation) 0x705B0000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library C:\Windows\eHome\ehTrace.dll (Media Center Event Trace Module/Microsoft Corporation) 0x70580000 Library c:\windows\system32\upnphost.dll (UPnP Device Host/Microsoft Corporation) 0x70510000 Library c:\windows\system32\SSDPAPI.dll (SSDP Client API DLL/Microsoft Corporation) 0x73580000 Library C:\Windows\system32\fdPnp.dll (Pnp Provider Dll/Microsoft Corporation) 0x713F0000 Library C:\Windows\system32\fdproxy.dll (Function Discovery Proxy Dll/Microsoft Corporation) 0x716F0000 Library C:\Windows\system32\peerdist.dll (BranchCache Client Library/Microsoft Corporation) 0x73CD0000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x753A0000 Library C:\Windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x750B0000 Library C:\Windows\System32\msxml3.dll (MSXML 3.0 SP11/Microsoft Corporation) 0x707B0000 Library C:\Windows\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x76270000 Library C:\Windows\system32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 0x77500000 Library C:\Windows\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x77400000 Library C:\Windows\system32\Normaliz.dll (Unicode Normalization DLL/Microsoft Corporation) 0x76160000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x747E0000 Library C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Office XML MIME Filter/Microsoft Corporation) 0x69900000 Library C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4926_none_508ed732bcbc0e5 a\MSVCR90.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x71870000 Library C:\Windows\system32\udhisapi.dll (UPnP Device Host ISAPI Extension/Microsoft Corporation) 0x68740000 Process C:\Windows\system32\nvvsvc.exe (NVIDIA Driver Helper Service, Version 191.07/NVIDIA Corporation) 1032 Library C:\Windows\system32\nvvsvc.exe (NVIDIA Driver Helper Service, Version 191.07/NVIDIA Corporation) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75750000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 1080 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00740000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library c:\windows\system32\rpcepmap.dll (RPC Endpoint Mapper/Microsoft Corporation) 0x74D10000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library c:\windows\system32\rpcss.dll (Distributed COM Services/Microsoft Corporation) 0x74D20000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\system32\user32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x751E0000 Library C:\Windows\system32\FirewallAPI.dll (Windows Firewall API/Microsoft Corporation) 0x74C80000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x721E0000 Library C:\Windows\system32\msi.dll (Windows Installer/Microsoft Corporation) 0x728D0000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\msiltcfg.dll (Windows Installer Configuration API Stub/Microsoft Corporation) 0x74980000 Library C:\Windows\system32\SFC.DLL (Windows File Protection/Microsoft Corporation) 0x70940000 Library C:\Windows\system32\sfc_os.DLL (Windows File Protection/Microsoft Corporation) 0x708F0000 Library C:\Windows\system32\SXS.DLL (Fusion 2.5/Microsoft Corporation) 0x757C0000 Process C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 1208 Library C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00740000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\System32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\System32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library c:\windows\system32\wevtsvc.dll (Event Logging Service/Microsoft Corporation) 0x74300000 Library C:\Windows\System32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\System32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\System32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\System32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x751E0000 Library C:\Windows\System32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74DB0000 Library C:\Windows\System32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Library c:\windows\system32\audiosrv.dll (Windows Audio Service/Microsoft Corporation) 0x73BF0000 Library c:\windows\system32\POWRPROF.dll (Power Profile Helper DLL/Microsoft Corporation) 0x73BC0000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library c:\windows\system32\MMDevAPI.DLL (MMDevice API/Microsoft Corporation) 0x74240000 Library c:\windows\system32\PROPSYS.dll (Microsoft Property System/Microsoft Corporation) 0x746A0000 Library c:\windows\system32\AVRT.dll (Multimedia Realtime Runtime/Microsoft Corporation) 0x73C70000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\System32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75820000 Library c:\windows\system32\lmhsvc.dll (TCPIP NetBios Transport Services DLL/Microsoft Corporation) 0x73840000 Library c:\windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x737C0000 Library c:\windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library c:\windows\system32\nrpsrv.DLL (Name Resolution Proxy (NRP) RPC interface/Microsoft Corporation) 0x73820000 Library c:\windows\system32\dhcpcore.dll (DHCP Client Service/Microsoft Corporation) 0x73780000 Library c:\windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x750B0000 Library C:\Windows\System32\firewallapi.dll (Windows Firewall API/Microsoft Corporation) 0x74C80000 Library C:\Windows\System32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\System32\dhcpcore6.dll (DHCPv6 Client/Microsoft Corporation) 0x73740000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\System32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\System32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\System32\audioses.dll (Audio Session/Microsoft Corporation) 0x73EE0000 Library c:\windows\system32\provsvc.dll (Windows HomeGroup/Microsoft Corporation) 0x69BD0000 Library C:\Windows\system32\actxprxy.dll (ActiveX Interface Marshaling Library/Microsoft Corporation) 0x70740000 Library C:\Windows\System32\npmproxy.dll (Network List Manager Proxy/Microsoft Corporation) 0x70FC0000 Library C:\Windows\system32\FunDisc.dll (Function Discovery Dll/Microsoft Corporation) 0x71A80000 Library C:\Windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73CA0000 Library C:\Windows\System32\msxml6.dll (MSXML 6.0 SP3/Microsoft Corporation) 0x71700000 Library C:\Windows\system32\fdproxy.dll (Function Discovery Proxy Dll/Microsoft Corporation) 0x716F0000 Library C:\Program Files\Internet Explorer\ieproxy.dll (IE ActiveX Interface Marshaling Library/Microsoft Corporation) 0x69980000 Library c:\windows\system32\wscsvc.dll (Windows Security Center Service/Microsoft Corporation) 0x67380000 Library c:\windows\system32\dbghelp.dll (Windows Image Helper/Microsoft Corporation) 0x66800000 Library C:\Windows\system32\wbem\wbemprox.dll (WMI/Microsoft Corporation) 0x70E00000 Library C:\Windows\system32\wbemcomn.dll (WMI/Microsoft Corporation) 0x710D0000 Library C:\Windows\system32\wbem\wbemsvc.dll (WMI/Microsoft Corporation) 0x70C60000 Library C:\Windows\system32\wbem\fastprox.dll (WMI Custom Marshaller/Microsoft Corporation) 0x70E90000 Library C:\Windows\system32\NTDSAPI.dll (Active Directory Domain Services API/Microsoft Corporation) 0x70E20000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\WINTRUST.DLL (Microsoft Trust Verification APIs/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\imagehlp.dll (Windows NT Image Helper/Microsoft Corporation) 0x77850000 Library C:\Windows\System32\ncrypt.dll (Windows cryptographic library/Microsoft Corporation) 0x75360000 Library C:\Windows\System32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75340000 Library C:\Windows\system32\bcryptprimitives.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x74ED0000 Library C:\Windows\system32\wuapi.dll (Windows Update Client API/Microsoft Corporation) 0x66610000 Library C:\Windows\system32\Cabinet.dll (Microsoft® Cabinet File API/Microsoft Corporation) 0x6F970000 Library C:\Windows\System32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\System32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library C:\Windows\System32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x73E90000 Library C:\Windows\System32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x73EA0000 Process C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 1308 Library C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00740000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\System32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\System32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library c:\windows\system32\audiosrv.dll (Windows Audio Service/Microsoft Corporation) 0x73BF0000 Library c:\windows\system32\POWRPROF.dll (Power Profile Helper DLL/Microsoft Corporation) 0x73BC0000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library c:\windows\system32\MMDevAPI.DLL (MMDevice API/Microsoft Corporation) 0x74240000 Library c:\windows\system32\PROPSYS.dll (Microsoft Property System/Microsoft Corporation) 0x746A0000 Library c:\windows\system32\AVRT.dll (Multimedia Realtime Runtime/Microsoft Corporation) 0x73C70000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library c:\windows\system32\cscsvc.dll (CSC Service DLL/Microsoft Corporation) 0x73A60000 Library c:\windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library c:\windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\System32\pcwum.dll (Performance Counters for Windows Native DLL/Microsoft Corporation) 0x74D80000 Library C:\Windows\System32\PeerDist.dll (BranchCache Client Library/Microsoft Corporation) 0x73CD0000 Library C:\Windows\System32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x753A0000 Library C:\Windows\system32\taskschd.dll (Task Scheduler COM API/Microsoft Corporation) 0x73900000 Library C:\Windows\System32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\System32\mstask.dll (Task Scheduler interface DLL/Microsoft Corporation) 0x738C0000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\COMCTL32.dll (User Experience Controls Library/Microsoft Corporation) 0x747E0000 Library C:\Windows\System32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\System32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\System32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\System32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x740D0000 Library C:\Windows\System32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75820000 Library C:\Windows\System32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74DB0000 Library c:\windows\system32\uxsms.dll (Microsoft User Experience Session Management Service/Microsoft Corporation) 0x736F0000 Library c:\windows\system32\wudfsvc.dll (Windows Driver Foundation - User-mode Driver Framework Service/Microsoft Corporation) 0x736D0000 Library c:\windows\system32\WUDFPlatform.dll (Windows Driver Foundation - User-mode Platform Library/Microsoft Corporation) 0x736A0000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x77840000 Library c:\windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library c:\windows\system32\wevtapi.dll (Eventing Consumption and Configuration API/Microsoft Corporation) 0x753D0000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library c:\windows\system32\ipbusenum.dll (PnP-X IP Bus Enumerator DLL/Microsoft Corporation) 0x719B0000 Library C:\Windows\system32\FunDisc.dll (Function Discovery Dll/Microsoft Corporation) 0x71A80000 Library C:\Windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73CA0000 Library C:\Windows\system32\umb.dll (User Mode Bus Driver Interface Dll/Microsoft Corporation) 0x71860000 Library C:\Windows\System32\msxml6.dll (MSXML 6.0 SP3/Microsoft Corporation) 0x71700000 Library C:\Windows\system32\fdproxy.dll (Function Discovery Proxy Dll/Microsoft Corporation) 0x716F0000 Library c:\windows\system32\sysmain.dll (Superfetch Service Host/Microsoft Corporation) 0x71180000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\System32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Library c:\windows\system32\trkwks.dll (Distributed Link Tracking Client/Microsoft Corporation) 0x71160000 Library c:\windows\system32\umrdp.dll (Remote Desktop Services Device Redirector Service/Microsoft Corporation) 0x70FD0000 Library c:\windows\system32\WINSPOOL.DRV (Windows Spooler Driver/Microsoft Corporation) 0x74050000 Library c:\windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x738A0000 Library c:\windows\system32\hidserv.dll (HID Service/Microsoft Corporation) 0x700B0000 Library c:\windows\system32\HID.DLL (Hid User Library/Microsoft Corporation) 0x74280000 Library C:\Windows\system32\PortableDeviceApi.dll (Windows Portable Device API Components/Microsoft Corporation) 0x6F9B0000 Library C:\Windows\System32\portabledeviceconnectapi.dll (Portable Device Connection API Components/Microsoft Corporation) 0x70090000 Library c:\windows\system32\wdi.dll (Windows Diagnostic Infrastructure/Microsoft Corporation) 0x70E40000 Library C:\Windows\SYSTEM32\APPHLPDM.DLL (Application Compatibility Help Module/Microsoft Corporation) 0x6F670000 Library C:\Windows\System32\wer.dll (Windows Error Reporting DLL/Microsoft Corporation) 0x6F6D0000 Library C:\Windows\System32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75750000 Library C:\Windows\System32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\System32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\system32\cscobj.dll (In-proc COM object used by clients of CSC API/Microsoft Corporation) 0x6AA50000 Library c:\windows\system32\netman.dll (Network Connections Manager/Microsoft Corporation) 0x69F50000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library c:\windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library C:\Windows\System32\netshell.dll (Network Connections Shell/Microsoft Corporation) 0x6B280000 Library C:\Windows\System32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x737C0000 Library C:\Windows\System32\nlaapi.dll (Network Location Awareness 2/Microsoft Corporation) 0x73CC0000 Library C:\Windows\System32\RASDLG.dll (Remote Access Common Dialog API/Microsoft Corporation) 0x69CB0000 Library C:\Windows\System32\MPRAPI.dll (Windows NT MP Router Administration DLL/Microsoft Corporation) 0x69C10000 Library C:\Windows\System32\RASAPI32.dll (Remote Access API/Microsoft Corporation) 0x6C0C0000 Library C:\Windows\System32\rasman.dll (Remote Access Connection Manager/Microsoft Corporation) 0x6D060000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\System32\rtutils.dll (Routing Utilities/Microsoft Corporation) 0x73D00000 Library C:\Windows\System32\dsrole.dll (DS Role Client DLL/Microsoft Corporation) 0x738B0000 Library C:\Windows\system32\hnetcfg.dll (Home Networking Configuration Manager/Microsoft Corporation) 0x702C0000 Library C:\Windows\system32\wbem\wbemprox.dll (WMI/Microsoft Corporation) 0x70E00000 Library C:\Windows\system32\wbemcomn.dll (WMI/Microsoft Corporation) 0x710D0000 Library C:\Windows\system32\wbem\wbemsvc.dll (WMI/Microsoft Corporation) 0x70C60000 Library C:\Windows\system32\wbem\fastprox.dll (WMI Custom Marshaller/Microsoft Corporation) 0x70E90000 Library C:\Windows\system32\NTDSAPI.dll (Active Directory Domain Services API/Microsoft Corporation) 0x70E20000 Library C:\Windows\system32\netcfgx.dll (Network Configuration Objects/Microsoft Corporation) 0x70460000 Library C:\Windows\System32\devrtl.DLL (Device Management Run Time Library/Microsoft Corporation) 0x74FB0000 Library c:\windows\system32\pcasvc.dll (Program Compatibility Assistant Service/Microsoft Corporation) 0x69950000 Library c:\windows\system32\AEPIC.dll (Application Experience Program Cache/Microsoft Corporation) 0x6F680000 Library c:\windows\system32\sfc.dll (Windows File Protection/Microsoft Corporation) 0x70940000 Library c:\windows\system32\sfc_os.DLL (Windows File Protection/Microsoft Corporation) 0x708F0000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 1348 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00740000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library c:\windows\system32\gpsvc.dll (Group Policy Client/Microsoft Corporation) 0x739C0000 Library c:\windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74DB0000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Library c:\windows\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library c:\windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library c:\windows\system32\SYSNTFY.dll (Windows Notifications Dynamic Link Library/Microsoft Corporation) 0x755F0000 Library c:\windows\system32\nlaapi.dll (Network Location Awareness 2/Microsoft Corporation) 0x73CC0000 Library c:\windows\system32\profsvc.dll (ProfSvc/Microsoft Corporation) 0x73990000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library c:\windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library c:\windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library c:\windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73CA0000 Library c:\windows\system32\themeservice.dll (Windows Shell Theme Service Dll/Microsoft Corporation) 0x73980000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75820000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\dsrole.dll (DS Role Client DLL/Microsoft Corporation) 0x738B0000 Library C:\Windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x738A0000 Library c:\windows\system32\sens.dll (System Event Notification Service (SENS)/Microsoft Corporation) 0x73700000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x747A0000 Library C:\Windows\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74660000 Library c:\windows\system32\shsvcs.dll (Windows Shell Services Dll/Microsoft Corporation) 0x72160000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\FVEAPI.dll (Windows BitLocker Drive Encryption API/Microsoft Corporation) 0x72110000 Library C:\Windows\system32\tbs.dll (TBS/Microsoft Corporation) 0x72100000 Library C:\Windows\system32\FVECERTS.dll (BitLocker Certificates Library/Microsoft Corporation) 0x720F0000 Library C:\Windows\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x73EB0000 Library C:\Windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x73EA0000 Library C:\Windows\system32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x75600000 Library C:\Windows\system32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x73E90000 Library C:\Windows\system32\LOGONCLI.DLL (Net Logon Client DLL/Microsoft Corporation) 0x75080000 Library c:\windows\system32\schedsvc.dll (Task Scheduler Service/Microsoft Corporation) 0x72030000 Library c:\windows\system32\pcwum.dll (Performance Counters for Windows Native DLL/Microsoft Corporation) 0x74D80000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library c:\windows\system32\wevtapi.dll (Eventing Consumption and Configuration API/Microsoft Corporation) 0x753D0000 Library c:\windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x753A0000 Library c:\windows\system32\UBPM.dll (Unified Background Process Manager DLL/Microsoft Corporation) 0x74E90000 Library c:\windows\system32\ktmw32.dll (Windows KTM Win32 Client DLL/Microsoft Corporation) 0x72020000 Library c:\windows\system32\XmlLite.dll (Microsoft XmlLite Library/Microsoft Corporation) 0x741F0000 Library C:\Windows\system32\wiarpc.dll (Windows Image Acquisition RPC client DLL/Microsoft Corporation) 0x72010000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\system32\taskcomp.dll (Task Scheduler Backward Compatibility Plug-in/Microsoft Corporation) 0x71FC0000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x751E0000 Library C:\Windows\system32\netjoin.dll (Domain Join DLL/Microsoft Corporation) 0x75300000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x740D0000 Library c:\windows\system32\ikeext.dll (IKE extension/Microsoft Corporation) 0x719D0000 Library c:\windows\system32\fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x721E0000 Library C:\Windows\system32\ncrypt.dll (Windows cryptographic library/Microsoft Corporation) 0x75360000 Library C:\Windows\system32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75340000 Library C:\Windows\system32\bcryptprimitives.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x74ED0000 Library C:\Windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x737C0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x737F0000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x721C0000 Library c:\windows\system32\wbem\wmisvc.dll (WMI/Microsoft Corporation) 0x71130000 Library C:\Windows\system32\wbemcomn.dll (WMI/Microsoft Corporation) 0x710D0000 Library C:\Windows\system32\VSSAPI.DLL (Microsoft® Volume Shadow Copy Requestor/Writer Services API DLL/Microsoft Corporation) 0x71B90000 Library C:\Windows\system32\VssTrace.DLL (Microsoft® Volume Shadow Copy Service Tracing Library/Microsoft Corporation) 0x73810000 Library C:\Windows\system32\samcli.dll (Security Accounts Manager Client DLL/Microsoft Corporation) 0x73E80000 Library C:\Windows\system32\PROPSYS.dll (Microsoft Property System/Microsoft Corporation) 0x746A0000 Library C:\Windows\system32\wbem\wbemcore.dll (Windows Management Instrumentation/Microsoft Corporation) 0x70CC0000 Library C:\Windows\system32\wbem\esscli.dll (WMI/Microsoft Corporation) 0x70C70000 Library C:\Windows\system32\wbem\FastProx.dll (WMI Custom Marshaller/Microsoft Corporation) 0x70E90000 Library C:\Windows\system32\NTDSAPI.dll (Active Directory Domain Services API/Microsoft Corporation) 0x70E20000 Library C:\Windows\system32\wbem\wbemsvc.dll (WMI/Microsoft Corporation) 0x70C60000 Library C:\Windows\system32\wbem\wmiutils.dll (WMI/Microsoft Corporation) 0x70920000 Library c:\windows\system32\iphlpsvc.dll (Service that offers IPv6 connectivity over an IPv4 network./Microsoft Corporation) 0x706B0000 Library c:\windows\system32\FirewallAPI.dll (Windows Firewall API/Microsoft Corporation) 0x74C80000 Library c:\windows\system32\rtutils.dll (Routing Utilities/Microsoft Corporation) 0x73D00000 Library c:\windows\system32\sqmapi.dll (SQM Client/Microsoft Corporation) 0x70670000 Library c:\windows\system32\WDSCORE.dll (Panther Engine Module/Microsoft Corporation) 0x70610000 Library C:\Windows\system32\wbem\repdrvfs.dll (WMI Repository Driver/Microsoft Corporation) 0x705C0000 Library C:\Windows\system32\devrtl.DLL (Device Management Run Time Library/Microsoft Corporation) 0x74FB0000 Library c:\windows\system32\srvsvc.dll (Server Service DLL/Microsoft Corporation) 0x70430000 Library c:\windows\system32\browser.dll (Computer Browser Service DLL/Microsoft Corporation) 0x70410000 Library C:\Windows\system32\SSCORE.DLL (Server Service Core DLL/Microsoft Corporation) 0x70400000 Library C:\Windows\system32\CLUSAPI.DLL (Cluster API Library/Microsoft Corporation) 0x703C0000 Library C:\Windows\system32\cryptdll.dll (Cryptography Manager/Microsoft Corporation) 0x75420000 Library C:\Windows\system32\RESUTILS.DLL (Microsoft Cluster Resource Utility DLL/Microsoft Corporation) 0x703A0000 Library C:\Windows\System32\netprofm.dll (Network List Manager/Microsoft Corporation) 0x70260000 Library C:\Windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x750B0000 Library C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft® Windows Live ID Namespace Provider/Microsoft Corporation) 0x71640000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x77840000 Library C:\Program Files\Bonjour\mdnsNSP.dll (Bonjour Namespace Provider/Apple Inc.) 0x71610000 Library C:\Windows\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x71600000 Library C:\Windows\system32\wbem\wmiprvsd.dll (WMI/Microsoft Corporation) 0x701E0000 Library C:\Windows\system32\NCObjAPI.DLL (Microsoft Corporation) 0x70320000 Library C:\Windows\system32\wbem\wbemess.dll (WMI/Microsoft Corporation) 0x70180000 Library C:\Windows\system32\SXS.DLL (Fusion 2.5/Microsoft Corporation) 0x757C0000 Library C:\Windows\System32\npmproxy.dll (Network List Manager Proxy/Microsoft Corporation) 0x70FC0000 Library c:\windows\system32\aelupsvc.dll (Application Experience Service/Microsoft Corporation) 0x6F8C0000 Library c:\windows\system32\certprop.dll (Microsoft Smartcard Certificate Propagation Service/Microsoft Corporation) 0x6F730000 Library c:\windows\system32\WinSCard.dll (Microsoft Smart Card API/Microsoft Corporation) 0x6F6A0000 Library c:\windows\system32\WMsgAPI.dll (WinLogon IPC Client/Microsoft Corporation) 0x755E0000 Library c:\windows\system32\sessenv.dll (Remote Desktop Configuration service/Microsoft Corporation) 0x6F640000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x747E0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75750000 Library C:\Windows\system32\tschannel.dll (Task Scheduler Proxy/Microsoft Corporation) 0x6FA50000 Library C:\Windows\system32\wbem\ncprov.dll (Non-COM WMI Event Provision APIs/Microsoft Corporation) 0x699B0000 Library c:\windows\system32\qmgr.dll (Background Intelligent Transfer Service/Microsoft Corporation) 0x673C0000 Library c:\windows\system32\bitsperf.dll (Perfmon Counter Access/Microsoft Corporation) 0x673B0000 Library C:\Windows\system32\bitsigd.dll (Background Intelligent Transfer Service IGD Support/Microsoft Corporation) 0x673A0000 Library C:\Windows\system32\upnp.dll (UPnP Control Point API/Microsoft Corporation) 0x69910000 Library C:\Windows\system32\WINHTTP.dll (Windows HTTP Services/Microsoft Corporation) 0x71E20000 Library C:\Windows\system32\webio.dll (Web Transfer Protocols API/Microsoft Corporation) 0x71DC0000 Library C:\Windows\system32\SSDPAPI.dll (SSDP Client API DLL/Microsoft Corporation) 0x73580000 Library C:\Windows\system32\peerdist.dll (BranchCache Client Library/Microsoft Corporation) 0x73CD0000 Library C:\Windows\System32\msxml3.dll (MSXML 3.0 SP11/Microsoft Corporation) 0x707B0000 Library C:\Windows\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x76270000 Library C:\Windows\system32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 0x77500000 Library c:\windows\system32\wuaueng.dll (Windows Update Agent/Microsoft Corporation) 0x657F0000 Library c:\windows\system32\ESENT.dll (Extensible Storage Engine for Microsoft® Windows®/Microsoft Corporation) 0x6FAF0000 Library c:\windows\system32\WINSPOOL.DRV (Windows Spooler Driver/Microsoft Corporation) 0x74050000 Library c:\windows\system32\Cabinet.dll (Microsoft® Cabinet File API/Microsoft Corporation) 0x6F970000 Library c:\windows\system32\mspatcha.dll (Microsoft File Patch Application API/Microsoft Corporation) 0x67370000 Library C:\Windows\system32\wer.dll (Windows Error Reporting DLL/Microsoft Corporation) 0x6F6D0000 Library C:\Windows\system32\RasApi32.dll (Remote Access API/Microsoft Corporation) 0x6C0C0000 Library C:\Windows\system32\rasman.dll (Remote Access Connection Manager/Microsoft Corporation) 0x6D060000 Library C:\Windows\system32\wups2.dll (Windows Update client proxy stub 2/Microsoft Corporation) 0x693A0000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 1356 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00740000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library c:\program files\hp\digital imaging\bin\hpqddsvc.dll (HP CUE DeviceDiscovery Service/Hewlett-Packard Co.) 0x10000000 Library c:\program files\hp\digital imaging\bin\hpqddcmn.dll (HP CUE DeviceDiscovery Common Library/Hewlett-Packard Co.) 0x3AF00000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\system32\WINSPOOL.DRV (Windows Spooler Driver/Microsoft Corporation) 0x74050000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4926_none_508ed732bcbc0e5 a\MSVCP90.dll (Microsoft® C++ Runtime Library/Microsoft Corporation) 0x71920000 Library C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4926_none_508ed732bcbc0e5 a\MSVCR90.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x71870000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Process C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwssvc.exe (My Web Search Bar/MyWebSearch.com) 1504 Library C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwssvc.exe (My Web Search Bar/MyWebSearch.com) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 1596 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00740000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library c:\windows\system32\es.dll (COM+/Microsoft Corporation) 0x73850000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library c:\windows\system32\nsisvc.dll (Network Store Interface RPC server/Microsoft Corporation) 0x737E0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library c:\windows\system32\fdphost.dll (Function Discovery Provider host service/Microsoft Corporation) 0x73680000 Library C:\Windows\system32\fdwsd.dll (Function Discovery WS Discovery Provider Dll/Microsoft Corporation) 0x73660000 Library C:\Windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73CA0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x737C0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library C:\Windows\system32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75340000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\MLANG.dll (Multi Language Support DLL/Microsoft Corporation) 0x73630000 Library C:\Windows\system32\wsdapi.dll (Web Services for Devices API DLL/Microsoft Corporation) 0x735B0000 Library C:\Windows\system32\webservices.dll (Windows Web Services Runtime/Microsoft Corporation) 0x71AC0000 Library C:\Windows\system32\FirewallAPI.dll (Windows Firewall API/Microsoft Corporation) 0x74C80000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\system32\WINHTTP.dll (Windows HTTP Services/Microsoft Corporation) 0x71E20000 Library C:\Windows\system32\webio.dll (Web Transfer Protocols API/Microsoft Corporation) 0x71DC0000 Library C:\Windows\system32\fdssdp.dll (Function Discovery SSDP Provider Dll/Microsoft Corporation) 0x73590000 Library C:\Windows\system32\SSDPAPI.dll (SSDP Client API DLL/Microsoft Corporation) 0x73580000 Library C:\Windows\system32\SXS.DLL (Fusion 2.5/Microsoft Corporation) 0x757C0000 Library C:\Windows\system32\fdproxy.dll (Function Discovery Proxy Dll/Microsoft Corporation) 0x716F0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x751E0000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74DB0000 Library C:\Windows\system32\dsrole.dll (DS Role Client DLL/Microsoft Corporation) 0x738B0000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\FunDisc.dll (Function Discovery Dll/Microsoft Corporation) 0x71A80000 Library C:\Windows\System32\msxml6.dll (MSXML 6.0 SP3/Microsoft Corporation) 0x71700000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library c:\windows\system32\netprofm.dll (Network List Manager/Microsoft Corporation) 0x70260000 Library c:\windows\system32\nlaapi.dll (Network Location Awareness 2/Microsoft Corporation) 0x73CC0000 Library C:\Windows\System32\npmproxy.dll (Network List Manager Proxy/Microsoft Corporation) 0x70FC0000 Library c:\windows\system32\wdi.dll (Windows Diagnostic Infrastructure/Microsoft Corporation) 0x70E40000 Library C:\Windows\system32\perftrack.dll (Microsoft Performance PerfTrack/Microsoft Corporation) 0x6F750000 Library C:\Windows\system32\wer.dll (Windows Error Reporting DLL/Microsoft Corporation) 0x6F6D0000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74220000 Library C:\Windows\system32\AEPIC.dll (Application Experience Program Cache/Microsoft Corporation) 0x6F680000 Library C:\Windows\system32\sfc.dll (Windows File Protection/Microsoft Corporation) 0x70940000 Library C:\Windows\system32\sfc_os.DLL (Windows File Protection/Microsoft Corporation) 0x708F0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75750000 Library C:\Windows\system32\peerdist.dll (BranchCache Client Library/Microsoft Corporation) 0x73CD0000 Library C:\Windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x753A0000 Library C:\Windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x750B0000 Library C:\Windows\system32\napinsp.dll (E-mail Naming Shim Provider/Microsoft Corporation) 0x6ED30000 Library C:\Windows\system32\pnrpnsp.dll (PNRP Name Space Provider/Microsoft Corporation) 0x6ED10000 Library C:\Windows\System32\winrnr.dll (LDAP RnR Provider DLL/Microsoft Corporation) 0x6ECF0000 Library C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft® Windows Live ID Namespace Provider/Microsoft Corporation) 0x71640000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x77840000 Library C:\Windows\system32\wshbth.dll (Windows Sockets Helper DLL/Microsoft Corporation) 0x6ED00000 Library C:\Program Files\Bonjour\mdnsNSP.dll (Bonjour Namespace Provider/Apple Inc.) 0x71610000 Library C:\Windows\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x71600000 Library C:\Windows\System32\fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x721E0000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x737F0000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x721C0000 Library C:\Windows\system32\bcryptprimitives.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x74ED0000 Library C:\Windows\system32\XmlLite.dll (Microsoft XmlLite Library/Microsoft Corporation) 0x741F0000 Library C:\Windows\system32\propsys.dll (Microsoft Property System/Microsoft Corporation) 0x746A0000 Library C:\Program Files\Internet Explorer\ieproxy.dll (IE ActiveX Interface Marshaling Library/Microsoft Corporation) 0x69980000 Process C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 1716 Library C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00740000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library c:\windows\system32\hpzinw12.dll (Dot4Net Module/Hewlett-Packard) 0x00400000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library c:\windows\system32\WSOCK32.dll (Windows Socket 32-Bit DLL/Microsoft Corporation) 0x71E10000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library c:\windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\System32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\System32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 1744 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00740000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library c:\windows\system32\dnsrslvr.dll (DNS Caching Resolver Service/Microsoft Corporation) 0x73710000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library c:\windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x750B0000 Library c:\windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library C:\Windows\system32\Fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x721E0000 Library C:\Windows\System32\dnsext.dll (DNS extension DLL/Microsoft Corporation) 0x73800000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74DB0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x751E0000 Library C:\Windows\system32\iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x737C0000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x737F0000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x721C0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library c:\windows\system32\wkssvc.dll (Workstation Service DLL/Microsoft Corporation) 0x71E90000 Library c:\windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x73EA0000 Library c:\windows\system32\netjoin.dll (Domain Join DLL/Microsoft Corporation) 0x75300000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library c:\windows\system32\cryptsvc.dll (Cryptographic Services/Microsoft Corporation) 0x71D40000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\VSSAPI.DLL (Microsoft® Volume Shadow Copy Requestor/Writer Services API DLL/Microsoft Corporation) 0x71B90000 Library C:\Windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73CA0000 Library C:\Windows\system32\VssTrace.DLL (Microsoft® Volume Shadow Copy Service Tracing Library/Microsoft Corporation) 0x73810000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\samcli.dll (Security Accounts Manager Client DLL/Microsoft Corporation) 0x73E80000 Library C:\Windows\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x747A0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\es.dll (COM+/Microsoft Corporation) 0x73850000 Library C:\Windows\system32\PROPSYS.dll (Microsoft Property System/Microsoft Corporation) 0x746A0000 Library c:\windows\system32\nlasvc.dll (Network Location Awareness 2/Microsoft Corporation) 0x716A0000 Library c:\windows\system32\wevtapi.dll (Eventing Consumption and Configuration API/Microsoft Corporation) 0x753D0000 Library c:\windows\system32\ncsi.dll (Network Connectivity Status Indicator/Microsoft Corporation) 0x71670000 Library c:\windows\system32\WINHTTP.dll (Windows HTTP Services/Microsoft Corporation) 0x71E20000 Library c:\windows\system32\webio.dll (Web Transfer Protocols API/Microsoft Corporation) 0x71DC0000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\system32\ssdpapi.dll (SSDP Client API DLL/Microsoft Corporation) 0x73580000 Library C:\Windows\system32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x73E90000 Library C:\Windows\system32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75340000 Library C:\Windows\system32\bcryptprimitives.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x74ED0000 Library c:\windows\system32\termsrv.dll (Remote Desktop Session Host Server Remote Connections Manager/Microsoft Corporation) 0x71040000 Library c:\windows\system32\ICAAPI.dll (DLL Interface to TermDD Device Driver/Microsoft Corporation) 0x70F30000 Library C:\Windows\system32\lsmproxy.dll (LSM interfaces proxy Dll/Microsoft Corporation) 0x70E10000 Library C:\Windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x738A0000 Library C:\Windows\system32\REGAPI.dll (Registry Configuration APIs/Microsoft Corporation) 0x70DE0000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\tlscsp.dll (Microsoft® Remote Desktop Services Cryptographic Utility/Microsoft Corporation) 0x70D90000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Library C:\Windows\system32\rdpwsx.DLL (RDP Extension DLL/Microsoft Corporation) 0x70900000 Library C:\Windows\system32\rdpcorekmts.dll (TS (KM) RDPCore DLL/Microsoft Corporation) 0x70150000 Library C:\Windows\system32\peerdist.dll (BranchCache Client Library/Microsoft Corporation) 0x73CD0000 Library C:\Windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x753A0000 Library C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft® Windows Live ID Namespace Provider/Microsoft Corporation) 0x71640000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x77840000 Library C:\Program Files\Bonjour\mdnsNSP.dll (Bonjour Namespace Provider/Apple Inc.) 0x71610000 Library C:\Windows\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x71600000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x740D0000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75820000 Library C:\Windows\system32\ESENT.dll (Extensible Storage Engine for Microsoft® Windows®/Microsoft Corporation) 0x6FAF0000 Process C:\Windows\System32\spoolsv.exe (Spooler SubSystem App/Microsoft Corporation) 1848 Library C:\Windows\System32\spoolsv.exe (Spooler SubSystem App/Microsoft Corporation) 0x00A80000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\System32\POWRPROF.dll (Power Profile Helper DLL/Microsoft Corporation) 0x73BC0000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library C:\Windows\System32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x750B0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\System32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\System32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\System32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x738A0000 Library C:\Windows\System32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\System32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\System32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\System32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\System32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x737C0000 Library C:\Windows\System32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x751E0000 Library C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft® Windows Live ID Namespace Provider/Microsoft Corporation) 0x71640000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x77840000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Program Files\Bonjour\mdnsNSP.dll (Bonjour Namespace Provider/Apple Inc.) 0x71610000 Library C:\Windows\System32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x71600000 Library C:\Windows\System32\fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x721E0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\umb.dll (User Mode Bus Driver Interface Dll/Microsoft Corporation) 0x71860000 Library C:\Windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73CA0000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\System32\localspl.dll (Local Spooler DLL/Microsoft Corporation) 0x71540000 Library C:\Windows\System32\SPOOLSS.DLL (Spooler SubSystem DLL/Microsoft Corporation) 0x71530000 Library C:\Windows\System32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x75600000 Library C:\Windows\system32\winspool.drv (Windows Spooler Driver/Microsoft Corporation) 0x74050000 Library C:\Windows\System32\PrintIsolationProxy.dll (Print Sandbox COM Proxy Stub/Microsoft Corporation) 0x71520000 Library C:\Windows\System32\CNBLM4.DLL (Canon Inkjet Printer Driver/CANON INC.) 0x714D0000 Library C:\Windows\System32\hpf3l083.dll (LanguageMonitor/Hewlett-Packard Company) 0x714A0000 Library C:\Windows\System32\FXSMON.DLL (Microsoft Fax Print Monitor/Microsoft Corporation) 0x71490000 Library C:\Windows\System32\tcpmon.dll (Standard TCP/IP Port Monitor DLL/Microsoft Corporation) 0x71460000 Library C:\Windows\System32\snmpapi.dll (SNMP Utility Library/Microsoft Corporation) 0x71450000 Library C:\Windows\System32\wsnmp32.dll (Microsoft WinSNMP v2.0 Manager API/Microsoft Corporation) 0x71440000 Library C:\Windows\System32\msxml6.dll (MSXML 6.0 SP3/Microsoft Corporation) 0x71700000 Library C:\Windows\System32\usbmon.dll (Standard Dynamic Printing Port Monitor DLL/Microsoft Corporation) 0x71430000 Library C:\Windows\system32\wls0wndh.dll (Session0 Viewer Window Hook DLL/Microsoft Corporation) 0x71D70000 Library C:\Windows\System32\WSDMon.dll (WSD Printer Port Monitor/Microsoft Corporation) 0x71400000 Library C:\Windows\System32\wsdapi.dll (Web Services for Devices API DLL/Microsoft Corporation) 0x735B0000 Library C:\Windows\System32\webservices.dll (Windows Web Services Runtime/Microsoft Corporation) 0x71AC0000 Library C:\Windows\System32\FirewallAPI.dll (Windows Firewall API/Microsoft Corporation) 0x74C80000 Library C:\Windows\System32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\system32\FunDisc.dll (Function Discovery Dll/Microsoft Corporation) 0x71A80000 Library C:\Windows\system32\fdPnp.dll (Pnp Provider Dll/Microsoft Corporation) 0x713F0000 Library C:\Windows\system32\spool\PRTPROCS\W32X86\winprint.dll (Windows Print Processor DLL/Microsoft Corporation) 0x713E0000 Library C:\Windows\System32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library C:\Windows\System32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\System32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74DB0000 Library C:\Windows\system32\spool\PRTPROCS\W32X86\CNBPP4.DLL (Canon Inkjet Printer Driver/CANON INC.) 0x713C0000 Library C:\Windows\System32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x740D0000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\system32\spool\PRTPROCS\W32X86\hpfpp083.dll (Hewlett-Packard Corporation) 0x71360000 Library C:\Windows\System32\dsrole.dll (DS Role Client DLL/Microsoft Corporation) 0x738B0000 Library C:\Windows\System32\win32spl.dll (Client Side Rendering Print Provider/Microsoft Corporation) 0x70F40000 Library C:\Windows\System32\DEVRTL.dll (Device Management Run Time Library/Microsoft Corporation) 0x74FB0000 Library C:\Windows\System32\SPINF.dll (Windows SPINF/Microsoft Corporation) 0x74DF0000 Library C:\Windows\System32\inetpp.dll (Internet Print Provider DLL/Microsoft Corporation) 0x70E60000 Library C:\Windows\System32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\System32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\System32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75820000 Library C:\Windows\System32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x73EA0000 Library C:\Windows\System32\cscapi.dll (Offline Files Win32 API/Microsoft Corporation) 0x70C40000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 1888 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00740000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library c:\windows\system32\bfe.dll (Base Filtering Engine/Microsoft Corporation) 0x71F40000 Library c:\windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x753A0000 Library c:\windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x738A0000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\pcwum.dll (Performance Counters for Windows Native DLL/Microsoft Corporation) 0x74D80000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library c:\windows\system32\mpssvc.dll (Microsoft Protection Service/Microsoft Corporation) 0x71EB0000 Library c:\windows\system32\FirewallAPI.dll (Windows Firewall API/Microsoft Corporation) 0x74C80000 Library c:\windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library c:\windows\system32\fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x721E0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74DB0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x737C0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x737F0000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x721C0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library C:\Windows\system32\wfapigp.dll (Windows Firewall GPO Helper dll/Microsoft Corporation) 0x71E80000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Library c:\windows\system32\dps.dll (WDI Diagnostic Policy Service/Microsoft Corporation) 0x71CB0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\taskschd.dll (Task Scheduler COM API/Microsoft Corporation) 0x73900000 Library C:\Windows\system32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75340000 Library C:\Windows\system32\wdi.dll (Windows Diagnostic Infrastructure/Microsoft Corporation) 0x70E40000 Library C:\Windows\System32\netprofm.dll (Network List Manager/Microsoft Corporation) 0x70260000 Library C:\Windows\System32\nlaapi.dll (Network Location Awareness 2/Microsoft Corporation) 0x73CC0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\System32\npmproxy.dll (Network List Manager Proxy/Microsoft Corporation) 0x70FC0000 Library C:\Windows\system32\diagperf.dll (Microsoft Performance Diagnostics/Microsoft Corporation) 0x6F7E0000 Library C:\Windows\system32\pnpts.dll (PlugPlay Troubleshooter/Microsoft Corporation) 0x6F660000 Library C:\Windows\system32\wdiasqmmodule.dll (Adaptive SQM WDI Plugin/Microsoft Corporation) 0x6F630000 Library C:\Windows\system32\radardt.dll (Microsoft Windows Resource Exhaustion Detector/Microsoft Corporation) 0x6F610000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x740D0000 Process C:\Windows\system32\AERTSrv.exe (Andrea filters APO access service (32-bit)/Andrea Electronics Corporation) 1976 Library C:\Windows\system32\AERTSrv.exe (Andrea filters APO access service (32-bit)/Andrea Electronics Corporation) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Process C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 2008 Library C:\Windows\System32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00740000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library c:\program files\common files\akamai\rswin_3746.dll 0x10000000 Library C:\Windows\system32\WINHTTP.dll (Windows HTTP Services/Microsoft Corporation) 0x71E20000 Library C:\Windows\system32\webio.dll (Web Transfer Protocols API/Microsoft Corporation) 0x71DC0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x740D0000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x77840000 Library C:\Windows\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x77400000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\Normaliz.dll (Unicode Normalization DLL/Microsoft Corporation) 0x76160000 Library C:\Windows\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x76270000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 0x77500000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\system32\pdh.dll (Windows Performance Data Helper DLL/Microsoft Corporation) 0x71D80000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x737C0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library C:\Windows\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x73EB0000 Library C:\Windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x73EA0000 Library C:\Windows\system32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x75600000 Library C:\Windows\system32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x73E90000 Library C:\Windows\System32\LOGONCLI.DLL (Net Logon Client DLL/Microsoft Corporation) 0x75080000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\System32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\System32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\wls0wndh.dll (Session0 Viewer Window Hook DLL/Microsoft Corporation) 0x71D70000 Library C:\Windows\System32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75820000 Library C:\Windows\System32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x737F0000 Library C:\Windows\System32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x721C0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x751E0000 Library C:\Windows\System32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x750B0000 Library C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft® Windows Live ID Namespace Provider/Microsoft Corporation) 0x71640000 Library C:\Program Files\Bonjour\mdnsNSP.dll (Bonjour Namespace Provider/Apple Inc.) 0x71610000 Library C:\Windows\System32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x71600000 Library C:\Windows\System32\fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x721E0000 Library C:\Windows\System32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\System32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\System32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Library C:\Windows\system32\NLAapi.dll (Network Location Awareness 2/Microsoft Corporation) 0x73CC0000 Library C:\Windows\system32\napinsp.dll (E-mail Naming Shim Provider/Microsoft Corporation) 0x6ED30000 Library C:\Windows\system32\pnrpnsp.dll (PNRP Name Space Provider/Microsoft Corporation) 0x6ED10000 Library C:\Windows\System32\winrnr.dll (LDAP RnR Provider DLL/Microsoft Corporation) 0x6ECF0000 Library C:\Windows\system32\wshbth.dll (Windows Sockets Helper DLL/Microsoft Corporation) 0x6ED00000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\FirewallAPI.dll (Windows Firewall API/Microsoft Corporation) 0x74C80000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Process C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Mobile Device Service/Apple Inc.) 2032 Library C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Mobile Device Service/Apple Inc.) 0x00E70000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\WSOCK32.dll (Windows Socket 32-Bit DLL/Microsoft Corporation) 0x71E10000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x740D0000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75820000 Process C:\Windows\system32\sppsvc.exe (Microsoft Software Protection Platform Service/Microsoft Corporation) 2128 Library C:\Windows\system32\sppsvc.exe (Microsoft Software Protection Platform Service/Microsoft Corporation) 0x00460000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\sppwinob.dll (Software Protection Platform Windows Plugin/Microsoft Corporation) 0x70B90000 Library C:\Windows\system32\sppobjs.dll (Software Protection Platform Plugins/Microsoft Corporation) 0x6FF80000 Library C:\Windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x750B0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 2160 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00740000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library c:\windows\system32\wiaservc.dll (Still Image Devices Service/Microsoft Corporation) 0x712B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library c:\windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\wiatrace.dll (WIA Tracing/Microsoft Corporation) 0x712A0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\system32\msv1_0.DLL (Microsoft Authentication Package v1.0/Microsoft Corporation) 0x75190000 Library C:\Windows\system32\cryptdll.dll (Cryptography Manager/Microsoft Corporation) 0x75420000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Process C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft® Windows Live ID Service/Microsoft Corporation) 2268 Library C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft® Windows Live ID Service/Microsoft Corporation) 0x00200000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\SensApi.dll (SENS Connectivity API DLL/Microsoft Corporation) 0x71510000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x77840000 Library C:\Program Files\Common Files\Microsoft Shared\Windows Live\sqmapi.dll (SQM Client/Microsoft Corporation) 0x70DB0000 Library C:\Windows\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x73EB0000 Library C:\Windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x73EA0000 Library C:\Windows\system32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x75600000 Library C:\Windows\system32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x73E90000 Library C:\Windows\system32\SAMCLI.DLL (Security Accounts Manager Client DLL/Microsoft Corporation) 0x73E80000 Library C:\Windows\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\WINHTTP.dll (Windows HTTP Services/Microsoft Corporation) 0x71E20000 Library C:\Windows\system32\webio.dll (Web Transfer Protocols API/Microsoft Corporation) 0x71DC0000 Library C:\Windows\system32\iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x737C0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NTDSAPI.dll (Active Directory Domain Services API/Microsoft Corporation) 0x70E20000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x740D0000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\System32\msxml3.dll (MSXML 3.0 SP11/Microsoft Corporation) 0x707B0000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x747E0000 Library C:\Windows\system32\propsys.dll (Microsoft Property System/Microsoft Corporation) 0x746A0000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library C:\Windows\system32\actxprxy.dll (ActiveX Interface Marshaling Library/Microsoft Corporation) 0x70740000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75750000 Library C:\Program Files\FileZilla FTP Client\fzshellext.dll 0x67080000 Library C:\Program Files\ThinkPad\Bluetooth Software\btncopy.dll (BTNCopy Module/Broadcom Corporation.) 0x10000000 Library C:\Windows\system32\cscapi.dll (Offline Files Win32 API/Microsoft Corporation) 0x70C40000 Library C:\Windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x738A0000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75820000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Library C:\Windows\system32\mssprxy.dll (Microsoft Search Proxy/Microsoft Corporation) 0x70C50000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x737F0000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x721C0000 Library C:\Program Files\Common Files\Microsoft Shared\Windows Live\LogicalDevice.dll (Microsoft® Windows Live ID Logical Device/Microsoft Corporation) 0x6F370000 Library C:\Windows\system32\SXS.DLL (Fusion 2.5/Microsoft Corporation) 0x757C0000 Library C:\Windows\system32\dssenh.dll (Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider/Microsoft Corporation) 0x6F2C0000 Library C:\Windows\system32\peerdist.dll (BranchCache Client Library/Microsoft Corporation) 0x73CD0000 Library C:\Windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x753A0000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x751E0000 Library C:\Windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x750B0000 Library C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft® Windows Live ID Namespace Provider/Microsoft Corporation) 0x71640000 Library C:\Program Files\Bonjour\mdnsNSP.dll (Bonjour Namespace Provider/Apple Inc.) 0x71610000 Library C:\Windows\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x71600000 Library C:\Windows\System32\fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x721E0000 Library C:\Windows\system32\schannel.DLL (TLS / SSL Security Provider/Microsoft Corporation) 0x75040000 Library C:\Windows\system32\ncrypt.dll (Windows cryptographic library/Microsoft Corporation) 0x75360000 Library C:\Windows\system32\bcrypt.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x75340000 Library C:\Windows\system32\bcryptprimitives.dll (Windows Cryptographic Primitives Library/Microsoft Corporation) 0x74ED0000 Library C:\Windows\system32\GPAPI.dll (Group Policy Client API/Microsoft Corporation) 0x74DB0000 Library C:\Windows\system32\cryptnet.dll (Crypto Network Related API/Microsoft Corporation) 0x6F990000 Library C:\Windows\system32\Cabinet.dll (Microsoft® Cabinet File API/Microsoft Corporation) 0x6F970000 Library C:\Windows\system32\DEVRTL.dll (Device Management Run Time Library/Microsoft Corporation) 0x74FB0000
Post #14
Process C:\Windows\system32\SearchProtocolHost.exe (Microsoft Windows Search Protocol Host/Microsoft Corporation) 2356 Library C:\Windows\system32\SearchProtocolHost.exe (Microsoft Windows Search Protocol Host/Microsoft Corporation) 0x00590000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\TQUERY.DLL (tquery.dll/Microsoft Corporation) 0x6FE00000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\MSSHooks.dll (MSSHooks.dll/Microsoft Corporation) 0x6FA40000 Library C:\Windows\system32\IMM32.dll (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\Msidle.dll (User Idle Monitor/Microsoft Corporation) 0x71000000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\mssprxy.dll (Microsoft Search Proxy/Microsoft Corporation) 0x70C50000 Library C:\Windows\system32\mssph.dll (Microsoft Search Protocol Handler/Microsoft Corporation) 0x6EA80000 Library C:\Windows\system32\MAPI32.dll (Extended MAPI 1.0 for Windows NT/Microsoft Corporation) 0x6F950000 Library C:\Windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x753A0000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x747E0000 Library C:\Windows\system32\propsys.dll (Microsoft Property System/Microsoft Corporation) 0x746A0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75750000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\System32\gameux.dll (Games Explorer/Microsoft Corporation) 0x73140000 Library C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf 861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) 0x744D0000 Library C:\Windows\System32\XmlLite.dll (Microsoft XmlLite Library/Microsoft Corporation) 0x741F0000 Library C:\Windows\System32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74660000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\System32\wer.dll (Windows Error Reporting DLL/Microsoft Corporation) 0x6F6D0000 Library C:\Windows\system32\actxprxy.dll (ActiveX Interface Marshaling Library/Microsoft Corporation) 0x70740000 Library C:\Windows\System32\Wpc.dll (WPC Settings Library/Microsoft Corporation) 0x653C0000 Library C:\Windows\System32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library C:\Windows\System32\wevtapi.dll (Eventing Consumption and Configuration API/Microsoft Corporation) 0x753D0000 Library C:\Windows\System32\msxml6.dll (MSXML 6.0 SP3/Microsoft Corporation) 0x71700000 Library C:\Windows\system32\samcli.dll (Security Accounts Manager Client DLL/Microsoft Corporation) 0x73E80000 Library C:\Windows\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x747A0000 Library C:\Windows\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x77400000 Library C:\Windows\system32\Normaliz.dll (Unicode Normalization DLL/Microsoft Corporation) 0x76160000 Library C:\Windows\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x76270000 Library C:\Windows\system32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 0x77500000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\ws2_32.DLL (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\dnsapi.DLL (DNS Client API DLL/Microsoft Corporation) 0x750B0000 Library C:\Windows\system32\iphlpapi.DLL (IP Helper API/Microsoft Corporation) 0x737C0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library C:\Windows\system32\MPR.dll (Multiple Provider Router DLL/Microsoft Corporation) 0x70790000 Library C:\Windows\system32\LINKINFO.dll (Windows Volume Tracking/Microsoft Corporation) 0x74B40000 Library C:\Windows\System32\ieframe.dll (Internet Browser/Microsoft Corporation) 0x668F0000 Library C:\Windows\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x77840000 Library C:\Windows\System32\OLEACC.dll (Active Accessibility Core Component/Microsoft Corporation) 0x73B40000 Library C:\Windows\system32\MLANG.dll (Multi Language Support DLL/Microsoft Corporation) 0x73630000 Process C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (AutoUpater Service Module/Yahoo! Inc.) 2432 Library C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (AutoUpater Service Module/Yahoo! Inc.) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\imagehlp.dll (Windows NT Image Helper/Microsoft Corporation) 0x77850000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\WINHTTP.dll (Windows HTTP Services/Microsoft Corporation) 0x71E20000 Library C:\Windows\system32\webio.dll (Web Transfer Protocols API/Microsoft Corporation) 0x71DC0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75750000 Library C:\Windows\AppPatch\AcGenral.DLL (Windows Compatibility DLL/Microsoft Corporation) 0x70970000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74660000 Library C:\Windows\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x70C00000 Library C:\Windows\system32\samcli.dll (Security Accounts Manager Client DLL/Microsoft Corporation) 0x73E80000 Library C:\Windows\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x70950000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\system32\sfc.dll (Windows File Protection/Microsoft Corporation) 0x70940000 Library C:\Windows\system32\sfc_os.DLL (Windows File Protection/Microsoft Corporation) 0x708F0000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74220000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library C:\Windows\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x76270000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 0x77500000 Library C:\Windows\system32\MPR.dll (Multiple Provider Router DLL/Microsoft Corporation) 0x70790000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x747E0000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 2460 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00740000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library c:\windows\system32\sdrsvc.dll (Microsoft® Windows Backup Service/Microsoft Corporation) 0x65310000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library c:\windows\system32\SXSHARED.dll (Microsoft® Windows SX Shared Library/Microsoft Corporation) 0x65300000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\sxproxy.dll (Microsoft® Windows System Protection Proxy Library/Microsoft Corporation) 0x652F0000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Process C:\Windows\system32\taskhost.exe (Host Process for Windows Tasks/Microsoft Corporation) 2480 Library C:\Windows\system32\taskhost.exe (Host Process for Windows Tasks/Microsoft Corporation) 0x00480000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74660000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74220000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\System32\HotStartUserAgent.dll (Microsoft Windows HotStart User Agent/Microsoft Corporation) 0x70730000 Library C:\Windows\System32\PlaySndSrv.dll (PlaySound Service/Microsoft Corporation) 0x70560000 Library C:\Windows\system32\MsCtfMonitor.dll (MsCtfMonitor DLL/Microsoft Corporation) 0x70500000 Library C:\Windows\system32\MSUTB.dll (MSUTB Server DLL/Microsoft Corporation) 0x704D0000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75820000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x740D0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x70C00000 Library C:\Windows\system32\slc.dll (Software Licensing Client Dll/Microsoft Corporation) 0x738A0000 Library C:\Windows\system32\dimsjob.dll (DIMS Job DLL/Microsoft Corporation) 0x6EBD0000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\taskschd.dll (Task Scheduler COM API/Microsoft Corporation) 0x73900000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\System32\netprofm.dll (Network List Manager/Microsoft Corporation) 0x70260000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\System32\nlaapi.dll (Network Location Awareness 2/Microsoft Corporation) 0x73CC0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\System32\npmproxy.dll (Network List Manager Proxy/Microsoft Corporation) 0x70FC0000 Library C:\Windows\system32\dsrole.dll (DS Role Client DLL/Microsoft Corporation) 0x738B0000 Process C:\Windows\system32\SearchIndexer.exe (Microsoft Windows Search Indexer/Microsoft Corporation) 2844 Library C:\Windows\system32\SearchIndexer.exe (Microsoft Windows Search Indexer/Microsoft Corporation) 0x00870000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\TQUERY.DLL (tquery.dll/Microsoft Corporation) 0x6FE00000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\MSSRCH.DLL (mssrch.dll/Microsoft Corporation) 0x6FCA0000 Library C:\Windows\system32\ESENT.dll (Extensible Storage Engine for Microsoft® Windows®/Microsoft Corporation) 0x6FAF0000 Library C:\Windows\system32\IMM32.dll (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\psapi.dll (Process Status Helper/Microsoft Corporation) 0x77840000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\Msidle.dll (User Idle Monitor/Microsoft Corporation) 0x71000000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\mssprxy.dll (Microsoft Search Proxy/Microsoft Corporation) 0x70C50000 Library C:\Windows\system32\propsys.dll (Microsoft Property System/Microsoft Corporation) 0x746A0000 Library C:\Windows\system32\en-us\tQuery.dll.mui (tquery.dll/Microsoft Corporation) 0x700E0000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Library C:\Windows\system32\VSSAPI.DLL (Microsoft® Volume Shadow Copy Requestor/Writer Services API DLL/Microsoft Corporation) 0x71B90000 Library C:\Windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x73CA0000 Library C:\Windows\system32\VssTrace.DLL (Microsoft® Volume Shadow Copy Service Tracing Library/Microsoft Corporation) 0x73810000 Library C:\Windows\system32\samcli.dll (Security Accounts Manager Client DLL/Microsoft Corporation) 0x73E80000 Library C:\Windows\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x747A0000 Library C:\Windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x73EA0000 Library C:\Windows\system32\es.dll (COM+/Microsoft Corporation) 0x73850000 Library C:\Windows\system32\WTSAPI32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x740D0000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75820000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x74DD0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75750000 Library C:\Windows\system32\SXS.DLL (Fusion 2.5/Microsoft Corporation) 0x757C0000 Library C:\Windows\System32\NaturalLanguage6.dll (Natural Language Development Platform 6/Microsoft Corporation) 0x69240000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\System32\NLSData0009.dll (Microsoft English Natural Language Server Data and Code/Microsoft Corporation) 0x68290000 Library C:\Windows\System32\NLSLexicons0009.dll (Microsoft English Natural Language Server Data and Code/Microsoft Corporation) 0x68000000 Library C:\Windows\system32\elscore.dll (Els Core Platform DLL/Microsoft Corporation) 0x68EC0000 Library C:\Windows\system32\ElsLad.dll (ELS Language Detection/Microsoft Corporation) 0x68E30000 Library C:\Windows\System32\NLSData0000.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x6E1F0000 Library C:\Windows\System32\NLSData000c.dll (Microsoft French Natural Language Server Data and Code/Microsoft Corporation) 0x631D0000 Library C:\Windows\System32\NLSLexicons000c.dll (Microsoft French Natural Language Server Data and Code/Microsoft Corporation) 0x62BD0000 Library C:\Windows\System32\NLSData0003.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x629E0000 Library C:\Windows\System32\NLSLexicons0003.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x62870000 Library C:\Windows\System32\NLSData0021.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x62340000 Library C:\Windows\System32\NLSLexicons0021.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x62130000 Library C:\Windows\System32\NLSData0010.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x5F8E0000 Library C:\Windows\System32\NLSLexicons0010.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x5F4E0000 Library C:\Windows\System32\NLSData000a.dll (Microsoft Spanish Natural Language Server Data and Code/Microsoft Corporation) 0x5EB10000 Library C:\Windows\System32\NLSLexicons000a.dll (Microsoft Spanish Natural Language Server Data and Code/Microsoft Corporation) 0x5E190000 Library C:\Windows\System32\NLSData0007.dll (Microsoft German Natural Language Server Data and Code/Microsoft Corporation) 0x60110000 Library C:\Windows\System32\NLSLexicons0007.dll (Microsoft German Natural Language Server Data and Code/Microsoft Corporation) 0x5D610000 Library C:\Windows\System32\NLSData0013.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x61DD0000 Library C:\Windows\System32\NLSLexicons0013.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x61900000 Library C:\Windows\System32\NLSData0026.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x68A70000 Library C:\Windows\System32\NLSLexicons0026.dll (Microsoft Neutral Natural Language Server Data and Code/Microsoft Corporation) 0x61370000 Process C:\Program Files\AVG\AVG9\avgam.exe (AVG Alert Manager/AVG Technologies CZ, s.r.o.) 2868 Library C:\Program Files\AVG\AVG9\avgam.exe (AVG Alert Manager/AVG Technologies CZ, s.r.o.) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b 5\MSVCR80.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x756B0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Program Files\AVG\AVG9\avglogx.dll (AVG Logging Library/AVG Technologies CZ, s.r.o.) 0x6BC50000 Library C:\Program Files\AVG\AVG9\avgcfgx.dll (AVG Configuration Module/AVG Technologies CZ, s.r.o.) 0x6A920000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Program Files\AVG\AVG9\avglngx.dll (AVG Language Module/AVG Technologies CZ, s.r.o.) 0x6BBD0000 Library C:\Program Files\AVG\AVG9\avgameh.dll (AVG Alert Manager Library/AVG Technologies CZ, s.r.o.) 0x6A520000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Program Files\AVG\AVG9\avgamnot.dll (AVG Event Notification Library/AVG Technologies CZ, s.r.o.) 0x6A5B0000 Process C:\Program Files\AVG\AVG9\avgnsx.exe (AVG Network scanner Service/AVG Technologies CZ, s.r.o.) 2900 Library C:\Program Files\AVG\AVG9\avgnsx.exe (AVG Network scanner Service/AVG Technologies CZ, s.r.o.) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b 5\MSVCR80.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x756B0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Program Files\AVG\AVG9\avglogx.dll (AVG Logging Library/AVG Technologies CZ, s.r.o.) 0x6BC50000 Library C:\Program Files\AVG\AVG9\avgcfgx.dll (AVG Configuration Module/AVG Technologies CZ, s.r.o.) 0x6A920000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Program Files\AVG\AVG9\imsdk32.dll (IMFilter SDK/Winco Sistemas) 0x10000000 Library C:\Program Files\AVG\AVG9\avgxpl.dll (LinkScanner SDK/AVG Technologies CZ, s.r.o.) 0x6DB90000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x77400000 Library C:\Windows\system32\Normaliz.dll (Unicode Normalization DLL/Microsoft Corporation) 0x76160000 Library C:\Windows\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x76270000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 0x77500000 Library C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b 5\MSVCP80.dll (Microsoft® C++ Runtime Library/Microsoft Corporation) 0x6FA60000 Library C:\Program Files\AVG\AVG9\avglvex.dll (AVG Prevalence Reporting Library/AVG Technologies CZ, s.r.o.) 0x01730000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Program Files\AVG\AVG9\avgcclix.dll (AVG Scanning Core Module - Client Part/AVG Technologies CZ, s.r.o.) 0x6A870000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75750000 Process C:\Users\Esaul\Desktop\gmer.exe 3040 Library C:\Users\Esaul\Desktop\gmer.exe 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7600.16385_none_ebf82fc36c758ad5\COMCTL32.DLL (Common Controls Library/Microsoft Corporation) 0x75A70000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74660000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74220000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.DLL (User Experience Controls Library/Microsoft Corporation) 0x747E0000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\VERSION.DLL (Version Checking and File Installation Libraries/Microsoft Corporation)
Post #15
Process C:\Windows\RtHDVCpl.exe (HD Audio Control Panel/Realtek Semiconductor) 3216 Library C:\Windows\RtHDVCpl.exe (HD Audio Control Panel/Realtek Semiconductor) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library C:\Windows\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x70C00000 Library C:\Windows\system32\DSOUND.dll (DirectSound/Microsoft Corporation) 0x73F20000 Library C:\Windows\system32\POWRPROF.dll (Power Profile Helper DLL/Microsoft Corporation) 0x73BC0000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Windows\system32\PROPSYS.dll (Microsoft Property System/Microsoft Corporation) 0x746A0000 Library C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf 861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) 0x744D0000 Library C:\Windows\system32\IMM32.dll (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\MSIMG32.dll (GDIEXT Client DLL/Microsoft Corporation) 0x749E0000 Library C:\Windows\system32\COMDLG32.dll (Common Dialogs DLL/Microsoft Corporation) 0x76190000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\COMCTL32.dll (User Experience Controls Library/Microsoft Corporation) 0x747E0000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\system32\WINSPOOL.DRV (Windows Spooler Driver/Microsoft Corporation) 0x74050000 Library C:\Windows\system32\oledlg.dll (OLE User Interface Support/Microsoft Corporation) 0x749C0000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74660000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\WindowsCodecs.dll (Microsoft Windows Codecs Library/Microsoft Corporation) 0x740F0000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\System32\MMDevApi.dll (MMDevice API/Microsoft Corporation) 0x74240000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74220000 Library C:\Windows\system32\AUDIOSES.DLL (Audio Session/Microsoft Corporation) 0x73EE0000 Library C:\Windows\system32\mfplat.DLL (Media Foundation Platform DLL/Microsoft Corporation) 0x6EA20000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\AVRT.dll (Multimedia Realtime Runtime/Microsoft Corporation) 0x73C70000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 3224 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00740000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library c:\windows\system32\bthserv.dll (Bluetooth Support Service/Microsoft Corporation) 0x700C0000 Library c:\windows\system32\SHFOLDER.dll (Shell Folder Service/Microsoft Corporation) 0x70120000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\system32\msv1_0.DLL (Microsoft Authentication Package v1.0/Microsoft Corporation) 0x75190000 Library C:\Windows\system32\cryptdll.dll (Cryptography Manager/Microsoft Corporation) 0x75420000 Process C:\Program Files\iTunes\iTunesHelper.exe (iTunesHelper/Apple Inc.) 3276 Library C:\Program Files\iTunes\iTunesHelper.exe (iTunesHelper/Apple Inc.) 0x00FB0000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7600.16385_none_ebf82fc36c758ad5\COMCTL32.dll (Common Controls Library/Microsoft Corporation) 0x75A70000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Program Files\iTunes\iTunesHelper.dll (iTunesHelper DLL/Apple Inc.) 0x73D20000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Program Files\Common Files\Apple\Apple Application Support\CoreFoundation.dll (CoreFoundation/Apple Inc.) 0x725A0000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b 5\MSVCR80.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x756B0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Program Files\Common Files\Apple\Apple Application Support\pthreadVC2.dll (POSIX Threads for Windows32 Library/Open Source Software community project) 0x747D0000 Library C:\Windows\system32\WSOCK32.dll (Windows Socket 32-Bit DLL/Microsoft Corporation) 0x71E10000 Library C:\Program Files\Common Files\Apple\Apple Application Support\objc.dll (Objective-C Runtime Library/Apple Inc.) 0x73BA0000 Library C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b 5\MSVCP80.dll (Microsoft® C++ Runtime Library/Microsoft Corporation) 0x6FA60000 Library C:\Program Files\Common Files\Apple\Apple Application Support\libdispatch.dll (Dispatch Runtime Library/Apple Inc.) 0x10000000 Library C:\Program Files\Common Files\Apple\Apple Application Support\icuin40.dll (IBM ICU I18N DLL/IBM Corporation and others) 0x722B0000 Library C:\Program Files\Common Files\Apple\Apple Application Support\icuuc40.dll (IBM ICU Common DLL/IBM Corporation and others) 0x6E930000 Library C:\Program Files\Common Files\Apple\Apple Application Support\icudt40.dll (ICU Data DLL/IBM Corporation and others) 0x6D370000 Library C:\Program Files\Common Files\Apple\Apple Application Support\ASL.dll (Apple System Log/Apple, Inc.) 0x73B80000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74660000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Program Files\iTunes\iTunesHelper.Resources\en.lproj\iTunesHelperLocalized.DLL (iTunesHelper Resource Library/Apple Inc.) 0x73B00000 Library C:\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.DLL (iTunesHelper Resource Library/Apple Inc.) 0x6EBC0000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74220000 Library C:\Windows\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x758F0000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Program Files\QuickTime\QTSystem\QuickTime.qts (QuickTime/Apple Inc.) 0x6B4F0000 Library C:\Program Files\QuickTime\QTSystem\QTCF.dll (QuickTime CoreFoundation/Apple Inc.) 0x6B240000 Library C:\Windows\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x70C00000 Library C:\Windows\system32\comdlg32.dll (Common Dialogs DLL/Microsoft Corporation) 0x76190000 Library C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf 861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) 0x744D0000 Library C:\Windows\system32\DSOUND.dll (DirectSound/Microsoft Corporation) 0x73F20000 Library C:\Windows\system32\POWRPROF.dll (Power Profile Helper DLL/Microsoft Corporation) 0x73BC0000 Library C:\Windows\system32\WININET.DLL (Internet Extensions for Win32/Microsoft Corporation) 0x77400000 Library C:\Windows\system32\Normaliz.dll (Unicode Normalization DLL/Microsoft Corporation) 0x76160000 Library C:\Windows\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x76270000 Library C:\Windows\system32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 0x77500000 Library C:\Program Files\Common Files\Apple\Apple Application Support\CFNetwork.DLL (CFNetwork/Apple, Inc.) 0x6A2E0000 Library C:\Program Files\Common Files\Apple\Apple Application Support\SQLite3.dll (SQLite3 Dynamic Link Library/Apple Inc.) 0x72230000 Library C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 0x69840000 Library C:\Windows\system32\iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x737C0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library C:\Windows\system32\ddraw.dll (Microsoft DirectDraw/Microsoft Corporation) 0x723B0000 Library C:\Windows\system32\DCIMAN32.dll (DCI Manager/Microsoft Corporation) 0x740E0000 Library C:\Program Files\Common Files\Apple\Mobile Device Support\iTunesMobileDevice.dll (iTunesMobileDevice/Apple Inc.) 0x69A90000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library C:\Windows\system32\Wtsapi32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x740D0000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75820000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\SXS.DLL (Fusion 2.5/Microsoft Corporation) 0x757C0000 Process C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 3432 Library C:\Windows\system32\svchost.exe (Host Process for Windows Services/Microsoft Corporation) 0x00740000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library c:\windows\system32\ipsecsvc.dll (Windows IPsec SPD Server DLL/Microsoft Corporation) 0x6F8E0000 Library c:\windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x753A0000 Library c:\windows\system32\fwpuclnt.dll (FWP/IPsec User-Mode API/Microsoft Corporation) 0x721E0000 Library c:\windows\system32\FirewallAPI.dll (Windows Firewall API/Microsoft Corporation) 0x74C80000 Library c:\windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library c:\windows\system32\FwRemoteSvr.DLL (Windows Firewall Remote APIs Server/Microsoft Corporation) 0x70080000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\credssp.dll (Credential Delegation Security Package/Microsoft Corporation) 0x74EC0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x751F0000 Library C:\Windows\System32\wshtcpip.dll (Winsock2 Helper DLL (TL/IPv4)/Microsoft Corporation) 0x74D00000 Library C:\Windows\System32\wship6.dll (Winsock2 Helper DLL (TL/IPv6)/Microsoft Corporation) 0x751E0000 Library C:\Windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x737C0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library C:\Windows\system32\dhcpcsvc.DLL (DHCP Client Service/Microsoft Corporation) 0x721C0000 Library C:\Windows\system32\dhcpcsvc6.DLL (DHCPv6 Client/Microsoft Corporation) 0x737F0000 Process C:\Program Files\Java\jre6\bin\jusched.exe (Java™ Platform SE binary/Sun Microsystems, Inc.) 3548 Library C:\Program Files\Java\jre6\bin\jusched.exe (Java™ Platform SE binary/Sun Microsystems, Inc.) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x77400000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\Normaliz.dll (Unicode Normalization DLL/Microsoft Corporation) 0x76160000 Library C:\Windows\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x76270000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 0x77500000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74660000 Library C:\Windows\system32\PROPSYS.dll (Microsoft Property System/Microsoft Corporation) 0x746A0000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x747E0000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\ntmarta.dll (Windows NT MARTA provider/Microsoft Corporation) 0x74C40000 Library C:\Windows\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76210000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\SspiCli.dll (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x75750000 Process C:\Program Files\Nuance\NaturallySpeaking10\Program\natspeak.exe (Dragon NaturallySpeaking for Windows/Nuance Communications, Inc.) 3604 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\natspeak.exe (Dragon NaturallySpeaking for Windows/Nuance Communications, Inc.) 0x00400000 Library C:\Windows\SYSTEM32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x77700000 Library C:\Windows\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75CD0000 Library C:\Windows\system32\KERNELBASE.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x75B00000 Library C:\Windows\system32\USER32.dll (Multi-User Windows USER API Client DLL/Microsoft Corporation) 0x76450000 Library C:\Windows\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x778E0000 Library C:\Windows\system32\LPK.dll (Language Pack/Microsoft Corporation) 0x76260000 Library C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x77360000 Library C:\Windows\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x75C20000 Library C:\Windows\system32\IMM32.DLL (Multi-User Windows IMM32 API Client DLL/Microsoft Corporation) 0x77880000 Library C:\Windows\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x75B50000 Library C:\Windows\system32\avgrsstx.dll (AVG Resident Shield Starter/AVG Technologies CZ, s.r.o.) 0x6C1B0000 Library C:\Windows\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x763B0000 Library C:\Windows\SYSTEM32\sechost.dll (Host for SCM/SDDL/LSA Lookup APIs/Microsoft Corporation) 0x76170000 Library C:\Windows\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x76020000 Library C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\COMCTL32.dll (User Experience Controls Library/Microsoft Corporation) 0x747E0000 Library C:\Windows\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x75DB0000 Library C:\Windows\system32\comdlg32.dll (Common Dialogs DLL/Microsoft Corporation) 0x76190000 Library C:\Windows\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x76710000 Library C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x76520000 Library C:\Windows\system32\OLEAUT32.dll (Microsoft Corporation) 0x76680000 Library C:\Windows\system32\ws2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x778A0000 Library C:\Windows\system32\NSI.dll (NSI User-mode interface DLL/Microsoft Corporation) 0x76010000 Library C:\Windows\system32\inetmib1.dll (Microsoft MIB-II subagent/Microsoft Corporation) 0x747C0000 Library C:\Windows\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x737C0000 Library C:\Windows\system32\WINNSI.DLL (Network Store Information RPC interface/Microsoft Corporation) 0x73830000 Library C:\Windows\system32\snmpapi.dll (SNMP Utility Library/Microsoft Corporation) 0x71450000 Library C:\Windows\system32\profapi.dll (User Profile Basic API/Microsoft Corporation) 0x75850000 Library C:\Windows\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x70C00000 Library C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_cbf21254470d875 2\MFC80.DLL (MFCDLL Shared Library - Retail Version/Microsoft Corporation) 0x6D260000 Library C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b 5\MSVCR80.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x756B0000 Library C:\Windows\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_03ca5532205c b096\MFC80ENU.DLL (MFC Language Specific Resources/Microsoft Corporation) 0x74990000 Library C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b 5\MSVCP80.dll (Microsoft® C++ Runtime Library/Microsoft Corporation) 0x6FA60000 Library C:\Windows\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x74C70000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\dd10hook.dll (Dragon NaturallySpeaking Hook DLL/Nuance Communications, Inc.) 0x2B000000 Library C:\Windows\system32\shfolder.dll (Shell Folder Service/Microsoft Corporation) 0x70120000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\dd10scrp.dll (Dragon NaturallySpeaking Script Compiler DLL/Nuance Communications, Inc.) 0x20000000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\dd10trob.dll (Dragon NaturallySpeaking Trouble DLL/Nuance Communications, Inc.) 0x21000000 Library C:\Windows\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x70950000 Library C:\Windows\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x75670000 Library C:\Windows\system32\SSPICLI.DLL (Security Support Provider Interface/Microsoft Corporation) 0x75690000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\dd10shrd.dll (Dragon NaturallySpeaking Shared DLL/Nuance Communications, Inc.) 0x22000000 Library C:\Windows\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x76270000 Library C:\Windows\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x75920000 Library C:\Windows\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x758C0000 Library C:\Windows\system32\iertutil.dll (Run time utility for Internet Explorer/Microsoft Corporation) 0x77500000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\ipworks6.dll (IP*Works! V6//n software inc. - www.nsoftware.com) 0x26340000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\ipwssl6.dll (IP*Works! SSL V6//n software inc. - www.nsoftware.com) 0x020F0000 Library C:\Windows\system32\msi.dll (Windows Installer/Microsoft Corporation) 0x728D0000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\mobile.dll (Mobile DLL/Nuance Communications, Inc.) 0x41400000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\wav.dll (Dragon Wave DLL/Nuance Communications, Inc.) 0x42000000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\SrPump.dll (SrPump/Voice It Worldwide, Inc.) 0x10000000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\sx96v32.dll (Lucent Technologies SX9600P speech codec/Lucent Technologies) 0x01F20000 Library C:\Windows\system32\icmp.dll (ICMP DLL/Microsoft Corporation) 0x6EBB0000 Library C:\Windows\system32\security.dll (Security Support Provider Interface/Microsoft Corporation) 0x6EBA0000 Library C:\Windows\system32\wininet.dll (Internet Extensions for Win32/Microsoft Corporation) 0x77400000 Library C:\Windows\system32\Normaliz.dll (Unicode Normalization DLL/Microsoft Corporation) 0x76160000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\vcmigrat.dll (Voc Migrate Application/Nuance Communications, Inc.) 0x52000000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\gentrain.dll (General Training/Nuance Communications, Inc.) 0x43000000 Library C:\PROGRA~1\Nuance\NATURA~1\Program\dd10renx.dll (Unified English Resources/Nuance Communications, Inc.) 0x24000000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\wavconvert.dll (Wavconvert DLL/Nuance Communications, Inc.) 0x41500000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\speechtools.dll (Dragon SpeechTools/Nuance Communications, Inc.) 0x42100000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\winclass.dll (Dragon WinClass/Nuance Communications, Inc.) 0x42500000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\lhsp01.dll (ScanSoft Speech API/ScanSoft) 0x021A0000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\lhcom02W.dll (common SPI's/ScanSoft) 0x021B0000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\dgnmycmds.dll (NatSpeak MyCommands Implementaion Module/Nuance Communications, Inc.) 0x60600000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\dgnmycmds_enx.dll (NatSpeak MyCommands Implementation Module Enx Resources/Nuance Communications, Inc.) 0x68000000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\dd10slme.dll (Dragon NaturallySpeaking SmartLME/Nuance Communications, Inc.) 0x46000000 Library C:\Windows\system32\CRYPTBASE.dll (Base cryptographic API DLL/Microsoft Corporation) 0x757A0000 Library C:\Windows\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x74660000 Library C:\Windows\system32\dwmapi.dll (Microsoft Desktop Window Manager API/Microsoft Corporation) 0x74220000 Library C:\Windows\system32\RICHED32.DLL (Wrapper Dll for Richedit 1.0/Microsoft Corporation) 0x6ACD0000 Library C:\Windows\system32\RICHED20.dll (Rich Text Edit Control, v3.1/Microsoft Corporation) 0x6AC50000 Library C:\Windows\system32\CLBCatQ.DLL (COM+ Configuration Catalog/Microsoft Corporation) 0x760D0000 Library C:\Windows\system32\wtsapi32.dll (Windows Remote Desktop Session Host Server SDK APIs/Microsoft Corporation) 0x740D0000 Library C:\Program Files\Nuance\NaturallySpeaking10\Program\wfapi.dll (Citrix ICA SDK APIs/Citrix Systems, Inc.) 0x669E0000 Library C:\Windows\system32\REGAPI.dll (Registry Configuration APIs/Microsoft Corporation) 0x70DE0000 Library C:\Windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x75820000 Library C:\Windows\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x73EB0000 Library C:\Windows\system32\netutils.dll (Net Win32 API Helpers DLL/Microsoft Corporation) 0x73EA0000 Library C:\Windows\system32\srvcli.dll (Server Service Client DLL/Microsoft Corporation) 0x75600000 Library C:\Windows\system32\wkscli.dll (Workstation Service Client DLL/Microsoft Corporation) 0x73E90000 Library C:\Windows\system32\BROWCLI.DLL (Browser Service Client DLL/Microsoft Corporation) 0x6AA40000 Library C:\Windows\system32\SAMCLI.DLL (Security Accounts Manager Client DLL/Microsoft Corporation) 0x73E80000 Library C:\Windows\system32\MMDevAPI.DLL (MMDevice API/Microsoft Corporation) 0x74240000 Library C:\Windows\system32\PROPSYS.dll (Microsoft Property System/Microsoft Corporation) 0x746A0000 Library C:\Windows\system32\wdmaud.drv (Winmm audio system driver/Microsoft Corporation) 0x73D50000 Library C:\Windows\system32\ksuser.dll (User CSA Library/Microsoft Corporation) 0x6F940000 Library C:\Windows\system32\AVRT.dll (Multimedia Realtime Runtime/Microsoft Corporation) 0x73C70000 Library C:\Windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x75E10000 Library C:\Windows\system32\CFGMGR32.dll (Configuration Manager DLL/Microsoft Corporation) 0x75A40000 Library C:\Windows\system32\DEVOBJ.dll (Device Information Set DLL/Microsoft Corporation) 0x758D0000 Library C:\Windows\system32\AUDIOSES.DLL (Audio Session/Microsoft Corporation) 0x73EE0000 Library C:\Windows\system32\msacm32.drv (Microsoft Sound Mapper/Microsoft Corporation) 0x73ED0000 Library C:\Windows\system32\midimap.dll (Microsoft MIDI Mapper/Microsoft Corporation) 0x73B30000 Library C:\Windows\system32\imaadp32.acm (IMA ADPCM CODEC for MSACM/Microsoft Corporation) 0x722A0000 Library C:\Windows\system32\msg711.acm (Microsoft CCITT G.711 (A-Law and u-Law) CODEC for MSACM/Microsoft Corporation) 0x72220000 Library C:\Windows\system32\msgsm32.acm (Microsoft GSM 6.10 Audio CODEC for MSACM/Microsoft Corporation) 0x69830000 Library C:\Windows\system32\msadp32.acm (Microsoft ADPCM CODEC for MSACM/Microsoft Corporation) 0x69820000 Library C:\Windows\system32\CRYPTSP.dll (Cryptographic Service Provider API/Microsoft Corporation) 0x75230000 Library C:\Windows\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x74FD0000 Library C:\Windows\system32\RpcRtRemote.dll (Remote RPC Extension/Microsoft Corporation) 0x757B0000 Library C:\Windows\system32\OLEACC.dll (Active Accessibility Core Component/Microsoft Corporation) 0x73B40000 Library C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf 861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) 0x744D0000 Library C:\PROGRA~1\Nuance\NATURA~1\Program\dd10srvr.dll (Dragon NaturallySpeaking SAPI DLL/Nuance Communications, Inc.) 0x25000000 Library C:\PROGRA~1\Nuance\NATURA~1\Program\server.dll (Dragon Speech Server/Nuance Communications, Inc.) 0x36000000 Library C:\PROGRA~1\Nuance\NATURA~1\Program\tokenizer.dll (Tokenizer (Tokenizer and ITN)/Nuance Communications, Inc.) 0x38000000 Library C:\PROGRA~1\Nuance\NATURA~1\Program\mrec.dll (The Modular Recognizer/Nuance Communications, Inc.) 0x30000000 Library C:\PROGRA~1\Nuance\NATURA~1\Program\stlport.5.0.dll (STLport/STLport Consulting, Inc.) 0x05860000 Library C:\Windows\system32\psapi.dll (Process Status Helper/Microsoft Corporation) 0x77840000 Library C:\Windows\System32\mstask.dll (Task Scheduler interface DLL/Microsoft Corporation) 0x738C0000

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI