And yes I'm still getting the warning from Symantec. Not nearly as many files showing up, but its still happening.
Here is the GMER scan:
GMER:
GMER 1.0.14.14536 -
http://www.gmer.net
Rootkit scan 2009-02-11 14:03:54
Windows 6.0.6001 Service Pack 1
—- System - GMER 1.0.14 —-
SSDT 880C9B30 ZwAlertResumeThread
SSDT 880C9BF0 ZwAlertThread
SSDT 8812F240 ZwAllocateVirtualMemory
SSDT 880C0F08 ZwConnectPort
SSDT 880C98E0 ZwCreateMutant
SSDT 8812F3D0 ZwCreateThread
SSDT 8812F0A0 ZwFreeVirtualMemory
SSDT 880C99B0 ZwImpersonateAnonymousToken
SSDT 880C9A70 ZwImpersonateThread
SSDT 8818DF70 ZwMapViewOfSection
SSDT 880C9820 ZwOpenEvent
SSDT 8812F310 ZwOpenProcessToken
SSDT 8818DD10 ZwOpenThreadToken
SSDT \??\C:\Windows\system32\drivers\wpsdrvnt.sys ZwProtectVirtualMemory [0x92E1D240]
SSDT \SystemRoot\SYSTEM32\Drivers\SysPlant.sys (Symantec CMC Firewall SysPlant/Symantec Corporation) ZwQueryDefaultLocale [0x92F3D790]
SSDT 88123DA8 ZwResumeThread
SSDT 8818DC50 ZwSetContextThread
SSDT 8818DDE0 ZwSetInformationProcess
SSDT 8818DB80 ZwSetInformationThread
SSDT 880C9760 ZwSuspendProcess
SSDT 880C9CF8 ZwSuspendThread
SSDT 8818D100 ZwTerminateProcess
SSDT 8818DB48 ZwTerminateThread
SSDT 8818DEB0 ZwUnmapViewOfSection
SSDT 8812F170 ZwWriteVirtualMemory
SSDT \SystemRoot\SYSTEM32\Drivers\SysPlant.sys (Symantec CMC Firewall SysPlant/Symantec Corporation) ZwCreateUserProcess [0x92F3D6E0]
—- Kernel code sections - GMER 1.0.14 —-
.text ntkrnlpa.exe!ZwQueryLicenseValue + B8C 81E6A9D4 5 Bytes JMP 92F3EAD0 \SystemRoot\SYSTEM32\Drivers\SysPlant.sys (Symantec CMC Firewall SysPlant/Symantec Corporation)
.text ntkrnlpa.exe!KeSetTimerEx + 350 81ECB914 8 Bytes [ 30, 9B, 0C, 88, F0, 9B, 0C, … ]
.text ntkrnlpa.exe!KeSetTimerEx + 364 81ECB928 4 Bytes [ 40, F2, 12, 88 ]
.text ntkrnlpa.exe!KeSetTimerEx + 3F4 81ECB9B8 4 Bytes [ 08, 0F, 0C, 88 ]
.text ntkrnlpa.exe!KeSetTimerEx + 428 81ECB9EC 4 Bytes [ E0, 98, 0C, 88 ]
.text ntkrnlpa.exe!KeSetTimerEx + 454 81ECBA18 4 Bytes [ D0, F3, 12, 88 ]
.text …
.text ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E
.text ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648
.text ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682
.text ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC
.text ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6
.text ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730
.text ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A
.text ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE
.text ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4
—- User code sections - GMER 1.0.14 —-
.text C:\hp\kbd\kbd.exe[212] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\kbd\kbd.exe[212] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\kbd\kbd.exe[212] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\kbd\kbd.exe[212] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\kbd\kbd.exe[212] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\kbd\kbd.exe[212] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\kbd\kbd.exe[212] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\kbd\kbd.exe[212] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\kbd\kbd.exe[212] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\kbd\kbd.exe[212] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\kbd\kbd.exe[212] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\kbd\kbd.exe[212] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wininit.exe[580] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wininit.exe[580] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wininit.exe[580] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wininit.exe[580] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wininit.exe[580] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wininit.exe[580] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wininit.exe[580] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wininit.exe[580] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wininit.exe[580] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wininit.exe[580] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wininit.exe[580] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wininit.exe[580] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\services.exe[616] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\services.exe[616] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\services.exe[616] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\services.exe[616] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\services.exe[616] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\services.exe[616] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\services.exe[616] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\services.exe[616] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\services.exe[616] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\services.exe[616] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\services.exe[616] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\services.exe[616] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\winlogon.exe[644] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\winlogon.exe[644] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\winlogon.exe[644] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\winlogon.exe[644] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\winlogon.exe[644] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\winlogon.exe[644] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\winlogon.exe[644] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\winlogon.exe[644] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\winlogon.exe[644] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\winlogon.exe[644] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\winlogon.exe[644] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\winlogon.exe[644] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsass.exe[672] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsass.exe[672] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsass.exe[672] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsass.exe[672] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsass.exe[672] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsass.exe[672] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsass.exe[672] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsass.exe[672] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsass.exe[672] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsass.exe[672] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsass.exe[672] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsass.exe[672] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsm.exe[680] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsm.exe[680] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsm.exe[680] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsm.exe[680] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsm.exe[680] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsm.exe[680] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsm.exe[680] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsm.exe[680] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsm.exe[680] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsm.exe[680] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsm.exe[680] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\lsm.exe[680] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[816] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[816] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[816] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[816] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[816] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[816] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[816] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[816] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[816] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[816] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[816] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[816] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[876] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[876] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[876] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[876] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[876] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[876] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[876] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[876] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[876] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[876] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[876] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[876] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1040] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1040] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1040] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1040] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1040] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1040] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1040] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1040] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1040] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1040] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1040] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1040] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1064] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1064] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1064] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1064] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1064] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1064] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1064] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1064] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1064] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1064] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1064] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1064] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1104] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1104] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1104] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1104] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1104] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1104] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1104] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1104] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1104] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1104] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1104] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[1104] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1132] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1132] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1132] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1132] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1132] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1132] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1132] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1132] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1132] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1132] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1132] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1132] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1208] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1208] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1208] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1208] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1208] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1208] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1208] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1208] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1208] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1208] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1208] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1208] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\AUDIODG.EXE[1224] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\AUDIODG.EXE[1224] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\AUDIODG.EXE[1224] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\AUDIODG.EXE[1224] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\AUDIODG.EXE[1224] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\AUDIODG.EXE[1224] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\AUDIODG.EXE[1224] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\AUDIODG.EXE[1224] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\AUDIODG.EXE[1224] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\AUDIODG.EXE[1224] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\AUDIODG.EXE[1224] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\AUDIODG.EXE[1224] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1248] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1248] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1248] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1248] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1248] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1248] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1248] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1248] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1248] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1248] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1248] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\taskeng.exe[1248] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1284] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1284] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1284] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1284] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1284] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1284] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1284] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1284] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1284] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1284] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1284] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1284] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1416] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1416] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1416] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1416] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1416] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1416] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1416] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1416] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1416] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1416] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1416] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Ati2evxx.exe[1416] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe[1524] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe[1524] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe[1524] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe[1524] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe[1524] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe[1524] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe[1524] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe[1524] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe[1524] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe[1524] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe[1524] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe[1524] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1540] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1540] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1540] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1540] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1540] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1540] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1540] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1540] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1540] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1540] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1540] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1540] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Dwm.exe[1656] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Dwm.exe[1656] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Dwm.exe[1656] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Dwm.exe[1656] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Dwm.exe[1656] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Dwm.exe[1656] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Dwm.exe[1656] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Dwm.exe[1656] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Dwm.exe[1656] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Dwm.exe[1656] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Dwm.exe[1656] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\Dwm.exe[1656] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe[1740] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe[1740] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe[1740] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe[1740] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe[1740] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe[1740] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe[1740] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe[1740] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe[1740] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe[1740] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe[1740] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe[1740] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\spoolsv.exe[1956] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\spoolsv.exe[1956] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\spoolsv.exe[1956] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\spoolsv.exe[1956] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\spoolsv.exe[1956] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\spoolsv.exe[1956] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\spoolsv.exe[1956] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\spoolsv.exe[1956] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\spoolsv.exe[1956] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\spoolsv.exe[1956] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\spoolsv.exe[1956] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\spoolsv.exe[1956] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1992] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1992] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1992] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1992] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1992] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1992] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1992] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1992] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1992] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1992] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1992] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[1992] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\Explorer.EXE[2000] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\Explorer.EXE[2000] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\Explorer.EXE[2000] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\Explorer.EXE[2000] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\Explorer.EXE[2000] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\Explorer.EXE[2000] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\Explorer.EXE[2000] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\Explorer.EXE[2000] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\Explorer.EXE[2000] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\Explorer.EXE[2000] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\Explorer.EXE[2000] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\Explorer.EXE[2000] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchProtocolHost.exe[2088] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchProtocolHost.exe[2088] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchProtocolHost.exe[2088] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchProtocolHost.exe[2088] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchProtocolHost.exe[2088] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchProtocolHost.exe[2088] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchProtocolHost.exe[2088] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchProtocolHost.exe[2088] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchProtocolHost.exe[2088] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchProtocolHost.exe[2088] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchProtocolHost.exe[2088] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchProtocolHost.exe[2088] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iPod\bin\iPodService.exe[2124] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iPod\bin\iPodService.exe[2124] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iPod\bin\iPodService.exe[2124] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iPod\bin\iPodService.exe[2124] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iPod\bin\iPodService.exe[2124] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iPod\bin\iPodService.exe[2124] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iPod\bin\iPodService.exe[2124] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iPod\bin\iPodService.exe[2124] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iPod\bin\iPodService.exe[2124] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iPod\bin\iPodService.exe[2124] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iPod\bin\iPodService.exe[2124] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iPod\bin\iPodService.exe[2124] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe[2212] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe[2212] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe[2212] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe[2212] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe[2212] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe[2212] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe[2212] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe[2212] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe[2212] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe[2212] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe[2212] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe[2212] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\wmiprvse.exe[2356] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\wmiprvse.exe[2356] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\wmiprvse.exe[2356] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\wmiprvse.exe[2356] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\wmiprvse.exe[2356] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\wmiprvse.exe[2356] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\wmiprvse.exe[2356] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\wmiprvse.exe[2356] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\wmiprvse.exe[2356] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\wmiprvse.exe[2356] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\wmiprvse.exe[2356] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\wmiprvse.exe[2356] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\support\hpsysdrv.exe[2448] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\support\hpsysdrv.exe[2448] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\support\hpsysdrv.exe[2448] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\support\hpsysdrv.exe[2448] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\support\hpsysdrv.exe[2448] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\support\hpsysdrv.exe[2448] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\support\hpsysdrv.exe[2448] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\support\hpsysdrv.exe[2448] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\support\hpsysdrv.exe[2448] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\support\hpsysdrv.exe[2448] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\support\hpsysdrv.exe[2448] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\hp\support\hpsysdrv.exe[2448] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2504] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2504] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2504] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2504] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2504] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2504] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2504] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2504] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2504] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2504] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2504] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2504] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe[2600] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe[2600] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe[2600] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe[2600] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe[2600] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe[2600] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe[2600] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe[2600] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe[2600] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe[2600] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe[2600] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe[2600] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2616] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2616] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2616] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2616] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2616] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2616] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2616] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2616] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2616] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2616] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2616] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2616] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2640] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2640] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2640] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2640] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2640] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2640] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2640] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2640] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2640] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2640] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2640] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2640] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Portrait Displays\HP My Display\DTSRVC.exe[2676] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Portrait Displays\HP My Display\DTSRVC.exe[2676] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Portrait Displays\HP My Display\DTSRVC.exe[2676] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Portrait Displays\HP My Display\DTSRVC.exe[2676] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Portrait Displays\HP My Display\DTSRVC.exe[2676] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Portrait Displays\HP My Display\DTSRVC.exe[2676] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Portrait Displays\HP My Display\DTSRVC.exe[2676] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Portrait Displays\HP My Display\DTSRVC.exe[2676] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Portrait Displays\HP My Display\DTSRVC.exe[2676] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Portrait Displays\HP My Display\DTSRVC.exe[2676] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Portrait Displays\HP My Display\DTSRVC.exe[2676] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Portrait Displays\HP My Display\DTSRVC.exe[2676] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text c:\Program Files\Common Files\LightScribe\LSSrvc.exe[2724] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text c:\Program Files\Common Files\LightScribe\LSSrvc.exe[2724] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text c:\Program Files\Common Files\LightScribe\LSSrvc.exe[2724] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text c:\Program Files\Common Files\LightScribe\LSSrvc.exe[2724] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text c:\Program Files\Common Files\LightScribe\LSSrvc.exe[2724] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text c:\Program Files\Common Files\LightScribe\LSSrvc.exe[2724] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text c:\Program Files\Common Files\LightScribe\LSSrvc.exe[2724] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text c:\Program Files\Common Files\LightScribe\LSSrvc.exe[2724] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text c:\Program Files\Common Files\LightScribe\LSSrvc.exe[2724] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text c:\Program Files\Common Files\LightScribe\LSSrvc.exe[2724] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text c:\Program Files\Common Files\LightScribe\LSSrvc.exe[2724] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text c:\Program Files\Common Files\LightScribe\LSSrvc.exe[2724] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2764] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2764] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2764] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2764] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2764] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2764] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2764] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2764] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2764] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2764] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2764] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[2764] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\RtHDVCpl.exe[2872] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\RtHDVCpl.exe[2872] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\RtHDVCpl.exe[2872] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\RtHDVCpl.exe[2872] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\RtHDVCpl.exe[2872] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\RtHDVCpl.exe[2872] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\RtHDVCpl.exe[2872] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\RtHDVCpl.exe[2872] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\RtHDVCpl.exe[2872] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\RtHDVCpl.exe[2872] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\RtHDVCpl.exe[2872] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\RtHDVCpl.exe[2872] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\D-Link\RangeBooster G WDA-2320\AirPlusCFG.exe[2880] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\D-Link\RangeBooster G WDA-2320\AirPlusCFG.exe[2880] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\D-Link\RangeBooster G WDA-2320\AirPlusCFG.exe[2880] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\D-Link\RangeBooster G WDA-2320\AirPlusCFG.exe[2880] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\D-Link\RangeBooster G WDA-2320\AirPlusCFG.exe[2880] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\D-Link\RangeBooster G WDA-2320\AirPlusCFG.exe[2880] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\D-Link\RangeBooster G WDA-2320\AirPlusCFG.exe[2880] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\D-Link\RangeBooster G WDA-2320\AirPlusCFG.exe[2880] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\D-Link\RangeBooster G WDA-2320\AirPlusCFG.exe[2880] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\D-Link\RangeBooster G WDA-2320\AirPlusCFG.exe[2880] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\D-Link\RangeBooster G WDA-2320\AirPlusCFG.exe[2880] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\D-Link\RangeBooster G WDA-2320\AirPlusCFG.exe[2880] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe[2888] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe[2888] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe[2888] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe[2888] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe[2888] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe[2888] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe[2888] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe[2888] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe[2888] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe[2888] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe[2888] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe[2888] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccApp.exe[2924] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccApp.exe[2924] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccApp.exe[2924] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccApp.exe[2924] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccApp.exe[2924] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccApp.exe[2924] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccApp.exe[2924] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccApp.exe[2924] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccApp.exe[2924] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccApp.exe[2924] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccApp.exe[2924] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Common Files\Symantec Shared\ccApp.exe[2924] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\rundll32.exe[3016] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\rundll32.exe[3016] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\rundll32.exe[3016] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\rundll32.exe[3016] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\rundll32.exe[3016] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\rundll32.exe[3016] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\rundll32.exe[3016] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\rundll32.exe[3016] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\rundll32.exe[3016] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\rundll32.exe[3016] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\rundll32.exe[3016] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\rundll32.exe[3016] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[3068] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[3068] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[3068] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[3068] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[3068] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[3068] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[3068] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[3068] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[3068] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[3068] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[3068] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[3068] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[3176] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[3176] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[3176] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[3176] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[3176] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[3176] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[3176] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[3176] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[3176] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[3176] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[3176] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[3176] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[3200] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[3200] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[3200] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[3200] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[3200] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[3200] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[3200] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[3200] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[3200] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[3200] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[3200] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\svchost.exe[3200] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3224] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3224] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3224] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3224] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3224] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3224] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3224] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3224] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3224] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3224] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3224] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3224] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iTunes\iTunesHelper.exe[3256] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iTunes\iTunesHelper.exe[3256] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iTunes\iTunesHelper.exe[3256] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iTunes\iTunesHelper.exe[3256] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iTunes\iTunesHelper.exe[3256] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iTunes\iTunesHelper.exe[3256] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iTunes\iTunesHelper.exe[3256] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iTunes\iTunesHelper.exe[3256] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iTunes\iTunesHelper.exe[3256] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iTunes\iTunesHelper.exe[3256] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iTunes\iTunesHelper.exe[3256] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\iTunes\iTunesHelper.exe[3256] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe[3296] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe[3296] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe[3296] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe[3296] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe[3296] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe[3296] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe[3296] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe[3296] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe[3296] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe[3296] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe[3296] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe[3296] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Java\jre6\bin\jusched.exe[3308] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Java\jre6\bin\jusched.exe[3308] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Java\jre6\bin\jusched.exe[3308] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Java\jre6\bin\jusched.exe[3308] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Java\jre6\bin\jusched.exe[3308] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Java\jre6\bin\jusched.exe[3308] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Java\jre6\bin\jusched.exe[3308] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Java\jre6\bin\jusched.exe[3308] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Java\jre6\bin\jusched.exe[3308] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Java\jre6\bin\jusched.exe[3308] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Java\jre6\bin\jusched.exe[3308] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Java\jre6\bin\jusched.exe[3308] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehtray.exe[3344] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehtray.exe[3344] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehtray.exe[3344] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehtray.exe[3344] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehtray.exe[3344] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehtray.exe[3344] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehtray.exe[3344] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehtray.exe[3344] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehtray.exe[3344] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehtray.exe[3344] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehtray.exe[3344] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehtray.exe[3344] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[3352] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[3352] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[3352] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[3352] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[3352] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[3352] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[3352] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[3352] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[3352] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[3352] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[3352] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[3352] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[3392] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[3392] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[3392] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[3392] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[3392] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[3392] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[3392] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[3392] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[3392] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[3392] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[3392] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[3392] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehmsas.exe[3448] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehmsas.exe[3448] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehmsas.exe[3448] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehmsas.exe[3448] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehmsas.exe[3448] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehmsas.exe[3448] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehmsas.exe[3448] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehmsas.exe[3448] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehmsas.exe[3448] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehmsas.exe[3448] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehmsas.exe[3448] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\ehome\ehmsas.exe[3448] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\UAService7.exe[3544] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\UAService7.exe[3544] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\UAService7.exe[3544] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\UAService7.exe[3544] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\UAService7.exe[3544] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\UAService7.exe[3544] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\UAService7.exe[3544] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\UAService7.exe[3544] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\UAService7.exe[3544] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\UAService7.exe[3544] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\UAService7.exe[3544] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\UAService7.exe[3544] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[3572] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[3572] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[3572] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[3572] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[3572] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[3572] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[3572] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[3572] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[3572] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[3572] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[3572] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\System32\svchost.exe[3572] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchIndexer.exe[3592] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchIndexer.exe[3592] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchIndexer.exe[3592] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchIndexer.exe[3592] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchIndexer.exe[3592] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchIndexer.exe[3592] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchIndexer.exe[3592] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchIndexer.exe[3592] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchIndexer.exe[3592] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchIndexer.exe[3592] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchIndexer.exe[3592] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchIndexer.exe[3592] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\unsecapp.exe[3636] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\unsecapp.exe[3636] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\unsecapp.exe[3636] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\unsecapp.exe[3636] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\unsecapp.exe[3636] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\unsecapp.exe[3636] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\unsecapp.exe[3636] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\unsecapp.exe[3636] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\unsecapp.exe[3636] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\unsecapp.exe[3636] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\unsecapp.exe[3636] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wbem\unsecapp.exe[3636] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\DRIVERS\xaudio.exe[3644] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\DRIVERS\xaudio.exe[3644] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\DRIVERS\xaudio.exe[3644] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\DRIVERS\xaudio.exe[3644] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\DRIVERS\xaudio.exe[3644] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\DRIVERS\xaudio.exe[3644] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\DRIVERS\xaudio.exe[3644] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\DRIVERS\xaudio.exe[3644] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\DRIVERS\xaudio.exe[3644] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\DRIVERS\xaudio.exe[3644] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\DRIVERS\xaudio.exe[3644] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\DRIVERS\xaudio.exe[3644] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Users\Peeks\Desktop\gmer\gmer.exe[3696] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Users\Peeks\Desktop\gmer\gmer.exe[3696] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Users\Peeks\Desktop\gmer\gmer.exe[3696] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Users\Peeks\Desktop\gmer\gmer.exe[3696] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Users\Peeks\Desktop\gmer\gmer.exe[3696] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Users\Peeks\Desktop\gmer\gmer.exe[3696] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Users\Peeks\Desktop\gmer\gmer.exe[3696] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Users\Peeks\Desktop\gmer\gmer.exe[3696] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Users\Peeks\Desktop\gmer\gmer.exe[3696] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[3756] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[3756] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[3756] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[3756] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[3756] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[3756] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[3756] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[3756] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[3756] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[3756] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[3756] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[3756] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4004] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4004] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4004] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4004] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4004] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4004] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4004] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4004] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4004] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4004] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4004] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4004] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchFilterHost.exe[5288] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchFilterHost.exe[5288] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchFilterHost.exe[5288] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchFilterHost.exe[5288] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchFilterHost.exe[5288] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchFilterHost.exe[5288] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchFilterHost.exe[5288] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchFilterHost.exe[5288] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchFilterHost.exe[5288] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchFilterHost.exe[5288] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchFilterHost.exe[5288] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\SearchFilterHost.exe[5288] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wuauclt.exe[6020] ntdll.dll!NtCreateFile + 5 7757800D 5 Bytes JMP 6F025560 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wuauclt.exe[6020] ntdll.dll!NtCreateKey + 5 7757804D 5 Bytes JMP 6F02559A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wuauclt.exe[6020] ntdll.dll!NtDeleteFile + 5 775783ED 5 Bytes JMP 6F02560E C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wuauclt.exe[6020] ntdll.dll!NtDeleteValueKey + 5 7757842D 5 Bytes JMP 6F025648 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wuauclt.exe[6020] ntdll.dll!NtMapViewOfSection + 5 7757875D 5 Bytes JMP 6F025682 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wuauclt.exe[6020] ntdll.dll!NtOpenFile + 5 775787ED 5 Bytes JMP 6F0256BC C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wuauclt.exe[6020] ntdll.dll!NtOpenKey + 5 7757881D 5 Bytes JMP 6F0256F6 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wuauclt.exe[6020] ntdll.dll!NtRenameKey + 5 77578CFD 5 Bytes JMP 6F025730 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wuauclt.exe[6020] ntdll.dll!NtSetInformationFile + 5 77578F1D 5 Bytes JMP 6F02576A C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wuauclt.exe[6020] ntdll.dll!NtSetValueKey + 5 7757908D 5 Bytes JMP 6F0257A4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wuauclt.exe[6020] ntdll.dll!NtTerminateProcess + 5 7757912D 5 Bytes JMP 6F0257DE C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
.text C:\Windows\system32\wuauclt.exe[6020] ntdll.dll!NtCreateUserProcess + 5 7757943D 5 Bytes JMP 6F0255D4 C:\Windows\SYSTEM32\SYSFER.DLL (Symantec CMC Firewall sysfer/Symantec Corporation)
—- Devices - GMER 1.0.14 —-
AttachedDevice \Driver\tdx \Device\Tcp wpsdrvnt.sys
AttachedDevice \Driver\tdx \Device\Udp wpsdrvnt.sys
AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
—- EOF - GMER 1.0.14 —-