also @ TechSpot: Updated Microsoft EULA prohibits class action lawsuits

TechSpot
Collaborate in the cloud with Office, Exchange, SharePoint, and Lync.
Microsoft Office 365. Pay-as-you-go starting at $8/user/month. Begin your free trial now.

[Solved] Res://C:\Windows\system32\shdoclc.dll/navcancl.htm Internet Explorer Issue

Discussion in 'Virus and Malware Removal' started by dozzyo9080, May 8, 2011.

Thread Status:
Not open for further replies.
Page 1 of 8

  1. dozzyo9080 Newcomer, in training

    When i try to visit a webpage, it will not let me on. In IE it says res://C:\Windows\system32\shdoclc.dll/navcancl.htm As in Google Chrome it says about:blank. I do not know what to do. Here is the log files:
    dozzyo9080, May 8, 2011
    #1

  2. Broni Malware Annihilator

    Welcome aboard [IMG]

    Please, complete all steps listed here: http://www.techspot.com/vb/topic58138.html
    Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
    Attached logs won't be reviewed.

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running tools or applying updates other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.
    Broni, May 8, 2011
    #2

  3. dozzyo9080 Newcomer, in training

    Mbam log

    MBAM:

    Malwarebytes' Anti-Malware 1.50.1.1100
    www.malwarebytes.org

    Database version: 6526

    Windows 6.0.6002 Service Pack 2
    Internet Explorer 8.0.6001.19048

    5/8/2011 10:28:34 AM
    mbam-log-2011-05-08 (10-28-34).txt

    Scan type: Quick scan
    Objects scanned: 183946
    Time elapsed: 19 minute(s), 5 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)
    dozzyo9080, May 8, 2011
    #3

  4. dozzyo9080 Newcomer, in training

    I have been doing so thank you
    dozzyo9080, May 8, 2011
    #4

  5. dozzyo9080 Newcomer, in training

    Gmer log 1

    ---- User IAT/EAT - GMER 1.0.15 ----

    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 00F90000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 00F70000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 00F60000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 00E20000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 00E10000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 00F30000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 00F40000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 00E10000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 00F90000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 00E20000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 00F40000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 00F30000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 00F40000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 00E20000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 00FB0000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 00F90000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 00FA0000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 00F70000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 00E10000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 00F30000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 00E10000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 00F40000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 00E20000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 00F30000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 00F30000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 00FB0000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 00E10000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 00F90000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 00F60000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW]
    dozzyo9080, May 8, 2011
    #5

  6. Broni Malware Annihilator

    ....
    Broni, May 8, 2011
    #6

  7. dozzyo9080 Newcomer, in training

    gmer 2

    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 00FC0000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 00FD0000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 00E20000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 00F40000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 00FC0000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 00FD0000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 00F60000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 00F70000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 00F40000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 00E20000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 00F30000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 00E10000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 00F60000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 00F90000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 00FB0000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 00E10000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 00F30000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 00E20000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 00F40000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] 00F70000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!TerminateProcess] 00E10000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] 00F90000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!OpenProcess] 00FB0000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] 00F60000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] 00F40000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] 00F30000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] 00E20000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\SHELL32.dll [USER32.dll!ExitWindowsEx] 00FE0000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!TerminateProcess] 00E10000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] 00F40000
    dozzyo9080, May 8, 2011
    #7

  8. dozzyo9080 Newcomer, in training

    gmer 3

    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] 00E20000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryExW] 00F90000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryW] 00F30000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!TerminateProcess] 00E10000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] 00E20000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] 00F30000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] 00F40000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!TerminateProcess] 00E10000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] 00F40000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryA] 00E20000
    dozzyo9080, May 8, 2011
    #8

  9. dozzyo9080 Newcomer, in training

    gmer 4

    ndows\system32\CRYPT32.dll [KERNEL32.dll!FindNextFileW] 00F70000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindFirstFileW] 00F60000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExW] 00F90000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindNextFileW] 00F70000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindFirstFileW] 00F60000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] 00F40000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] 00E20000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!TerminateProcess] 00E10000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\WININET.DLL [KERNEL32.dll!FindFirstFileA] 00FC0000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\WININET.DLL [KERNEL32.dll!FindNextFileA] 00FD0000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\WININET.DLL [KERNEL32.dll!LoadLibraryW] 00F30000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\WININET.DLL [KERNEL32.dll!TerminateProcess] 00E10000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\WININET.DLL [KERNEL32.dll!LoadLibraryExW] 00F90000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\WININET.DLL [KERNEL32.dll!GetProcAddress] 00F40000
    IAT C:\Program Files\iTunes\iTunesHelper.exe[12] @ C:\Windows\system32\WININET.DLL [KERNEL32.dll!LoadLibraryA] 00E20000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 01CF0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 01D10000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 015E0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 016F0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 01CD0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 01720000
    dozzyo9080, May 8, 2011
    #9

  10. dozzyo9080 Newcomer, in training

    Gmer 5

    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 01700000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!TerminateProcess] 01700000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] 01CD0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryA] 01720000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindNextFileW] 016F0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindFirstFileW] 015E0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExW] 01C80000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 01CD0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 01720000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 01710000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 01C80000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 01D20000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 016F0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 01700000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 01700000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 01CD0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 01720000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 01C80000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 016F0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 015E0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 01720000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 01700000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 01CD0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 01700000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 01C80000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 01720000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 01CD0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindNextFileW] 016F0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindFirstFileW] 015E0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] 01CD0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] 01720000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!TerminateProcess] 01700000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!TerminateProcess] 01700000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] 01720000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] 01CD0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!FindFirstFileA] 01CF0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!FindNextFileA] 01D10000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!TerminateProcess] 01700000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryExW] 01C80000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] 01CD0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryA] 01720000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 01710000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 01700000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 01C80000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 015E0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 016F0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 01CF0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 01D10000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 01720000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 01CD0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 015E0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 01C80000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 01710000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 01700000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 01720000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 01CD0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] 016F0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!TerminateProcess] 01700000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] 01C80000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!OpenProcess] 01710000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] 015E0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] 01CD0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] 01720000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SHELL32.dll [USER32.dll!ExitWindowsEx] 01CE0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\PSAPI.DLL [KERNEL32.dll!TerminateProcess] 01700000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!TerminateProcess] 01700000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] 01CD0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] 01720000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryExW] 01C80000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!LoadLibraryA] 01720000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] 01CD0000
    IAT C:\Program Files\Microsoft Security Client\msseces.exe[608] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!TerminateProcess] 01700000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 01530000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 00870000
    dozzyo9080, May 8, 2011
    #10

  11. dozzyo9080 Newcomer, in training

    Gmer 6

    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 00860000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 01560000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 01550000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 01540000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 00840000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 00880000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 00840000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 01530000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 00870000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 00880000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 00840000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 01560000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 00870000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 01530000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 00880000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 01560000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 01540000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 01570000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 00870000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 00840000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 00880000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 01530000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 01580000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 01590000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 01570000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 01540000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 01530000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 00870000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 00880000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 00840000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 01570000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 01560000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 00860000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 00840000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 00880000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 00870000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 01530000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\PSAPI.DLL [KERNEL32.dll!TerminateProcess] 00840000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!TerminateProcess] 00840000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] 01530000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] 00870000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryExW] 01560000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryW] 00880000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!LoadLibraryA] 00870000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] 01530000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!TerminateProcess] 00840000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 00880000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 00860000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 00840000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 01560000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 01570000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 01540000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 01580000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 01590000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 00870000
    IAT C:\Windows\system32\Dwm.exe[1004] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 01530000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [KERNEL32.dll!FindNextFileW] 035A0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [KERNEL32.dll!FindFirstFileW] 03580000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [KERNEL32.dll!LoadLibraryA] 036E0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [KERNEL32.dll!LoadLibraryW] 03A10000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [KERNEL32.dll!GetProcAddress] 03A20000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [KERNEL32.dll!OpenProcess] 036D0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [USER32.dll!ExitWindowsEx] 03A30000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown] [73E37817] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage] [73E8A86D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI] [73E3BB22] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode] [73E2F695] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup] [73E375E9] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC] [73E2E7CA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStreamICM] [73E68395] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStream] [73E3DA60] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight] [73E2FFFA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth] [73E2FF61] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage] [73E271CF] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFileICM] [73EBCAE2] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFile] [73E5C8D8] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics] [73E2D968] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree] [73E26853] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc] [73E2687E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode] [73E32AD1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 03A20000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 036E0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 036D0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 03A60000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 03A40000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 035A0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 03A10000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 03A20000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 036E0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 03A10000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 03A60000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 036E0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 03A20000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 03A10000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 03A60000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 035A0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 03580000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 036E0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 03A10000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 03A20000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 03A70000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 03A80000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 03580000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 035A0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 03A20000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 036E0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 03A10000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 03A10000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 036D0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 03A60000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 03580000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 035A0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 03A70000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 03A80000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 036E0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 03A20000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] 035A0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] 03A60000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!OpenProcess] 036D0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW]
    dozzyo9080, May 8, 2011
    #11

  12. dozzyo9080 Newcomer, in training

    Gmer 7

    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] 03A20000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] 03A10000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] 036E0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\SHELL32.dll [USER32.dll!ExitWindowsEx] 03A30000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 03580000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 03A60000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 036D0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 03A10000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 036E0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 03A20000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] 036E0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] 03A10000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] 03A20000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] 03A10000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] 036E0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] 03A20000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!OpenProcess] 036D0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\PSAPI.DLL [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindNextFileW] 035A0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindFirstFileW] 03580000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] 03A20000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] 036E0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\System32\SAMLIB.dll [KERNEL32.dll!LoadLibraryA] 036E0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\System32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] 03A20000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\System32\SAMLIB.dll [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\System32\CRYPT32.dll [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\System32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] 03A20000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\System32\CRYPT32.dll [KERNEL32.dll!LoadLibraryA] 036E0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\System32\CRYPT32.dll [KERNEL32.dll!FindNextFileW] 035A0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\System32\CRYPT32.dll [KERNEL32.dll!FindFirstFileW] 03580000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\System32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExW] 03A60000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!FindFirstFileA] 03A70000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!FindNextFileA] 03A80000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryW] 03A10000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryExW] 03A60000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] 03A20000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryA] 036E0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] 03A20000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] 036E0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryExW] 03A60000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryW] 03A10000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\System32\IPHLPAPI.DLL [KERNEL32.dll!OpenProcess] 036D0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\System32\IPHLPAPI.DLL [KERNEL32.dll!TerminateProcess] 03600000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\System32\IPHLPAPI.DLL [KERNEL32.dll!LoadLibraryA] 036E0000
    IAT C:\Windows\Explorer.EXE[1328] @ C:\Windows\System32\IPHLPAPI.DLL [KERNEL32.dll!GetProcAddress] 03A20000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 01A80000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 016E0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 016D0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 01A90000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 016B0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 016C0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 01AC0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 01AD0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 016F0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 01AA0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 016D0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 01A90000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 016F0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 01AA0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 01A80000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 01A90000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 016C0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 016B0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 016F0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 016D0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 01A80000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 01AA0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 01AA0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 016F0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 016E0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 01A90000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 01AE0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 016C0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 016D0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 01A80000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 016D0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 01AA0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 016F0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 01A80000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 01AC0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 01AD0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 016B0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 016C0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 01AA0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 016F0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 01A80000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 016D0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 016B0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 01A90000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 016E0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 016D0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 01A80000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 016F0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 01AA0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!FindFirstFileA] 01AC0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!FindNextFileA] 01AD0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryW] 01A80000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!TerminateProcess] 016D0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryExW] 01A90000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] 01AA0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryA] 016F0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!TerminateProcess] 016D0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] 01AA0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] 016F0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryExW] 01A90000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryW] 01A80000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindNextFileW] 016C0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindFirstFileW] 016B0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] 01AA0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] 016F0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!TerminateProcess] 016D0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!TerminateProcess] 016D0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] 016F0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] 01A80000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] 01AA0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\PSAPI.DLL [KERNEL32.dll!TerminateProcess] 016D0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!LoadLibraryA] 016F0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] 01AA0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!TerminateProcess] 016D0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\shell32.dll [KERNEL32.dll!FindNextFileW] 016C0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\shell32.dll [KERNEL32.dll!TerminateProcess] 016D0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\shell32.dll [KERNEL32.dll!LoadLibraryExW] 01A90000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\shell32.dll [KERNEL32.dll!OpenProcess] 016E0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\shell32.dll [KERNEL32.dll!FindFirstFileW] 016B0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\shell32.dll [KERNEL32.dll!GetProcAddress] 01AA0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\shell32.dll [KERNEL32.dll!LoadLibraryW] 01A80000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\shell32.dll [KERNEL32.dll!LoadLibraryA] 016F0000
    IAT C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[1412] @ C:\Windows\system32\shell32.dll [USER32.dll!ExitWindowsEx] 01F60000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 008D0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 00900000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 008E0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 008F0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 00900000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 008E0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 00E00000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 00E10000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 00DF0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 00DE0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 008D0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 008F0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 00E20000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 00FA0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 00F90000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 00DE0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 00900000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 008E0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 008F0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 008D0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 008F0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 00E00000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 008D0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 00E10000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 00F90000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 00DE0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 00E20000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 00FA0000
    dozzyo9080, May 8, 2011
    #12

  13. dozzyo9080 Newcomer, in training

    Gmer 8

    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 008E0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 00900000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 008D0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 00E10000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 008E0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 00900000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 008F0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 00E10000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 00DE0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 00F90000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 008E0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 008D0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 008F0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 00900000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindNextFileW] 00DE0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindFirstFileW] 00F90000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] 00900000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] 008E0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!TerminateProcess] 008D0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!TerminateProcess] 008D0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] 008E0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] 008F0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] 00900000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 00F90000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 00E10000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 00E00000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 008D0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 008F0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 008E0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 00900000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] 00DE0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!TerminateProcess] 008D0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] 00E10000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!OpenProcess] 00E00000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] 00F90000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] 00900000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] 008F0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] 008E0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SHELL32.dll [USER32.dll!ExitWindowsEx] 00FB0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!TerminateProcess] 008D0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] 00900000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryA] 008E0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindNextFileW] 00DE0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindFirstFileW] 00F90000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExW] 00E10000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!TerminateProcess] 008D0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] 00900000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] 008E0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryExW] 00E10000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryW] 008F0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\PSAPI.DLL [KERNEL32.dll!TerminateProcess] 008D0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!LoadLibraryA] 008E0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] 00900000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!TerminateProcess] 008D0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] 008F0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] 008E0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] 00900000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!TerminateProcess] 008D0000
    IAT C:\Windows\system32\nvvsvc.exe[1596] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!OpenProcess] 00E00000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 01650000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 015F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 015E0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 001E0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 015D0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 001F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 001D0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 01600000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 001D0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 01650000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 015F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 01600000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 001E0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 001F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 01660000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 015F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 001D0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 01600000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 01650000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 001D0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 001E0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 015F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 01650000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 01600000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 01670000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 01A60000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 01660000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 001F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 01650000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 015F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 01600000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 001D0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] 001F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!TerminateProcess] 001D0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] 001E0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!OpenProcess] 015E0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] 01660000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] 01650000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] 01600000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] 015F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHELL32.dll [USER32.dll!ExitWindowsEx] 01A70000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 01600000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 015E0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 001D0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 001E0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 01660000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 001F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 01670000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 01A60000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 015F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 01650000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 01660000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 001E0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 015E0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 001D0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 01600000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 015F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 01650000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!TerminateProcess] 001D0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] 015F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] 01600000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] 01650000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!TerminateProcess] 001D0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] 01650000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] 015F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryExW] 001E0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryW] 01600000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\PSAPI.DLL [KERNEL32.dll!TerminateProcess] 001D0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!LoadLibraryA] 015F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] 01650000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!TerminateProcess] 001D0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!TerminateProcess] 001D0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] 01650000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryA] 015F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindNextFileW] 001F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindFirstFileW] 01660000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExW] 001E0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindNextFileW] 001F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindFirstFileW] 01660000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] 01650000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] 015F0000
    IAT C:\Windows\system32\taskeng.exe[1636] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!TerminateProcess] 001D0000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 01B10000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 01FF0000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 01FE0000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 02660000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 02650000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 02620000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 02630000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 02600000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 02650000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 02620000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 02690000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 02670000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 02680000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 02660000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 02600000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 02630000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 02600000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 02650000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 02620000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 02630000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 02600000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 02670000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 02620000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 02650000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 02630000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 02670000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 02660000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 01FE0000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 02620000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 02600000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 02630000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 02650000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 01FE0000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 02670000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 02690000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 02600000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 02630000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 02620000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 02650000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 02630000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 02690000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 02600000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 02670000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 01FE0000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 02660000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 01B10000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 01FF0000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 02620000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 02650000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] 02660000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!TerminateProcess] 02600000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] 02670000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!OpenProcess] 02690000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] 01FE0000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] 02650000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] 02630000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] 02620000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\SHELL32.dll [USER32.dll!ExitWindowsEx] 026A0000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!TerminateProcess] 02600000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] 02650000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryA] 02620000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindNextFileW] 02660000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindFirstFileW] 01FE0000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExW] 02670000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindNextFileW] 02660000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindFirstFileW] 01FE0000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] 02650000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] 02620000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!TerminateProcess] 02600000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!TerminateProcess] 02600000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] 02620000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] 02630000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] 02650000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\PSAPI.DLL [KERNEL32.dll!TerminateProcess] 02600000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!TerminateProcess] 02600000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] 02650000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] 02620000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryExW] 02670000
    IAT C:\Windows\RtHDVCpl.exe[2028] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryW] 02630000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 00EB0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 00BD0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 00BC0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 00BF0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 00820000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 00810000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 007F0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 00BE0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 007F0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 00EB0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 00BD0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 00BE0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 00BF0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 00810000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 01ED0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 00BD0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 007F0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 00BE0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 00EB0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 007F0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 00BF0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 00BD0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 00EB0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 00BE0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 01EE0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 01F30000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 01ED0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 00810000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 00EB0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 00BD0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 00BE0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 007F0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 01ED0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 00BF0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 00BC0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 007F0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 00BE0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 00BD0000
    dozzyo9080, May 8, 2011
    #13

  14. dozzyo9080 Newcomer, in training

    Gmer 9

    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 00BC0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 007F0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 00BF0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 01ED0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 00810000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 01EE0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 01F30000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 00BD0000
    IAT C:\Windows\ehome\ehmsas.exe[2132] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 00EB0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 01BB0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 01700000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 003C0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 01BD0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 003E0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 00930000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 003D0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 003F0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 01BA0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 01BE0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 003C0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 01BD0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 01BA0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 01BE0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 01BB0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 01BD0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 00930000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 003E0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 01BA0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 003C0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 01BB0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 01BE0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 01BE0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 01BA0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 01700000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 01BD0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 01BF0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 00930000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 003C0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 01BB0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 003C0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 01BE0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 01BA0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 01BB0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 003D0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 003F0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 003E0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 00930000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 01BE0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 01BA0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 01BB0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 003C0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] 00930000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!TerminateProcess] 003C0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] 01BD0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!OpenProcess] 01700000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] 003E0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] 01BE0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] 01BB0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] 01BA0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\SHELL32.dll [USER32.dll!ExitWindowsEx] 01C00000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 003E0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 01BD0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 01700000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 003C0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 01BB0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 01BA0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 01BE0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!TerminateProcess] 003C0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] 01BE0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryA] 01BA0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindNextFileW] 00930000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindFirstFileW] 003E0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExW] 01BD0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindNextFileW] 00930000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindFirstFileW] 003E0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] 01BE0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] 01BA0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!TerminateProcess] 003C0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!TerminateProcess] 003C0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] 01BA0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] 01BB0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe[2360] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] 01BE0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 01D20000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 01D30000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 01C90000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 01CA0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 01C80000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 01D00000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 01B50000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 01B50000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 01D10000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 01D00000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 01C80000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 01D10000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 01CA0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 01C90000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 01D00000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 01B50000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 01C80000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 01C80000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 01D00000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 01D50000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 01D10000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 01D40000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 01CA0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 01B50000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 01B50000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 01C80000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 01D00000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 01D50000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 01B50000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 01D10000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 01C90000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 01CA0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 01D20000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 01D30000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 01D00000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 01C80000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] 01CA0000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!TerminateProcess] 01B50000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] 01D10000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!OpenProcess] 01D50000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] 01C90000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] 01C80000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] 01D00000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\SHELL32.dll [USER32.dll!ExitWindowsEx] 01D60000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 01C90000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 01D10000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 01D50000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 01B50000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 01C70000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 01D00000
    IAT D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe[2452] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 01C80000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 014B0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 01480000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 01460000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 014A0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 014E0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 014D0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 01450000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 01490000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 01450000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 014B0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 01480000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 01490000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 014A0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 014D0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 014F0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 01480000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 01450000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 01490000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 014B0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 01450000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 014A0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 01480000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 014B0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 01490000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] 014D0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!TerminateProcess] 01450000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] 014A0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!OpenProcess] 01460000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] 014F0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] 014B0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] 01490000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] 01480000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHELL32.dll [USER32.dll!ExitWindowsEx] 014C0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 01500000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 01510000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 014F0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 014D0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 014B0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 01480000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 01490000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 01450000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 01490000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 01460000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 01450000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 014A0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 014F0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 014D0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 01500000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 01510000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 01480000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 014B0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 014F0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 014A0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 01460000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 01450000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 01490000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 01480000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 014B0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindNextFileW] 014D0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindFirstFileW] 014F0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] 014B0000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] 01480000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!TerminateProcess] 01450000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!TerminateProcess] 01450000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] 01480000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] 01490000
    IAT C:\Windows\ehome\ehtray.exe[2532] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] 014B0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 02DF0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 02AB0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 02A90000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 02DD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 02AC0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 02DE0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 02E00000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 02AC0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 02DF0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 02DD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 02E00000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 02DE0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 02E00000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 02DD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 02AD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 02DF0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 02E10000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 02AB0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 02AC0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 02DE0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 02AC0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 02E00000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 02DD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 02DE0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!TerminateProcess] 02AC0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] 02DD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] 02DE0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] 02E00000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!TerminateProcess] 02AC0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] 02E00000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] 02DD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryExW] 02DF0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryW] 02DE0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 02E20000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 02E30000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 02A90000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 02AB0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 02E00000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 02DD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 02DE0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 02AC0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 02A90000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 02DF0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 02AD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 02AC0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 02DE0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 02DD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 02E00000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] 02AB0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!TerminateProcess] 02AC0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] 02DF0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!OpenProcess] 02AD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] 02A90000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] 02E00000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] 02DE0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] 02DD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHELL32.dll [USER32.dll!ExitWindowsEx] 02E40000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 02DE0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 02AD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 02AC0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 02DF0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 02A90000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 02AB0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 02E20000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 02E30000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 02DD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 02E00000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!TerminateProcess] 02AC0000
    dozzyo9080, May 8, 2011
    #14

  15. dozzyo9080 Newcomer, in training

    Gmer 10

    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindNextFileW] 02AB0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindFirstFileW] 02A90000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExW] 02DF0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindNextFileW] 02AB0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindFirstFileW] 02A90000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] 02E00000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] 02DD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!TerminateProcess] 02AC0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!FindFirstFileA] 02E20000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!FindNextFileA] 02E30000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryW] 02DE0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!TerminateProcess] 02AC0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryExW] 02DF0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] 02E00000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryA] 02DD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\iphlpapi.dll [KERNEL32.dll!OpenProcess] 02AD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\iphlpapi.dll [KERNEL32.dll!TerminateProcess] 02AC0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\iphlpapi.dll [KERNEL32.dll!LoadLibraryA] 02DD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress] 02E00000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\PSAPI.DLL [KERNEL32.dll!TerminateProcess] 02AC0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!LoadLibraryA] 02DD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] 02E00000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!TerminateProcess] 02AC0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] 02DE0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] 02DD0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] 02E00000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!TerminateProcess] 02AC0000
    IAT C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe[2556] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!OpenProcess] 02AD0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 00CE0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 00CD0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 00E70000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 00E90000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 00D10000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 00D00000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 00CC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 00E80000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 00CC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 00CE0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 00CD0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 00E80000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 00CC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 00E90000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 00CD0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 00CE0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 00E80000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 00E90000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 00D00000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 00EA0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 00CD0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 00CC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 00E80000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 00CE0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 00EB0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 00EC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 00EA0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 00D00000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 00CE0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 00CD0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 00E80000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 00CC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] 00D00000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!TerminateProcess] 00CC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] 00E90000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!OpenProcess] 00E70000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] 00EA0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] 00CE0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] 00E80000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] 00CD0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHELL32.dll [USER32.dll!ExitWindowsEx] 00ED0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 00E80000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 00E70000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 00CC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 00E90000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 00EA0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 00D00000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 00EB0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 00EC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 00CD0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 00CE0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\IPHLPAPI.DLL [KERNEL32.dll!OpenProcess] 00E70000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\IPHLPAPI.DLL [KERNEL32.dll!TerminateProcess] 00CC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\IPHLPAPI.DLL [KERNEL32.dll!LoadLibraryA] 00CD0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\IPHLPAPI.DLL [KERNEL32.dll!GetProcAddress] 00CE0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!TerminateProcess] 00CC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] 00CE0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] 00CD0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryExW] 00E90000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryW] 00E80000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\Secur32.dll [KERNEL32.dll!TerminateProcess] 00CC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\Secur32.dll [KERNEL32.dll!LoadLibraryA] 00CD0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\Secur32.dll [KERNEL32.dll!LoadLibraryW] 00E80000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\Secur32.dll [KERNEL32.dll!GetProcAddress] 00CE0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\CRYPT32.dll [KERNEL32.dll!TerminateProcess] 00CC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] 00CE0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\CRYPT32.dll [KERNEL32.dll!LoadLibraryA] 00CD0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\CRYPT32.dll [KERNEL32.dll!FindNextFileW] 00D00000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\CRYPT32.dll [KERNEL32.dll!FindFirstFileW] 00EA0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExW] 00E90000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\USERENV.dll [KERNEL32.dll!FindNextFileW] 00D00000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\USERENV.dll [KERNEL32.dll!FindFirstFileW] 00EA0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\USERENV.dll [KERNEL32.dll!GetProcAddress] 00CE0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\USERENV.dll [KERNEL32.dll!LoadLibraryA] 00CD0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\USERENV.dll [KERNEL32.dll!TerminateProcess] 00CC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] 00E80000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] 00CD0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] 00CE0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\NETAPI32.dll [KERNEL32.dll!TerminateProcess] 00CC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\System32\NETAPI32.dll [KERNEL32.dll!OpenProcess] 00E70000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\PSAPI.DLL [KERNEL32.dll!TerminateProcess] 00CC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 00EA0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 00E90000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 00E70000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 00CC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 00E80000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 00CD0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 00CE0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!FindFirstFileA] 00EB0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!FindNextFileA] 00EC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryW] 00E80000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!TerminateProcess] 00CC0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryExW] 00E90000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] 00CE0000
    IAT C:\Windows\System32\p2phost.exe[2564] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryA] 00CD0000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 03E60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 04750000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 04720000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 03E80000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 04740000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 04730000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 04B60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 04B70000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 05EB0000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 03E60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 03E70000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 04B60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 04730000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 04740000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 03E80000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 03E80000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 04750000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 04730000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 04B60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 04740000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 04750000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 03E70000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 03E60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 04730000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 03E80000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 04740000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 04B60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 04B60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 04730000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 04720000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 04750000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 05EC0000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 03E70000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 03E80000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 04740000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 03E80000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 04B60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 04730000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 04740000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!TerminateProcess] 03E80000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] 04B60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryA] 04730000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindNextFileW] 03E70000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindFirstFileW] 03E60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExW] 04750000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindNextFileW] 03E70000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindFirstFileW] 03E60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] 04B60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] 04730000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!TerminateProcess] 03E80000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!TerminateProcess] 03E80000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] 04730000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] 04740000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] 04B60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 04740000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 04720000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 03E80000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 04750000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 03E60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 03E70000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 04B70000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 05EB0000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 04730000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 04B60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\wininet.dll [KERNEL32.dll!FindFirstFileA] 04B70000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\wininet.dll [KERNEL32.dll!FindNextFileA] 05EB0000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\wininet.dll [KERNEL32.dll!LoadLibraryW] 04740000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\wininet.dll [KERNEL32.dll!TerminateProcess] 03E80000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\wininet.dll [KERNEL32.dll!LoadLibraryExW] 04750000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\wininet.dll [KERNEL32.dll!GetProcAddress] 04B60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\wininet.dll [KERNEL32.dll!LoadLibraryA] 04730000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\shell32.dll [KERNEL32.dll!FindNextFileW] 03E70000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\shell32.dll [KERNEL32.dll!TerminateProcess] 03E80000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\shell32.dll [KERNEL32.dll!LoadLibraryExW] 04750000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\shell32.dll [KERNEL32.dll!OpenProcess] 04720000
    dozzyo9080, May 8, 2011
    #15

  16. dozzyo9080 Newcomer, in training

    Gmer 11

    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\shell32.dll [KERNEL32.dll!OpenProcess] 04720000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\shell32.dll [KERNEL32.dll!FindFirstFileW] 03E60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\shell32.dll [KERNEL32.dll!GetProcAddress] 04B60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\shell32.dll [KERNEL32.dll!LoadLibraryW] 04740000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\shell32.dll [KERNEL32.dll!LoadLibraryA] 04730000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\shell32.dll [USER32.dll!ExitWindowsEx] 05EE0000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!TerminateProcess] 03E80000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] 04B60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] 04730000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryExW] 04750000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryW] 04740000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\Iphlpapi.dll [KERNEL32.dll!OpenProcess] 04720000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\Iphlpapi.dll [KERNEL32.dll!TerminateProcess] 03E80000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\Iphlpapi.dll [KERNEL32.dll!LoadLibraryA] 04730000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\Iphlpapi.dll [KERNEL32.dll!GetProcAddress] 04B60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] 04740000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] 04730000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] 04B60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!TerminateProcess] 03E80000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!OpenProcess] 04720000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\PSAPI.DLL [KERNEL32.dll!TerminateProcess] 03E80000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!LoadLibraryA] 04730000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] 04B60000
    IAT C:\Program Files\Skype\Phone\Skype.exe[2580] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!TerminateProcess] 03E80000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 018B0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 018A0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 01D80000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 01DA0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 019D0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 019C0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 019E0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 01D90000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 019E0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 018B0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 018A0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 01D90000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 01DC0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 01DD0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 01DB0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 019C0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 018B0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 018A0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 01D90000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 019E0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 019E0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 01DA0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 018A0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 018B0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 01D90000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 01DA0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 019C0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 01DB0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 018A0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 019E0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 01D90000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 018B0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 01D90000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 01D80000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 019E0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 01DA0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 01DB0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 019C0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 01DC0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 01DD0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 018A0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 018B0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] 019C0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!TerminateProcess] 019E0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] 01DA0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!OpenProcess] 01D80000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] 01DB0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] 018B0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] 01D90000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] 018A0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SHELL32.dll [USER32.dll!ExitWindowsEx] 01DE0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 01DB0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 01DA0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 01D80000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 019E0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 01D90000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 018A0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 018B0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\PSAPI.DLL [KERNEL32.dll!TerminateProcess] 019E0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!TerminateProcess] 019E0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] 018B0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] 018A0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryExW] 01DA0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryW] 01D90000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!TerminateProcess] 019E0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] 018A0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] 01D90000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] 018B0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindNextFileW] 019C0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindFirstFileW] 01DB0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] 018B0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] 018A0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!TerminateProcess] 019E0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!TerminateProcess] 019E0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] 018B0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryA] 018A0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindNextFileW] 019C0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindFirstFileW] 01DB0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExW] 01DA0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!LoadLibraryA] 018A0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] 018B0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!TerminateProcess] 019E0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] 01D90000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] 018A0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] 018B0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!TerminateProcess] 019E0000
    IAT C:\Program Files\uTorrent\uTorrent.exe[2588] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!OpenProcess] 01D80000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 00410000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 00240000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 00230000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 00200000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 000E0000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 00210000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 00220000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 000E0000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 00410000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 00200000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 00220000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 00210000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 00220000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 00200000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 00430000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 00410000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 00420000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 00240000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 000E0000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 00210000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 000E0000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 00220000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 00200000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 00210000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 009D0000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 009E0000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 00230000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 00240000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 00220000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 00200000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 00210000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 000E0000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] 00240000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!TerminateProcess] 000E0000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] 00410000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!OpenProcess] 00430000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] 00230000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] 00220000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] 00210000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] 00200000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHELL32.dll [USER32.dll!ExitWindowsEx] 009F0000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 00210000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 00430000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 000E0000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 00410000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 00230000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 00240000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 009D0000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 009E0000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 00200000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 00220000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 00230000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 00410000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 00430000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 000E0000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 00210000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 00200000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 00220000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindNextFileW] 00240000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindFirstFileW] 00230000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] 00220000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] 00200000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!TerminateProcess] 000E0000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!TerminateProcess] 000E0000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] 00200000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] 00210000
    IAT C:\Windows\system32\rundll32.exe[3160] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] 00220000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 00830000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 00820000
    dozzyo9080, May 8, 2011
    #16

  17. dozzyo9080 Newcomer, in training

    Gmer 12

    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 00860000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 00880000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 00850000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 00840000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 00240000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 00870000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 00240000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 00830000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 00820000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 00870000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 00880000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 00840000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 00890000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 00820000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 00240000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 00870000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 00830000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 00240000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 00880000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 00820000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 00830000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 00870000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 008A0000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 008B0000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 00890000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 00840000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 00830000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 00820000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 00870000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 00240000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 00890000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 00880000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 00860000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 00240000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 00870000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 00820000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 00830000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] 00840000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!TerminateProcess] 00240000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] 00880000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!OpenProcess] 00860000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] 00890000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] 00830000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] 00870000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] 00820000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHELL32.dll [USER32.dll!ExitWindowsEx] 008D0000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 00870000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 00860000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 00240000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 00880000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 00890000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 00840000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 008A0000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 008B0000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 00820000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 00830000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\System32\Secur32.dll [KERNEL32.dll!TerminateProcess] 00240000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\System32\Secur32.dll [KERNEL32.dll!LoadLibraryA] 00820000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\System32\Secur32.dll [KERNEL32.dll!LoadLibraryW] 00870000
    IAT C:\Windows\System32\mobsync.exe[4772] @ C:\Windows\System32\Secur32.dll [KERNEL32.dll!GetProcAddress] 00830000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 00BE0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 00E00000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 00BF0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 00E10000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 00BD0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 00E60000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 00BB0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 00BA0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 00BF0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 00BC0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 00E70000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 00BA0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 00BB0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 00E60000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 00BD0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 00BA0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 00BC0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 00E60000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 00BD0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 00BB0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 00BC0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 00E10000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 00BF0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 00E60000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 00BA0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 00BB0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 00BD0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 00BD0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 00E60000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 00E70000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 00BC0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 00E80000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 00E10000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 00BA0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 00BB0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 00BA0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 00BD0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 00E60000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 00BB0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 00BB0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 00E70000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 00BA0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 00BC0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 00BF0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 00E10000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 00BE0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 00E00000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 00E60000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 00BD0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] 00E10000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!TerminateProcess] 00BA0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] 00BC0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!OpenProcess] 00E70000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] 00BF0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] 00BD0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] 00BB0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] 00E60000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\SHELL32.dll [USER32.dll!ExitWindowsEx] 00E90000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!TerminateProcess] 00BA0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] 00BD0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryA] 00E60000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindNextFileW] 00E10000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!FindFirstFileW] 00BF0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExW] 00BC0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindNextFileW] 00E10000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!FindFirstFileW] 00BF0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] 00BD0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] 00E60000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!TerminateProcess] 00BA0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!TerminateProcess] 00BA0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] 00E60000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] 00BB0000
    IAT C:\Windows\system32\wuauclt.exe[4796] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] 00BD0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 008A0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 002E0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 002D0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 00890000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 002C0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 000E0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 000D0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 00880000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 000D0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 008A0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 002E0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 00880000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 008B0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 008D0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 008C0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 000E0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 008A0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 002E0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 00880000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 000D0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 008C0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 00890000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 002D0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 000D0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 00880000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 002E0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 008A0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 000D0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 00890000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 002E0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 008A0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 00880000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 00890000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 000E0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 008C0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 002E0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 000D0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 00880000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 008A0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 00880000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 002D0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 000D0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 00890000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 008C0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 000E0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 008B0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 008D0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 002E0000
    IAT C:\Windows\system32\wbem\unsecapp.exe[5900] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 008A0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] 01C90000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] 01B60000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!OpenProcess] 01CE0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] 02000000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindFirstFileExW] 01CD0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!FindNextFileW] 01CC0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!TerminateProcess] 01CA0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] 01CB0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!TerminateProcess] 01CA0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] 01C90000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] 01B60000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] 01CB0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!TerminateProcess] 01CA0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] 02000000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] 01B60000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] 01C90000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] 01CB0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] 02000000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] 01CC0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] 02010000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] 01B60000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!TerminateProcess] 01CA0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] 01CB0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] 01C90000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 02020000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] 02030000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 02010000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] 01CC0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 01C90000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 01B60000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 01CB0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 01CA0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 02010000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 02000000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenProcess] 01CE0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 01CA0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 01CB0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 01B60000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 01C90000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] 01CB0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!OpenProcess] 01CE0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!TerminateProcess] 01CA0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] 02000000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] 02010000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] 01CC0000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] 02020000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] 02030000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] 01B60000
    IAT C:\Users\Austin ROCKS\Downloads\m34ikzk5.exe[5996] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] 01C90000

    ---- EOF - GMER 1.0.15 ----
    dozzyo9080, May 8, 2011
    #17

  18. Broni Malware Annihilator

    Good :)

    Go on....
    Broni, May 8, 2011
    #18

  19. dozzyo9080 Newcomer, in training

    DDS log 1

    DDS:

    .
    DDS (Ver_11-03-05.01) - NTFSx86
    Run by Austin ROCKS at 11:57:47.08 on Sun 05/08/2011
    Internet Explorer: 8.0.6001.19048 BrowserJavaVersion: 1.6.0_25
    Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.1790.526 [GMT -7:00]
    .
    AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
    SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    ============== Running Processes ===============
    .
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\nvvsvc.exe
    C:\Windows\system32\svchost.exe -k rpcss
    C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    C:\Windows\system32\SLsvc.exe
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\nvvsvc.exe
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\taskeng.exe
    C:\Windows\RtHDVCpl.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Microsoft Security Client\msseces.exe
    C:\Windows\system32\agrsmsvc.exe
    C:\Windows\System32\svchost.exe -k Akamai
    C:\Windows\system32\svchost.exe -k apphost
    C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
    C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
    C:\Windows\system32\svchost.exe -k bthsvcs
    C:\Windows\system32\CISVC.EXE
    C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe
    D:\Program Files\CyberLink\YouCam\YouCam\YCMMirage.exe
    D:\Program Files\CyberLink\YouCam\YouCam\YouCamTray.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\Windows\ehome\ehtray.exe
    C:\Users\Austin ROCKS\AppData\Roaming\Google\Google Talk\googletalk.exe
    C:\Windows\System32\p2phost.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\uTorrent\uTorrent.exe
    C:\Program Files\Flip Video\FlipShare\FlipShareService.exe
    C:\Windows\system32\inetsrv\inetinfo.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\System32\svchost.exe -k ipripsvc
    C:\Windows\System32\svchost.exe -k LPDService
    c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe
    C:\Windows\system32\mqsvc.exe
    C:\Windows\system32\rundll32.exe
    C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
    C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
    C:\Program Files\Norton Safe Web Lite\Engine\1.2.0.6\ccSvcHst.exe
    C:\Windows\system32\PnkBstrA.exe
    C:\Windows\system32\PnkBstrB.exe
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    C:\Windows\System32\tcpsvcs.exe
    C:\Windows\System32\snmp.exe
    C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Windows\system32\svchost.exe -k svcboot_qsgffroe
    C:\Windows\system32\svchost.exe -k iissvcs
    C:\Windows\System32\svchost.exe -k WerSvcGroup
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Windows\system32\mqtgsvc.exe
    C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
    C:\Users\Austin ROCKS\AppData\Local\Google\Update\1.3.21.53\GoogleCrashHandler.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
    C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
    C:\Windows\system32\wbem\unsecapp.exe
    "C:\Windows\system32\svchost.exe"
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Program Files\Zune\ZuneNss.exe
    C:\Windows\system32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Mozilla Firefox\plugin-container.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\Windows\system32\SearchProtocolHost.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Windows\system32\DllHost.exe
    C:\Windows\system32\DllHost.exe
    c:\Users\Austin ROCKS\Downloads\dds.scr
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://www.bing.com/?pc=Z008&form=ZGAPHP
    uSearch Page = hxxp://www.google.com
    uSearch Bar = hxxp://www.google.com/ie
    mStart Page = hxxp://www.yahoo.com/
    mDefault_Page_URL = hxxp://www.yahoo.com/
    mDefault_Search_URL = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
    mSearch Page = hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com
    mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
    uInternet Settings,ProxyOverride = *.local
    uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s
    mSearchAssistant =
    uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
    mURLSearchHooks: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
    BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
    BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
    BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\programdata\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
    BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
    BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
    BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: {9D425283-D487-4337-BAB6-AB8354A81457} - No File
    BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
    BHO: Norton Safe Web Lite BHO: {f0da78e9-6b60-42fb-bc26-ef2cfb8c8ff3} - c:\program files\norton safe web lite\engine\1.2.0.6\coIEPlg.dll
    TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
    TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
    TB: {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - No File
    TB: {9D425283-D487-4337-BAB6-AB8354A81457} - No File
    TB: Norton Safe Web Lite: {30ceeea2-3742-40e4-85dd-812bf1cbb83d} - c:\program files\norton safe web lite\engine\1.2.0.6\coIEPlg.dll
    TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
    TB: {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No File
    uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
    uRun: [DS3 Tool] c:\progra~1\motion~1\ds3\DS3_Tool.exe -mini
    uRun: [googletalk] c:\users\austin rocks\appdata\roaming\google\google talk\googletalk.exe /autostart
    uRun: [AdobeBridge] "c:\program files\adobe\adobe bridge cs5\Bridge.exe" -stealth
    uRun: [CollaborationHost] c:\windows\system32\p2phost.exe -s
    uRun: [EADM] "c:\program files\electronic arts\eadm\eadmui\EADMUI.exe"
    uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
    uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe"
    uRun: [Google Update] "c:\users\austin rocks\appdata\local\google\update\GoogleUpdate.exe" /c
    mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    mRun: [RtHDVCpl] RtHDVCpl.exe
    mRun: [Skytel] Skytel.exe
    mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
    mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
    mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
    mRun: [AdobeAAMUpdater-1.0] "c:\program files\common files\adobe\oobe\pdapp\uwa\UpdaterStartupUtility.exe"
    mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
    mRun: [YouCam Mirage] "d:\program files\cyberlink\youcam\youcam\YCMMirage.exe"
    mRun: [YouCam Tray] "d:\program files\cyberlink\youcam\youcam\YouCamTray.exe" /s
    mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
    dRun: [AntiVirus Plus] "c:\windows\system32\rundll32.exe" "c:\windows\system32\config\systemprofile\appdata\roaming\antivirus plus\AntiVirus Plus.555011.dll", start 555011
    dRun: [CSmileys] "c:\progra~1\crawler\smileys\CSmileysIM.exe"
    dRun: [RunWeather] c:\progra~1\crawler\weather\CWeather.exe /SHOWTRAY
    dRunOnce: [FlashPlayerUpdate] c:\windows\system32\macromed\flash\FlashUtil10e.exe
    StartupFolder: c:\users\austin~1\appdata\roaming\micros~1\windows\startm~1\programs\startup\stardo~1.lnk - c:\program files\stardock\objectdockfree\ObjectDock.exe
    StartupFolder: c:\users\austin~1\appdata\roaming\micros~1\windows\startm~1\programs\startup\autoru~1\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
    StartupFolder: c:\users\austin~1\appdata\roaming\micros~1\windows\startm~1\programs\startup\autoru~1\xfire.lnk - c:\program files\xfire\Xfire.exe
    StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\autoru~1\mcafee~1.lnk - c:\program files\mcafee security scan\2.0.181\SSScheduler.exe
    StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\autoru~1\winzip~1.lnk - c:\program files\winzip\WZQKPICK.EXE
    mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
    mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
    IE: Send To &Bluetooth
    IE: {FA32182A-EA44-4583-803B-AA827F0D4E06}
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
    Trusted Zone: aol.com\free
    Trusted Zone: internet
    Trusted Zone: mcafee.com
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
    DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    TCP: {5F663464-BA11-4C0A-A566-05D613FA2B72} = 208.67.222.222,208.67.220.220
    Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
    Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
    AppInit_DLLs: c:\progra~1\google\google~3\GOEC62~1.DLL
    STS: ObjectDockShlExt Class: {1984d045-52cf-49cd-db77-08f378fea4db} - c:\program files\stardock\objectdockfree\ODMenu.dll
    Hosts: 89.149.210.47 www.google.nl
    Hosts: 89.149.210.47 www.google.fr
    Hosts: 89.149.210.47 us.search.yahoo.com
    Hosts: 89.149.210.47 www.google.ca
    Hosts: 89.149.210.47 uk.search.yahoo.com
    .
    Note: multiple HOSTS entries found. Please refer to Attach.txt
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - c:\users\austin~1\appdata\roaming\mozilla\firefox\profiles\zlmaa4wf.default\
    FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&SearchSource=3&q={searchTerms}
    FF - prefs.js: browser.search.selectedEngine - Google
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/webhp?rls=ig
    FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=mcafee&p=
    FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
    FF - plugin: c:\program files\google\update\1.2.183.23\npGoogleOneClick8.dll
    FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
    FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
    FF - plugin: c:\program files\mcafee\supportability\mvt\NPMVTPlugin.dll
    FF - plugin: c:\program files\microsoft silverlight\4.0.60310.0\npctrlui.dll
    FF - plugin: c:\program files\microsoft\office live\npOLW.dll
    FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
    FF - plugin: c:\program files\mozilla firefox\plugins\NPDFusionWebFirefox.dll
    FF - plugin: c:\program files\pando networks\media booster\npPandoWebPlugin.dll
    FF - plugin: c:\program files\total immersion\dfusionhomewebplugin\NPDFusionWebFirefox.dll
    FF - plugin: c:\program files\unity\webplayer\loader\npUnity3D32.dll
    FF - plugin: c:\program files\wildtangent games\app\browserintegration\registered\2\NP_wtapp.dll
    FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
    FF - plugin: c:\programdata\nexonus\ngm\npNxGameUS.dll
    FF - plugin: c:\programdata\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll
    FF - plugin: c:\users\austin rocks\appdata\local\flock\update\1.2.213.0\npFlockOneClick8.dll
    FF - plugin: c:\users\austin rocks\appdata\local\google\update\1.3.21.53\npGoogleUpdate3.dll
    FF - plugin: c:\users\austin rocks\appdata\roaming\mozilla\firefox\profiles\zlmaa4wf.default\extensions\gametapplayer@gametap.com\plugins\npGameTapWebPlayer.dll
    .
    ---- FIREFOX POLICIES ----
    FF - user.js: signed.applets.codebase_principal_support - true
    .
    /* To avoid the user interaction, add the following lines: */
    FF - user.js: capability.principal.codebase.YummyPlayer_YAEL.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_YAEL.id - hxxp://yael.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_LHOST.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_LHOST.id - hxxp://localhost/
    .
    /* GLDE */
    FF - user.js: capability.principal.codebase.YummyPlayer_GLDE.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_GLDE.id - hxxp://gamesflatrate.de/
    FF - user.js: capability.principal.codebase.YummyPlayer_WGLDE.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_WGLDE.id - hxxp://www.gamesflatrate.de/
    FF - user.js: capability.principal.codebase.YummyPlayer_GLDEINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_GLDEINT.id - hxxp://glde-int.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SGLDE.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SGLDE.id - hxxps://gamesflatrate.de/
    FF - user.js: capability.principal.codebase.YummyPlayer_WSGLDE.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_WSGLDE.id - hxxps://www.gamesflatrate.de/
    .
    /* BGFR */
    FF - user.js: capability.principal.codebase.YummyPlayer_BGFR.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_BGFR.id - hxxp://linternaute.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SBGFR.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SBGFR.id - hxxps://linternaute.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_BGFRINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_BGFRINT.id - hxxp://bgfr-int.metaboli.fr/
    .
    /* BILD */
    FF - user.js: capability.principal.codebase.YummyPlayer_BILD.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_BILD.id - hxxp://bild.metaboli.de/
    FF - user.js: capability.principal.codebase.YummyPlayer_SBILD.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SBILD.id - hxxps://bild.metaboli.de/
    FF - user.js: capability.principal.codebase.YummyPlayer_BILDINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_BILDINT.id - hxxp://bild-int.metaboli.fr/
    .
    /* BTUK */
    FF - user.js: capability.principal.codebase.YummyPlayer_BTUK.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_BTUK.id - hxxp://btvision.metaboli.co.uk/
    FF - user.js: capability.principal.codebase.YummyPlayer_SBTUK.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SBTUK.id - hxxps://btvision.metaboli.co.uk/
    FF - user.js: capability.principal.codebase.YummyPlayer_BTUKINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_BTUKINT.id - hxxp://bt-int.metaboli.fr/
    .
    /* CLIC */
    FF - user.js: capability.principal.codebase.YummyPlayer_CLIC.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_CLIC.id - hxxp://clubic.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SCLIC.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SCLIC.id - hxxps://clubic.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_CLICINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_CLICINT.id - hxxp://clic-int.metaboli.fr/
    .
    /* COUK */
    FF - user.js: capability.principal.codebase.YummyPlayer_COUK.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_COUK.id - hxxp://metaboli.co.uk/
    FF - user.js: capability.principal.codebase.YummyPlayer_WCOUK.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_WCOUK.id - hxxp://www.metaboli.co.uk/
    FF - user.js: capability.principal.codebase.YummyPlayer_WSCOUK.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_WSCOUK.id - hxxps://www.metaboli.co.uk/
    FF - user.js: capability.principal.codebase.YummyPlayer_SCOUK.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SCOUK.id - hxxps://metaboli.co.uk/
    FF - user.js: capability.principal.codebase.YummyPlayer_COUKINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_COUKINT.id - hxxp://uk-int.metaboli.fr/
    .
    /* MEDE */
    FF - user.js: capability.principal.codebase.YummyPlayer_MEDE.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_MEDE.id - hxxp://metaboli.de/
    FF - user.js: capability.principal.codebase.YummyPlayer_WMEDE.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_WMEDE.id - hxxp://www.metaboli.de/
    FF - user.js: capability.principal.codebase.YummyPlayer_SMEDE.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SMEDE.id - hxxps://metaboli.de/
    FF - user.js: capability.principal.codebase.YummyPlayer_MEDEINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_MEDEINT.id - hxxp://de-int.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_WSMEDE.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_WSMEDE.id - hxxps://www.metaboli.de/
    .
    /* CUUK */
    FF - user.js: capability.principal.codebase.YummyPlayer_CUUK.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_CUUK.id - hxxp://custompc.metaboli.co.uk/
    FF - user.js: capability.principal.codebase.YummyPlayer_SCUUK.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SCUUK.id - hxxps://custompc.metaboli.co.uk/
    FF - user.js: capability.principal.codebase.YummyPlayer_CUUKINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_CUUKINT.id - hxxp://cuuk-int.metaboli.fr/
    .
    /* EUUK */
    FF - user.js: capability.principal.codebase.YummyPlayer_EUUK.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_EUUK.id - hxxp://eurogamer.metaboli.co.uk/
    FF - user.js: capability.principal.codebase.YummyPlayer_SEUUK.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SEUUK.id - hxxps://eurogamer.metaboli.co.uk/
    FF - user.js: capability.principal.codebase.YummyPlayer_EUUKINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_EUUKINT.id - hxxp://euuk-int.metaboli.fr/
    .
    /* FUNR */
    FF - user.js: capability.principal.codebase.YummyPlayer_FUNR.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_FUNR.id - hxxp://fun.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SFUNR.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SFUNR.id - hxxps://fun.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_FUNRINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_FUNRINT.id - hxxp://fun-int.metaboli.fr/
    .
    /* GONE */
    FF - user.js: capability.principal.codebase.YummyPlayer_GONE.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_GONE.id - hxxp://gameone.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SGONE.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SGONE.id - hxxps://gameone.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_GONEINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_GONEINT.id - hxxp://gone-int.metaboli.fr/
    .
    /* GUDE */
    FF - user.js: capability.principal.codebase.YummyPlayer_GUDE.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_GUDE.id - hxxp://gamerunlimited.metaboli.de/
    FF - user.js: capability.principal.codebase.YummyPlayer_SGUDE.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SGUDE.id - hxxps://gamerunlimited.metaboli.de/
    FF - user.js: capability.principal.codebase.YummyPlayer_GUDEINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_GUDEINT.id - hxxp://gude-int.metaboli.fr/
    .
    /* META */
    FF - user.js: capability.principal.codebase.YummyPlayer_META.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_META.id - hxxp://metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_WMETA.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_WMETA.id - hxxp://www.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SMETA.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SMETA.id - hxxps://metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_WSMETA.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_WSMETA.id - hxxps://www.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_METAINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_METAINT.id - hxxp://fr-int.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_METAINT2.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_METAINT2.id - hxxp://www.preprod.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SMETAINT2.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SMETAINT2.id - hxxp://www.preprod.metaboli.fr/
    .
    /* MNDE */
    FF - user.js: capability.principal.codebase.YummyPlayer_MNDE.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_MNDE.id - hxxp://livegames.metaboli.de/
    FF - user.js: capability.principal.codebase.YummyPlayer_SMNDE.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SMNDE.id - hxxps://livegames.metaboli.de/
    FF - user.js: capability.principal.codebase.YummyPlayer_MNDEINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_MNDEINT.id - hxxp://msde-int.metaboli.fr/
    .
    /* MNFR */
    FF - user.js: capability.principal.codebase.YummyPlayer_MNFR.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_MNFR.id - hxxp://livegames.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SMNFR.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SMNFR.id - hxxps://livegames.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_MNFRINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_MNFRINT.id - hxxp://msfr-int.metaboli.fr/
    .
    /* MNUK */
    FF - user.js: capability.principal.codebase.YummyPlayer_MNUK.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_MNUK.id - hxxp://livegames.metaboli.co.uk/
    FF - user.js: capability.principal.codebase.YummyPlayer_SMNUK.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SMNUK.id - hxxps://livegames.metaboli.co.uk/
    FF - user.js: capability.principal.codebase.YummyPlayer_MNUKINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_MNUKINT.id - hxxp://msuk-int.metaboli.fr/
    .
    /* NCNU */
    FF - user.js: capability.principal.codebase.YummyPlayer_NCNU.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_NCNU.id - hxxp://numericable.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SNCNU.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SNCNU.id - hxxps://numericable.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_NCNUINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_NCNUINT.id - hxxp://ncnu-int.metaboli.fr/
    .
    /* QPUK */
    FF - user.js: capability.principal.codebase.YummyPlayer_QPUK.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_QPUK.id - hxxp://quintplay.metaboli.co.uk/
    FF - user.js: capability.principal.codebase.YummyPlayer_SQPUK.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SQPUK.id - hxxps://quintplay.metaboli.co.uk/
    FF - user.js: capability.principal.codebase.YummyPlayer_QPUKINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_QPUKINT.id - hxxp://qpuk-int.metaboli.fr/
    .
    /* SFFR */
    FF - user.js: capability.principal.codebase.YummyPlayer_SFFR.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SFFR.id - hxxp://jeux-pc.sfr.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SSFFR.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SSFFR.id - hxxps://jeux-pc.sfr.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SFFRM.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SFFRM.id - hxxp://sfr.metaboli.fr/
    dozzyo9080, May 8, 2011
    #19

  20. dozzyo9080 Newcomer, in training

    DDS log 2

    FF - user.js: capability.principal.codebase.YummyPlayer_SSFFRM.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SSFFRM.id - hxxps://sfr.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SFFRINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SFFRINT.id - hxxp://sfr-int.metaboli.fr/
    .
    /* SPDE */
    FF - user.js: capability.principal.codebase.YummyPlayer_SPDE.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SPDE.id - hxxp://spieletipps.metaboli.de/
    FF - user.js: capability.principal.codebase.YummyPlayer_SSPDE.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SSPDE.id - hxxps://spieletipps.metaboli.de/
    FF - user.js: capability.principal.codebase.YummyPlayer_SPDEINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SPDEINT.id - hxxp://spde-int.metaboli.fr/
    .
    /* WOJ_ */
    FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_.id - hxxp://woj-prod.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_.id - hxxps://woj-prod.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_INT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_INT.id - hxxp://woj-int.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_INT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_INT.id - hxxps://woj-int.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_PP.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_PP.id - hxxp://woj-pp.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_PP.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_PP.id - hxxps://woj-pp.metaboli.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_PPINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_PPINT.id - hxxp://woj-int.jeu.orange.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_PPINT.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_PPINT.id - hxxps://woj-int.jeu.orange.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_2.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_2.id - hxxp://preprod-god.jeu.orange.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_2.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_2.id - hxxps://preprod-god.jeu.orange.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_3.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_3.id - hxxp://prod.jeu.orange.fr/
    FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_3.granted - UniversalXPConnect
    FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_3.id - hxxps://prod.jeu.orange.fr/
    .
    user_pref(capability.principal.codebase.YummyPlayer_XX0001.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0001.id,hxxp://www.neufgame.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0002.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0002.id,hxxps://www.neufgame.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0003.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0003.id,hxxp://neufgame.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0004.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0004.id,hxxp://ad.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0005.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0005.id,hxxps://ad.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0006.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0006.id,hxxp://ads.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0007.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0007.id,hxxps://ads.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0008.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0008.id,hxxp://ads.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0009.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0009.id,hxxps://ads.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0010.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0010.id,hxxp://ads.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0011.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0011.id,hxxps://ads.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0012.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0012.id,hxxp://ag.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0013.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0013.id,hxxps://ag.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0014.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0014.id,hxxp://alice.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0015.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0015.id,hxxps://alice.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0016.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0016.id,hxxp://allocine.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0017.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0017.id,hxxps://allocine.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0018.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0018.id,hxxp://am.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0019.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0019.id,hxxps://am.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0020.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0020.id,hxxp://aol.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0021.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0021.id,hxxps://aol.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0022.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0022.id,hxxp://bc.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0023.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0023.id,hxxps://bc.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0024.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0024.id,hxxp://linternaute.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0025.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0025.id,hxxps://linternaute.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0026.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0026.id,hxxp://bild.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0027.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0027.id,hxxps://bild.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0028.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0028.id,hxxp://btvision.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0029.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0029.id,hxxps://btvision.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0030.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0030.id,hxxp://www.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0031.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0031.id,hxxp://cg.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0032.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0032.id,hxxps://cg.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0033.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0033.id,hxxp://cibleclick.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0034.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0034.id,hxxps://cibleclick.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0035.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0035.id,hxxp://cegetel.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0036.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0036.id,hxxps://cegetel.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0037.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0037.id,hxxp://choc.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0038.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0038.id,hxxps://choc.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0039.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0039.id,hxxp://cj.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0040.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0040.id,hxxps://cj.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0041.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0041.id,hxxp://cj.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0042.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0042.id,hxxps://cj.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0043.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0043.id,hxxp://cj.metaboli.it);
    user_pref(capability.principal.codebase.YummyPlayer_XX0044.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0044.id,hxxps://cj.metaboli.it);
    user_pref(capability.principal.codebase.YummyPlayer_XX0045.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0045.id,hxxp://cj.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0046.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0046.id,hxxps://cj.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0047.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0047.id,hxxp://metaboli.clubic.com);
    user_pref(capability.principal.codebase.YummyPlayer_XX0048.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0048.id,hxxps://metaboli.clubic.com);
    user_pref(capability.principal.codebase.YummyPlayer_XX0049.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0049.id,hxxp://metaboli.club-internet.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0050.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0050.id,hxxps://metaboli.club-internet.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0051.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0051.id,hxxp://coeur.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0052.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0052.id,hxxps://coeur.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0053.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0053.id,hxxp://come.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0054.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0054.id,hxxps://come.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0055.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0055.id,hxxp://lesaccros2.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0056.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0056.id,hxxps://lesaccros2.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0057.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0057.id,hxxp://surcouf.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0058.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0058.id,hxxps://surcouf.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0059.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0059.id,hxxp://www.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0060.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0060.id,hxxps://www.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0061.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0061.id,hxxp://cs.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0062.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0062.id,hxxps://cs.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0063.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0063.id,hxxp://custompc.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0064.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0064.id,hxxps://custompc.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0065.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0065.id,hxxp://cvg.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0066.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0066.id,hxxps://cvg.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0067.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0067.id,hxxp://daooda.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0068.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0068.id,hxxps://daooda.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0069.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0069.id,hxxp://daooda.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0070.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0070.id,hxxps://daooda.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0071.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0071.id,hxxp://daooda.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0072.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0072.id,hxxps://daooda.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0073.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0073.id,hxxp://digitaldownload.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0074.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0074.id,hxxps://digitaldownload.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0075.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0075.id,hxxp://eurogamer.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0076.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0076.id,hxxps://eurogamer.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0077.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0077.id,hxxp://eurogamer.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0078.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0078.id,hxxps://eurogamer.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0079.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0079.id,hxxp://exagame.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0080.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0080.id,hxxps://exagame.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0081.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0081.id,hxxp://fb.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0082.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0082.id,hxxps://fb.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0083.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0083.id,hxxp://fb.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0084.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0084.id,hxxps://fb.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0085.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0085.id,hxxp://fb.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0086.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0086.id,hxxps://fb.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0087.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0087.id,hxxp://firstcoffee.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0088.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0088.id,hxxps://firstcoffee.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0089.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0089.id,hxxp://fnac.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0090.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0090.id,hxxps://fnac.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0091.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0091.id,hxxp://fox.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0092.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0092.id,hxxps://fox.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0093.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0093.id,hxxp://fox.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0094.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0094.id,hxxps://fox.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0095.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0095.id,hxxp://fox.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0096.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0096.id,hxxps://fox.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0097.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0097.id,hxxp://free.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0098.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0098.id,hxxps://free.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0099.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0099.id,hxxp://funsta.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0100.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0100.id,hxxps://funsta.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0101.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0101.id,hxxp://funsta.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0102.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0102.id,hxxps://funsta.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0103.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0103.id,hxxp://metaboli.funradio.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0104.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0104.id,hxxps://metaboli.funradio.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0105.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0105.id,hxxp://fastweb.metaboli.it);
    user_pref(capability.principal.codebase.YummyPlayer_XX0106.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0106.id,hxxps://fastweb.metaboli.it);
    user_pref(capability.principal.codebase.YummyPlayer_XX0107.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0107.id,hxxp://god1.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0108.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0108.id,hxxps://god1.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0109.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0109.id,hxxp://god2.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0110.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0110.id,hxxps://god2.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0111.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0111.id,hxxp://god3.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0112.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0112.id,hxxps://god3.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0113.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0113.id,hxxp://gamona.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0114.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0114.id,hxxps://gamona.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0115.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0115.id,hxxp://giga.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0116.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0116.id,hxxps://giga.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0117.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0117.id,hxxp://gameseek.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0118.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0118.id,hxxps://gameseek.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0119.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0119.id,hxxp://www.gamesflatrate.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0120.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0120.id,hxxps://www.gamesflatrate.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0121.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0121.id,hxxp://games24.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0122.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0122.id,hxxps://games24.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0123.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0123.id,hxxp://ondemand.game.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0124.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0124.id,hxxps://ondemand.game.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0125.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0125.id,hxxp://google.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0126.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0126.id,hxxps://google.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0127.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0127.id,hxxp://google.metaboli.it);
    user_pref(capability.principal.codebase.YummyPlayer_XX0128.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0128.id,hxxps://google.metaboli.it);
    user_pref(capability.principal.codebase.YummyPlayer_XX0129.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0129.id,hxxp://gameone.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0130.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0130.id,hxxps://gameone.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0131.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0131.id,hxxp://google.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0132.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0132.id,hxxps://google.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0133.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0133.id,hxxp://goog.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0134.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0134.id,hxxps://goog.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0135.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0135.id,hxxp://google.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0136.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0136.id,hxxps://google.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0137.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0137.id,hxxp://gameplay.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0138.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0138.id,hxxps://gameplay.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0139.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0139.id,hxxp://gamesonradar.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0140.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0140.id,hxxps://gamesonradar.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0141.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0141.id,hxxp://gameshadow.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0142.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0142.id,hxxps://gameshadow.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0143.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0143.id,hxxp://gametap.metaboli.com);
    user_pref(capability.principal.codebase.YummyPlayer_XX0144.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0144.id,hxxps://gametap.metaboli.com);
    user_pref(capability.principal.codebase.YummyPlayer_XX0145.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0145.id,hxxp://gametap2.metaboli.com);
    user_pref(capability.principal.codebase.YummyPlayer_XX0146.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0146.id,hxxps://gametap2.metaboli.com);
    user_pref(capability.principal.codebase.YummyPlayer_XX0147.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0147.id,hxxp://gamespot.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0148.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0148.id,hxxps://gamespot.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0149.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0149.id,hxxp://gamerunlimited.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0150.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0150.id,hxxps://gamerunlimited.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0151.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0151.id,hxxp://guts.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0152.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0152.id,hxxps://guts.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0153.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0153.id,hxxp://gameswelt.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0154.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0154.id,hxxps://gameswelt.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0155.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0155.id,hxxp://gmx.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0156.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0156.id,hxxps://gmx.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0157.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0157.id,hxxp://hoaxbuster.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0158.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0158.id,hxxps://hoaxbuster.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0159.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0159.id,hxxp://incgamers.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0160.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0160.id,hxxps://incgamers.metaboli.co.uk);
    user_pref(capability.principal.codebase.YummyPlayer_XX0161.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0161.id,hxxp://imbogames.metaboli.it);
    user_pref(capability.principal.codebase.YummyPlayer_XX0162.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0162.id,hxxps://imbogames.metaboli.it);
    user_pref(capability.principal.codebase.YummyPlayer_XX0163.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0163.id,hxxp://ja.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0164.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0164.id,hxxps://ja.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0165.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0165.id,hxxp://janews.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0166.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0166.id,hxxps://janews.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0167.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0167.id,hxxp://jvfr.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0168.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0168.id,hxxps://jvfr.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0169.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0169.id,hxxp://jeux-pc.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0170.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0170.id,hxxps://jeux-pc.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0171.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0171.id,hxxp://kelkoo.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0172.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0172.id,hxxps://kelkoo.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0173.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0173.id,hxxp://gamekult.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0174.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0174.id,hxxps://gamekult.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0175.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0175.id,hxxp://ld.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0176.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0176.id,hxxps://ld.metaboli.fr);
    user_pref(capability.principal.codebase.YummyPlayer_XX0177.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0177.id,hxxp://leguide.metaboli.de);
    user_pref(capability.principal.codebase.YummyPlayer_XX0178.granted,UniversalXPConnect);
    user_pref(capability.principal.codebase.YummyPlayer_XX0178.id,hxxps:
    dozzyo9080, May 8, 2011
    #20
Page 1 of 8
Thread Status:
Not open for further replies.