Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Constant Barrage of Random Popup-Ads Every Several Minutes


  • Please log in to reply
6 replies to this topic

#1 leeri83

leeri83

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:02:49 PM

Posted 03 January 2009 - 03:10 PM

Hi,

I've been bombarded with random popup ads for every several minutes since this afternoon. Apparently one of them is titled: "http://mp3cdt.com/?a=codaformal" which shows nothing b/c Internet Explorer is giving the "Cannot Display the Webpage" message. Another popup ad is titled: "Ultimate Download Access" giving me a "Download Now!" button to download music & movies for [my] Zune Player. And lastly "http://beta.tidaltv.com/?msrc=find_8308-162_110380&startloc=vertical_news#3197..." is streaming tv show/ads. But the most bothersome is the constant "Download Registry Defender" window. Keeps on giving me the option for a "Free Download" to Install Registry Defender.

I am using Windows XP Media Center Edition Version 2002 Service Pack 2.

I'm currently using McAfee Security to find this virus, but so far no luck. I've also used CCleaner, but that doesn't seem to alleviate my popup ad problem.

If you have any ideas, please let me know.

Thanks a lot!

**UPDATE**

I've scanned my computer using the latest Ad-Aware 2008. Each time it scans, the program notes there are a total of 36 infections detected. However, after several minutes into the scan, a "Unhandled Exception" window pops up with the following:

An unhandled exception occured at 0x003C10BF in aawservice.exe

Exception Code : 0xc0000005
Client version : 0.853
Attached Debugger : 0

Windows Information :
---------------------
Windows Version : Windows XP (5.1)
Build Number : 2600
Service Pack : 2.0

CPU Information:
----------------
CPU Name : Intel® Pentium® 4 CPU 3.60GHz
Type : 0
Vendor : GenuineIntel
Family : 15
Extended Family : 0
Model : 4
Extended Model : 0
Stepping : 1

Registry Content:
-----------------
EAX : 0x00374220
ECX : 0x00000000
EDX : 0x00000000
EBX : 0x00000006
ESP : 0x00c9ff84
EBP : 0x00c9ffb4
ESI : 0x00000000
EDI : 0x00374210
EIP : 0x003c10bf

Memory Usage:
-------------
Physical Memory in use : 50%
Total Physical Memory : 2095188 kb
Free Physical Memory : 1040796 kb
Total Virtual Memory : 2097024 kb
Free Virtual Memory : 1861552 kb
Max Page file size : 4035400 kb
Current Page file size : 2683116 kb
Free Extended memory : 0kb

Stack Information:
------------------
Total stack size : 88

Stack Content:
--------------
0000001b 003c781c 00000000 00000000 00372540 00000000
00c9ff8c 00c9fba8 00c9ffdc 003cc520 003ce220 ffffffff
00c9ffec 7c80b683 00374210 00000000 00000000 00372540
7ffdc000 c0000005 00c9ffc0 00c9fba8

System Activity:
----------------
Process 00000000: [System Process]
Module at 0x00400000: aawservice.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x10000000: CEAPI.dll
Module at 0x78050000: WININET.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x00350000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x004a0000: PKArchive85u.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x774e0000: ole32.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76f60000: WLDAP32.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x77c00000: VERSION.dll
Module at 0x769c0000: USERENV.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x003c0000: gokegubo.dll
Module at 0x00ca0000: gikuyaju.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x71bf0000: SAMLIB.dll
Module at 0x5ad70000: uxtheme.dll

Process 00000004: System
Current Memory usage : 36 kb
Memory usage peak : 3868 kb
Current Paged Pool usage : 0 kb
Paged Pool usage peak : 0 kb
Current Non-Paged Pool usage : 0 kb
Non-Paged Pool usage peak : 0 kb
Current Page file usage : 0 kb
Page file usage peak : 0 kb
Page Faults : 9416

Module list
Module at 0x00000000:

Process 000002a8: SMSS.EXE
Current Memory usage : 108 kb
Memory usage peak : 844 kb
Current Paged Pool usage : 5 kb
Paged Pool usage peak : 13 kb
Current Non-Paged Pool usage : 0 kb
Non-Paged Pool usage peak : 1 kb
Current Page file usage : 168 kb
Page file usage peak : 1676 kb
Page Faults : 408

Module list
Module at 0x48580000: smss.exe
Module at 0x7c900000: ntdll.dll

Process 000002e8: CSRSS.EXE
Current Memory usage : 3036 kb
Memory usage peak : 5664 kb
Current Paged Pool usage : 111 kb
Paged Pool usage peak : 115 kb
Current Non-Paged Pool usage : 9 kb
Non-Paged Pool usage peak : 10 kb
Current Page file usage : 2008 kb
Page file usage peak : 4780 kb
Page Faults : 25612

Module list
Module at 0x4a680000: csrss.exe
Module at 0x7c900000: ntdll.dll
Module at 0x75b40000: CSRSRV.dll
Module at 0x75b50000: basesrv.dll
Module at 0x75b60000: winsrv.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7c800000: KERNEL32.dll
Module at 0x7e410000: USER32.dll
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x75e90000: sxs.dll
Module at 0x77b40000: Apphelp.dll
Module at 0x77c00000: VERSION.dll

Process 00000300: WINLOGON.EXE
Current Memory usage : 1216 kb
Memory usage peak : 15628 kb
Current Paged Pool usage : 60 kb
Paged Pool usage peak : 65 kb
Current Non-Paged Pool usage : 40 kb
Non-Paged Pool usage peak : 42 kb
Current Page file usage : 8000 kb
Page file usage peak : 10408 kb
Page Faults : 12777

Module list
Module at 0x01000000: winlogon.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x776c0000: AUTHZ.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x75940000: NDdeApi.dll
Module at 0x75930000: PROFMAP.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x769c0000: USERENV.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x76bc0000: REGAPI.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x77c00000: VERSION.dll
Module at 0x76360000: WINSTA.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x75970000: MSGINA.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x5d090000: COMCTL32.dll
Module at 0x74320000: ODBC32.dll
Module at 0x763b0000: comdlg32.dll
Module at 0x773d0000: comctl32.dll
Module at 0x20000000: odbcint.dll
Module at 0x776e0000: SHSVCS.dll
Module at 0x76bb0000: sfc.dll
Module at 0x76c60000: sfc_os.dll
Module at 0x774e0000: ole32.dll
Module at 0x77b40000: Apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x723d0000: WINSCARD.DLL
Module at 0x76f50000: WTSAPI32.dll
Module at 0x75e90000: sxs.dll
Module at 0x5ad70000: uxtheme.dll
Module at 0x76b40000: WINMM.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x76600000: cscdll.dll
Module at 0x75950000: WlNotify.dll
Module at 0x73000000: WINSPOOL.DRV
Module at 0x71b20000: MPR.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x013c0000: WgaLogon.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77c70000: msv1_0.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x47bf0000: imekr61.ime
Module at 0x77a20000: cscui.dll
Module at 0x01640000: xpsp2res.dll
Module at 0x72d20000: wdmaud.drv
Module at 0x72d10000: msacm32.drv
Module at 0x77be0000: MSACM32.dll
Module at 0x77bd0000: midimap.dll
Module at 0x74ef0000: wbemprox.dll
Module at 0x75290000: wbemcomn.dll
Module at 0x74ed0000: wbemsvc.dll
Module at 0x75690000: fastprox.dll
Module at 0x76080000: MSVCP60.dll
Module at 0x767a0000: NTDSAPI.dll
Module at 0x76f20000: DNSAPI.dll

Process 0000032c: SERVICES.EXE
Current Memory usage : 1652 kb
Memory usage peak : 4884 kb
Current Paged Pool usage : 43 kb
Paged Pool usage peak : 44 kb
Current Non-Paged Pool usage : 9 kb
Non-Paged Pool usage peak : 11 kb
Current Page file usage : 2396 kb
Page file usage peak : 2876 kb
Page Faults : 2965

Module list
Module at 0x01000000: services.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x769c0000: USERENV.dll
Module at 0x758e0000: SCESRV.dll
Module at 0x776c0000: AUTHZ.dll
Module at 0x7dba0000: umpnpmgr.dll
Module at 0x76360000: WINSTA.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x5f770000: NCObjAPI.DLL
Module at 0x76080000: MSVCP60.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x77fe0000: secur32.dll
Module at 0x77b40000: Apphelp.dll
Module at 0x77b70000: eventlog.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x76f50000: wtsapi32.dll

Process 00000338: LSASS.EXE
Current Memory usage : 2092 kb
Memory usage peak : 33540 kb
Current Paged Pool usage : 53 kb
Paged Pool usage peak : 55 kb
Current Non-Paged Pool usage : 11 kb
Non-Paged Pool usage peak : 13 kb
Current Page file usage : 4872 kb
Page file usage peak : 5308 kb
Page Faults : 72728

Module list
Module at 0x01000000: lsass.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x75730000: LSASRV.dll
Module at 0x71b20000: MPR.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x767a0000: NTDSAPI.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x76f60000: WLDAP32.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x74440000: SAMSRV.dll
Module at 0x76790000: cryptdll.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x20000000: msprivs.dll
Module at 0x71cf0000: kerberos.dll
Module at 0x77c70000: msv1_0.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x744b0000: netlogon.dll
Module at 0x767c0000: w32time.dll
Module at 0x76080000: MSVCP60.dll
Module at 0x767f0000: schannel.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x74380000: wdigest.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x77920000: setupapi.dll
Module at 0x74410000: scecli.dll
Module at 0x743e0000: ipsecsvc.dll
Module at 0x776c0000: AUTHZ.dll
Module at 0x75d90000: oakley.DLL
Module at 0x74370000: WINIPSEC.DLL
Module at 0x743a0000: pstorsvc.dll
Module at 0x743c0000: psbase.dll
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x68100000: dssenh.dll

Process 000003f4: SVCHOST.EXE
Current Memory usage : 31960 kb
Memory usage peak : 36784 kb
Current Paged Pool usage : 42 kb
Paged Pool usage peak : 44 kb
Current Non-Paged Pool usage : 6 kb
Non-Paged Pool usage peak : 7 kb
Current Page file usage : 3476 kb
Page file usage peak : 23796 kb
Page Faults : 12519

Module list
Module at 0x01000000: svchost.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x76a80000: rpcss.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77b40000: Apphelp.dll
Module at 0x7d1e0000: msi.dll
Module at 0x76f50000: WTSAPI32.dll
Module at 0x76360000: WINSTA.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x77c70000: msv1_0.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x760f0000: termsrv.dll
Module at 0x74f70000: ICAAPI.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x776c0000: AUTHZ.dll
Module at 0x75110000: mstlsapi.dll
Module at 0x77cc0000: ACTIVEDS.dll
Module at 0x76e10000: adsldpc.dll
Module at 0x76b20000: ATL.DLL
Module at 0x76bc0000: REGAPI.dll
Module at 0x0ffd0000: rsaenh.dll

Process 00000448: SVCHOST.EXE
Current Memory usage : 27764 kb
Memory usage peak : 32756 kb
Current Paged Pool usage : 48 kb
Paged Pool usage peak : 48 kb
Current Non-Paged Pool usage : 14 kb
Non-Paged Pool usage peak : 15 kb
Current Page file usage : 2520 kb
Page file usage peak : 2636 kb
Page Faults : 11287

Module list
Module at 0x01000000: svchost.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x76a80000: rpcss.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x76fb0000: winrnr.dll
Module at 0x76f60000: WLDAP32.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x10000000: samnsp.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x16080000: mdnsNSP.dll
Module at 0x76fc0000: rasadhlp.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x7d1e0000: msi.dll

Process 000004a8: SVCHOST.EXE
Current Memory usage : 73836 kb
Memory usage peak : 150592 kb
Current Paged Pool usage : 129 kb
Paged Pool usage peak : 337 kb
Current Non-Paged Pool usage : 60 kb
Non-Paged Pool usage peak : 69 kb
Current Page file usage : 21696 kb
Page file usage peak : 93136 kb
Page Faults : 439344

Module list
Module at 0x01000000: svchost.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x776e0000: shsvcs.dll
Module at 0x76360000: WINSTA.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x76d80000: dhcpcsvc.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x77620000: wzcsvc.dll
Module at 0x76e80000: rtutils.dll
Module at 0x76d30000: WMI.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76f50000: WTSAPI32.dll
Module at 0x606b0000: ESENT.dll
Module at 0x76b20000: ATL.DLL
Module at 0x0ffd0000: rsaenh.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x76b70000: rastls.dll
Module at 0x754d0000: CRYPTUI.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x78050000: WININET.dll
Module at 0x00ff0000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x76d40000: MPRAPI.dll
Module at 0x77cc0000: ACTIVEDS.dll
Module at 0x76e10000: adsldpc.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x76ee0000: RASAPI32.dll
Module at 0x76e90000: rasman.dll
Module at 0x76eb0000: TAPI32.dll
Module at 0x767f0000: SCHANNEL.dll
Module at 0x723d0000: WinSCard.dll
Module at 0x76bd0000: raschap.dll
Module at 0x77c70000: msv1_0.dll
Module at 0x77300000: schedsvc.dll
Module at 0x767a0000: NTDSAPI.dll
Module at 0x74f50000: MSIDLE.DLL
Module at 0x708b0000: audiosrv.dll
Module at 0x76e40000: wkssvc.dll
Module at 0x76ce0000: cryptsvc.dll
Module at 0x77b90000: certcli.dll
Module at 0x74f90000: dmserver.dll
Module at 0x74f80000: ersvc.dll
Module at 0x74f40000: pchsvc.dll
Module at 0x688e0000: hidserv.dll
Module at 0x688f0000: HID.DLL
Module at 0x77710000: es.dll
Module at 0x75090000: srvsvc.dll
Module at 0x75e90000: SXS.DLL
Module at 0x76620000: comsvcs.dll
Module at 0x75130000: colbact.DLL
Module at 0x750f0000: MTXCLU.DLL
Module at 0x71ad0000: WSOCK32.dll
Module at 0x76d10000: CLUSAPI.DLL
Module at 0x750b0000: RESUTILS.DLL
Module at 0x77d00000: netman.dll
Module at 0x76400000: netshell.dll
Module at 0x76c00000: credui.dll
Module at 0x73030000: WZCSAPI.DLL
Module at 0x73d20000: seclogon.dll
Module at 0x722d0000: sens.dll
Module at 0x751a0000: srsvc.dll
Module at 0x74ad0000: POWRPROF.dll
Module at 0x733e0000: tapisrv.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x75070000: trkwks.dll
Module at 0x767c0000: w32time.dll
Module at 0x76080000: MSVCP60.dll
Module at 0x59490000: wmisvc.dll
Module at 0x753e0000: VSSAPI.DLL
Module at 0x50000000: wuauserv.dll
Module at 0x4d4f0000: WINHTTP.dll
Module at 0x75150000: Cabinet.dll
Module at 0x76fb0000: winrnr.dll
Module at 0x10000000: samnsp.dll
Module at 0x16080000: mdnsNSP.dll
Module at 0x76de0000: upnp.dll
Module at 0x74f00000: SSDPAPI.dll
Module at 0x76bb0000: sfc.dll
Module at 0x76c60000: sfc_os.dll
Module at 0x76da0000: browser.dll
Module at 0x75290000: wbemcomn.dll
Module at 0x762c0000: wbemcore.dll
Module at 0x75310000: esscli.dll
Module at 0x75690000: FastProx.dll
Module at 0x75020000: wmiutils.dll
Module at 0x75200000: repdrvfs.dll
Module at 0x66460000: ipnathlp.dll
Module at 0x776c0000: AUTHZ.dll
Module at 0x597f0000: wmiprvsd.dll
Module at 0x5f770000: NCObjAPI.DLL
Module at 0x4c0a0000: wscsvc.dll
Module at 0x7d1e0000: msi.dll
Module at 0x75390000: wbemess.dll
Module at 0x755f0000: netcfgx.dll
Module at 0x5f740000: ncprov.dll
Module at 0x7df30000: rasmans.dll
Module at 0x74370000: WINIPSEC.DLL
Module at 0x77b40000: Apphelp.dll
Module at 0x5b9f0000: qmgr.dll
Module at 0x71b20000: MPR.dll
Module at 0x76780000: SHFOLDER.dll
Module at 0x75880000: rastapi.dll
Module at 0x57cc0000: unimdm.tsp
Module at 0x72000000: uniplat.dll
Module at 0x57d40000: kmddsp.tsp
Module at 0x57d20000: ndptsp.tsp
Module at 0x57d50000: ipconf.tsp
Module at 0x57d70000: h323.tsp
Module at 0x57d60000: hidphone.tsp
Module at 0x72240000: rasppp.dll
Module at 0x724b0000: ntlsapi.dll
Module at 0x71cf0000: kerberos.dll
Module at 0x76790000: cryptdll.dll
Module at 0x76fc0000: rasadhlp.dll
Module at 0x768d0000: RASDLG.dll
Module at 0x68100000: dssenh.dll
Module at 0x6fb10000: catsrvut.dll
Module at 0x6fbd0000: catsrv.dll
Module at 0x61990000: MfcSubs.dll
Module at 0x78130000: urlmon.dll

Process 00000508: SVCHOST.EXE
Current Memory usage : 19248 kb
Memory usage peak : 24496 kb
Current Paged Pool usage : 29 kb
Paged Pool usage peak : 34 kb
Current Non-Paged Pool usage : 3 kb
Non-Paged Pool usage peak : 6 kb
Current Page file usage : 1736 kb
Page file usage peak : 1828 kb
Page Faults : 8899

Module list
Module at 0x01000000: svchost.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x76770000: dnsrslvr.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll

Process 0000054c: SVCHOST.EXE
Current Memory usage : 25476 kb
Memory usage peak : 30496 kb
Current Paged Pool usage : 38 kb
Paged Pool usage peak : 39 kb
Current Non-Paged Pool usage : 6 kb
Non-Paged Pool usage peak : 9 kb
Current Page file usage : 1976 kb
Page file usage peak : 2064 kb
Page Faults : 10123

Module list
Module at 0x01000000: svchost.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x74c40000: lmhsvc.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x5a6e0000: webclnt.dll
Module at 0x78050000: WININET.dll
Module at 0x007c0000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x76af0000: regsvc.dll
Module at 0x765e0000: ssdpsrv.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x71a50000: mswsock.dll
Module at 0x71a90000: wshtcpip.dll

Process 00000614: spoolsv.exe
Current Memory usage : 768 kb
Memory usage peak : 5572 kb
Current Paged Pool usage : 42 kb
Paged Pool usage peak : 44 kb
Current Non-Paged Pool usage : 6 kb
Non-Paged Pool usage peak : 8 kb
Current Page file usage : 3592 kb
Page file usage peak : 3792 kb
Page Faults : 1904

Module list
Module at 0x01000000: spoolsv.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x742e0000: SPOOLSS.DLL
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x76fc0000: rasadhlp.dll
Module at 0x75bb0000: localspl.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x76c60000: sfc_os.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x73000000: winspool.drv
Module at 0x5b860000: netapi32.dll
Module at 0x742a0000: cnbjmon.dll
Module at 0x66f40000: CNMLM5p.DLL
Module at 0x76bf0000: PSAPI.DLL
Module at 0x68f00000: FXSMON.DLL
Module at 0x68f20000: FXSEVENT.dll
Module at 0x74280000: pjlmon.dll
Module at 0x50400000: prtserv.dll
Module at 0x71ad0000: WSOCK32.dll
Module at 0x72400000: tcpmon.dll
Module at 0x723f0000: usbmon.dll
Module at 0x00ce0000: CNMPD5p.DLL
Module at 0x6a900000: ppbipr.dll
Module at 0x00cf0000: WfxPrint2000.dll
Module at 0x76fb0000: winrnr.dll
Module at 0x76f60000: WLDAP32.dll
Module at 0x10000000: samnsp.dll
Module at 0x71a50000: mswsock.dll
Module at 0x16080000: mdnsNSP.dll
Module at 0x76d60000: Iphlpapi.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x75c10000: win32spl.dll
Module at 0x71c80000: NETRAP.dll
Module at 0x767a0000: NTDSAPI.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x74300000: inetpp.dll

Process 00000740: explorer.exe
Current Memory usage : 32604 kb
Memory usage peak : 49012 kb
Current Paged Pool usage : 123 kb
Paged Pool usage peak : 344 kb
Current Non-Paged Pool usage : 25 kb
Non-Paged Pool usage peak : 28 kb
Current Page file usage : 36712 kb
Page file usage peak : 38980 kb
Page Faults : 293855

Module list
Module at 0x01000000: Explorer.EXE
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x75f80000: BROWSEUI.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x774e0000: ole32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77760000: SHDOCVW.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x754d0000: CRYPTUI.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x78050000: WININET.dll
Module at 0x00400000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x76f60000: WLDAP32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x769c0000: USERENV.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77a20000: cscui.dll
Module at 0x76600000: CSCDLL.dll
Module at 0x5ba60000: themeui.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x76380000: MSIMG32.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x74720000: msctf.dll
Module at 0x71d40000: actxprxy.dll
Module at 0x5fc10000: msutb.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x76980000: LINKINFO.dll
Module at 0x76990000: ntshrui.dll
Module at 0x76b20000: ATL.DLL
Module at 0x77920000: SETUPAPI.dll
Module at 0x42ef0000: ieframe.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x78130000: urlmon.dll
Module at 0x76400000: NETSHELL.dll
Module at 0x76e80000: rtutils.dll
Module at 0x76c00000: credui.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x7d1e0000: msi.dll
Module at 0x10000000: LGMOUSHK.dll
Module at 0x30000000: IMGHOOK.DLL
Module at 0x75e90000: SXS.DLL
Module at 0x75cf0000: MLANG.dll
Module at 0x76360000: WINSTA.dll
Module at 0x42e40000: webcheck.dll
Module at 0x01bc0000: imhook.dll
Module at 0x76280000: stobject.dll
Module at 0x74af0000: BatMeter.dll
Module at 0x74ad0000: POWRPROF.dll
Module at 0x76f50000: WTSAPI32.dll
Module at 0x01630000: saHook.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x72d20000: wdmaud.drv
Module at 0x72d10000: msacm32.drv
Module at 0x77bd0000: midimap.dll
Module at 0x02530000: ctagent.dll
Module at 0x71b20000: MPR.dll
Module at 0x75f60000: drprov.dll
Module at 0x71c10000: ntlanman.dll
Module at 0x71cd0000: NETUI0.dll
Module at 0x71c90000: NETUI1.dll
Module at 0x71c80000: NETRAP.dll
Module at 0x75f70000: davclnt.dll
Module at 0x68df0000: fxsst.dll
Module at 0x73000000: WINSPOOL.DRV
Module at 0x5a980000: FXSAPI.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x02390000: browselc.dll
Module at 0x605d0000: mslbui.dll
Module at 0x04240000: gokegubo.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x03d80000: famatoge.dll
Module at 0x76ee0000: RASAPI32.dll
Module at 0x76e90000: rasman.dll
Module at 0x76eb0000: TAPI32.dll
Module at 0x77c70000: msv1_0.dll
Module at 0x722b0000: sensapi.dll
Module at 0x71a50000: mswsock.dll
Module at 0x76fc0000: rasadhlp.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x04320000: fujayagi.dll
Module at 0x76fb0000: winrnr.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x03dd0000: samnsp.dll
Module at 0x16080000: mdnsNSP.dll
Module at 0x76d40000: MPRAPI.dll
Module at 0x77cc0000: ACTIVEDS.dll
Module at 0x76e10000: adsldpc.dll
Module at 0x03da0000: gikuyaju.dll
Module at 0x03850000: MSVCR80.dll
Module at 0x14490000: scriptsn.dll
Module at 0x63380000: JScript.dll
Module at 0x73300000: VBScript.dll
Module at 0x6c1b0000: DUSER.dll
Module at 0x03ca0000: PDFShell.dll
Module at 0x75e60000: cryptnet.dll
Module at 0x4d4f0000: WINHTTP.dll
Module at 0x75970000: MSGINA.dll
Module at 0x74320000: ODBC32.dll
Module at 0x763b0000: comdlg32.dll
Module at 0x027f0000: odbcint.dll
Module at 0x16200000: WZSHLSTB.DLL
Module at 0x6c600000: mcctxmnu.dll
Module at 0x592c0000: wmpshell.dll
Module at 0x06670000: nvcpl.dll
Module at 0x74c80000: OLEACC.dll
Module at 0x76080000: MSVCP60.dll
Module at 0x5cb00000: shimgvw.dll
Module at 0x4ec50000: gdiplus.dll

Process 000007e4: AppleMobileDeviceService.exe
Current Memory usage : 272 kb
Memory usage peak : 2492 kb
Current Paged Pool usage : 18 kb
Paged Pool usage peak : 18 kb
Current Non-Paged Pool usage : 4 kb
Non-Paged Pool usage peak : 4 kb
Current Page file usage : 1860 kb
Page file usage peak : 1860 kb
Page Faults : 660

Module list
Module at 0x00400000: AppleMobileDeviceService.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x71ad0000: WSOCK32.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x774e0000: ole32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll

Process 000007fc: mDNSResponder.exe
Current Memory usage : 612 kb
Memory usage peak : 3652 kb
Current Paged Pool usage : 31 kb
Paged Pool usage peak : 32 kb
Current Non-Paged Pool usage : 5 kb
Non-Paged Pool usage peak : 8 kb
Current Page file usage : 1284 kb
Page file usage peak : 1300 kb
Page Faults : 1036

Module list
Module at 0x00400000: mDNSResponder.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x76d60000: IPHLPAPI.DLL
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x76d40000: MPRAPI.dll
Module at 0x77cc0000: ACTIVEDS.dll
Module at 0x76e10000: adsldpc.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x76f60000: WLDAP32.dll
Module at 0x76b20000: ATL.DLL
Module at 0x76e80000: rtutils.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x77920000: SETUPAPI.dll

Process 000000c4: CISVC.EXE
Current Memory usage : 560 kb
Memory usage peak : 3744 kb
Current Paged Pool usage : 39 kb
Paged Pool usage peak : 40 kb
Current Non-Paged Pool usage : 6 kb
Non-Paged Pool usage peak : 8 kb
Current Page file usage : 3708 kb
Page file usage peak : 3820 kb
Page Faults : 54816

Module list
Module at 0x01000000: cisvc.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x7d9a0000: query.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x774e0000: ole32.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x77b40000: Apphelp.dll

Process 000000e0: EHTRAY.EXE
Current Memory usage : 1980 kb
Memory usage peak : 5492 kb
Current Paged Pool usage : 62 kb
Paged Pool usage peak : 62 kb
Current Non-Paged Pool usage : 5 kb
Non-Paged Pool usage peak : 6 kb
Current Page file usage : 2576 kb
Page file usage peak : 3168 kb
Page Faults : 16161

Module list
Module at 0x00400000: ehtray.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x76b20000: ATL.DLL
Module at 0x77c10000: msvcrt.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x74ad0000: POWRPROF.dll
Module at 0x76f50000: WTSAPI32.dll
Module at 0x76360000: WINSTA.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x688f0000: HID.DLL
Module at 0x77920000: SETUPAPI.dll
Module at 0x76b40000: WINMM.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x74720000: MSCTF.dll
Module at 0x10000000: imhook.dll
Module at 0x01390000: saHook.dll
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x7d1e0000: msi.dll
Module at 0x75e90000: SXS.DLL
Module at 0x49e10000: ehProxy.dll
Module at 0x013d0000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x01400000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71ab0000: ws2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x01b60000: gikuyaju.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x01bd0000: gokegubo.dll
Module at 0x01c30000: famatoge.dll
Module at 0x71d40000: actxprxy.dll

Process 000000f8: jusched.exe
Current Memory usage : 268 kb
Memory usage peak : 3048 kb
Current Paged Pool usage : 32 kb
Paged Pool usage peak : 39 kb
Current Non-Paged Pool usage : 2 kb
Non-Paged Pool usage peak : 3 kb
Current Page file usage : 1136 kb
Page file usage peak : 1148 kb
Page Faults : 833

Module list
Module at 0x00400000: jusched.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x78050000: WININET.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x00350000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x774e0000: ole32.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll

Process 00000144: CTSVCCDA.EXE
Current Memory usage : 136 kb
Memory usage peak : 1592 kb
Current Paged Pool usage : 13 kb
Paged Pool usage peak : 13 kb
Current Non-Paged Pool usage : 1 kb
Non-Paged Pool usage peak : 1 kb
Current Page file usage : 584 kb
Page file usage peak : 584 kb
Page Faults : 424

Module list
Module at 0x00400000: CTsvcCDA.EXE
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x77c10000: msvcrt.dll

Process 000001b8: IAAnotif.exe
Current Memory usage : 2164 kb
Memory usage peak : 3860 kb
Current Paged Pool usage : 42 kb
Paged Pool usage peak : 43 kb
Current Non-Paged Pool usage : 3 kb
Non-Paged Pool usage peak : 5 kb
Current Page file usage : 2244 kb
Page file usage peak : 3212 kb
Page Faults : 15050

Module list
Module at 0x00400000: iaanotif.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x763b0000: comdlg32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x5d090000: COMCTL32.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x10000000: IAAMon_ENU.dll
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x74720000: MSCTF.dll
Module at 0x00c30000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x00c60000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71ab0000: ws2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x00f10000: famatoge.dll
Module at 0x01030000: gokegubo.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x01150000: gikuyaju.dll

Process 000001d8: ehRecvr.exe
Current Memory usage : 636 kb
Memory usage peak : 10112 kb
Current Paged Pool usage : 66 kb
Paged Pool usage peak : 66 kb
Current Non-Paged Pool usage : 6 kb
Non-Paged Pool usage peak : 8 kb
Current Page file usage : 6620 kb
Page file usage peak : 6812 kb
Page Faults : 3384

Module list
Module at 0x00400000: ehRecvr.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x76b20000: ATL.DLL
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5ad70000: uxtheme.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77c00000: VERSION.dll
Module at 0x4ee30000: sbe.dll
Module at 0x76b40000: WINMM.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x47db0000: msvidctl.dll
Module at 0x74810000: quartz.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x75f40000: devenum.dll
Module at 0x77920000: setupapi.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x736b0000: msdmo.dll
Module at 0x5e030000: ksproxy.ax
Module at 0x73ee0000: ksuser.dll
Module at 0x72d20000: wdmaud.drv
Module at 0x72d10000: msacm32.drv
Module at 0x77be0000: MSACM32.dll
Module at 0x77bd0000: midimap.dll
Module at 0x73f10000: dsound.dll
Module at 0x59ef0000: kstvtune.ax
Module at 0x754c0000: vidcap.ax
Module at 0x58010000: kswdmcap.ax
Module at 0x73dd0000: MFC42.DLL
Module at 0x58000000: ksxbar.ax
Module at 0x5cd80000: encapi.dll
Module at 0x57fd0000: mpg2splt.ax
Module at 0x47d80000: VBICodec.ax
Module at 0x47f50000: encdec.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x00cb0000: DRMClien.DLL
Module at 0x10000000: EzRating.dll
Module at 0x086c0000: WMVCore.DLL
Module at 0x070d0000: WMASF.DLL
Module at 0x75cf0000: mlang.dll
Module at 0x1c900000: qasf.dll
Module at 0x4c250000: wmvdmoe2.dll
Module at 0x4f410000: wmvdmod.dll
Module at 0x57dc0000: wmvds32.ax
Module at 0x57e30000: wmv8ds32.ax
Module at 0x46cf0000: wmvadve.dll
Module at 0x4bac0000: sbeio.dll
Module at 0x46ec0000: wmvadvd.dll
Module at 0x49e10000: ehProxy.dll

Process 000001f0: CTDVDDET.exe
Current Memory usage : 2132 kb
Memory usage peak : 4368 kb
Current Paged Pool usage : 43 kb
Paged Pool usage peak : 44 kb
Current Non-Paged Pool usage : 4 kb
Non-Paged Pool usage peak : 5 kb
Current Page file usage : 2432 kb
Page file usage peak : 3048 kb
Page Faults : 15309

Module list
Module at 0x00400000: CTDVDDET.EXE
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x73dd0000: MFC42.DLL
Module at 0x77c10000: msvcrt.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x774e0000: ole32.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x10000000: CTAudNav.DLL
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x74720000: msctf.dll
Module at 0x00b30000: ctagent.dll
Module at 0x00b50000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x00b80000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71ab0000: ws2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x01330000: gikuyaju.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x01460000: gokegubo.dll
Module at 0x01580000: famatoge.dll

Process 000001f4: ehSched.exe
Current Memory usage : 416 kb
Memory usage peak : 4752 kb
Current Paged Pool usage : 29 kb
Paged Pool usage peak : 31 kb
Current Non-Paged Pool usage : 4 kb
Non-Paged Pool usage peak : 8 kb
Current Page file usage : 1560 kb
Page file usage peak : 1620 kb
Page Faults : 1767

Module list
Module at 0x00400000: ehSched.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x76b20000: ATL.DLL
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5ad70000: uxtheme.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77c00000: VERSION.dll
Module at 0x49e10000: ehProxy.dll
Module at 0x75e90000: SXS.DLL
Module at 0x6f3b0000: tapi3.dll
Module at 0x78050000: WININET.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x00730000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x76b40000: WINMM.dll
Module at 0x76e80000: rtutils.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x6e4f0000: confmsp.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x5b6f0000: termmgr.dll
Module at 0x68940000: h323msp.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x77b20000: MSASN1.dll

Process 00000200: CTHELPER.EXE
Current Memory usage : 2456 kb
Memory usage peak : 6896 kb
Current Paged Pool usage : 47 kb
Paged Pool usage peak : 47 kb
Current Non-Paged Pool usage : 6 kb
Non-Paged Pool usage peak : 7 kb
Current Page file usage : 4992 kb
Page file usage peak : 5696 kb
Page Faults : 16224

Module list
Module at 0x00400000: CTHELPER.EXE
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x73dd0000: MFC42.DLL
Module at 0x774e0000: ole32.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5d090000: COMCTL32.DLL
Module at 0x5ad70000: uxtheme.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x773d0000: comctl32.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x10000000: CTDCIFCE.DLL
Module at 0x009f0000: CTDC0001.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x00a70000: ctosuser.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x00be0000: CTDPROXY.DLL
Module at 0x00c20000: PIAPROXY.DLL
Module at 0x00c60000: ctagent.dll
Module at 0x00c80000: ctspkhlp.dll
Module at 0x73f10000: DSOUND.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x72d20000: wdmaud.drv
Module at 0x72d10000: msacm32.drv
Module at 0x77be0000: MSACM32.dll
Module at 0x77bd0000: midimap.dll
Module at 0x73ee0000: KsUser.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x010f0000: CTDCRES.DLL
Module at 0x01410000: saHook.dll
Module at 0x74720000: MSCTF.dll
Module at 0x01480000: imhook.dll
Module at 0x605d0000: mslbui.dll
Module at 0x30000000: IMGHOOK.DLL
Module at 0x01720000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x01610000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71ab0000: ws2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x01ef0000: gikuyaju.dll
Module at 0x02020000: gokegubo.dll
Module at 0x02140000: famatoge.dll

Process 00000250: IAANTmon.exe
Current Memory usage : 280 kb
Memory usage peak : 1408 kb
Current Paged Pool usage : 18 kb
Paged Pool usage peak : 18 kb
Current Non-Paged Pool usage : 7 kb
Non-Paged Pool usage peak : 8 kb
Current Page file usage : 468 kb
Page file usage peak : 468 kb
Page Faults : 402

Module list
Module at 0x00400000: iaantmon.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x77c10000: msvcrt.dll

Process 00000298: Imgicon.exe
Current Memory usage : 2588 kb
Memory usage peak : 5584 kb
Current Paged Pool usage : 46 kb
Paged Pool usage peak : 46 kb
Current Non-Paged Pool usage : 5 kb
Non-Paged Pool usage peak : 6 kb
Current Page file usage : 3552 kb
Page file usage peak : 4532 kb
Page Faults : 15480

Module list
Module at 0x00400000: ImgIcon.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x10000000: shortcts.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x30000000: IMGHOOK.DLL
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x00e20000: IOMATL~2.DLL
Module at 0x00e40000: ioReady.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x76980000: LINKINFO.dll
Module at 0x76990000: ntshrui.dll
Module at 0x76b20000: ATL.DLL
Module at 0x5b860000: NETAPI32.dll
Module at 0x77b40000: appHelp.dll
Module at 0x77a20000: cscui.dll
Module at 0x76600000: CSCDLL.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x74720000: MSCTF.dll
Module at 0x011c0000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x011f0000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71ab0000: ws2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x019a0000: famatoge.dll
Module at 0x01ac0000: gokegubo.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x01be0000: gikuyaju.dll

Process 000002a0: WkUFind.exe
Current Memory usage : 192 kb
Memory usage peak : 2488 kb
Current Paged Pool usage : 30 kb
Paged Pool usage peak : 37 kb
Current Non-Paged Pool usage : 2 kb
Non-Paged Pool usage peak : 2 kb
Current Page file usage : 1016 kb
Page file usage peak : 1016 kb
Page Faults : 669

Module list
Module at 0x01000000: WkUFind.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll

Process 000002ec: tfswctrl.exe
Current Memory usage : 2104 kb
Memory usage peak : 4140 kb
Current Paged Pool usage : 44 kb
Paged Pool usage peak : 44 kb
Current Non-Paged Pool usage : 4 kb
Non-Paged Pool usage peak : 5 kb
Current Page file usage : 2236 kb
Page file usage peak : 3212 kb
Page Faults : 20212

Module list
Module at 0x00400000: tfswctrl.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x10000000: tfswapi.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x00340000: tfswcres.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x774e0000: ole32.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x5ad70000: uxtheme.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x76f50000: Wtsapi32.dll
Module at 0x76360000: WINSTA.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x74720000: MSCTF.dll
Module at 0x00ad0000: gokegubo.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x00bf0000: famatoge.dll
Module at 0x00c10000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x00c40000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71ab0000: ws2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x00ca0000: gikuyaju.dll

Process 00000088: jqs.exe
Current Memory usage : 2116 kb
Memory usage peak : 16716 kb
Current Paged Pool usage : 29 kb
Paged Pool usage peak : 43 kb
Current Non-Paged Pool usage : 34 kb
Non-Paged Pool usage peak : 35 kb
Current Page file usage : 2220 kb
Page file usage peak : 2408 kb
Page Faults : 144825

Module list
Module at 0x00400000: jqs.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x774e0000: ole32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x7c340000: MSVCR71.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x76bf0000: psapi.dll
Module at 0x74000000: pdh.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x763b0000: comdlg32.dll
Module at 0x5d090000: COMCTL32.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x74320000: ODBC32.dll
Module at 0x711a0000: odbcbcp.dll
Module at 0x77c00000: VERSION.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x773d0000: comctl32.dll
Module at 0x20000000: odbcint.dll
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x5e760000: perfos.dll
Module at 0x5e790000: perfdisk.dll

Process 00000404: issch.exe
Current Memory usage : 360 kb
Memory usage peak : 2624 kb
Current Paged Pool usage : 31 kb
Paged Pool usage peak : 37 kb
Current Non-Paged Pool usage : 2 kb
Non-Paged Pool usage peak : 2 kb
Current Page file usage : 1024 kb
Page file usage peak : 1024 kb
Page Faults : 702

Module list
Module at 0x00400000: issch.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x74720000: MSCTF.dll

Process 00000474: mmtask.exe
Current Memory usage : 648 kb
Memory usage peak : 3972 kb
Current Paged Pool usage : 37 kb
Paged Pool usage peak : 38 kb
Current Non-Paged Pool usage : 3 kb
Non-Paged Pool usage peak : 3 kb
Current Page file usage : 1280 kb
Page file usage peak : 1292 kb
Page Faults : 1228

Module list
Module at 0x00400000: mmtask.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x7c080000: MMVCP70.dll
Module at 0x7c000000: MMVCR70.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x74720000: MSCTF.dll
Module at 0x71d40000: actxprxy.dll

Process 00000480: McSACore.exe
Current Memory usage : 10524 kb
Memory usage peak : 21308 kb
Current Paged Pool usage : 75 kb
Paged Pool usage peak : 81 kb
Current Non-Paged Pool usage : 14 kb
Non-Paged Pool usage peak : 19 kb
Current Page file usage : 42316 kb
Page file usage peak : 44972 kb
Page Faults : 195921

Module list
Module at 0x00400000: McSACore.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x78130000: urlmon.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x774e0000: ole32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x78000000: iertutil.dll
Module at 0x769c0000: USERENV.dll
Module at 0x76f50000: WTSAPI32.dll
Module at 0x76360000: WINSTA.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x10000000: saHook.dll
Module at 0x00950000: apengine.dll
Module at 0x00ce0000: saupkeep.dll
Module at 0x4d4f0000: WINHTTP.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x20000000: xpsp2res.dll
Module at 0x5ad70000: uxtheme.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77c00000: VERSION.dll
Module at 0x012e0000: SACore.dll
Module at 0x69f00000: SASet.dll
Module at 0x69400000: MCSACO~1.DLL
Module at 0x77920000: SETUPAPI.dll
Module at 0x69b10000: msxml4.dll
Module at 0x67100000: mcregobj.dll
Module at 0x62600000: McUtil.dll
Module at 0x78050000: WININET.dll
Module at 0x023a0000: Normaliz.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x77b40000: appHelp.dll
Module at 0x77760000: shdocvw.dll
Module at 0x754d0000: CRYPTUI.dll
Module at 0x76f60000: WLDAP32.dll
Module at 0x72410000: mydocs.dll
Module at 0x76990000: ntshrui.dll
Module at 0x76b20000: ATL.DLL
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x020a0000: samnsp.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x16080000: mdnsNSP.dll
Module at 0x76d60000: Iphlpapi.dll
Module at 0x76fc0000: rasadhlp.dll
Module at 0x74980000: msxml3.dll
Module at 0x69900000: McFrmWk.dll
Module at 0x01100000: CntScan.dll
Module at 0x435d0000: mshtml.dll
Module at 0x746c0000: msls31.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x77fe0000: Secur32.dll
Module at 0x75cf0000: mlang.dll
Module at 0x51660000: pdm.dll
Module at 0x51580000: msdbg2.dll
Module at 0x767f0000: schannel.dll
Module at 0x68100000: dssenh.dll

Process 0000051c: EM_EXEC.EXE
Current Memory usage : 2348 kb
Memory usage peak : 4704 kb
Current Paged Pool usage : 44 kb
Paged Pool usage peak : 45 kb
Current Non-Paged Pool usage : 5 kb
Non-Paged Pool usage peak : 6 kb
Current Page file usage : 2808 kb
Page file usage peak : 3720 kb
Page Faults : 15572

Module list
Module at 0x00400000: EM_EXEC.EXE
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x10000000: EVENTEX.dll
Module at 0x00340000: COMNCTR.dll
Module at 0x6c370000: MFC42.DLL
Module at 0x77c10000: MSVCRT.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x5d090000: COMCTL32.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x01800000: ccresrce.dll
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x02000000: GlbResLt.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x00b40000: devices.dll
Module at 0x00a10000: ccstmglb.dll
Module at 0x00c70000: ccustom.dll
Module at 0x00d90000: ccmsghk.dll
Module at 0x00db0000: LGMOUSHK.dll
Module at 0x74720000: MSCTF.dll
Module at 0x00ed0000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x00f00000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71ab0000: ws2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x01170000: famatoge.dll
Module at 0x017e0000: gokegubo.dll
Module at 0x01920000: gikuyaju.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll

Process 000005b0: realsched.exe
Current Memory usage : 160 kb
Memory usage peak : 3760 kb
Current Paged Pool usage : 47 kb
Paged Pool usage peak : 47 kb
Current Non-Paged Pool usage : 4 kb
Non-Paged Pool usage peak : 6 kb
Current Page file usage : 2416 kb
Page file usage peak : 3084 kb
Page Faults : 107977

Module list
Module at 0x00400000: realsched.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x774e0000: ole32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77c00000: VERSION.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x20000000: xpsp2res.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x74720000: MSCTF.dll
Module at 0x71d40000: actxprxy.dll
Module at 0x10000000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x00c60000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71ab0000: ws2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x00e10000: gikuyaju.dll
Module at 0x00e40000: gokegubo.dll
Module at 0x01860000: famatoge.dll

Process 00000648: DVDLauncher.exe
Current Memory usage : 2132 kb
Memory usage peak : 3976 kb
Current Paged Pool usage : 41 kb
Paged Pool usage peak : 42 kb
Current Non-Paged Pool usage : 3 kb
Non-Paged Pool usage peak : 4 kb
Current Page file usage : 2184 kb
Page file usage peak : 3148 kb
Page Faults : 15246

Module list
Module at 0x00400000: DVDLauncher.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x73dd0000: MFC42.DLL
Module at 0x77c10000: msvcrt.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x774e0000: ole32.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x74720000: MSCTF.dll
Module at 0x10000000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x009f0000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71ab0000: ws2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x011c0000: famatoge.dll
Module at 0x012e0000: gokegubo.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x01400000: gikuyaju.dll

Process 00000678: pptd40nt.exe
Current Memory usage : 2128 kb
Memory usage peak : 3868 kb
Current Paged Pool usage : 41 kb
Paged Pool usage peak : 42 kb
Current Non-Paged Pool usage : 4 kb
Non-Paged Pool usage peak : 5 kb
Current Page file usage : 3280 kb
Page file usage peak : 3888 kb
Page Faults : 15179

Module list
Module at 0x00400000: pptd40nt.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x006c0000: MAXUTIL.dll
Module at 0x00700000: PPERR.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77c10000: MSVCRT.dll
Module at 0x76780000: SHFOLDER.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77c00000: VERSION.dll
Module at 0x763b0000: comdlg32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x5d090000: COMCTL32.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x76080000: MSVCP60.dll
Module at 0x68600000: blicectr.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x74720000: MSCTF.dll
Module at 0x10000000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x006e0000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71ab0000: ws2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x01510000: gikuyaju.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x01640000: gokegubo.dll
Module at 0x01760000: famatoge.dll

Process 00000708: brctrcen.exe
Current Memory usage : 3876 kb
Memory usage peak : 8768 kb
Current Paged Pool usage : 57 kb
Paged Pool usage peak : 66 kb
Current Non-Paged Pool usage : 6 kb
Non-Paged Pool usage peak : 7 kb
Current Page file usage : 4580 kb
Page file usage peak : 5072 kb
Page Faults : 22686

Module list
Module at 0x00400000: brctrcen.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x763b0000: comdlg32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x773d0000: COMCTL32.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x73000000: WINSPOOL.DRV
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x1ff70000: LTDIS12n.dll
Module at 0x1fff0000: LTKRN12n.dll
Module at 0x1ffc0000: LTFIL12n.DLL
Module at 0x10000000: brccfile.dll
Module at 0x77c00000: VERSION.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x01800000: brctcusa.DLL
Module at 0x77b40000: Apphelp.dll
Module at 0x01b40000: BRCCWIA.DLL
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x30000000: IMGHOOK.DLL
Module at 0x01cb0000: ctagent.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x76980000: LINKINFO.dll
Module at 0x76990000: ntshrui.dll
Module at 0x76b20000: ATL.DLL
Module at 0x5b860000: NETAPI32.dll
Module at 0x42ef0000: ieframe.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x78000000: iertutil.dll
Module at 0x01e00000: saHook.dll
Module at 0x74720000: MSCTF.dll
Module at 0x02080000: imhook.dll
Module at 0x605d0000: mslbui.dll
Module at 0x02300000: LGMOUSHK.dll
Module at 0x01f30000: gokegubo.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x01f50000: famatoge.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x01fe0000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x02010000: Normaliz.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x01f70000: gikuyaju.dll

Process 000005a8: mcagent.exe
Current Memory usage : 2436 kb
Memory usage peak : 8440 kb
Current Paged Pool usage : 59 kb
Paged Pool usage peak : 61 kb
Current Non-Paged Pool usage : 10 kb
Non-Paged Pool usage peak : 12 kb
Current Page file usage : 7376 kb
Page file usage peak : 8056 kb
Page Faults : 80530

Module list
Module at 0x00400000: mcagent.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x78050000: WININET.dll
Module at 0x00350000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x67200000: McRes.dll
Module at 0x66500000: McLocRes.dll
Module at 0x66400000: Mccobres.dll
Module at 0x00d80000: Mccobres.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x76f50000: wtsapi32.dll
Module at 0x76360000: WINSTA.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x69b10000: msxml4.dll
Module at 0x67500000: mcsubmgr.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x76bf0000: psapi.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x74720000: MSCTF.dll
Module at 0x62a00000: mccoreps.dll
Module at 0x66a00000: mcmispps.dll
Module at 0x74980000: msxml3.dll
Module at 0x4d4f0000: winhttp.dll
Module at 0x66000000: mcagntps.dll
Module at 0x76ee0000: RASAPI32.DLL
Module at 0x76e90000: rasman.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x76eb0000: TAPI32.dll
Module at 0x76e80000: rtutils.dll
Module at 0x66300000: mccfgpv.dll
Module at 0x77c70000: msv1_0.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x10000000: saHook.dll
Module at 0x02740000: imhook.dll
Module at 0x67600000: mcuicfg.dll
Module at 0x605d0000: mslbui.dll
Module at 0x30000000: IMGHOOK.DLL
Module at 0x029f0000: ctagent.dll
Module at 0x78130000: urlmon.dll
Module at 0x00c50000: fujayagi.dll
Module at 0x00cd0000: gikuyaju.dll
Module at 0x00d00000: gokegubo.dll
Module at 0x00d20000: famatoge.dll

Process 0000086c: iTunesHelper.exe
Current Memory usage : 2884 kb
Memory usage peak : 9672 kb
Current Paged Pool usage : 76 kb
Paged Pool usage peak : 76 kb
Current Non-Paged Pool usage : 7 kb
Non-Paged Pool usage peak : 8 kb
Current Page file usage : 6416 kb
Page file usage peak : 7184 kb
Page Faults : 17489

Module list
Module at 0x00400000: iTunesHelper.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x78050000: WININET.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x00350000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x5d090000: comctl32.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x10000000: iTunesHelperLocalized.DLL
Module at 0x00c70000: iTunesHelper.DLL
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x76c30000: WINTRUST.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x74720000: MSCTF.dll
Module at 0x66800000: QuickTime.qts
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x763b0000: comdlg32.dll
Module at 0x4ec50000: gdiplus.dll
Module at 0x73f10000: DSOUND.dll
Module at 0x73760000: ddraw.dll
Module at 0x73bc0000: DCIMAN32.dll
Module at 0x019f0000: saHook.dll
Module at 0x01a50000: imhook.dll
Module at 0x01c90000: iTunesMobileDevice.dll
Module at 0x71ad0000: WSOCK32.dll
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x76f50000: Wtsapi32.dll
Module at 0x76360000: WINSTA.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x7d1e0000: msi.dll
Module at 0x75e90000: SXS.DLL
Module at 0x71d40000: actxprxy.dll
Module at 0x00a30000: fujayagi.dll
Module at 0x00aa0000: gokegubo.dll
Module at 0x00ac0000: gikuyaju.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x00af0000: famatoge.dll

Process 000008bc: PlgUni.exe
Current Memory usage : 2172 kb
Memory usage peak : 4368 kb
Current Paged Pool usage : 43 kb
Paged Pool usage peak : 44 kb
Current Non-Paged Pool usage : 4 kb
Non-Paged Pool usage peak : 5 kb
Current Page file usage : 3184 kb
Page file usage peak : 4088 kb
Page Faults : 15464

Module list
Module at 0x00400000: Plguni.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x10000000: UniComn.dll
Module at 0x774e0000: ole32.dll
Module at 0x773d0000: COMCTL32.dll
Module at 0x00350000: UniCore.dll
Module at 0x77c00000: VERSION.dll
Module at 0x003b0000: COMPPL32.dll
Module at 0x00420000: McPie.dll
Module at 0x00440000: ARC.dll
Module at 0x00470000: QCUTIL.dll
Module at 0x7d1e0000: msi.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x00c10000: PlgUnRes.dll
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x00c80000: imhook.dll
Module at 0x74720000: MSCTF.dll
Module at 0x00cc0000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x00cf0000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71ab0000: ws2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x014a0000: famatoge.dll
Module at 0x015c0000: gokegubo.dll
Module at 0x016e0000: gikuyaju.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll

Process 000008e4: LogitechDesktopMessenger.exe
Current Memory usage : 1940 kb
Memory usage peak : 10656 kb
Current Paged Pool usage : 64 kb
Paged Pool usage peak : 64 kb
Current Non-Paged Pool usage : 8 kb
Non-Paged Pool usage peak : 12 kb
Current Page file usage : 8116 kb
Page file usage peak : 9124 kb
Page Faults : 70519

Module list
Module at 0x00400000: LogitechDesktopMessenger.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x00b40000: backWeb.dll
Module at 0x10000000: bwsec.dll
Module at 0x00a90000: clntutil.dll
Module at 0x71f60000: snmpapi.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x78050000: WININET.dll
Module at 0x00aa0000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x73dd0000: MFC42.DLL
Module at 0x71ad0000: WSOCK32.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x00b00000: ClientRC.dll
Module at 0x010d0000: saHook.dll
Module at 0x74720000: MSCTF.dll
Module at 0x01140000: imhook.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x693f0000: feclient.dll
Module at 0x71b20000: MPR.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x01290000: BWfiles-8876480.dll
Module at 0x012a0000: BWfiles.dll
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x76f50000: wtsapi32.dll
Module at 0x76360000: WINSTA.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x605d0000: mslbui.dll
Module at 0x30000000: IMGHOOK.DLL
Module at 0x01760000: ctagent.dll
Module at 0x76bf0000: psapi.dll
Module at 0x666f0000: inetmib1.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x76d40000: MPRAPI.dll
Module at 0x77cc0000: ACTIVEDS.dll
Module at 0x76e10000: adsldpc.dll
Module at 0x76f60000: WLDAP32.dll
Module at 0x76b20000: ATL.DLL
Module at 0x76e80000: rtutils.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x76fb0000: winrnr.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x01920000: samnsp.dll
Module at 0x16080000: mdnsNSP.dll
Module at 0x76fc0000: rasadhlp.dll
Module at 0x66000000: SyncExt.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x72d20000: wdmaud.drv
Module at 0x72d10000: msacm32.drv
Module at 0x77bd0000: midimap.dll
Module at 0x7d1e0000: msi.dll
Module at 0x75e90000: SXS.DLL
Module at 0x01b80000: famatoge.dll
Module at 0x01ba0000: gokegubo.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x01bc0000: fujayagi.dll
Module at 0x01c30000: gikuyaju.dll

Process 000008f4: CTFMON.EXE
Current Memory usage : 2420 kb
Memory usage peak : 4688 kb
Current Paged Pool usage : 41 kb
Paged Pool usage peak : 42 kb
Current Non-Paged Pool usage : 5 kb
Non-Paged Pool usage peak : 6 kb
Current Page file usage : 2364 kb
Page file usage peak : 3116 kb
Page Faults : 15664

Module list
Module at 0x00400000: ctfmon.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x74720000: MSCTF.dll
Module at 0x5fc10000: MSUTB.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x10000000: saHook.dll
Module at 0x009d0000: imhook.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x30000000: IMGHOOK.DLL
Module at 0x00b70000: ctagent.dll
Module at 0x00b90000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x00bc0000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71ab0000: ws2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x012b0000: famatoge.dll
Module at 0x01310000: gikuyaju.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x01380000: gokegubo.dll

Process 00000938: mcmscsvc.exe
Current Memory usage : 5512 kb
Memory usage peak : 18800 kb
Current Paged Pool usage : 71 kb
Paged Pool usage peak : 81 kb
Current Non-Paged Pool usage : 15 kb
Non-Paged Pool usage peak : 17 kb
Current Page file usage : 9848 kb
Page file usage peak : 11648 kb
Page Faults : 96448

Module list
Module at 0x00400000: mcmscsvc.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x76f50000: WTSAPI32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x76360000: WINSTA.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x78130000: urlmon.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x78000000: iertutil.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x62600000: McUtil.dll
Module at 0x78050000: WININET.dll
Module at 0x00810000: Normaliz.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x5ad70000: uxtheme.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77c00000: VERSION.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x67200000: McRes.dll
Module at 0x66500000: McLocRes.dll
Module at 0x66400000: Mccobres.dll
Module at 0x011a0000: Mccobres.dll
Module at 0x62800000: sqlite3.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x62a00000: mccoreps.dll
Module at 0x67300000: mcshllps.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x66a00000: mcmispps.dll
Module at 0x77fe0000: secur32.dll
Module at 0x77c70000: msv1_0.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x66800000: mcdbmgr.dll
Module at 0x67500000: mcsubmgr.dll
Module at 0x769c0000: userenv.dll
Module at 0x66d00000: mcmscver.dll
Module at 0x60f00000: mvsap.dll
Module at 0x69b10000: msxml4.dll
Module at 0x63400000: mpfmisp.dll
Module at 0x763b0000: COMDLG32.dll
Module at 0x76380000: MSIMG32.dll
Module at 0x76b40000: WINMM.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x63000000: L10N.DLL
Module at 0x75e60000: cryptnet.dll
Module at 0x4d4f0000: WINHTTP.dll
Module at 0x722b0000: SensApi.dll
Module at 0x75150000: Cabinet.dll
Module at 0x69a00000: mskmisp.dll
Module at 0x76ee0000: RASAPI32.dll
Module at 0x76e90000: rasman.dll
Module at 0x76eb0000: TAPI32.dll
Module at 0x76e80000: rtutils.dll
Module at 0x64400000: mpsmisp.dll
Module at 0x02b30000: MpsRes.DLL
Module at 0x64b00000: mpspii.dll
Module at 0x64600000: mpscfg.dll
Module at 0x75e90000: SXS.DLL
Module at 0x64a00000: mpspc.dll
Module at 0x66f00000: mcprotpv.dll
Module at 0x6b300000: McNmcRes.dll
Module at 0x6b200000: McNmcLoR.dll
Module at 0x6b100000: McNmcCoR.dll
Module at 0x61000000: mvscfg.dll
Module at 0x66900000: mcdemenu.dll
Module at 0x66e00000: McProHlp.dll
Module at 0x77b40000: Apphelp.dll
Module at 0x61800000: mvsver.dll
Module at 0x73dc0000: LZ32.dll
Module at 0x62b00000: mcevtbrk.dll
Module at 0x62300000: proxyver.dll
Module at 0x62e00000: hwapi.dll
Module at 0x64900000: mpsver.dll
Module at 0x6b480000: mcnmcver.dll
Module at 0x65300000: qcmisp.dll
Module at 0x65200000: QcLite.dll
Module at 0x60b00000: mcvspp.dll
Module at 0x61a00000: naiannps.dll
Module at 0x67100000: mcregobj.dll
Module at 0x6b280000: mcnmcprv.dll
Module at 0x6b600000: MCNASV~1.DLL
Module at 0x6b380000: mcnmcsps.dll
Module at 0x63200000: mpfp.dll
Module at 0x76780000: SHFOLDER.dll
Module at 0x64c00000: mpspv.dll
Module at 0x61100000: mvscp.dll
Module at 0x74980000: msxml3.dll
Module at 0x67600000: mcuicfg.dll
Module at 0x66300000: mccfgpv.dll

Process 00000988: McNASvc.exe
Current Memory usage : 7652 kb
Memory usage peak : 12364 kb
Current Paged Pool usage : 54 kb
Paged Pool usage peak : 55 kb
Current Non-Paged Pool usage : 41 kb
Non-Paged Pool usage peak : 45 kb
Current Page file usage : 7100 kb
Page file usage peak : 7512 kb
Page Faults : 36802

Module list
Module at 0x00400000: mcnasvc.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77c00000: VERSION.dll
Module at 0x62600000: McUtil.dll
Module at 0x78050000: WININET.dll
Module at 0x009f0000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x5ad70000: uxtheme.dll
Module at 0x6c600000: mcnmcsrv.dll
Module at 0x71b20000: MPR.dll
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x62a00000: mccoreps.dll
Module at 0x67300000: mcshllps.dll
Module at 0x76d40000: MPRAPI.dll
Module at 0x77cc0000: ACTIVEDS.dll
Module at 0x76e10000: adsldpc.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x76f60000: WLDAP32.dll
Module at 0x76b20000: ATL.DLL
Module at 0x76e80000: rtutils.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x76400000: NETSHELL.dll
Module at 0x76c00000: credui.dll
Module at 0x6b600000: MCNASV~1.DLL
Module at 0x6b380000: mcnmcsps.dll
Module at 0x63200000: mpfp.dll
Module at 0x76780000: SHFOLDER.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x0ffd0000: rsaenh.dll
Module at 0x769c0000: userenv.dll
Module at 0x77fe0000: secur32.dll
Module at 0x75e60000: cryptnet.dll
Module at 0x4d4f0000: WINHTTP.dll
Module at 0x722b0000: SensApi.dll
Module at 0x75150000: Cabinet.dll
Module at 0x75e90000: SXS.DLL
Module at 0x69b10000: msxml4.dll
Module at 0x67100000: mcregobj.dll
Module at 0x66700000: mcmismgr.dll
Module at 0x67200000: McRes.dll
Module at 0x66500000: McLocRes.dll
Module at 0x66400000: Mccobres.dll
Module at 0x02190000: Mccobres.dll
Module at 0x67500000: mcsubmgr.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x6b500000: mcuj.dll
Module at 0x6b300000: McNmcRes.dll
Module at 0x6b200000: McNmcLoR.dll
Module at 0x6b100000: McNmcCoR.dll
Module at 0x74ef0000: wbemprox.dll
Module at 0x75290000: wbemcomn.dll
Module at 0x74ed0000: wbemsvc.dll
Module at 0x75690000: fastprox.dll
Module at 0x76080000: MSVCP60.dll
Module at 0x767a0000: NTDSAPI.dll
Module at 0x76f20000: DNSAPI.dll

Process 00000a24: McProxy.exe
Current Memory usage : 1084 kb
Memory usage peak : 11288 kb
Current Paged Pool usage : 48 kb
Paged Pool usage peak : 49 kb
Current Non-Paged Pool usage : 11 kb
Non-Paged Pool usage peak : 11 kb
Current Page file usage : 7604 kb
Page file usage peak : 8900 kb
Page Faults : 7099

Module list
Module at 0x00400000: mcproxy.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x71ab0000: WS2_32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77c00000: VERSION.dll
Module at 0x60300000: escnplug.dll
Module at 0x60400000: EsPlgRes.dll
Module at 0x61000000: mvscfg.dll
Module at 0x75e90000: SXS.DLL
Module at 0x69d00000: mskpxplg.dll
Module at 0x64500000: mps.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x64600000: mpscfg.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x5ad70000: uxtheme.dll
Module at 0x769c0000: userenv.dll
Module at 0x5b860000: netapi32.dll
Module at 0x30000000: Dunzip32.dll
Module at 0x763b0000: comdlg32.dll
Module at 0x75cf0000: mlang.dll
Module at 0x66a00000: mcmispps.dll
Module at 0x62b00000: mcevtbrk.dll
Module at 0x67500000: mcsubmgr.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x62a00000: mccoreps.dll
Module at 0x64200000: mpsevh.dll
Module at 0x78130000: urlmon.dll
Module at 0x78000000: iertutil.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x64400000: mpsmisp.dll
Module at 0x61300000: mvslog.dll

Process 00000a6c: DvzIncMsgr.exe
Current Memory usage : 2332 kb
Memory usage peak : 4248 kb
Current Paged Pool usage : 41 kb
Paged Pool usage peak : 42 kb
Current Non-Paged Pool usage : 3 kb
Non-Paged Pool usage peak : 5 kb
Current Page file usage : 2372 kb
Page file usage peak : 2988 kb
Page Faults : 15667

Module list
Module at 0x00400000: DvzIncMsgr.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x73dd0000: MFC42.DLL
Module at 0x77c10000: msvcrt.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x774e0000: ole32.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x10000000: saHook.dll
Module at 0x74720000: MSCTF.dll
Module at 0x009f0000: imhook.dll
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x00bd0000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x00b80000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x01360000: gikuyaju.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x01490000: gokegubo.dll
Module at 0x015b0000: famatoge.dll

Process 00000a88: Mcshield.exe
Current Memory usage : 16252 kb
Memory usage peak : 151872 kb
Current Paged Pool usage : 49 kb
Paged Pool usage peak : 54 kb
Current Non-Paged Pool usage : 12 kb
Non-Paged Pool usage peak : 15 kb
Current Page file usage : 33272 kb
Page file usage peak : 160384 kb
Page Faults : 3187552

Module list
Module at 0x00400000: mcshield.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x73dc0000: LZ32.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x140e0000: LockDown.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x14180000: mytilus3.dll
Module at 0x14710000: mytilus3_worker.dll
Module at 0x76780000: SHFOLDER.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x14810000: mytilus3_server.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x14100000: McShield.dll
Module at 0x14080000: FTL.Dll
Module at 0x5ad70000: uxtheme.dll
Module at 0x76bf0000: psapi.dll
Module at 0x61900000: naiann.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x62a00000: mccoreps.dll
Module at 0x60d00000: mcvsps.dll
Module at 0x61a00000: naiannps.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77c00000: VERSION.dll
Module at 0x61000000: mvscfg.dll
Module at 0x75e90000: SXS.DLL
Module at 0x62b00000: mcevtbrk.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x769c0000: userenv.dll
Module at 0x77fe0000: secur32.dll
Module at 0x5b860000: netapi32.dll
Module at 0x61300000: mvslog.dll
Module at 0x76f50000: wtsapi32.dll
Module at 0x76360000: WINSTA.dll
Module at 0x76c60000: sfc_os.dll
Module at 0x12000000: mcscan32.dll
Module at 0x66a00000: mcmispps.dll
Module at 0x603d0000: mfebopa.dll
Module at 0x66240000: mfehida.dll
Module at 0x6eff0000: mfeavfa.dll
Module at 0x67500000: mcsubmgr.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x69b10000: msxml4.dll
Module at 0x66300000: mccfgpv.dll
Module at 0x67200000: McRes.dll
Module at 0x66500000: McLocRes.dll
Module at 0x66400000: Mccobres.dll
Module at 0x04700000: Mccobres.dll

Process 00000ad8: mdm.exe
Current Memory usage : 740 kb
Memory usage peak : 3372 kb
Current Paged Pool usage : 34 kb
Paged Pool usage peak : 34 kb
Current Non-Paged Pool usage : 2 kb
Non-Paged Pool usage peak : 3 kb
Current Page file usage : 1196 kb
Page file usage peak : 1232 kb
Page Faults : 1042

Module list
Module at 0x00400000: mdm.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x774e0000: ole32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x77c00000: VERSION.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x76bf0000: psapi.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x51580000: msdbg2.dll

Process 00000ae0: DLG.exe
Current Memory usage : 2820 kb
Memory usage peak : 4928 kb
Current Paged Pool usage : 42 kb
Paged Pool usage peak : 43 kb
Current Non-Paged Pool usage : 4 kb
Non-Paged Pool usage peak : 5 kb
Current Page file usage : 3260 kb
Page file usage peak : 4232 kb
Page Faults : 15937

Module list
Module at 0x00400000: DLG.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x10000000: BVRPDIAG.dll
Module at 0x76780000: SHFOLDER.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x00a90000: MdmXSdk.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x00ff0000: saHook.dll
Module at 0x74720000: MSCTF.dll
Module at 0x01060000: imhook.dll
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x30000000: IMGHOOK.DLL
Module at 0x011b0000: ctagent.dll
Module at 0x605d0000: mslbui.dll
Module at 0x01330000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x01220000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x01ac0000: famatoge.dll
Module at 0x01be0000: gokegubo.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x01d00000: gikuyaju.dll

Process 00000afc: MpfSrv.exe
Current Memory usage : 5620 kb
Memory usage peak : 13212 kb
Current Paged Pool usage : 53 kb
Paged Pool usage peak : 57 kb
Current Non-Paged Pool usage : 10 kb
Non-Paged Pool usage peak : 13 kb
Current Page file usage : 7008 kb
Page file usage peak : 9268 kb
Page Faults : 23676

Module list
Module at 0x00400000: MPFSrv.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77c00000: VERSION.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x5ad70000: uxtheme.dll
Module at 0x10000000: saHook.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x62e00000: hwapi.dll
Module at 0x4d4f0000: winhttp.dll
Module at 0x76bf0000: psapi.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x769c0000: userenv.dll
Module at 0x5b860000: netapi32.dll
Module at 0x62b00000: mcevtbrk.dll
Module at 0x63400000: mpfmisp.dll
Module at 0x763b0000: COMDLG32.dll
Module at 0x78050000: WININET.dll
Module at 0x01730000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x76380000: MSIMG32.dll
Module at 0x78130000: urlmon.dll
Module at 0x76b40000: WINMM.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x76400000: NETSHELL.dll
Module at 0x76e80000: rtutils.dll
Module at 0x76c00000: credui.dll
Module at 0x76b20000: ATL.DLL
Module at 0x76d60000: iphlpapi.dll
Module at 0x76d40000: MPRAPI.dll
Module at 0x77cc0000: ACTIVEDS.dll
Module at 0x76e10000: adsldpc.dll
Module at 0x75e90000: SXS.DLL
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x019f0000: samnsp.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x16080000: mdnsNSP.dll
Module at 0x76fc0000: rasadhlp.dll
Module at 0x67200000: McRes.dll
Module at 0x66500000: McLocRes.dll
Module at 0x66400000: Mccobres.dll
Module at 0x02480000: Mccobres.dll

Process 00000b8c: msksrver.exe
Current Memory usage : 332 kb
Memory usage peak : 4972 kb
Current Paged Pool usage : 32 kb
Paged Pool usage peak : 34 kb
Current Non-Paged Pool usage : 4 kb
Non-Paged Pool usage peak : 5 kb
Current Page file usage : 2460 kb
Page file usage peak : 2464 kb
Page Faults : 1507

Module list
Module at 0x00400000: MskSrver.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x69500000: mskengn.dll
Module at 0x774e0000: ole32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x6a000000: mskwm.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x76ee0000: RASAPI32.dll
Module at 0x76e90000: rasman.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x76eb0000: TAPI32.dll
Module at 0x76e80000: rtutils.dll
Module at 0x76b40000: WINMM.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x5ad70000: uxtheme.dll
Module at 0x6a200000: mskxaif.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x69f00000: MSKSet.dll
Module at 0x769c0000: USERENV.dll
Module at 0x4d4f0000: WinHttp.dll

Process 00000bc8: Hotsync.exe
Current Memory usage : 2668 kb
Memory usage peak : 9908 kb
Current Paged Pool usage : 48 kb
Paged Pool usage peak : 49 kb
Current Non-Paged Pool usage : 6 kb
Non-Paged Pool usage peak : 7 kb
Current Page file usage : 5016 kb
Page file usage peak : 6064 kb
Page Faults : 27803

Module list
Module at 0x00400000: Hotsync.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x67a50000: CiAPI.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x66f90000: VFSAPI.dll
Module at 0x67a20000: CMDS21.dll
Module at 0x67520000: HSLOG20.dll
Module at 0x66bf0000: PalmCmn.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x66a10000: CONDMGR.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x774e0000: ole32.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x671e0000: SYNC20.dll
Module at 0x669e0000: UserData.dll
Module at 0x73000000: WINSPOOL.DRV
Module at 0x77120000: OLEAUT32.dll
Module at 0x5d090000: COMCTL32.dll
Module at 0x74c80000: OLEACC.dll
Module at 0x76080000: MSVCP60.dll
Module at 0x66ae0000: INSTAIDE.dll
Module at 0x66b10000: i18nNoMFC.dll
Module at 0x7c340000: MSVCR71.dll
Module at 0x7c3a0000: MSVCP71.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x10000000: saHook.dll
Module at 0x74720000: MSCTF.dll
Module at 0x00cb0000: imhook.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x76980000: LINKINFO.dll
Module at 0x76990000: ntshrui.dll
Module at 0x76b20000: ATL.DLL
Module at 0x5b860000: NETAPI32.dll
Module at 0x0a930000: SHW32.DLL
Module at 0x669c0000: USBTransport.dll
Module at 0x00d00000: USBPort.dll
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x00d50000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x00d80000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x01210000: famatoge.dll
Module at 0x01230000: gokegubo.dll
Module at 0x01250000: gikuyaju.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll

Process 00000c1c: nvsvc32.exe
Current Memory usage : 500 kb
Memory usage peak : 6340 kb
Current Paged Pool usage : 32 kb
Paged Pool usage peak : 40 kb
Current Non-Paged Pool usage : 3 kb
Non-Paged Pool usage peak : 3 kb
Current Page file usage : 2220 kb
Page file usage peak : 6732 kb
Page Faults : 2993

Module list
Module at 0x00400000: nvsvc32.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x769c0000: USERENV.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x74ad0000: POWRPROF.dll
Module at 0x77c00000: VERSION.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x76f50000: wtsapi32.dll
Module at 0x76360000: WINSTA.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x5d090000: COMCTL32.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5ad70000: uxtheme.dll
Module at 0x10000000: saHook.dll
Module at 0x755c0000: msctfime.ime
Module at 0x774e0000: ole32.dll
Module at 0x47bf0000: imekr61.ime
Module at 0x7c9c0000: SHELL32.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x77fe0000: secur32.dll
Module at 0x77c70000: msv1_0.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x76d60000: iphlpapi.dll

Process 00000cc0: SVCHOST.EXE
Current Memory usage : 26776 kb
Memory usage peak : 31708 kb
Current Paged Pool usage : 37 kb
Paged Pool usage peak : 38 kb
Current Non-Paged Pool usage : 4 kb
Non-Paged Pool usage peak : 4 kb
Current Page file usage : 2812 kb
Page file usage peak : 2848 kb
Page Faults : 10849

Module list
Module at 0x01000000: svchost.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x75aa0000: wiaservc.dll
Module at 0x74ae0000: CFGMGR32.dll
Module at 0x77920000: setupapi.dll
Module at 0x73b30000: mscms.dll
Module at 0x73000000: WINSPOOL.DRV
Module at 0x76360000: WINSTA.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x71d40000: actxprxy.dll
Module at 0x73ba0000: sti.dll

Process 00000f44: CALMAIN.exe
Current Memory usage : 380 kb
Memory usage peak : 2912 kb
Current Paged Pool usage : 24 kb
Paged Pool usage peak : 25 kb
Current Non-Paged Pool usage : 3 kb
Non-Paged Pool usage peak : 3 kb
Current Page file usage : 1144 kb
Page file usage peak : 1276 kb
Page Faults : 1722

Module list
Module at 0x00400000: CALMAIN.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x769c0000: USERENV.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x76f50000: WTSAPI32.dll
Module at 0x76360000: WINSTA.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x73ba0000: sti.dll
Module at 0x74ae0000: CFGMGR32.dll
Module at 0x77920000: setupapi.DLL

Process 000005dc: DLLHOST.EXE
Current Memory usage : 936 kb
Memory usage peak : 6456 kb
Current Paged Pool usage : 37 kb
Paged Pool usage peak : 38 kb
Current Non-Paged Pool usage : 4 kb
Non-Paged Pool usage peak : 9 kb
Current Page file usage : 2472 kb
Page file usage peak : 2592 kb
Page Faults : 1901

Module list
Module at 0x01000000: dllhost.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x774e0000: ole32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x76620000: COMSVCS.DLL
Module at 0x75130000: colbact.DLL
Module at 0x77fe0000: Secur32.dll
Module at 0x750f0000: MTXCLU.DLL
Module at 0x71ad0000: WSOCK32.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x76d10000: CLUSAPI.DLL
Module at 0x750b0000: RESUTILS.DLL
Module at 0x0ffd0000: rsaenh.dll
Module at 0x77710000: ES.DLL
Module at 0x76f50000: wtsapi32.dll
Module at 0x76360000: WINSTA.dll
Module at 0x75e90000: SXS.DLL
Module at 0x5b2b0000: txflog.dll

Process 00000f14: iPodService.exe
Current Memory usage : 1472 kb
Memory usage peak : 4048 kb
Current Paged Pool usage : 24 kb
Paged Pool usage peak : 25 kb
Current Non-Paged Pool usage : 3 kb
Non-Paged Pool usage peak : 4 kb
Current Page file usage : 2512 kb
Page file usage peak : 2568 kb
Page Faults : 1431

Module list
Module at 0x00400000: iPodService.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x74ae0000: CFGMGR32.dll
Module at 0x77920000: setupapi.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x10000000: iPodServiceLocalized.DLL
Module at 0x008b0000: iPodService.DLL
Module at 0x20000000: xpsp2res.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x75e90000: SXS.DLL
Module at 0x5ad70000: uxtheme.dll
Module at 0x76f50000: Wtsapi32.dll
Module at 0x76360000: WINSTA.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll

Process 00000be4: mcsysmon.exe
Current Memory usage : 10496 kb
Memory usage peak : 18120 kb
Current Paged Pool usage : 46 kb
Paged Pool usage peak : 68 kb
Current Non-Paged Pool usage : 11 kb
Non-Paged Pool usage peak : 12 kb
Current Page file usage : 15048 kb
Page file usage peak : 16472 kb
Page Faults : 363087

Module list
Module at 0x00400000: mcsysmon.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x77c00000: VERSION.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x769c0000: USERENV.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x76f50000: wtsapi32.dll
Module at 0x76360000: WINSTA.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x66a00000: mcmispps.dll
Module at 0x5ad70000: uxtheme.dll
Module at 0x77fe0000: secur32.dll
Module at 0x61300000: mvslog.dll
Module at 0x74980000: msxml3.dll
Module at 0x6a830000: mfesmfa.dll
Module at 0x66240000: mfehida.dll
Module at 0x62e00000: hwapi.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x4d4f0000: winhttp.dll
Module at 0x61000000: mvscfg.dll
Module at 0x75e90000: SXS.DLL
Module at 0x62a00000: mccoreps.dll
Module at 0x67500000: mcsubmgr.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x71ab0000: ws2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x10000000: samnsp.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x16080000: mdnsNSP.dll
Module at 0x76d60000: Iphlpapi.dll
Module at 0x76fc0000: rasadhlp.dll

Process 00000af0: ALG.EXE
Current Memory usage : 216 kb
Memory usage peak : 3712 kb
Current Paged Pool usage : 35 kb
Paged Pool usage peak : 36 kb
Current Non-Paged Pool usage : 5 kb
Non-Paged Pool usage peak : 6 kb
Current Page file usage : 1292 kb
Page file usage peak : 1320 kb
Page Faults : 990

Module list
Module at 0x01000000: alg.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x76b20000: ATL.DLL
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x71ad0000: WSOCK32.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x71a50000: MSWSOCK.DLL
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll

Process 000007ec: EHMSAS.EXE
Current Memory usage : 188 kb
Memory usage peak : 4056 kb
Current Paged Pool usage : 40 kb
Paged Pool usage peak : 41 kb
Current Non-Paged Pool usage : 3 kb
Non-Paged Pool usage peak : 4 kb
Current Page file usage : 1356 kb
Page file usage peak : 1380 kb
Page Faults : 1072

Module list
Module at 0x00400000: ehmsas.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x76b20000: ATL.DLL
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x10000000: saHook.dll
Module at 0x74720000: MSCTF.dll
Module at 0x00980000: imhook.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x7d1e0000: msi.dll
Module at 0x75e90000: SXS.DLL

Process 00001190: CIDAEMON.EXE
Current Memory usage : 212 kb
Memory usage peak : 3292 kb
Current Paged Pool usage : 35 kb
Paged Pool usage peak : 39 kb
Current Non-Paged Pool usage : 3 kb
Non-Paged Pool usage peak : 4 kb
Current Page file usage : 1232 kb
Page file usage peak : 1236 kb
Page Faults : 1288

Module list
Module at 0x01000000: cidaemon.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x7d9a0000: query.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x774e0000: ole32.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll

Process 000011b8: CIDAEMON.EXE
Current Memory usage : 1124 kb
Memory usage peak : 4920 kb
Current Paged Pool usage : 46 kb
Paged Pool usage peak : 68 kb
Current Non-Paged Pool usage : 4 kb
Non-Paged Pool usage peak : 8 kb
Current Page file usage : 1852 kb
Page file usage peak : 3140 kb
Page Faults : 17658

Module list
Module at 0x01000000: cidaemon.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x7d9a0000: query.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x774e0000: ole32.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x77b40000: appHelp.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x10000000: saHook.dll
Module at 0x76980000: LINKINFO.dll
Module at 0x76990000: ntshrui.dll
Module at 0x76b20000: ATL.DLL
Module at 0x75830000: mstask.dll
Module at 0x767a0000: NTDSAPI.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x763b0000: comdlg32.dll
Module at 0x71b20000: MPR.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x62c70000: LangWrbk.dll

Process 000015fc: RUNDLL32.EXE
Current Memory usage : 2300 kb
Memory usage peak : 5260 kb
Current Paged Pool usage : 40 kb
Paged Pool usage peak : 41 kb
Current Non-Paged Pool usage : 3 kb
Non-Paged Pool usage peak : 5 kb
Current Page file usage : 3396 kb
Page file usage peak : 4328 kb
Page Faults : 17646

Module list
Module at 0x01000000: rundll32.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x10000000: gokegubo.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x009f0000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x00a20000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71ab0000: ws2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x00a80000: saHook.dll
Module at 0x74720000: MSCTF.dll
Module at 0x00cd0000: imhook.dll
Module at 0x00d70000: famatoge.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x00a30000: gikuyaju.dll
Module at 0x77120000: OLEAUT32.dll

Process 00001580: aawservice.exe
Current Memory usage : 146760 kb
Memory usage peak : 183080 kb
Current Paged Pool usage : 68 kb
Paged Pool usage peak : 80 kb
Current Non-Paged Pool usage : 4 kb
Non-Paged Pool usage peak : 5 kb
Current Page file usage : 172108 kb
Page file usage peak : 199496 kb
Page Faults : 245284

Module list
Module at 0x00400000: aawservice.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x10000000: CEAPI.dll
Module at 0x78050000: WININET.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x00350000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x004a0000: PKArchive85u.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x774e0000: ole32.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76f60000: WLDAP32.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x77c00000: VERSION.dll
Module at 0x769c0000: USERENV.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x003c0000: gokegubo.dll
Module at 0x00ca0000: gikuyaju.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x71bf0000: SAMLIB.dll
Module at 0x5ad70000: uxtheme.dll

Process 0000053c: iexplore.exe
Current Memory usage : 146892 kb
Memory usage peak : 709544 kb
Current Paged Pool usage : 254 kb
Paged Pool usage peak : 303 kb
Current Non-Paged Pool usage : 112 kb
Non-Paged Pool usage peak : 161 kb
Current Page file usage : 452988 kb
Page file usage peak : 865680 kb
Page Faults : 2176897

Module list
Module at 0x00400000: iexplore.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x774e0000: ole32.dll
Module at 0x78130000: urlmon.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x78000000: iertutil.dll
Module at 0x77c00000: VERSION.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x10000000: gokegubo.dll
Module at 0x00b90000: gikuyaju.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x42ef0000: IEFRAME.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x00ca0000: saHook.dll
Module at 0x74720000: MSCTF.dll
Module at 0x01400000: imhook.dll
Module at 0x01430000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x01470000: Normaliz.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x014e0000: famatoge.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x5dff0000: IEUI.dll
Module at 0x76380000: MSIMG32.dll
Module at 0x4ec50000: gdiplus.dll
Module at 0x47060000: xmllite.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x746f0000: msimtf.dll
Module at 0x605d0000: mslbui.dll
Module at 0x77a20000: cscui.dll
Module at 0x76600000: CSCDLL.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x32520000: msohev.dll
Module at 0x30000000: IMGHOOK.DLL
Module at 0x02cf0000: ctagent.dll
Module at 0x61930000: ieproxy.dll
Module at 0x03280000: LGMOUSHK.dll
Module at 0x7d1e0000: msi.dll
Module at 0x75e90000: SXS.DLL
Module at 0x75cf0000: MLANG.dll
Module at 0x034e0000: googletoolbar4.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: imagehlp.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x71ad0000: WSOCK32.dll
Module at 0x74980000: msxml3.dll
Module at 0x59a60000: DBGHELP.DLL
Module at 0x5b860000: netapi32.dll
Module at 0x76990000: ntshrui.dll
Module at 0x76b20000: ATL.DLL
Module at 0x76ee0000: RASAPI32.dll
Module at 0x76e90000: rasman.dll
Module at 0x76eb0000: TAPI32.dll
Module at 0x76e80000: rtutils.dll
Module at 0x71b20000: MPR.dll
Module at 0x75f60000: drprov.dll
Module at 0x71c10000: ntlanman.dll
Module at 0x71cd0000: NETUI0.dll
Module at 0x71c90000: NETUI1.dll
Module at 0x71c80000: NETRAP.dll
Module at 0x75f70000: davclnt.dll
Module at 0x77c70000: msv1_0.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x75970000: MSGINA.dll
Module at 0x76360000: WINSTA.dll
Module at 0x74320000: ODBC32.dll
Module at 0x763b0000: comdlg32.dll
Module at 0x040c0000: odbcint.dll
Module at 0x722b0000: sensapi.dll
Module at 0x04500000: mcieplg.dll
Module at 0x04550000: mcbrwctl.dll
Module at 0x708f0000: asycfilt.dll
Module at 0x69400000: MCSACO~1.DLL
Module at 0x472b0000: msntb.dll
Module at 0x04ea0000: mtbres.dll.mui
Module at 0x04eb0000: mtbres.dll
Module at 0x47190000: Tem.dll
Module at 0x04ee0000: searchboxRes.dll.mui
Module at 0x04ef0000: searchboxRes.dll
Module at 0x05000000: wlscres.dll.mui
Module at 0x05030000: CMRes.dll.mui
Module at 0x050e0000: CMRes.dll
Module at 0x050f0000: obarres.dll.mui
Module at 0x05100000: obarres.dll
Module at 0x46ce0000: wlfext.dll
Module at 0x05120000: RssFinderRes.dll.mui
Module at 0x05130000: RssFinderRes.dll
Module at 0x05140000: msn_slrs.DLL.mui
Module at 0x473a0000: msn_slrs.DLL
Module at 0x05150000: pgres.dll.mui
Module at 0x05190000: pgres.dll
Module at 0x053a0000: MSNExtensionRes.dll.mui
Module at 0x053b0000: MSNExtensionRes.dll
Module at 0x053c0000: SmaMenRes.dll.mui
Module at 0x053d0000: SmaMenRes.dll
Module at 0x053e0000: CBRes.dll.mui
Module at 0x053f0000: CBRes.dll
Module at 0x46f10000: rssFinder.dll
Module at 0x051c0000: msneshellx.dll
Module at 0x051e0000: msne.dll
Module at 0x05790000: msneie.dll
Module at 0x14490000: scriptsn.dll
Module at 0x63380000: JScript.dll
Module at 0x73300000: VBScript.dll
Module at 0x73f10000: DSOUND.dll
Module at 0x06300000: slcore.dll
Module at 0x05eb0000: slctrl.dll
Module at 0x74c80000: OLEACC.dll
Module at 0x76080000: MSVCP60.dll
Module at 0x62900000: yt.dll
Module at 0x06560000: AcroIEHelper.dll
Module at 0x06580000: MSVCR80.dll
Module at 0x69100000: mcapbho.dll
Module at 0x4d4f0000: WINHTTP.dll
Module at 0x69f00000: MSKSet.dll
Module at 0x068d0000: tfswshx.dll
Module at 0x068f0000: tfswapi.dll
Module at 0x06900000: tfswcres.dll
Module at 0x6d740000: ssv.dll
Module at 0x7c340000: MSVCR71.dll
Module at 0x29500000: WindowsLiveLogin.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x27500000: msidcrl40.dll
Module at 0x75e60000: cryptnet.dll
Module at 0x069b0000: swg.dll
Module at 0x46e90000: searchbox.dll
Module at 0x47370000: stmain.dll
Module at 0x062d0000: wlsctb.dll
Module at 0x470b0000: cm.dll
Module at 0x473b0000: msn_slps.dll
Module at 0x46d50000: WLExtension.dll
Module at 0x46de0000: smamen.dll
Module at 0x47130000: CB.dll
Module at 0x74e30000: RICHED20.DLL
Module at 0x05680000: WLFExtRes.dll
Module at 0x46da0000: TBIDCRL.dll
Module at 0x76fc0000: rasadhlp.dll
Module at 0x073a0000: samnsp.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x16080000: mdnsNSP.dll
Module at 0x6d440000: jp2ssv.dll
Module at 0x6dab0000: jqs_plugin.dll
Module at 0x435d0000: mshtml.dll
Module at 0x746c0000: msls31.dll
Module at 0x43560000: ieapfltr.dll
Module at 0x71d40000: actxprxy.dll
Module at 0x0a280000: COMCRF.dll
Module at 0x42b90000: mshtmled.dll
Module at 0x72d20000: wdmaud.drv
Module at 0x72d10000: msacm32.drv
Module at 0x77bd0000: midimap.dll
Module at 0x0b6b0000: Flash10a.ocx
Module at 0x73b30000: mscms.dll
Module at 0x73000000: WINSPOOL.DRV
Module at 0x1b000000: ImgUtil.dll
Module at 0x41e30000: pngfilt.dll
Module at 0x420c0000: Dxtrans.dll
Module at 0x6d430000: ddrawex.dll
Module at 0x73760000: DDRAW.dll
Module at 0x73bc0000: DCIMAN32.dll
Module at 0x42010000: Dxtmsft.dll
Module at 0x42b40000: MSRATING.dll
Module at 0x767f0000: schannel.dll
Module at 0x68100000: dssenh.dll
Module at 0x73160000: oledb32.dll
Module at 0x765b0000: MSDART.DLL
Module at 0x75350000: OLEDB32R.DLL
Module at 0x04390000: idndl.dll
Module at 0x0b630000: McPlgUI.dll
Module at 0x6cc60000: dispex.dll
Module at 0x76980000: LINKINFO.dll
Module at 0x73ba0000: sti.dll
Module at 0x74ae0000: CFGMGR32.dll
Module at 0x506a0000: wuapi.dll
Module at 0x75150000: Cabinet.dll
Module at 0x18ab0000: wmploc.dll

Process 00001348: msntask.exe
Current Memory usage : 9224 kb
Memory usage peak : 16524 kb
Current Paged Pool usage : 66 kb
Paged Pool usage peak : 95 kb
Current Non-Paged Pool usage : 9 kb
Non-Paged Pool usage peak : 16 kb
Current Page file usage : 7276 kb
Page file usage peak : 9580 kb
Page Faults : 379307

Module list
Module at 0x01000000: msntask.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x10000000: gokegubo.dll
Module at 0x00390000: gikuyaju.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x00ac0000: saHook.dll
Module at 0x74720000: MSCTF.dll
Module at 0x00b90000: imhook.dll
Module at 0x00bc0000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x00bf0000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x00da0000: famatoge.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x00f10000: msne.dll
Module at 0x78130000: urlmon.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x74980000: msxml3.dll
Module at 0x14490000: scriptsn.dll
Module at 0x63380000: JScript.dll
Module at 0x73300000: VBScript.dll
Module at 0x7d1e0000: msi.dll
Module at 0x75e90000: SXS.DLL
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x76ee0000: RASAPI32.dll
Module at 0x76e90000: rasman.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x76eb0000: TAPI32.dll
Module at 0x76e80000: rtutils.dll
Module at 0x77c70000: msv1_0.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x722b0000: sensapi.dll
Module at 0x76fc0000: rasadhlp.dll
Module at 0x02650000: samnsp.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x16080000: mdnsNSP.dll
Module at 0x5ce40000: scrobj.dll
Module at 0x0ffd0000: rsaenh.dll

Process 00000ebc: WLLoginProxy.exe
Current Memory usage : 3644 kb
Memory usage peak : 9104 kb
Current Paged Pool usage : 55 kb
Paged Pool usage peak : 56 kb
Current Non-Paged Pool usage : 8 kb
Non-Paged Pool usage peak : 9 kb
Current Page file usage : 5580 kb
Page file usage peak : 5656 kb
Page Faults : 11513

Module list
Module at 0x01000000: WLLoginProxy.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x774e0000: ole32.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x10000000: gokegubo.dll
Module at 0x00380000: gikuyaju.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x00b00000: saHook.dll
Module at 0x74720000: MSCTF.dll
Module at 0x00b90000: imhook.dll
Module at 0x00bb0000: fujayagi.dll
Module at 0x78050000: WININET.dll
Module at 0x00be0000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x00d90000: famatoge.dll
Module at 0x27500000: msidcrl40.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x722b0000: SensApi.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x76c30000: WINTRUST.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x5b860000: netapi32.dll
Module at 0x75e60000: cryptnet.dll
Module at 0x4d4f0000: WINHTTP.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x74980000: msxml3.dll
Module at 0x7d1e0000: msi.dll
Module at 0x75e90000: SXS.DLL

Process 00001308: mcshell.exe
Current Memory usage : 7956 kb
Memory usage peak : 36572 kb
Current Paged Pool usage : 100 kb
Paged Pool usage peak : 114 kb
Current Non-Paged Pool usage : 21 kb
Non-Paged Pool usage peak : 22 kb
Current Page file usage : 22224 kb
Page file usage peak : 22304 kb
Page Faults : 29646

Module list
Module at 0x00400000: mcshell.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x78050000: WININET.dll
Module at 0x00350000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x10000000: gokegubo.dll
Module at 0x00ac0000: gikuyaju.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x01050000: saHook.dll
Module at 0x74720000: MSCTF.dll
Module at 0x010c0000: imhook.dll
Module at 0x010f0000: fujayagi.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x01170000: famatoge.dll
Module at 0x76780000: SHFolder.dll
Module at 0x62600000: McUtil.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x76bf0000: psapi.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x5b860000: netapi32.dll
Module at 0x62400000: McBrwsr2.dll
Module at 0x78130000: urlmon.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x75e90000: SXS.DLL
Module at 0x67600000: mcuicfg.dll
Module at 0x74980000: msxml3.dll
Module at 0x62a00000: mccoreps.dll
Module at 0x67300000: mcshllps.dll
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x62500000: MispLF.dll
Module at 0x76380000: MSIMG32.dll
Module at 0x67200000: McRes.dll
Module at 0x66500000: McLocRes.dll
Module at 0x66400000: Mccobres.dll
Module at 0x02660000: Mccobres.dll
Module at 0x605d0000: mslbui.dll
Module at 0x42ef0000: ieframe.dll
Module at 0x30000000: IMGHOOK.DLL
Module at 0x02780000: ctagent.dll
Module at 0x67000000: mcprtcnt.dll
Module at 0x69b10000: msxml4.dll
Module at 0x75e60000: cryptnet.dll
Module at 0x4d4f0000: WINHTTP.dll
Module at 0x722b0000: SensApi.dll
Module at 0x75150000: Cabinet.dll
Module at 0x67400000: mcshlui.dll
Module at 0x435d0000: mshtml.dll
Module at 0x746c0000: msls31.dll
Module at 0x75cf0000: mlang.dll
Module at 0x66700000: mcmismgr.dll
Module at 0x66b00000: mcmnumgr.dll
Module at 0x66200000: mccfgmgr.dll
Module at 0x67500000: mcsubmgr.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x66a00000: mcmispps.dll
Module at 0x61400000: mvsmp.dll
Module at 0x65300000: qcmisp.dll
Module at 0x65200000: QcLite.dll
Module at 0x63400000: mpfmisp.dll
Module at 0x763b0000: COMDLG32.dll
Module at 0x69a00000: mskmisp.dll
Module at 0x76ee0000: RASAPI32.dll
Module at 0x76e90000: rasman.dll
Module at 0x76eb0000: TAPI32.dll
Module at 0x76e80000: rtutils.dll
Module at 0x6a800000: MskUI.dll
Module at 0x69f00000: MSKSet.dll
Module at 0x65600000: shrmisp.dll
Module at 0x65700000: ShrRes.dll
Module at 0x65400000: QCRes.dll
Module at 0x63000000: L10N.DLL
Module at 0x746f0000: msimtf.dll
Module at 0x14490000: scriptsn.dll
Module at 0x63380000: JScript.dll
Module at 0x73300000: VBScript.dll
Module at 0x72d20000: wdmaud.drv
Module at 0x72d10000: msacm32.drv
Module at 0x77bd0000: midimap.dll
Module at 0x66300000: mccfgpv.dll
Module at 0x049c0000: LGMOUSHK.dll
Module at 0x6c300000: vsui.dll
Module at 0x04b80000: licmgr10.dll
Module at 0x62700000: mccomctl.dll
Module at 0x42b90000: mshtmled.dll
Module at 0x62900000: mcscrhlp.dll
Module at 0x735a0000: scrrun.dll
Module at 0x73dd0000: MFC42.DLL
Module at 0x60700000: mcodsax.dll
Module at 0x7d1e0000: msi.dll

Process 0000160c: mcods.exe
Current Memory usage : 68724 kb
Memory usage peak : 148208 kb
Current Paged Pool usage : 44 kb
Paged Pool usage peak : 48 kb
Current Non-Paged Pool usage : 9 kb
Non-Paged Pool usage peak : 12 kb
Current Page file usage : 77388 kb
Page file usage peak : 156828 kb
Page Faults : 6285271

Module list
Module at 0x00400000: mcods.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x10000000: gokegubo.dll
Module at 0x00750000: gikuyaju.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x75e90000: SXS.DLL
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x77c00000: VERSION.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x76f50000: wtsapi32.dll
Module at 0x76360000: WINSTA.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x62600000: McUtil.dll
Module at 0x78050000: WININET.dll
Module at 0x00930000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x77fe0000: secur32.dll
Module at 0x62a00000: mccoreps.dll
Module at 0x77c70000: msv1_0.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x5ad70000: uxtheme.dll
Module at 0x61300000: mvslog.dll
Module at 0x61700000: mvsscan.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x61000000: mvscfg.dll
Module at 0x14180000: mytilus3.dll
Module at 0x14710000: mytilus3_worker.dll
Module at 0x76780000: SHFOLDER.dll
Module at 0x14100000: McShield.dll
Module at 0x12000000: mcscan32.dll
Module at 0x62b00000: mcevtbrk.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x769c0000: userenv.dll
Module at 0x60800000: mcodsps.dll
Module at 0x14080000: ftl.dll

Process 00001138: mcvsshld.exe
Current Memory usage : 4164 kb
Memory usage peak : 6688 kb
Current Paged Pool usage : 52 kb
Paged Pool usage peak : 53 kb
Current Non-Paged Pool usage : 6 kb
Non-Paged Pool usage peak : 7 kb
Current Page file usage : 3488 kb
Page file usage peak : 3712 kb
Page Faults : 8512

Module list
Module at 0x00400000: mcvsshld.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77c00000: VERSION.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x78050000: WININET.dll
Module at 0x00340000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x7c9c0000: SHELL32.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x76390000: IMM32.DLL
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x10000000: gokegubo.dll
Module at 0x00390000: gikuyaju.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x5ad70000: uxtheme.dll
Module at 0x01000000: saHook.dll
Module at 0x74720000: MSCTF.dll
Module at 0x01080000: imhook.dll
Module at 0x010b0000: fujayagi.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x01630000: famatoge.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x66100000: McAltLib.dll
Module at 0x74e30000: riched20.dll
Module at 0x67200000: McRes.dll
Module at 0x66500000: McLocRes.dll
Module at 0x66400000: Mccobres.dll
Module at 0x017b0000: Mccobres.dll
Module at 0x76b40000: winmm.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x60800000: mcodsps.dll
Module at 0x7d1e0000: msi.dll
Module at 0x75e90000: SXS.DLL

Process 0000168c: Ad-Aware.exe
Current Memory usage : 19536 kb
Memory usage peak : 30816 kb
Current Paged Pool usage : 67 kb
Paged Pool usage peak : 80 kb
Current Non-Paged Pool usage : 43 kb
Non-Paged Pool usage peak : 45 kb
Current Page file usage : 29708 kb
Page file usage peak : 30580 kb
Page Faults : 157251

Module list
Module at 0x00400000: Ad-Aware.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77120000: oleaut32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x774e0000: ole32.dll
Module at 0x77c00000: version.dll
Module at 0x5d090000: comctl32.dll
Module at 0x76390000: imm32.dll
Module at 0x7c9c0000: shell32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x763b0000: comdlg32.dll
Module at 0x10000000: lavalicense.dll
Module at 0x78050000: WININET.dll
Module at 0x00360000: Normaliz.dll
Module at 0x78000000: iertutil.dll
Module at 0x76b40000: winmm.dll
Module at 0x74c80000: oleacc.dll
Module at 0x76080000: MSVCP60.dll
Module at 0x76780000: SHFolder.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x77be0000: MSACM32.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x629c0000: LPK.DLL
Module at 0x74d90000: USP10.dll
Module at 0x01010000: gokegubo.dll
Module at 0x01130000: gikuyaju.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5cd70000: serwvdrv.dll
Module at 0x5b0a0000: umdmxfrm.dll
Module at 0x01720000: saHook.dll
Module at 0x74720000: MSCTF.dll
Module at 0x01790000: imhook.dll
Module at 0x017c0000: fujayagi.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x01d40000: famatoge.dll
Module at 0x77b40000: apphelp.dll
Module at 0x755c0000: msctfime.ime
Module at 0x47bf0000: imekr61.ime
Module at 0x30000000: IMGHOOK.DLL
Module at 0x01f90000: ctagent.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x5edd0000: olepro32.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x605d0000: mslbui.dll
Module at 0x03c00000: lavamessage.dll
Module at 0x03e70000: LGMOUSHK.dll

Edited by leeri83, 03 January 2009 - 03:53 PM.


BC AdBot (Login to Remove)

 


#2 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:03:49 PM

Posted 03 January 2009 - 03:45 PM

Please download Malwarebytes Anti-Malware and save it to your desktop.
  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
  • MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
  • On the Scanner tab:
    • Make sure the "Perform Quick Scan" option is selected.
    • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
  • Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply and exit MBAM.
Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. MBAM may make changes to your registry as part of its disinfection routine. If you're using other security programs that detect registry changes, they may alert you after scanning with MBAM. Please permit the program to allow the changes.
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#3 leeri83

leeri83
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:02:49 PM

Posted 03 January 2009 - 04:18 PM

Hi Mark,

Thanks for the fast response. Here's what the log said:

Malwarebytes' Anti-Malware 1.31
Database version: 1604
Windows 5.1.2600 Service Pack 2

1/3/2009 4:09:20 PM
mbam-log-2009-01-03 (16-09-20).txt

Scan type: Quick Scan
Objects scanned: 74115
Time elapsed: 10 minute(s), 49 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 4
Registry Keys Infected: 19
Registry Values Infected: 11
Registry Data Items Infected: 5
Folders Infected: 25
Files Infected: 17

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
C:\WINDOWS\SYSTEM32\gokegubo.dll (Trojan.Vundo.H) -> Delete on reboot.
c:\WINDOWS\SYSTEM32\gikuyaju.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\SYSTEM32\fujayagi.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\SYSTEM32\famatoge.dll (Trojan.Vundo.H) -> Delete on reboot.

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{90eb36f6-6386-4521-a725-c0ba3d034b41} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{90eb36f6-6386-4521-a725-c0ba3d034b41} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{90eb36f6-6386-4521-a725-c0ba3d034b41} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{3c2d2a1e-031f-4397-9614-87c932a848e0} (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{04a38f6b-006f-4247-ba4c-02a139d5531c} (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{2b96d5cc-c5b5-49a5-a69d-cc0a30f9028c} (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx.1 (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7aa32fc7-133b-4ae7-998e-ced0d9829b12} (Trojan.Dialer) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{09f1adac-76d8-4d0f-99a5-5c907dadb988} (Rogue.Multiple) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b64f4a7c-97c9-11da-8bde-f66bad1e3f3a} (Rogue.WinAntivirus) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2d2bee6e-3c9a-4d58-b9ec-458edb28d0f6} (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\rhc34tj0ea6e (Rogue.Multiple) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\5c55789d (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\jonevigabu (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cpm5f664b01 (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ssodl (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Program Files\Common Files\Real\WeatherBug\MiniBugTransporter.dll (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{4d25f926-b9fe-4682-bf72-8ab8210d6d75} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\smrhc34tj0ea6e (Rogue.AntivirusXP2008) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\rhc34tj0ea6e (Rogue.AntivirusXP2008) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sysrest32.exe (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lphc74tj0ea6e (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: c:\windows\system32\gokegubo.dll -> Delete on reboot.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\gokegubo.dll -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: system32\gokegubo.dll -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: c:\windows\system32\gikuyaju.dll -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: system32\gikuyaju.dll -> Delete on reboot.

Folders Infected:
C:\Program Files\MyWaySA (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWaySA\SrchAsDe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWaySA\SrchAsDe\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Documents and Settings\Misc\Application Data\rhc34tj0ea6e (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Misc\Application Data\rhc34tj0ea6e\Quarantine (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Misc\Application Data\rhc34tj0ea6e\Quarantine\Autorun (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Misc\Application Data\rhc34tj0ea6e\Quarantine\Autorun\HKCU (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Misc\Application Data\rhc34tj0ea6e\Quarantine\Autorun\HKCU\RunOnce (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Misc\Application Data\rhc34tj0ea6e\Quarantine\Autorun\HKLM (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Misc\Application Data\rhc34tj0ea6e\Quarantine\Autorun\HKLM\RunOnce (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Misc\Application Data\rhc34tj0ea6e\Quarantine\Autorun\StartMenuAllUsers (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Misc\Application Data\rhc34tj0ea6e\Quarantine\Autorun\StartMenuCurrentUser (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Misc\Application Data\rhc34tj0ea6e\Quarantine\BrowserObjects (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Misc\Application Data\rhc34tj0ea6e\Quarantine\Packages (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Lee Family\Application Data\rhc34tj0ea6e (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Lee Family\Application Data\rhc34tj0ea6e\Quarantine (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Lee Family\Application Data\rhc34tj0ea6e\Quarantine\Autorun (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Lee Family\Application Data\rhc34tj0ea6e\Quarantine\Autorun\HKCU (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Lee Family\Application Data\rhc34tj0ea6e\Quarantine\Autorun\HKCU\RunOnce (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Lee Family\Application Data\rhc34tj0ea6e\Quarantine\Autorun\HKLM (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Lee Family\Application Data\rhc34tj0ea6e\Quarantine\Autorun\HKLM\RunOnce (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Lee Family\Application Data\rhc34tj0ea6e\Quarantine\Autorun\StartMenuAllUsers (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Lee Family\Application Data\rhc34tj0ea6e\Quarantine\Autorun\StartMenuCurrentUser (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Lee Family\Application Data\rhc34tj0ea6e\Quarantine\BrowserObjects (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\Lee Family\Application Data\rhc34tj0ea6e\Quarantine\Packages (Rogue.Multiple) -> Quarantined and deleted successfully.

Files Infected:
C:\WINDOWS\SYSTEM32\fujayagi.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\SYSTEM32\igayajuf.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\pahibiyi.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
c:\WINDOWS\SYSTEM32\gikuyaju.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\SYSTEM32\famatoge.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\SYSTEM32\gokegubo.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\Program Files\Common Files\Real\WeatherBug\MiniBugTransporter.dll (Adware.Minibug) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\~.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Lee Family\Local Settings\Temporary Internet Files\Content.IE5\4J1D5OSR\style[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\A.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\B.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\D.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\E.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Misc\Local Settings\Temp\.tt8.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Misc\Local Settings\Temp\.ttA.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Misc\Local Settings\Temp\.ttC.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\SERVICES.EX (Heuristics.Reserved.Word.Exploit) -> Quarantined and deleted successfully.


Unfortunately, I think the program said that it couldn't remove several of those viruses.

Any ideas on what to do?

Thanks again.


**UPDATE**

Now that I've read the log more thoroughly, it seems everything has been taken care of. I did reboot right after a window popped up requesting that I restart the computer. Does this mean, I'm cured?

Thanks.

Edited by leeri83, 03 January 2009 - 04:20 PM.


#4 PropagandaPanda

PropagandaPanda


  • Malware Response Team
  • 10,433 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:49 PM

Posted 03 January 2009 - 04:23 PM

Hello leeri83.

Please reboot, and run the scan again.

We want to make sure the baddies stay gone.

With Regards,
The Panda

#5 leeri83

leeri83
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:02:49 PM

Posted 03 January 2009 - 05:57 PM

Hi PropagandaPanda,

Thanks for the suggestion.

I've got great news:

Malwarebytes' Anti-Malware 1.31
Database version: 1604
Windows 5.1.2600 Service Pack 2

1/3/2009 5:46:43 PM
mbam-log-2009-01-03 (17-46-43).txt

Scan type: Quick Scan
Objects scanned: 70910
Time elapsed: 7 minute(s), 49 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

I'm finally infection free!

Thanks again you guys (PropagandaPanda and Mark)!!!

#6 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:03:49 PM

Posted 03 January 2009 - 06:39 PM

If there are no longer signs of malware then please....

Create a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

The easiest and safest way to do this is:
  • Go to Start > Programs > Accessories > System Tools and click "System Restore".
  • Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
  • Then use Disk Cleanup to remove all but the most recently created Restore Point.
  • Go to Start > Run and type: Cleanmgr
  • Click "Ok"
  • Disk Cleanup will scan your files for several minutes, then open.
  • Click the "More Options" Tab.
  • Click the "Clean up" button under System Restore.
  • Click Ok. You will be prompted with "Are you sure you want to delete all but the most recent restore point?"
  • Click Yes, then click Ok.
  • Click Yes again when prompted with "Are you sure you want to perform these actions?"
  • Disk Cleanup will remove the files and close automatically.
Vista Users can refer to these links: Create a New Restore Point and Disk Cleanup.
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#7 PropagandaPanda

PropagandaPanda


  • Malware Response Team
  • 10,433 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:49 PM

Posted 03 January 2009 - 06:43 PM

Hello.

Please do some updates.

Update Windows Installation
Your Microsoft Windows installation is out of date. Whenever a security problem in its software is found, Microsoft will create a patch for it. After the patch is installed, attackers can't use the vulnerability to install malicious software on your PC. Keeping up with these patches will help to prevent malware being installed on your computer.

Please click here to check for and install updates to Windows, and Microsoft applications. If you encounter any problems during the installation, please feel free to ask for help.

The update process uses ActiveX, so you will need to use Internet Explorer for it, and allow the ActiveX control that it wants to install.

Reboot and repeat the update process until there are no more updates to install.

F-Secure Online Scan
If the computer can spare some time, please run an online scan to check as well.
This scan is for Internet Explorer only.
  • It is suggested that you disable security programs and close any other windows during the scan. While your security is disabled, please refrain from surfing on other sites. Refer to this page if you are unsure how.
  • Go to F-Secure Online Scanner
  • Follow the instructions here for installation.
  • Accept the License Agreement.
  • Once the ActiveX installs, click Full System Scan
  • Once the download completes, the scan will begin automatically. The scan will take some time to finish, so please be patient.
  • When the scan completes, click the Automatic cleaning (recommended) button.
  • Click the Show Report button and copy the entire report in your next reply.
  • Be sure to re-enable any security programs.
With Regards,
The Panda




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users