Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Google Redirect virus (TDSS rootkit??)


  • This topic is locked This topic is locked
26 replies to this topic

#1 seehazy

seehazy

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:12:30 AM

Posted 13 February 2011 - 08:24 PM

Browsing the internet and especially searching via Google.com has become annoying due to relentless pop-ups and annoying redirects from search results. Can anyone help me with this problem? I have done a tiny bit of research and this may be the result of a TDSS rootkit, correct? I am posting my DDS and GMER logs and attached is the optional DDS attach log. Thanks for the help!



DDS (Ver_10-12-12.02) - NTFSx86
Run by Caleb at 19:31:11.33 on Sun 02/13/2011
Internet Explorer: 8.0.6001.18999 BrowserJavaVersion: 1.6.0_23
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3070.1765 [GMT -5:00]

SP: COMODO Defense+ *Enabled/Updated* {DC3D0F8D-B138-AAAA-0339-560EB3387C28}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: COMODO Firewall *Enabled* {5F676F4C-DD6D-A47C-12D6-C449366C71EE}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
C:\Windows\system32\nvvsvc.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\System32\svchost.exe -k netsvcs
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
\\?\C:\Windows\system32\wbem\WMIADAP.EXE
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Caleb\Desktop\dds.scr

============== Pseudo HJT Report ===============

uSearch Bar = Preserve
uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop
uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop
uWindow Title = Caleb
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop
mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop
uInternet Settings,ProxyOverride = <local>;*.local
mURLSearchHooks: H - No File
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - No File
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - c:\program files\daemon tools toolbar\DTToolbar.dll
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
TB: {A057A204-BACC-4D26-9990-79A187E2698E} - No File
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [LightScribe Control Panel] c:\program files\common files\lightscribe\LightScribeControlPanel.exe -hidden
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [Google Update] "c:\users\caleb\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
mRun: [SMSERIAL] c:\program files\motorola\smserial\sm56hlpr.exe
mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
mRun: [QPService] "c:\program files\hp\quickplay\QPService.exe"
mRun: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
mRun: [OnScreenDisplay] c:\program files\hewlett-packard\hp quicktouch\HPKBDAPP.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
mRun: [UnlockerAssistant] "c:\program files\unlocker\UnlockerAssistant.exe"
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\AppleSyncNotifier.exe
mRun: [XboxStat] "c:\program files\microsoft xbox 360 accessories\XboxStat.exe" silentrun
mRun: [RtHDVCpl] c:\program files\realtek\audio\hda\RtHDVCpl.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [COMODO Internet Security] "c:\program files\comodo\comodo internet security\cfp.exe" -h
mRun: [UCam_Menu] "c:\program files\cyberlink\youcam\muitransfer\muistartmenu.exe" "c:\program files\cyberlink\youcam" updatewithcreateonce "software\cyberlink\youcam\1.0"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 10.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\blueto~1.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\kodake~1.lnk - c:\program files\kodak\kodak easyshare software\bin\EasyShare.exe
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
AppInit_DLLs: c:\windows\system32\guard32.dll
mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\program files\common files\lightscribe\LSRunOnce.exe"

================= FIREFOX ===================

FF - ProfilePath - c:\users\caleb\appdata\roaming\mozilla\firefox\profiles\td1e9md8.default\
FF - prefs.js: browser.startup.homepage - hxxp://news.google.com/
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\google updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\pando networks\media booster\npPandoWebPlugin.dll
FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll
FF - plugin: c:\users\caleb\appdata\local\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: XULRunner: {5CBBABE2-7BA8-4D21-A3E0-2F518FC30AFE} - c:\users\caleb\appdata\local\{5CBBABE2-7BA8-4D21-A3E0-2F518FC30AFE}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}

============= SERVICES / DRIVERS ===============

R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [2010-6-4 236600]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [2010-6-1 34744]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\spybot - search & destroy\SDWinSec.exe [2008-8-13 1153368]
R2 wmcmgc;Windows Management Configuration;c:\windows\system32\svchost.exe -k netsvcs [2008-1-20 21504]
R3 NETw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\NETw5v32.sys [2008-11-17 3668480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-1-6 135664]
S2 StarWindServiceAE;StarWind AE Service;c:\program files\alcohol soft\alcohol 52\starwind\starwindserviceae.exe --> c:\program files\alcohol soft\alcohol 52\starwind\StarWindServiceAE.exe [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]

=============== Created Last 30 ================

2011-02-11 06:48:08 5890896 ----a-w- c:\progra~2\microsoft\windows defender\definition updates\{bfdf967e-51c7-4b0e-b49c-c1d46f57b02b}\mpengine.dll
2011-02-11 05:28:06 234080 ----a-w- c:\progra~2\microsoft\vwdexpress\9.0\1033\ResourceCache.dll
2011-02-11 05:26:43 -------- d-----w- c:\program files\Microsoft Web Designer Tools
2011-02-11 05:22:46 181472 ----a-w- c:\progra~2\microsoft\vcsexpress\9.0\1033\ResourceCache.dll
2011-02-11 05:18:30 112640 ----a-w- c:\progra~2\microsoft\vcexpress\9.0\1033\ResourceCache.dll
2011-02-11 05:17:23 -------- d-----w- c:\program files\common files\Merge Modules
2011-02-01 07:18:03 -------- d-----w- c:\progra~2\Age of Empires 3
2011-02-01 07:06:17 -------- d-----w- c:\program files\common files\Microsoft Games
2011-02-01 07:06:13 34304 ----a-w- c:\program files\microsoft games\age of empires iii\SetupENU2.dll
2011-02-01 06:56:48 2297552 ----a-w- c:\windows\system32\d3dx9_26.dll
2011-01-30 15:45:12 135568 ----a-w- c:\program files\mozilla firefox\plugins\nppdf32.dll
2011-01-30 15:45:12 135568 ----a-w- c:\program files\internet explorer\plugins\nppdf32.dll
2011-01-30 08:07:50 -------- d-----w- c:\program files\iPod
2011-01-30 08:07:49 -------- d-----w- c:\program files\iTunes
2011-01-26 22:14:48 -------- d-----w- c:\program files\Microsoft SQL Server
2011-01-26 22:11:05 -------- d-----w- c:\program files\Microsoft Synchronization Services
2011-01-26 22:11:05 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2011-01-26 22:10:52 187808 ----a-w- c:\progra~2\microsoft\vbexpress\9.0\1033\ResourceCache.dll
2011-01-26 22:10:32 416 ----a-w- c:\progra~2\microsoft\msdn\9.0\1033\ResourceCache.dll
2011-01-17 06:18:27 -------- d-----w- c:\users\caleb\appdata\roaming\Camfrog
2011-01-17 06:18:26 -------- d-----w- c:\users\caleb\appdata\local\CrashRpt

==================== Find3M ====================

2011-02-13 18:59:03 119296 ----a-w- c:\windows\system32\zlib.dll
2011-01-16 04:41:17 285480 ----a-w- c:\windows\system32\guard32.dll
2010-12-28 15:55:03 413696 ----a-w- c:\windows\system32\odbc32.dll
2010-12-15 11:49:58 0 ----a-w- C:\DFR8865.tmp
2010-12-14 14:49:23 1169408 ----a-w- c:\windows\system32\sdclt.exe
2010-11-29 22:38:30 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-11-29 22:38:30 69632 ----a-w- c:\windows\system32\QuickTime.qts

=================== ROOTKIT ====================

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 6.0.6002 Disk: ST912082 rev.3.AH -> Harddisk0\DR0 -> \Device\Ide\iaStor0

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll >>UNKNOWN [0x86534EC5]<<
_asm { PUSH EBP; MOV EBP, ESP; SUB ESP, 0x1c; PUSH EBX; PUSH ESI; MOV DWORD [EBP-0x4], 0x86b24872; SUB DWORD [EBP-0x4], 0x86b2412e; PUSH EDI; CALL 0xffffffffffffdf33; }
1 ntkrnlpa!IofCallDriver[0x8268F962] -> \Device\Harddisk0\DR0[0x86D7B528]
3 CLASSPNP[0x8AFA28B3] -> ntkrnlpa!IofCallDriver[0x8268F962] -> [0x8518D828]
5 acpi[0x806936BC] -> ntkrnlpa!IofCallDriver[0x8268F962] -> [0x8518F028]
[0x8746BB28] -> IRP_MJ_CREATE -> 0x86534EC5
kernel: MBR read successfully
_asm { XOR DI, DI; MOV SI, 0x200; MOV SS, DI; MOV SP, 0x7a00; MOV BX, 0x7a0; MOV CX, SI; MOV DS, BX; MOV ES, BX; REP MOVSB ; JMP FAR 0x7a0:0x72; }
detected disk devices:
\Device\Ide\IAAStorageDevice-0 -> \??\IDE#DiskST9120823AS_____________________________3.AHE___#4&386bd484&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} device not found
detected hooks:
\Driver\iaStor DriverStartIo -> 0x86534AEA
user & kernel MBR OK
sectors 234441646 (+255): user != kernel
Warning: possible TDL3 rootkit infection !

============= FINISH: 19:32:33.90 ===============

Attached Files



BC AdBot (Login to Remove)

 


#2 seehazy

seehazy
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:12:30 AM

Posted 13 February 2011 - 08:28 PM

GMER 1.0.15.15530 - http://www.gmer.net
Rootkit scan 2011-02-13 20:04:29
Windows 6.0.6002 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\iaStor0 ST912082 rev.3.AH
Running: gmer.exe; Driver: C:\Users\Caleb\AppData\Local\Temp\fglcqpow.sys


---- System - GMER 1.0.15 ----

SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwAdjustPrivilegesToken [0x8FA61C14]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwAlpcConnectPort [0x8FA631C4]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwAlpcCreatePort [0x8FA61E00]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwConnectPort [0x8FA60F40]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwCreateFile [0x8FA6187A]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwCreatePort [0x8FA60E1C]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwCreateSection [0x8FA61626]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwCreateSymbolicLinkObject [0x8FA62E54]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwCreateThread [0x8FA60808]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwLoadDriver [0x8FA62864]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwMakeTemporaryObject [0x8FA61208]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwOpenFile [0x8FA61A56]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwOpenSection [0x8FA614AC]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwRequestWaitReplyPort [0x8FA622FC]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwSecureConnectPort [0x8FA625B0]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwSetSystemInformation [0x8FA62B5C]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwShutdownSystem [0x8FA61172]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwSystemDebugControl [0x8FA61398]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwTerminateProcess [0x8FA60C1E]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwTerminateThread [0x8FA60A0C]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwCreateThreadEx [0x8FA61F10]

---- Kernel code sections - GMER 1.0.15 ----

.text ntkrnlpa.exe!KeSetEvent + 119 826F787C 4 Bytes [14, 1C, A6, 8F]
.text ntkrnlpa.exe!KeSetEvent + 13D 826F78A0 8 Bytes [C4, 31, A6, 8F, 00, 1E, A6, ...]
.text ntkrnlpa.exe!KeSetEvent + 1C1 826F7924 4 Bytes [40, 0F, A6, 8F]
.text ntkrnlpa.exe!KeSetEvent + 1D9 826F793C 4 Bytes [7A, 18, A6, 8F]
.text ntkrnlpa.exe!KeSetEvent + 205 826F7968 4 Bytes [1C, 0E, A6, 8F]
.text ...
.rsrc C:\Windows\system32\drivers\ndis.sys entry point in ".rsrc" section [0x8AB12014]
? C:\Users\Caleb\AppData\Local\Temp\mbr.sys The system cannot find the file specified. !

---- User code sections - GMER 1.0.15 ----

.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[324] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] WS2_32.dll!WSASocketW 771734EB 7 Bytes JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] WS2_32.dll!WSASocketA 77178FA9 5 Bytes JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Bonjour\mDNSResponder.exe[496] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[528] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] WS2_32.dll!WSASocketW 771734EB 7 Bytes JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wininit.exe[624] WS2_32.dll!WSASocketA 77178FA9 5 Bytes JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 0093A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 0092CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 0093CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 0093CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ntdll.dll!NtClose 77094314 5 Bytes JMP 0092CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 0093CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 0093CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 0093CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 0093CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 0093C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 0093CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 0093CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 0093C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 0093CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 0093CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 0093CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 0093C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 00937790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 00938320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 0093CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 0093CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 0093CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 0093CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 0093CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 0093CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 0093CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 0093CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 0093CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 0093CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 0093CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 0093CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 0093CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 0093CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 0093CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 0093CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 0093CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 0093CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 0093CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 0093CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 0093CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 0093CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 0093CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 0093CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 0093CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 0093E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 00936BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 009362C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 0093D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 0093D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 0093DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 0093DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 0093C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 0093C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 0093C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 0093CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 0093E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 0093E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 0093C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe[668] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 0093C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\services.exe[676] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] WS2_32.dll!WSASocketW 771734EB 7 Bytes JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] WS2_32.dll!WSASocketA 77178FA9 5 Bytes JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsass.exe[688] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\lsm.exe[696] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)

.text C:\Windows\system32\svchost.exe[864] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[864] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[956] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[988] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe[1040] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 0050AEF0 C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (COMODO Internet Security/COMODO)
.text C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe[1040] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 005227C0 C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1092] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1136] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] WS2_32.dll!WSASocketW 771734EB 7 Bytes JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] WS2_32.dll!WSASocketA 77178FA9 5 Bytes JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] shell32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] shell32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] shell32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1208] shell32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[1252] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1292] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 001C000A
.text C:\Windows\system32\svchost.exe[1292] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 002E000A
.text C:\Windows\system32\svchost.exe[1292] ntdll.dll!KiUserExceptionDispatcher 77095DC8 5 Bytes JMP 001B000A
.text C:\Windows\system32\svchost.exe[1292] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1292] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1292] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1292] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1292] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1292] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1292] USER32.dll!GetCursorPos 76FB0B88 5 Bytes JMP 01FD000A
.text C:\Windows\system32\svchost.exe[1292] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1292] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1292] ole32.dll!CoCreateInstance 75C39F3E 5 Bytes JMP 00C0000A
.text C:\Windows\system32\svchost.exe[1292] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1364] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\AUDIODG.EXE[1376] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)

#3 seehazy

seehazy
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:12:30 AM

Posted 13 February 2011 - 08:31 PM

.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnscfg.exe[1480] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1504] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] shell32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] shell32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] shell32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1568] shell32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] WS2_32.dll!WSASocketW 771734EB 7 Bytes JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] WS2_32.dll!WSASocketA 77178FA9 5 Bytes JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe[1616] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1656] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] WS2_32.dll!WSASocketW 771734EB 7 Bytes JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\spoolsv.exe[1868] WS2_32.dll!WSASocketA 77178FA9 5 Bytes JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[1904] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe[2076] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] WS2_32.dll!WSASocketW 771734EB 7 Bytes JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] WS2_32.dll!WSASocketA 77178FA9 5 Bytes JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe[2172] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 0064A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 0063CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 0064CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 0064CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ntdll.dll!NtClose 77094314 5 Bytes JMP 0063CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 0064CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 0064CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 0064CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 0064CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 0064C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 0064CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 0064CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 0064C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 0064CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 0064CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 0064CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 0064C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 00647790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 00648320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 0064CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 0064CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 0064CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 0064CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 0064CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 0064CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 0064CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 0064CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 0064CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 0064CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 0064CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 0064CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 0064CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 0064CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 0064CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 0064CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 0064CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 0064CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 0064CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 0064CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 0064CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 0064CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 0064CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 0064CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 0064CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 00646BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 006462C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 0064D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 0064D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 0064DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 0064DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 0064E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 0064E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 0064E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] WS2_32.dll!WSASocketW 771734EB 7 Bytes JMP 0064C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] WS2_32.dll!WSASocketA 77178FA9 5 Bytes JMP 0064C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 0064C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 0064C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 0064C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 0064CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 0064C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[2176] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 0064C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\nvvsvc.exe[2288] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)

.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2380] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\svchost.exe[2420] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2484] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\System32\svchost.exe[2564] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] WS2_32.dll!WSASocketW 771734EB 7 Bytes JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] WS2_32.dll!WSASocketA 77178FA9 5 Bytes JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\SearchIndexer.exe[2600] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[2660] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] shell32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] shell32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] shell32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] shell32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe[2784] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] WS2_32.dll!WSASocketW 771734EB 7 Bytes JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] WS2_32.dll!WSASocketA 77178FA9 5 Bytes JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[2848] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[2916] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wuauclt.exe[2944] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 0086000A
.text C:\Windows\system32\wuauclt.exe[2944] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 0094000A
.text C:\Windows\system32\wuauclt.exe[2944] ntdll.dll!KiUserExceptionDispatcher 77095DC8 5 Bytes JMP 001D000A
.text C:\Windows\system32\wuauclt.exe[2944] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wuauclt.exe[2944] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wuauclt.exe[2944] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wuauclt.exe[2944] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wuauclt.exe[2944] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wuauclt.exe[2944] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wuauclt.exe[2944] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wuauclt.exe[2944] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wuauclt.exe[2944] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wuauclt.exe[2944] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wuauclt.exe[2944] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wuauclt.exe[2944] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wuauclt.exe[2944] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 003AA630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 0039CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 003ACD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 003ACE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ntdll.dll!NtClose 77094314 5 Bytes JMP 0039CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 003ACDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 003ACE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 003ACE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 003ACE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 003AC490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 003ACDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 003ACDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 003AC440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 003ACD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 003ACD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 003ACE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 003AC4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 003A7790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 003A8320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 003ACA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 003ACCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 003ACBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 003ACBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 003ACC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 003ACAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 003ACB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 003ACB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 003ACB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 003ACCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 003ACA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 003ACCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 003ACA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 003ACD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)

.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 003ACAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 003ACAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 003ACC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 003ACC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 003ACB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 003ACB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 003ACC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 003ACBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 003ACC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 003ACA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 003ACD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] WS2_32.dll!WSASocketW 771734EB 7 Bytes JMP 003AC920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] WS2_32.dll!WSASocketA 77178FA9 5 Bytes JMP 003AC940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 003A6BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 003A62C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 003AD590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 003AD830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 003ADAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 003ADD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 003AE3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 003AE600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 003AE840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 003AC9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 003AC9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 003AC9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 003ACA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 003AC980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe[3200] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 003AC960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\taskeng.exe[3300] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\Dwm.exe[3340] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\Explorer.EXE[3452] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 03CB000A
.text C:\Windows\Explorer.EXE[3452] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 03CC000A
.text C:\Windows\Explorer.EXE[3452] ntdll.dll!KiUserExceptionDispatcher 77095DC8 5 Bytes JMP 0240000A
.text C:\Windows\Explorer.EXE[3452] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\Explorer.EXE[3452] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\Explorer.EXE[3452] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\Explorer.EXE[3452] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\Explorer.EXE[3452] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\Explorer.EXE[3452] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\Explorer.EXE[3452] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\Explorer.EXE[3452] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\Explorer.EXE[3452] SHELL32.dll!SHFileOperationW 764468E8 5 Bytes JMP 03CD1102 C:\Program Files\Unlocker\UnlockerHook.dll
.text C:\Windows\Explorer.EXE[3452] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\Explorer.EXE[3452] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\Explorer.EXE[3452] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\Explorer.EXE[3452] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\Explorer.EXE[3452] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] WS2_32.dll!WSASocketW 771734EB 7 Bytes JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] WS2_32.dll!WSASocketA 77178FA9 5 Bytes JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\system32\wbem\wmiprvse.exe[3652] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[3700] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe[3728] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 0039A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 0038CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 0039CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 0039CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ntdll.dll!NtClose 77094314 5 Bytes JMP 0038CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 0039CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 0039CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 0039CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 0039CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 0039C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 0039CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 0039CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 0039C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 0039CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 0039CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 0039CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 0039C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 00397790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 00398320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 0039CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 0039CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 0039CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 0039CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 0039CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 0039CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 0039CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 0039CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 0039CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 0039CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 0039CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 0039CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 0039CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 0039CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 0039CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 0039CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 0039CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 0039CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 0039CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 0039CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 0039CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 0039CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 0039CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 0039CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 0039CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 0039E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 00396BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 003962C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 0039D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 0039D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 0039DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 0039DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 0039C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 0039C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 0039C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 0039CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 0039E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 0039E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 0039C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe[3736] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 0039C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\HP\QuickPlay\QPService.exe[3744] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[3752] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 0191A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 0190CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 0191CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 0191CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ntdll.dll!NtClose 77094314 5 Bytes JMP 0190CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 0191CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 0191CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 0191CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 0191CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 0191C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 0191CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 0191CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 0191C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 0191CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 0191CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 0191CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 0191C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 01917790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 01918320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 0191CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 0191CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 0191CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 0191CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 0191CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 0191CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 0191CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 0191CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 0191CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 0191CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 0191CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 0191CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 0191CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 0191CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 0191CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 0191CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 0191CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 0191CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 0191CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 0191CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 0191CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)

.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 0191CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 0191CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 0191CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 0191CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 0191E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 01916BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 019162C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 0191D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 0191D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 0191DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 0191DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 0191C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 0191C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 0191C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 0191CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 0191E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 0191E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 0191C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe[3768] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 0191C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Defender\MSASCui.exe[3776] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Unlocker\UnlockerAssistant.exe[3784] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe[3800] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3808] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehmsas.exe[3816] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[3848] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3860] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 00744760 C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] KERNEL32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] shell32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] shell32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] shell32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe[3900] shell32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iTunes\iTunesHelper.exe[3936] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)

.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] WS2_32.dll!WSASocketW 771734EB 7 Bytes JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] WS2_32.dll!WSASocketA 77178FA9 5 Bytes JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Sidebar\sidebar.exe[4028] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] WS2_32.dll!WSASocketW 771734EB 7 Bytes JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] WS2_32.dll!WSASocketA 77178FA9 5 Bytes JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[4036] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\ehome\ehtray.exe[4048] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] shell32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] shell32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] shell32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] shell32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] wininet.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[4060] wininet.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4324] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 0114000A
.text C:\Program Files\Mozilla Firefox\firefox.exe[4324] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 01F6000A
.text C:\Program Files\Mozilla Firefox\firefox.exe[4324] ntdll.dll!KiUserExceptionDispatcher 77095DC8 5 Bytes JMP 00DF000A
.text C:\Program Files\Mozilla Firefox\firefox.exe[4324] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4324] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4324] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4324] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4324] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4324] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4324] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4324] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4324] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4324] SHELL32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4324] SHELL32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4324] SHELL32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4324] SHELL32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] shell32.dll!ShellExecuteW 76419725 5 Bytes JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] shell32.dll!ShellExecuteExW 7646C155 5 Bytes JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] shell32.dll!ShellExecuteEx 7661A27A 5 Bytes JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Users\Caleb\Desktop\gmer.exe[4392] shell32.dll!ShellExecuteA 7661A315 5 Bytes JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Windows\servicing\TrustedInstaller.exe[4652] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] WS2_32.dll!WSASocketW 771734EB 7 Bytes JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] WS2_32.dll!WSASocketA 77178FA9 5 Bytes JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4860] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\iPod\bin\iPodService.exe[5124] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ntdll.dll!LdrLoadDll 77059390 5 Bytes JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ntdll.dll!LdrUnloadDll 7706BA50 7 Bytes JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ntdll.dll!LdrGetProcedureAddress 77075A88 5 Bytes JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ntdll.dll!NtAllocateVirtualMemory 77094134 5 Bytes JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ntdll.dll!NtClose 77094314 5 Bytes JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ntdll.dll!NtCreateFile 770943D4 5 Bytes JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ntdll.dll!NtCreateProcess 77094494 5 Bytes JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ntdll.dll!NtCreateProcessEx 770944A4 5 Bytes JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ntdll.dll!NtDeleteFile 770947B4 5 Bytes JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ntdll.dll!NtFreeVirtualMemory 77094944 5 Bytes JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ntdll.dll!NtLoadDriver 77094A64 5 Bytes JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ntdll.dll!NtOpenFile 77094BB4 5 Bytes JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ntdll.dll!NtProtectVirtualMemory 77094D34 5 Bytes JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ntdll.dll!NtSetInformationProcess 77095324 5 Bytes JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ntdll.dll!NtUnloadDriver 77095574 5 Bytes JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ntdll.dll!NtWriteVirtualMemory 77095674 5 Bytes JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ntdll.dll!RtlAllocateHeap 77096570 5 Bytes JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!CreateProcessW 771B1BF3 5 Bytes JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!CreateProcessA 771B1C28 5 Bytes JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!VirtualProtect 771B1DC3 5 Bytes JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!OpenFile 771B355A 5 Bytes JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!MoveFileW 771BA2F2 5 Bytes JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!CopyFileExW 771C0211 7 Bytes JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!CopyFileW 771C0299 5 Bytes JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!DeleteFileW 771CF4B6 5 Bytes JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!DeleteFileA 771CF5D2 5 Bytes JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!MoveFileWithProgressW 771D10A4 5 Bytes JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!MoveFileExW 771D10C8 5 Bytes JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!LoadLibraryExW 771D9109 7 Bytes JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!LoadLibraryW 771D9362 5 Bytes JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!LoadLibraryExA 771D94B4 5 Bytes JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!LoadLibraryA 771D94DC 5 Bytes JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!GetProcAddress 771F903B 5 Bytes JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!GetModuleHandleA 771F92A5 5 Bytes JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!GetModuleHandleW 771FA804 5 Bytes JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!CreateFileW 771FAECB 5 Bytes JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!CreateFileA 771FCE5F 5 Bytes JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!MoveFileExA 77200F0A 5 Bytes JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!MoveFileWithProgressA 77200F2A 5 Bytes JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!CopyFileA 77202433 5 Bytes JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!MoveFileA 7723F641 5 Bytes JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!CopyFileExA 772419F9 5 Bytes JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!WinExec 77245CF7 5 Bytes JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] kernel32.dll!LoadModule 77245E4F 5 Bytes JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] USER32.dll!EndTask 76FDAD32 5 Bytes JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ADVAPI32.dll!CreateProcessAsUserA 7633CEB9 5 Bytes JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ADVAPI32.dll!CreateProcessAsUserW 76351EE9 5 Bytes JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ADVAPI32.dll!OpenServiceA 76352EBD 7 Bytes JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ADVAPI32.dll!OpenServiceW 76358354 7 Bytes JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ADVAPI32.dll!CreateServiceW 76379EB4 7 Bytes JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ADVAPI32.dll!CreateServiceA 763B72A1 7 Bytes JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ole32.dll!CoGetClassObject 75C1FAE8 5 Bytes JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] ole32.dll!CoCreateInstanceEx 75C39F81 5 Bytes JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] WININET.dll!InternetConnectA 756FDEAE 5 Bytes JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[5500] WININET.dll!InternetConnectW 756FF862 5 Bytes JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)

---- Devices - GMER 1.0.15 ----

AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation)

Device \Device\Ide\IAAStorageDevice-0 -> \??\IDE#DiskST9120823AS_____________________________3.AHE___#4&386bd484&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} device not found

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\00218673a47d
Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\00218673a47d@001a8a7e03f6 0x16 0xD5 0x99 0xE4 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x7A 0xBC 0xCE 0x02 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xA1 0x30 0x51 0xAF ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x81 0x85 0x32 0xCF ...
Reg HKLM\SYSTEM\ControlSet003\Services\BTHPORT\Parameters\Keys\00218673a47d (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\BTHPORT\Parameters\Keys\00218673a47d@001a8a7e03f6 0x16 0xD5 0x99 0xE4 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x7A 0xBC 0xCE 0x02 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xA1 0x30 0x51 0xAF ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x81 0x85 0x32 0xCF ...

---- Disk sectors - GMER 1.0.15 ----

Disk \Device\Harddisk0\DR0 sectors 234441392 (+254): rootkit-like behavior;

---- Files - GMER 1.0.15 ----

File C:\Windows\system32\drivers\ndis.sys suspicious modification

---- EOF - GMER 1.0.15 ----

#4 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:12:30 AM

Posted 13 February 2011 - 08:41 PM

Hello and Welcome to the forums!

My name is Gringo and I'll be glad to help you with your computer problems.

Somethings to remember while we are working together.

  • Do not run any other tool untill instructed to do so!
  • please Do not Attach logs or put in code boxes.
  • Tell me about any problems that have occurred during the fix.
  • Tell me of any other symptoms you may be having as these can help also.
  • Do not run anything while running a fix.
  • Do not run any other tool untill instructed to do so!


Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.

Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.

Run Combofix:

You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

Combofix may need to reboot your computer more than once to do its job this is normal.

You can download Combofix from one of these links.
Link 1
Link 2
Link 3
1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

"information and logs"

  • In your next post I need the following
  • Log from Combofix
  • let me know of any problems you may have had
  • How is the computer doing now?

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#5 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:12:30 AM

Posted 16 February 2011 - 12:31 AM

Hello

48 Hour bump

It has been more than 48 hours since my last post.

  • do you still need help with this?
  • do you need more time?
  • are you having problems following my instructions?
  • if after 48hrs you have not replied to this thread then it will have to be closed!

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#6 seehazy

seehazy
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:12:30 AM

Posted 17 February 2011 - 06:25 PM

I had no problems following your instructions. Combofix deleted many of my desktop shortcuts and also got rid of the Windows sidebar feature. It reset my default web browser to IE. When using my Firefox browser (I always use firefox) an annoying webpage popped up as usual... so I would have to say that the problem has not been fixed.

On another note (not sure if this has anything to do with the problem at hand), whenever my computer is booted up a message appears usually within 30 minutes that reads: "Host Process for Windows Services stopped working and was closed ---> A problem caused the application to stop working correctly. Windows will notify you if a solution is available." This doesn't seem to harm my computer in any way or affect any processes. The only thing that happens after closing this window is a Windows pop-up that tells me to check for updates online (something I doubt would actually solve the problem... I update my computer regularly). Also, after a little while the computer will sort of bug out for a second and switch to an older Windows format but then go back to normal (sometimes it stays in a different format for a longer period of time, but usually not).

ComboFix 11-02-17.01 - Caleb 02/17/2011 17:50:15.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3070.2235 [GMT -5:00]
Running from: c:\users\Caleb\Desktop\ComboFix.exe
FW: COMODO Firewall *Disabled* {5F676F4C-DD6D-A47C-12D6-C449366C71EE}
SP: COMODO Defense+ *Disabled/Updated* {DC3D0F8D-B138-AAAA-0339-560EB3387C28}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\DFR8865.tmp
c:\programdata\Desktop
c:\programdata\Microsoft\Network\Downloader\qmgr0.dat
c:\programdata\Microsoft\Network\Downloader\qmgr1.dat
c:\users\Caleb\AppData\Local\{5CBBABE2-7BA8-4D21-A3E0-2F518FC30AFE}
c:\users\Caleb\AppData\Local\{5CBBABE2-7BA8-4D21-A3E0-2F518FC30AFE}\chrome.manifest
c:\users\Caleb\AppData\Local\{5CBBABE2-7BA8-4D21-A3E0-2F518FC30AFE}\chrome\content\_cfg.js
c:\users\Caleb\AppData\Local\{5CBBABE2-7BA8-4D21-A3E0-2F518FC30AFE}\chrome\content\overlay.xul
c:\users\Caleb\AppData\Local\{5CBBABE2-7BA8-4D21-A3E0-2F518FC30AFE}\install.rdf
c:\users\Caleb\AppData\Roaming\inst.exe
c:\windows\system32\KBL.LOG

----- BITS: Possible infected sites -----

hxxp://apnmedia.ask.com
.
((((((((((((((((((((((((( Files Created from 2011-01-17 to 2011-02-17 )))))))))))))))))))))))))))))))
.

2011-02-17 22:59 . 2011-02-17 23:03 -------- d-----w- c:\users\Caleb\AppData\Local\temp
2011-02-17 22:59 . 2011-02-17 22:59 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-02-17 22:40 . 2011-02-17 22:41 -------- d-----w- C:\32788R22FWJFW
2011-02-17 22:03 . 2011-02-17 22:03 -------- d-----w- c:\windows\SQLTools9_KB970892_ENU
2011-02-17 22:02 . 2011-02-17 22:02 -------- d-----w- c:\windows\SQL9_KB970892_ENU
2011-02-16 07:17 . 2011-01-13 09:41 5890896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FDFAED40-FD21-4BE3-B5B8-095CD5D41E59}\mpengine.dll
2011-02-16 01:50 . 2011-02-16 01:50 218688 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-02-16 01:49 . 2011-02-16 01:50 -------- d-----w- c:\program files\DAEMON Tools Lite
2011-02-16 01:38 . 2006-11-22 01:48 203576 ------w- c:\program files\Microsoft Games\Age of Empires III\autopatcher2.exe
2011-02-11 05:28 . 2011-02-11 05:30 234080 ----a-w- c:\programdata\Microsoft\VWDExpress\9.0\1033\ResourceCache.dll
2011-02-11 05:26 . 2011-02-11 05:26 -------- d-----w- c:\program files\Microsoft Web Designer Tools
2011-02-11 05:22 . 2011-02-11 05:22 181472 ----a-w- c:\programdata\Microsoft\VCSExpress\9.0\1033\ResourceCache.dll
2011-02-11 05:18 . 2011-02-11 05:18 112640 ----a-w- c:\programdata\Microsoft\VCExpress\9.0\1033\ResourceCache.dll
2011-02-11 05:17 . 2011-02-11 05:17 -------- d-----w- c:\program files\Common Files\Merge Modules
2011-02-01 07:18 . 2011-02-01 07:18 -------- d-----w- c:\programdata\Age of Empires 3
2011-02-01 07:06 . 2011-02-16 01:38 -------- d-----w- c:\program files\Common Files\Microsoft Games
2011-02-01 07:06 . 2006-08-30 15:03 34304 ------w- c:\program files\Microsoft Games\Age of Empires III\SetupENU2.dll
2011-02-01 06:56 . 2005-05-26 20:34 2297552 ----a-w- c:\windows\system32\d3dx9_26.dll
2011-01-30 15:45 . 2011-01-30 15:45 135568 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
2011-01-30 15:45 . 2011-01-30 15:45 135568 ----a-w- c:\program files\Internet Explorer\Plugins\nppdf32.dll
2011-01-30 08:07 . 2011-01-30 08:07 -------- d-----w- c:\program files\iPod
2011-01-30 08:07 . 2011-01-30 08:08 -------- d-----w- c:\program files\iTunes
2011-01-30 07:54 . 2011-01-30 07:54 -------- d-----w- c:\program files\Common Files\Adobe AIR
2011-01-26 22:14 . 2011-02-17 22:10 -------- d-----w- c:\program files\Microsoft SQL Server
2011-01-26 22:11 . 2011-01-26 22:11 -------- d-----w- c:\program files\Microsoft Synchronization Services
2011-01-26 22:11 . 2011-01-26 22:11 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2011-01-26 22:10 . 2011-01-26 22:10 187808 ----a-w- c:\programdata\Microsoft\VBExpress\9.0\1033\ResourceCache.dll
2011-01-26 22:10 . 2011-02-11 05:27 416 ----a-w- c:\programdata\Microsoft\MSDN\9.0\1033\ResourceCache.dll
2011-01-26 22:09 . 2011-02-11 05:27 -------- d-----w- c:\program files\Microsoft Visual Studio 9.0
2011-01-26 22:08 . 2011-01-26 22:08 -------- d-----w- c:\program files\Microsoft SDKs

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-17 22:12 . 2008-12-07 21:27 119296 ----a-w- c:\windows\system32\zlib.dll
2011-01-16 04:41 . 2010-06-01 23:00 285480 ----a-w- c:\windows\system32\guard32.dll
2011-01-16 04:41 . 2010-06-04 15:55 236600 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2011-01-16 04:41 . 2010-06-01 23:00 80064 ----a-w- c:\windows\system32\drivers\inspect.sys
2011-01-16 04:41 . 2010-06-01 23:00 34744 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2011-01-16 04:41 . 2010-06-01 23:00 17256 ----a-w- c:\windows\system32\drivers\cmderd.sys
2010-12-28 15:55 . 2011-01-13 23:50 413696 ----a-w- c:\windows\system32\odbc32.dll
2010-12-20 23:09 . 2008-12-26 06:15 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 23:08 . 2008-12-26 06:15 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-14 14:49 . 2011-01-13 23:50 1169408 ----a-w- c:\windows\system32\sdclt.exe
2010-12-11 05:17 . 2010-12-11 05:17 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-12-10 23:29 . 2010-12-10 23:29 64864 ----a-w- c:\windows\system32\sqlctr90.dll
2010-12-10 23:29 . 2010-12-10 23:29 2248032 ----a-w- c:\windows\system32\sqlncli.dll
2010-11-29 22:38 . 2010-11-29 22:38 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-11-29 22:38 . 2010-11-29 22:38 69632 ----a-w- c:\windows\system32\QuickTime.qts
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-08-23 455968]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Google Update"="c:\users\Caleb\AppData\Local\Google\Update\GoogleUpdate.exe" [2011-01-16 136176]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2009-05-05 1466368]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-10-24 178712]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2007-12-20 468264]
"OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-09-04 554320]
"UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2008-05-02 15872]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2010-09-22 47904]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2007-09-26 734264]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-06-09 7539232]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-10-03 13826664]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-01-16 2548040]
"UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2008-06-13 210216]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-01-30 35736]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-10 932288]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-01-25 421160]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-9-5 727592]
Kodak EasyShare software.lnk - c:\program files\Kodak\Kodak EasyShare software\bin\EasyShare.exe [2008-5-10 282624]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\guard32.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sr.sys]
@="FSFilter System Recovery"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-01-06 135664]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-12-11 691696]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2011-01-16 236600]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2011-01-16 34744]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 wmcmgc;Windows Management Configuration;c:\windows\System32\svchost.exe [2008-01-21 21504]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-02-16 218688]
S3 NETw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw5v32.sys [2008-11-17 3668480]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
wmcmgc

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2007-08-23 21:34 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder

2011-02-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-06 19:08]

2011-02-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-06 19:08]

2011-02-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2928645864-4250279379-3060788172-1000Core.job
- c:\users\Caleb\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-16 06:05]

2011-02-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2928645864-4250279379-3060788172-1000UA.job
- c:\users\Caleb\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-16 06:05]

2011-02-17 c:\windows\Tasks\User_Feed_Synchronization-{F01E21A1-F6B4-4A50-82F1-E109F1382422}.job
- c:\windows\system32\msfeedssync.exe [2011-02-16 04:47]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop
uInternet Settings,ProxyOverride = <local>;*.local
FF - ProfilePath - c:\users\Caleb\AppData\Roaming\Mozilla\Firefox\Profiles\td1e9md8.default\
FF - prefs.js: browser.startup.homepage - hxxp://news.google.com/
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
.
- - - - ORPHANS REMOVED - - - -

BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
Toolbar-Locked - (no file)
Toolbar-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKLM-Run-SynTPEnh - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-QlbCtrl - %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
HKLM-Run-HP Health Check Scheduler - [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
SafeBoot-dmboot.sys
SafeBoot-dmio.sys
SafeBoot-dmload.sys
SafeBoot-klmdb.sys
SafeBoot-dmadmin
SafeBoot-dmserver
SafeBoot-SRService



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-17 18:03
Windows 6.0.6002 Service Pack 2 NTFS

detected NTDLL code modification:
ZwClose, ZwOpenFile

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 6.0.6002 Disk: ST912082 rev.3.AH -> Harddisk0\DR0 -> \Device\Ide\iaStor0

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll >>UNKNOWN [0x8639BEC5]<<
_asm { PUSH EBP; MOV EBP, ESP; SUB ESP, 0x1c; PUSH EBX; PUSH ESI; MOV DWORD [EBP-0x4], 0x86b24872; SUB DWORD [EBP-0x4], 0x86b2412e; PUSH EDI; CALL 0xffffffffffffdf33; }
1 ntkrnlpa!IofCallDriver[0x8228E912] -> \Device\Harddisk0\DR0[0x86A31AC8]
3 CLASSPNP[0x8A9A48B3] -> ntkrnlpa!IofCallDriver[0x8228E912] -> [0x859E04C8]
5 acpi[0x807B06BC] -> ntkrnlpa!IofCallDriver[0x8228E912] -> [0x859E8028]
[0x8710B548] -> IRP_MJ_CREATE -> 0x8639BEC5
kernel: MBR read successfully
_asm { XOR DI, DI; MOV SI, 0x200; MOV SS, DI; MOV SP, 0x7a00; MOV BX, 0x7a0; MOV CX, SI; MOV DS, BX; MOV ES, BX; REP MOVSB ; JMP FAR 0x7a0:0x72; }
detected disk devices:
\Device\Ide\IAAStorageDevice-0 -> \??\IDE#DiskST9120823AS_____________________________3.AHE___#4&386bd484&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} device not found
detected hooks:
\Driver\atapi -> 0x8592a1f8
\Driver\iaStor DriverStartIo -> 0x8639BAEA
user & kernel MBR OK
sectors 234441646 (+255): user != kernel
Warning: possible TDL3 rootkit infection !

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'lsass.exe'(704)
c:\windows\system32\guard32.dll

- - - - - - - > 'Explorer.exe'(2336)
c:\windows\system32\guard32.dll
c:\windows\system32\btncopy.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\COMODO\COMODO Internet Security\cmdagent.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
c:\program files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
c:\windows\system32\nvvsvc.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe
c:\program files\Hewlett-Packard\HP Health Check\hphc_service.exe
c:\windows\servicing\TrustedInstaller.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Completion time: 2011-02-17 18:11:08 - machine was rebooted
ComboFix-quarantined-files.txt 2011-02-17 23:10

Pre-Run: 47,666,163,712 bytes free
Post-Run: 47,628,312,576 bytes free

- - End Of File - - 0D577045C3CDBA890B0A3936358B07BE

#7 seehazy

seehazy
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:12:30 AM

Posted 17 February 2011 - 06:39 PM

Also, combofix suggested I write this down:

Service: sptd
File: C:\Windows\system32\Drivers\sptd.sys

And maybe I'm just crazy, but now when I use firefox it seems to take longer than usual to load web pages.

#8 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:12:30 AM

Posted 17 February 2011 - 08:27 PM

Hello

It looks like the rootkit is still active. I want you to run this tool for me next.

tdsskiller:

Please read carefully and follow these steps.
  • Download TDSSKiller and save it to your Desktop.
  • doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
  • If an infected file is detected, the default action will be Cure, click on Continue.
  • If a suspicious file is detected, the default action will be Skip, click on Continue.
  • It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  • If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#9 seehazy

seehazy
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:12:30 AM

Posted 17 February 2011 - 09:39 PM

No reboot was required.

2011/02/17 21:36:45.0424 2288 TDSS rootkit removing tool 2.4.17.0 Feb 10 2011 11:07:20
2011/02/17 21:36:46.0251 2288 ================================================================================
2011/02/17 21:36:46.0251 2288 SystemInfo:
2011/02/17 21:36:46.0251 2288
2011/02/17 21:36:46.0251 2288 OS Version: 6.0.6002 ServicePack: 2.0
2011/02/17 21:36:46.0251 2288 Product type: Workstation
2011/02/17 21:36:46.0251 2288 ComputerName: CALEB-PC
2011/02/17 21:36:46.0251 2288 UserName: Caleb
2011/02/17 21:36:46.0251 2288 Windows directory: C:\Windows
2011/02/17 21:36:46.0251 2288 System windows directory: C:\Windows
2011/02/17 21:36:46.0251 2288 Processor architecture: Intel x86
2011/02/17 21:36:46.0251 2288 Number of processors: 2
2011/02/17 21:36:46.0251 2288 Page size: 0x1000
2011/02/17 21:36:46.0251 2288 Boot type: Normal boot
2011/02/17 21:36:46.0251 2288 ================================================================================
2011/02/17 21:36:46.0531 2288 Initialize success
2011/02/17 21:36:51.0742 2216 ================================================================================
2011/02/17 21:36:51.0742 2216 Scan started
2011/02/17 21:36:51.0742 2216 Mode: Manual;
2011/02/17 21:36:51.0742 2216 ================================================================================
2011/02/17 21:36:52.0335 2216 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
2011/02/17 21:36:52.0397 2216 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys
2011/02/17 21:36:52.0428 2216 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys
2011/02/17 21:36:52.0459 2216 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys
2011/02/17 21:36:52.0475 2216 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys
2011/02/17 21:36:52.0553 2216 AFD (a201207363aa900abf1a388468688570) C:\Windows\system32\drivers\afd.sys
2011/02/17 21:36:52.0631 2216 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys
2011/02/17 21:36:52.0678 2216 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
2011/02/17 21:36:52.0709 2216 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys
2011/02/17 21:36:52.0740 2216 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys
2011/02/17 21:36:52.0756 2216 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys
2011/02/17 21:36:52.0818 2216 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys
2011/02/17 21:36:52.0849 2216 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\DRIVERS\amdk8.sys
2011/02/17 21:36:52.0943 2216 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys
2011/02/17 21:36:53.0005 2216 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys
2011/02/17 21:36:53.0037 2216 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
2011/02/17 21:36:53.0068 2216 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
2011/02/17 21:36:53.0177 2216 BCM43XV (cf6a67c90951e3e763d2135dede44b85) C:\Windows\system32\DRIVERS\bcmwl6.sys
2011/02/17 21:36:53.0224 2216 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
2011/02/17 21:36:53.0286 2216 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys
2011/02/17 21:36:53.0364 2216 bowser (74b442b2be1260b7588c136177ceac66) C:\Windows\system32\DRIVERS\bowser.sys
2011/02/17 21:36:53.0427 2216 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
2011/02/17 21:36:53.0473 2216 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
2011/02/17 21:36:53.0536 2216 Bridge (b1564976d98e91fc764d5dc28a0297da) C:\Windows\system32\DRIVERS\bridge.sys
2011/02/17 21:36:53.0551 2216 BridgeMP (b1564976d98e91fc764d5dc28a0297da) C:\Windows\system32\DRIVERS\bridge.sys
2011/02/17 21:36:53.0629 2216 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
2011/02/17 21:36:53.0645 2216 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
2011/02/17 21:36:53.0676 2216 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
2011/02/17 21:36:53.0707 2216 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
2011/02/17 21:36:53.0770 2216 BthEnum (6d39c954799b63ba866910234cf7d726) C:\Windows\system32\DRIVERS\BthEnum.sys
2011/02/17 21:36:53.0832 2216 BTHMODEM (9a966a8e86d1771911ae34a20d11bff3) C:\Windows\system32\DRIVERS\bthmodem.sys
2011/02/17 21:36:53.0863 2216 BthPan (5904efa25f829bf84ea6fb045134a1d8) C:\Windows\system32\DRIVERS\bthpan.sys
2011/02/17 21:36:54.0035 2216 BTHPORT (5a3abaa2f8eece7aefb942773766e3db) C:\Windows\system32\Drivers\BTHport.sys
2011/02/17 21:36:54.0113 2216 BTHUSB (94e2941280e3756a5e0bcb467865c43a) C:\Windows\system32\Drivers\BTHUSB.sys
2011/02/17 21:36:54.0191 2216 btwaudio (99aeea7cefdfc6e4151a8f620d682088) C:\Windows\system32\drivers\btwaudio.sys
2011/02/17 21:36:54.0238 2216 btwavdt (195872e48a7fb01f8bc9b800f70f4054) C:\Windows\system32\drivers\btwavdt.sys
2011/02/17 21:36:54.0269 2216 btwrchid (0724e7d6c9b6a289eddda33fa8176e80) C:\Windows\system32\DRIVERS\btwrchid.sys
2011/02/17 21:36:54.0347 2216 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
2011/02/17 21:36:54.0394 2216 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
2011/02/17 21:36:54.0441 2216 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\drivers\circlass.sys
2011/02/17 21:36:54.0503 2216 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
2011/02/17 21:36:54.0597 2216 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
2011/02/17 21:36:54.0643 2216 cmdGuard (8a4c864777b717ae45580c1e0de2c103) C:\Windows\system32\DRIVERS\cmdguard.sys
2011/02/17 21:36:54.0659 2216 cmdHlp (6ba0554461114a6a8c12543f6f965ccc) C:\Windows\system32\DRIVERS\cmdhlp.sys
2011/02/17 21:36:54.0690 2216 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys
2011/02/17 21:36:54.0753 2216 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
2011/02/17 21:36:54.0784 2216 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys
2011/02/17 21:36:54.0815 2216 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys
2011/02/17 21:36:54.0877 2216 DfsC (218d8ae46c88e82014f5d73d0236d9b2) C:\Windows\system32\Drivers\dfsc.sys
2011/02/17 21:36:54.0971 2216 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
2011/02/17 21:36:55.0065 2216 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
2011/02/17 21:36:55.0111 2216 dtsoftbus01 (555e54ac2f601a8821cef58961653991) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
2011/02/17 21:36:55.0174 2216 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
2011/02/17 21:36:55.0221 2216 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys
2011/02/17 21:36:55.0299 2216 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
2011/02/17 21:36:55.0377 2216 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys
2011/02/17 21:36:55.0439 2216 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys
2011/02/17 21:36:55.0501 2216 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
2011/02/17 21:36:55.0533 2216 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
2011/02/17 21:36:55.0595 2216 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys
2011/02/17 21:36:55.0626 2216 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
2011/02/17 21:36:55.0642 2216 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
2011/02/17 21:36:55.0673 2216 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
2011/02/17 21:36:55.0720 2216 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
2011/02/17 21:36:55.0829 2216 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
2011/02/17 21:36:55.0845 2216 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys
2011/02/17 21:36:55.0876 2216 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2011/02/17 21:36:55.0985 2216 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
2011/02/17 21:36:56.0063 2216 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
2011/02/17 21:36:56.0110 2216 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
2011/02/17 21:36:56.0141 2216 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
2011/02/17 21:36:56.0203 2216 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
2011/02/17 21:36:56.0250 2216 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys
2011/02/17 21:36:56.0281 2216 HpqKbFiltr (35956140e686d53bf676cf0c778880fc) C:\Windows\system32\DRIVERS\HpqKbFiltr.sys
2011/02/17 21:36:56.0328 2216 HpqRemHid (115c0933b3ed51dfbec4449348c8065b) C:\Windows\system32\DRIVERS\HpqRemHid.sys
2011/02/17 21:36:56.0375 2216 HSFHWAZL (46d67209550973257601a533e2ac5785) C:\Windows\system32\DRIVERS\VSTAZL3.SYS
2011/02/17 21:36:56.0437 2216 HSF_DPV (ec36f1d542ed4252390d446bf6d4dfd0) C:\Windows\system32\DRIVERS\VSTDPV3.SYS
2011/02/17 21:36:56.0531 2216 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
2011/02/17 21:36:56.0578 2216 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys
2011/02/17 21:36:56.0609 2216 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
2011/02/17 21:36:56.0703 2216 iaStor (e5a0034847537eaee3c00349d5c34c5f) C:\Windows\system32\DRIVERS\iaStor.sys
2011/02/17 21:36:56.0796 2216 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys
2011/02/17 21:36:56.0968 2216 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
2011/02/17 21:36:57.0015 2216 inspect (7783fe23d056eaf8f0081ed1474640a3) C:\Windows\system32\DRIVERS\inspect.sys
2011/02/17 21:36:57.0108 2216 IntcAzAudAddService (1f10ed6f98c57efb4e7fb9972b2dbb71) C:\Windows\system32\drivers\RTKVHDA.sys
2011/02/17 21:36:57.0202 2216 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys
2011/02/17 21:36:57.0233 2216 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
2011/02/17 21:36:57.0295 2216 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
2011/02/17 21:36:57.0358 2216 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys
2011/02/17 21:36:57.0405 2216 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
2011/02/17 21:36:57.0451 2216 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
2011/02/17 21:36:57.0483 2216 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys
2011/02/17 21:36:57.0545 2216 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
2011/02/17 21:36:57.0576 2216 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
2011/02/17 21:36:57.0607 2216 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
2011/02/17 21:36:57.0623 2216 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
2011/02/17 21:36:57.0685 2216 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys
2011/02/17 21:36:57.0732 2216 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys
2011/02/17 21:36:57.0826 2216 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
2011/02/17 21:36:57.0873 2216 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys
2011/02/17 21:36:57.0904 2216 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys
2011/02/17 21:36:57.0919 2216 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys
2011/02/17 21:36:57.0951 2216 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
2011/02/17 21:36:58.0013 2216 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys
2011/02/17 21:36:58.0060 2216 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys
2011/02/17 21:36:58.0091 2216 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
2011/02/17 21:36:58.0138 2216 MODEMCSA (cbb59c41f19efea1a000793e08070a62) C:\Windows\system32\drivers\MODEMCSA.sys
2011/02/17 21:36:58.0185 2216 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
2011/02/17 21:36:58.0200 2216 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
2011/02/17 21:36:58.0231 2216 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
2011/02/17 21:36:58.0278 2216 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
2011/02/17 21:36:58.0325 2216 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys
2011/02/17 21:36:58.0356 2216 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
2011/02/17 21:36:58.0403 2216 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
2011/02/17 21:36:58.0434 2216 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
2011/02/17 21:36:58.0481 2216 mrxsmb (454341e652bdf5e01b0f2140232b073e) C:\Windows\system32\DRIVERS\mrxsmb.sys
2011/02/17 21:36:58.0512 2216 mrxsmb10 (2a4901aff069944fa945ed5bbf4dcde3) C:\Windows\system32\DRIVERS\mrxsmb10.sys
2011/02/17 21:36:58.0559 2216 mrxsmb20 (28b3f1ab44bdd4432c041581412f17d9) C:\Windows\system32\DRIVERS\mrxsmb20.sys
2011/02/17 21:36:58.0606 2216 msahci (28023e86f17001f7cd9b15a5bc9ae07d) C:\Windows\system32\drivers\msahci.sys
2011/02/17 21:36:58.0621 2216 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys
2011/02/17 21:36:58.0668 2216 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
2011/02/17 21:36:58.0699 2216 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
2011/02/17 21:36:58.0762 2216 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
2011/02/17 21:36:58.0793 2216 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
2011/02/17 21:36:58.0824 2216 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
2011/02/17 21:36:58.0871 2216 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
2011/02/17 21:36:58.0918 2216 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
2011/02/17 21:36:58.0965 2216 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
2011/02/17 21:36:59.0027 2216 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
2011/02/17 21:36:59.0089 2216 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
2011/02/17 21:36:59.0167 2216 NDIS (13f06bcf9d4fbb4bc6e3b1085ae9ef22) C:\Windows\system32\drivers\ndis.sys
2011/02/17 21:36:59.0167 2216 Suspicious file (Forged): C:\Windows\system32\drivers\ndis.sys. Real md5: 13f06bcf9d4fbb4bc6e3b1085ae9ef22, Fake md5: 1357274d1883f68300aeadd15d7bbb42
2011/02/17 21:36:59.0167 2216 NDIS - detected Rootkit.Win32.TDSS.tdl3 (0)
2011/02/17 21:36:59.0199 2216 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
2011/02/17 21:36:59.0214 2216 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
2011/02/17 21:36:59.0277 2216 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
2011/02/17 21:36:59.0323 2216 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
2011/02/17 21:36:59.0339 2216 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
2011/02/17 21:36:59.0401 2216 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
2011/02/17 21:36:59.0511 2216 NETw4v32 (6522dd40a5f67ced020bd81b856613fb) C:\Windows\system32\DRIVERS\NETw4v32.sys
2011/02/17 21:36:59.0713 2216 NETw5v32 (8de67bd902095a13329fd82c85a1fa09) C:\Windows\system32\DRIVERS\NETw5v32.sys
2011/02/17 21:36:59.0869 2216 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
2011/02/17 21:36:59.0932 2216 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
2011/02/17 21:36:59.0947 2216 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
2011/02/17 21:37:00.0025 2216 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
2011/02/17 21:37:00.0259 2216 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
2011/02/17 21:37:00.0306 2216 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
2011/02/17 21:37:00.0369 2216 NVENETFD (1657f3fbd9061526c14ff37e79306f98) C:\Windows\system32\DRIVERS\nvm60x32.sys
2011/02/17 21:37:00.0649 2216 nvlddmkm (24000b817cc84ac1555f41929879af5a) C:\Windows\system32\DRIVERS\nvlddmkm.sys
2011/02/17 21:37:00.0915 2216 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys
2011/02/17 21:37:00.0946 2216 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys
2011/02/17 21:37:01.0008 2216 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys
2011/02/17 21:37:01.0071 2216 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys
2011/02/17 21:37:01.0117 2216 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
2011/02/17 21:37:01.0195 2216 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
2011/02/17 21:37:01.0227 2216 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
2011/02/17 21:37:01.0289 2216 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
2011/02/17 21:37:01.0320 2216 pciide (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys
2011/02/17 21:37:01.0351 2216 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
2011/02/17 21:37:01.0445 2216 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\Windows\system32\Drivers\pcouffin.sys
2011/02/17 21:37:01.0585 2216 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
2011/02/17 21:37:01.0866 2216 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
2011/02/17 21:37:01.0897 2216 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys
2011/02/17 21:37:01.0991 2216 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
2011/02/17 21:37:02.0069 2216 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys
2011/02/17 21:37:02.0147 2216 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
2011/02/17 21:37:02.0194 2216 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
2011/02/17 21:37:02.0209 2216 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
2011/02/17 21:37:02.0241 2216 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
2011/02/17 21:37:02.0287 2216 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
2011/02/17 21:37:02.0334 2216 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
2011/02/17 21:37:02.0381 2216 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
2011/02/17 21:37:02.0412 2216 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
2011/02/17 21:37:02.0443 2216 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys
2011/02/17 21:37:02.0459 2216 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
2011/02/17 21:37:02.0521 2216 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys
2011/02/17 21:37:02.0568 2216 RFCOMM (6482707f9f4da0ecbab43b2e0398a101) C:\Windows\system32\DRIVERS\rfcomm.sys
2011/02/17 21:37:02.0599 2216 rimmptsk (355aac141b214bef1dbc1483afd9bd50) C:\Windows\system32\DRIVERS\rimmptsk.sys
2011/02/17 21:37:02.0631 2216 rimsptsk (a4216c71dd4f60b26418ccfd99cd0815) C:\Windows\system32\DRIVERS\rimsptsk.sys