Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- GMER 1.0.15.15641 - http://www.gmer.net
- Rootkit scan 2012-04-13 07:17:57
- Windows 5.1.2600 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-e IBM-DTLA-305030 rev.TW3OA60A
- Running: rmkjh7mv.exe; Driver: C:\DOCUME~1\Vedel\LOKALE~1\Temp\fxldypow.sys
- ---- System - GMER 1.0.15 ----
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwAddBootEntry [0xB3AB5DF8]
- SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwAllocateVirtualMemory [0xB3B42A5A]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwAssignProcessToJobObject [0xB3AB685E]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwClose [0xB3AE2D5D]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateEvent [0xB3ABB2E4]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateEventPair [0xB3ABB330]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateIoCompletion [0xB3ABB422]
- SSDT \SystemRoot\system32\drivers\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwCreateKey [0xB0B0CD3A]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateMutant [0xB3ABB252]
- SSDT \SystemRoot\system32\drivers\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwCreateProcess [0xB0ADBC0C]
- SSDT \SystemRoot\system32\drivers\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwCreateProcessEx [0xB0ADBED4]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateSection [0xB3ABB374]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateSemaphore [0xB3ABB29A]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateTimer [0xB3ABB3DC]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwDeleteBootEntry [0xB3AB5E44]
- SSDT \SystemRoot\system32\drivers\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwDeleteKey [0xB0B0D634]
- SSDT \SystemRoot\system32\drivers\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwDeleteValueKey [0xB0B0D94C]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwDuplicateObject [0xB3AB89A8]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwEnumerateKey [0xB3AE328E]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwEnumerateValueKey [0xB3AE30F9]
- SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwFreeVirtualMemory [0xB3B42B34]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwLoadDriver [0xB3AB5AD6]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwModifyBootEntry [0xB3AB5E90]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwNotifyChangeKey [0xB3AB8D1C]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwNotifyChangeMultipleKeys [0xB3AB6B02]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenEvent [0xB3ABB30E]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenEventPair [0xB3ABB352]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenIoCompletion [0xB3ABB446]
- SSDT \SystemRoot\system32\drivers\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwOpenKey [0xB0B0BEBE]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenMutant [0xB3ABB278]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenProcess [0xB3AB8518]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenSection [0xB3ABB3AE]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenSemaphore [0xB3ABB2C2]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenThread [0xB3AB874C]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenTimer [0xB3ABB400]
- SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwProtectVirtualMemory [0xB3B42CA0]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwQueryKey [0xB3AE2F74]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwQueryObject [0xB3AB69CE]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwQueryValueKey [0xB3AE2DC6]
- SSDT \SystemRoot\system32\drivers\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwRenameKey [0xB0B0DE16]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwRestoreKey [0xB3AE1D84]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSetBootEntryOrder [0xB3AB5EDC]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSetBootOptions [0xB3AB5F28]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSetSystemInformation [0xB3AB5B46]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSetSystemPowerState [0xB3AB5CEA]
- SSDT \SystemRoot\system32\drivers\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwSetValueKey [0xB0B0D09A]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwShutdownSystem [0xB3AB5C92]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSystemDebugControl [0xB3AB5D5A]
- SSDT \SystemRoot\system32\drivers\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwTerminateProcess [0xB0ADB80A]
- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwVdmControl [0xB3AB5F74]
- SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwWriteVirtualMemory [0xB3B42BE0]
- Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwCreateProcessEx [0xB3B58D92]
- Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ObInsertObject
- Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ObMakeTemporaryObject
- ---- Kernel code sections - GMER 1.0.15 ----
- .text ntoskrnl.exe!_abnormal_termination + 40C 804E2A78 5 Bytes [46, 5B, AB, B3, EA] {INC ESI; POP EBX; STOSD ; MOV BL, 0xea}
- .text ntoskrnl.exe!_abnormal_termination + 412 804E2A7E 2 Bytes [AB, B3]
- .text ntoskrnl.exe!_abnormal_termination + 430 804E2A9C 1 Byte [92]
- PAGE ntoskrnl.exe!ObInsertObject 80564423 5 Bytes JMP B3B5774C \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software)
- PAGE ntoskrnl.exe!ZwReplyWaitReceivePortEx + 3CC 80569FBB 4 Bytes CALL B3AB719F \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- PAGE ntoskrnl.exe!ZwCreateProcessEx 805820F6 7 Bytes JMP B3B58D96 \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software)
- PAGE ntoskrnl.exe!ObMakeTemporaryObject 805A29A4 5 Bytes JMP B3B55C8C \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software)
- ? okfp.sys Den angivne fil blev ikke fundet. !
- .text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xB6ED0380, 0x8D6CD5, 0xE8000020]
- .text win32k.sys!EngFreeUserMem + 674 BF809B45 5 Bytes JMP B3ABA180 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngFreeUserMem + 35D0 BF80CAA1 5 Bytes JMP B3ABA07C \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngDeleteSurface + 45 BF80FBC0 5 Bytes JMP B3ABA036 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!BRUSHOBJ_pvAllocRbrush + 11F0 BF81C962 5 Bytes JMP B3AB9724 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngPaint + 4EF BF8255ED 5 Bytes JMP B3AB8F84 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngUnmapFontFileFD + 1E5F BF8341A1 5 Bytes JMP B3ABA2EA \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngUnmapFontFileFD + 237D BF8346BF 5 Bytes JMP B3AB9F3C \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngUnmapFontFileFD + 4564 BF8368A6 5 Bytes JMP B3ABA4F2 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngUnmapFontFileFD + EE3F BF841181 5 Bytes JMP B3AB8FF4 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!FONTOBJ_pxoGetXform + DE42 BF85AD4E 5 Bytes JMP B3AB8E66 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngMulDiv + B5F2 BF8670A0 5 Bytes JMP B3AB970C \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!XLATEOBJ_iXlate + 3474 BF87111B 5 Bytes JMP B3AB9384 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!XLATEOBJ_iXlate + 34FF BF8711A6 5 Bytes JMP B3AB9562 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngStretchBlt + 35C1 BF87593B 5 Bytes JMP B3ABA0BA \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngGetCurrentCodePage + 411E BF894CB8 5 Bytes JMP B3AB951C \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngGetLastError + 1606 BF8B1EF6 5 Bytes JMP B3AB97FE \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngGradientFill + 3AA1 BF8B6854 5 Bytes JMP B3ABA232 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngStretchBltROP + 33F7 BF8BA1A0 5 Bytes JMP B3AB97E6 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngStretchBltROP + 34B7 BF8BA260 5 Bytes JMP B3AB8E4E \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngStretchBltROP + 8A22 BF8BF7CB 5 Bytes JMP B3ABA450 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngAlphaBlend + 3E8 BF8C333C 5 Bytes JMP B3AB9104 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngFillPath + 1517 BF8EB97D 5 Bytes JMP B3AB91AC \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngFillPath + 1797 BF8EBBFD 5 Bytes JMP B3AB92E4 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngFillPath + B223 BF8F5689 5 Bytes JMP B3AB973C \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!PATHOBJ_bCloseFigure + 19EF BF8F9A43 5 Bytes JMP B3AB8D52 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngCreateClip + 19C1 BF913245 5 Bytes JMP B3AB8F22 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngCreateClip + 2595 BF913E19 5 Bytes JMP B3AB90B0 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngCreateClip + 4EF4 BF916778 5 Bytes JMP B3AB967C \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- .text win32k.sys!EngPlgBlt + 18EC BF94468A 5 Bytes JMP B3ABA3A8 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)
- ? C:\DOCUME~1\Vedel\LOKALE~1\Temp\pcttProtect32.sys Den angivne fil blev ikke fundet. !
- ---- User code sections - GMER 1.0.15 ----
- .text C:\WINDOWS\system32\RunDLL32.exe[200] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000901F8
- .text C:\WINDOWS\system32\RunDLL32.exe[200] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\RunDLL32.exe[200] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000903FC
- .text C:\WINDOWS\system32\RunDLL32.exe[200] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 014F0001
- .text C:\WINDOWS\system32\RunDLL32.exe[200] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\RunDLL32.exe[200] USER32.dll!SetWindowPos 77D3C78E 3 Bytes [FF, 25, 1E]
- .text C:\WINDOWS\system32\RunDLL32.exe[200] USER32.dll!SetWindowPos + 4 77D3C792 2 Bytes [98, 71]
- .text C:\WINDOWS\system32\RunDLL32.exe[200] USER32.dll!SetForegroundWindow 77D466A7 6 Bytes JMP 719D0F5A
- .text C:\WINDOWS\system32\RunDLL32.exe[200] USER32.dll!ChangeDisplaySettingsExA 77D56A51 6 Bytes JMP 71960F5A
- .text C:\WINDOWS\system32\RunDLL32.exe[200] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 002F01F8
- .text C:\WINDOWS\system32\RunDLL32.exe[200] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 002F03FC
- .text C:\WINDOWS\system32\RunDLL32.exe[200] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 002F0804
- .text C:\WINDOWS\system32\RunDLL32.exe[200] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 002F0A08
- .text C:\WINDOWS\system32\RunDLL32.exe[200] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 002F0600
- .text C:\WINDOWS\system32\RunDLL32.exe[200] USER32.dll!ChangeDisplaySettingsExW 77D791B6 6 Bytes JMP 71930F5A
- .text C:\WINDOWS\system32\RunDLL32.exe[200] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 00301014
- .text C:\WINDOWS\system32\RunDLL32.exe[200] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 00300804
- .text C:\WINDOWS\system32\RunDLL32.exe[200] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 00300A08
- .text C:\WINDOWS\system32\RunDLL32.exe[200] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 00300C0C
- .text C:\WINDOWS\system32\RunDLL32.exe[200] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 00300E10
- .text C:\WINDOWS\system32\RunDLL32.exe[200] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003001F8
- .text C:\WINDOWS\system32\RunDLL32.exe[200] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003003FC
- .text C:\WINDOWS\system32\RunDLL32.exe[200] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 00300600
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 00D30001
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003E1014
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003E0804
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003E0A08
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003E0C0C
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003E0E10
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003E01F8
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003E03FC
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003E0600
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] USER32.dll!SetWindowPos 77D3C78E 3 Bytes [FF, 25, 1E]
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] USER32.dll!SetWindowPos + 4 77D3C792 2 Bytes [A0, 71]
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] USER32.dll!SetForegroundWindow 77D466A7 6 Bytes JMP 71A50F5A
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] USER32.dll!ChangeDisplaySettingsExA 77D56A51 6 Bytes JMP 719E0F5A
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003F01F8
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003F03FC
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003F0804
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003F0A08
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003F0600
- .text C:\Programmer\Fælles filer\Java\Java Update\jusched.exe[220] USER32.dll!ChangeDisplaySettingsExW 77D791B6 6 Bytes JMP 719B0F5A
- .text C:\Programmer\AVAST Software\Avast\avastUI.exe[252] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Programmer\AVAST Software\Avast\avastUI.exe[252] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 014B0001
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] USER32.dll!SetWindowPos 77D3C78E 3 Bytes [FF, 25, 1E]
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] USER32.dll!SetWindowPos + 4 77D3C792 2 Bytes [9D, 71]
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] USER32.dll!SetForegroundWindow 77D466A7 6 Bytes JMP 71A20F5A
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] USER32.dll!ChangeDisplaySettingsExA 77D56A51 6 Bytes JMP 719B0F5A
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003D01F8
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003D03FC
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003D0804
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003D0A08
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003D0600
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] USER32.dll!ChangeDisplaySettingsExW 77D791B6 6 Bytes JMP 71980F5A
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003E1014
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003E0804
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003E0A08
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003E0C0C
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003E0E10
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003E01F8
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003E03FC
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe[260] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003E0600
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000501F8
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000503FC
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 03010001
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 002F1014
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 002F0804
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 002F0A08
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 002F0C0C
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 002F0E10
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 002F01F8
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 002F03FC
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 002F0600
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] USER32.dll!SetWindowPos 77D3C78E 3 Bytes [FF, 25, 1E]
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] USER32.dll!SetWindowPos + 4 77D3C792 2 Bytes [9D, 71]
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] USER32.dll!SetForegroundWindow 77D466A7 6 Bytes JMP 71A20F5A
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] USER32.dll!ChangeDisplaySettingsExA 77D56A51 6 Bytes JMP 719B0F5A
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003001F8
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003003FC
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00300804
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00300A08
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00300600
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe[272] USER32.dll!ChangeDisplaySettingsExW 77D791B6 6 Bytes JMP 71980F5A
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 00CC0001
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] USER32.dll!SetWindowPos 77D3C78E 3 Bytes [FF, 25, 1E]
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] USER32.dll!SetWindowPos + 4 77D3C792 2 Bytes [9B, 71]
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] USER32.dll!SetForegroundWindow 77D466A7 6 Bytes JMP 71A00F5A
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] USER32.dll!ChangeDisplaySettingsExA 77D56A51 6 Bytes JMP 71990F5A
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003E01F8
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003E03FC
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003E0804
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003E0A08
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003E0600
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] USER32.dll!ChangeDisplaySettingsExW 77D791B6 6 Bytes JMP 71960F5A
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003F1014
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003F0804
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003F0A08
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003F0C0C
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003F0E10
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003F01F8
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003F03FC
- .text C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe[288] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003F0600
- .text C:\WINDOWS\system32\ctfmon.exe[456] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000A01F8
- .text C:\WINDOWS\system32\ctfmon.exe[456] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\ctfmon.exe[456] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000A03FC
- .text C:\WINDOWS\system32\ctfmon.exe[456] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 00CD0001
- .text C:\WINDOWS\system32\ctfmon.exe[456] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\ctfmon.exe[456] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 00371014
- .text C:\WINDOWS\system32\ctfmon.exe[456] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 00370804
- .text C:\WINDOWS\system32\ctfmon.exe[456] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 00370A08
- .text C:\WINDOWS\system32\ctfmon.exe[456] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 00370C0C
- .text C:\WINDOWS\system32\ctfmon.exe[456] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 00370E10
- .text C:\WINDOWS\system32\ctfmon.exe[456] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003701F8
- .text C:\WINDOWS\system32\ctfmon.exe[456] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003703FC
- .text C:\WINDOWS\system32\ctfmon.exe[456] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 00370600
- .text C:\WINDOWS\system32\ctfmon.exe[456] USER32.dll!SetWindowPos 77D3C78E 3 Bytes [FF, 25, 1E]
- .text C:\WINDOWS\system32\ctfmon.exe[456] USER32.dll!SetWindowPos + 4 77D3C792 2 Bytes [A0, 71]
- .text C:\WINDOWS\system32\ctfmon.exe[456] USER32.dll!SetForegroundWindow 77D466A7 6 Bytes JMP 71A50F5A
- .text C:\WINDOWS\system32\ctfmon.exe[456] USER32.dll!ChangeDisplaySettingsExA 77D56A51 6 Bytes JMP 719E0F5A
- .text C:\WINDOWS\system32\ctfmon.exe[456] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003801F8
- .text C:\WINDOWS\system32\ctfmon.exe[456] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003803FC
- .text C:\WINDOWS\system32\ctfmon.exe[456] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00380804
- .text C:\WINDOWS\system32\ctfmon.exe[456] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00380A08
- .text C:\WINDOWS\system32\ctfmon.exe[456] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00380600
- .text C:\WINDOWS\system32\ctfmon.exe[456] USER32.dll!ChangeDisplaySettingsExW 77D791B6 6 Bytes JMP 719B0F5A
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 01230001
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] USER32.dll!SetWindowPos 77D3C78E 3 Bytes [FF, 25, 1E]
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] USER32.dll!SetWindowPos + 4 77D3C792 2 Bytes [9B, 71]
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] USER32.dll!SetForegroundWindow 77D466A7 6 Bytes JMP 71A00F5A
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] USER32.dll!ChangeDisplaySettingsExA 77D56A51 6 Bytes JMP 71990F5A
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 004701F8
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 004703FC
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00470804
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00470A08
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00470600
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] USER32.dll!ChangeDisplaySettingsExW 77D791B6 6 Bytes JMP 71960F5A
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 00481014
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 00480804
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 00480A08
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 00480C0C
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 00480E10
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 004801F8
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 004803FC
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe[468] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 00480600
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001401F8
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001403FC
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] kernel32.dll!CreateThread + 1A 7C810661 4 Bytes CALL 0044C4B9 C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe (PC Tools Security Component/PC Tools)
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003F01F8
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003F03FC
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003F0804
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003F0A08
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003F0600
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 00A31014
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 00A30804
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 00A30A08
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 00A30C0C
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 00A30E10
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 00A301F8
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 00A303FC
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] ADVAPI32.dll!DeleteService 77E27359 3 Bytes JMP 00A30600
- .text C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe[488] ADVAPI32.dll!DeleteService + 4 77E2735D 1 Byte [88]
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001401F8
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001403FC
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 011E0001
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003C1014
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003C0804
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003C0A08
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003C0C0C
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003C0E10
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003C01F8
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003C03FC
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003C0600
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] USER32.dll!SetWindowPos 77D3C78E 3 Bytes [FF, 25, 1E]
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] USER32.dll!SetWindowPos + 4 77D3C792 2 Bytes [9D, 71]
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] USER32.dll!SetForegroundWindow 77D466A7 6 Bytes JMP 71A20F5A
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] USER32.dll!ChangeDisplaySettingsExA 77D56A51 6 Bytes JMP 719B0F5A
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003D01F8
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003D03FC
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003D0804
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003D0A08
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003D0600
- .text C:\Programmer\EDIMAX\Common\RaUI.exe[540] USER32.dll!ChangeDisplaySettingsExW 77D791B6 6 Bytes JMP 71980F5A
- .text C:\WINDOWS\system32\svchost.exe[596] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000901F8
- .text C:\WINDOWS\system32\svchost.exe[596] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\svchost.exe[596] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000903FC
- .text C:\WINDOWS\system32\svchost.exe[596] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\svchost.exe[596] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 002F1014
- .text C:\WINDOWS\system32\svchost.exe[596] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 002F0804
- .text C:\WINDOWS\system32\svchost.exe[596] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 002F0A08
- .text C:\WINDOWS\system32\svchost.exe[596] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 002F0C0C
- .text C:\WINDOWS\system32\svchost.exe[596] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 002F0E10
- .text C:\WINDOWS\system32\svchost.exe[596] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 002F01F8
- .text C:\WINDOWS\system32\svchost.exe[596] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 002F03FC
- .text C:\WINDOWS\system32\svchost.exe[596] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 002F0600
- .text C:\WINDOWS\system32\svchost.exe[596] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003001F8
- .text C:\WINDOWS\system32\svchost.exe[596] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003003FC
- .text C:\WINDOWS\system32\svchost.exe[596] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00300804
- .text C:\WINDOWS\system32\svchost.exe[596] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00300A08
- .text C:\WINDOWS\system32\svchost.exe[596] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00300600
- .text C:\WINDOWS\System32\alg.exe[676] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000901F8
- .text C:\WINDOWS\System32\alg.exe[676] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\System32\alg.exe[676] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000903FC
- .text C:\WINDOWS\System32\alg.exe[676] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\System32\alg.exe[676] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 002F01F8
- .text C:\WINDOWS\System32\alg.exe[676] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 002F03FC
- .text C:\WINDOWS\System32\alg.exe[676] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 002F0804
- .text C:\WINDOWS\System32\alg.exe[676] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 002F0A08
- .text C:\WINDOWS\System32\alg.exe[676] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 002F0600
- .text C:\WINDOWS\System32\alg.exe[676] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 00301014
- .text C:\WINDOWS\System32\alg.exe[676] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 00300804
- .text C:\WINDOWS\System32\alg.exe[676] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 00300A08
- .text C:\WINDOWS\System32\alg.exe[676] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 00300C0C
- .text C:\WINDOWS\System32\alg.exe[676] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 00300E10
- .text C:\WINDOWS\System32\alg.exe[676] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003001F8
- .text C:\WINDOWS\System32\alg.exe[676] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003003FC
- .text C:\WINDOWS\System32\alg.exe[676] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 00300600
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2.exe[684] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2.exe[684] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2.exe[684] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2.exe[684] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2.exe[684] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003E1014
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2.exe[684] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003E0804
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2.exe[684] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003E0A08
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2.exe[684] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003E0C0C
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2.exe[684] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003E0E10
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2.exe[684] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003E01F8
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2.exe[684] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003E03FC
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2.exe[684] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003E0600
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2.exe[684] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003F01F8
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2.exe[684] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003F03FC
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2.exe[684] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003F0804
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2.exe[684] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003F0A08
- .text C:\Programmer\LogMeIn Hamachi\hamachi-2.exe[684] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003F0600
- .text C:\WINDOWS\system32\wbem\wmiprvse.exe[720] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000901F8
- .text C:\WINDOWS\system32\wbem\wmiprvse.exe[720] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\wbem\wmiprvse.exe[720] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000903FC
- .text C:\WINDOWS\system32\wbem\wmiprvse.exe[720] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\wbem\wmiprvse.exe[720] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 002F1014
- .text C:\WINDOWS\system32\wbem\wmiprvse.exe[720] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 002F0804
- .text C:\WINDOWS\system32\wbem\wmiprvse.exe[720] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 002F0A08
- .text C:\WINDOWS\system32\wbem\wmiprvse.exe[720] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 002F0C0C
- .text C:\WINDOWS\system32\wbem\wmiprvse.exe[720] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 002F0E10
- .text C:\WINDOWS\system32\wbem\wmiprvse.exe[720] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 002F01F8
- .text C:\WINDOWS\system32\wbem\wmiprvse.exe[720] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 002F03FC
- .text C:\WINDOWS\system32\wbem\wmiprvse.exe[720] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 002F0600
- .text C:\WINDOWS\system32\wbem\wmiprvse.exe[720] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003001F8
- .text C:\WINDOWS\system32\wbem\wmiprvse.exe[720] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003003FC
- .text C:\WINDOWS\system32\wbem\wmiprvse.exe[720] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00300804
- .text C:\WINDOWS\system32\wbem\wmiprvse.exe[720] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00300A08
- .text C:\WINDOWS\system32\wbem\wmiprvse.exe[720] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00300600
- .text C:\Programmer\Java\jre6\bin\jqs.exe[724] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\Programmer\Java\jre6\bin\jqs.exe[724] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Programmer\Java\jre6\bin\jqs.exe[724] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\Programmer\Java\jre6\bin\jqs.exe[724] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Programmer\Java\jre6\bin\jqs.exe[724] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003D1014
- .text C:\Programmer\Java\jre6\bin\jqs.exe[724] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003D0804
- .text C:\Programmer\Java\jre6\bin\jqs.exe[724] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003D0A08
- .text C:\Programmer\Java\jre6\bin\jqs.exe[724] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003D0C0C
- .text C:\Programmer\Java\jre6\bin\jqs.exe[724] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003D0E10
- .text C:\Programmer\Java\jre6\bin\jqs.exe[724] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003D01F8
- .text C:\Programmer\Java\jre6\bin\jqs.exe[724] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003D03FC
- .text C:\Programmer\Java\jre6\bin\jqs.exe[724] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003D0600
- .text C:\Programmer\Java\jre6\bin\jqs.exe[724] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003E01F8
- .text C:\Programmer\Java\jre6\bin\jqs.exe[724] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003E03FC
- .text C:\Programmer\Java\jre6\bin\jqs.exe[724] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003E0804
- .text C:\Programmer\Java\jre6\bin\jqs.exe[724] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003E0A08
- .text C:\Programmer\Java\jre6\bin\jqs.exe[724] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003E0600
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe[756] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000501F8
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe[756] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe[756] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000503FC
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe[756] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe[756] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 01071014
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe[756] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 01070804
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe[756] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 01070A08
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe[756] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 01070C0C
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe[756] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 01070E10
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe[756] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 010701F8
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe[756] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 010703FC
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe[756] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 01070600
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe[756] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 010801F8
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe[756] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 010803FC
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe[756] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 01080804
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe[756] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 01080A08
- .text C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe[756] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 01080600
- .text C:\WINDOWS\System32\smss.exe[808] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\csrss.exe[860] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\csrss.exe[860] KERNEL32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\nvsvc32.exe[864] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\WINDOWS\system32\nvsvc32.exe[864] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\nvsvc32.exe[864] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\WINDOWS\system32\nvsvc32.exe[864] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\nvsvc32.exe[864] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003D1014
- .text C:\WINDOWS\system32\nvsvc32.exe[864] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003D0804
- .text C:\WINDOWS\system32\nvsvc32.exe[864] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003D0A08
- .text C:\WINDOWS\system32\nvsvc32.exe[864] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003D0C0C
- .text C:\WINDOWS\system32\nvsvc32.exe[864] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003D0E10
- .text C:\WINDOWS\system32\nvsvc32.exe[864] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003D01F8
- .text C:\WINDOWS\system32\nvsvc32.exe[864] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003D03FC
- .text C:\WINDOWS\system32\nvsvc32.exe[864] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003D0600
- .text C:\WINDOWS\system32\nvsvc32.exe[864] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003E01F8
- .text C:\WINDOWS\system32\nvsvc32.exe[864] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003E03FC
- .text C:\WINDOWS\system32\nvsvc32.exe[864] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003E0804
- .text C:\WINDOWS\system32\nvsvc32.exe[864] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003E0A08
- .text C:\WINDOWS\system32\nvsvc32.exe[864] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003E0600
- .text C:\WINDOWS\system32\winlogon.exe[884] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000701F8
- .text C:\WINDOWS\system32\winlogon.exe[884] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\winlogon.exe[884] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000703FC
- .text C:\WINDOWS\system32\winlogon.exe[884] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\winlogon.exe[884] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 002F1014
- .text C:\WINDOWS\system32\winlogon.exe[884] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 002F0804
- .text C:\WINDOWS\system32\winlogon.exe[884] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 002F0A08
- .text C:\WINDOWS\system32\winlogon.exe[884] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 002F0C0C
- .text C:\WINDOWS\system32\winlogon.exe[884] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 002F0E10
- .text C:\WINDOWS\system32\winlogon.exe[884] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 002F01F8
- .text C:\WINDOWS\system32\winlogon.exe[884] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 002F03FC
- .text C:\WINDOWS\system32\winlogon.exe[884] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 002F0600
- .text C:\WINDOWS\system32\winlogon.exe[884] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003001F8
- .text C:\WINDOWS\system32\winlogon.exe[884] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003003FC
- .text C:\WINDOWS\system32\winlogon.exe[884] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00300804
- .text C:\WINDOWS\system32\winlogon.exe[884] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00300A08
- .text C:\WINDOWS\system32\winlogon.exe[884] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00300600
- .text C:\WINDOWS\system32\services.exe[928] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000901F8
- .text C:\WINDOWS\system32\services.exe[928] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\services.exe[928] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000903FC
- .text C:\WINDOWS\system32\services.exe[928] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\services.exe[928] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 002F1014
- .text C:\WINDOWS\system32\services.exe[928] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 002F0804
- .text C:\WINDOWS\system32\services.exe[928] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 002F0A08
- .text C:\WINDOWS\system32\services.exe[928] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 002F0C0C
- .text C:\WINDOWS\system32\services.exe[928] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 002F0E10
- .text C:\WINDOWS\system32\services.exe[928] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 002F01F8
- .text C:\WINDOWS\system32\services.exe[928] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 002F03FC
- .text C:\WINDOWS\system32\services.exe[928] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 002F0600
- .text C:\WINDOWS\system32\services.exe[928] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003001F8
- .text C:\WINDOWS\system32\services.exe[928] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003003FC
- .text C:\WINDOWS\system32\services.exe[928] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00300804
- .text C:\WINDOWS\system32\services.exe[928] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00300A08
- .text C:\WINDOWS\system32\services.exe[928] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00300600
- .text C:\WINDOWS\system32\lsass.exe[940] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000901F8
- .text C:\WINDOWS\system32\lsass.exe[940] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\lsass.exe[940] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000903FC
- .text C:\WINDOWS\system32\lsass.exe[940] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\lsass.exe[940] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 002F1014
- .text C:\WINDOWS\system32\lsass.exe[940] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 002F0804
- .text C:\WINDOWS\system32\lsass.exe[940] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 002F0A08
- .text C:\WINDOWS\system32\lsass.exe[940] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 002F0C0C
- .text C:\WINDOWS\system32\lsass.exe[940] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 002F0E10
- .text C:\WINDOWS\system32\lsass.exe[940] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 002F01F8
- .text C:\WINDOWS\system32\lsass.exe[940] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 002F03FC
- .text C:\WINDOWS\system32\lsass.exe[940] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 002F0600
- .text C:\WINDOWS\system32\lsass.exe[940] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003001F8
- .text C:\WINDOWS\system32\lsass.exe[940] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003003FC
- .text C:\WINDOWS\system32\lsass.exe[940] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00300804
- .text C:\WINDOWS\system32\lsass.exe[940] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00300A08
- .text C:\WINDOWS\system32\lsass.exe[940] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00300600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtCreateFile + 6 7C90D0B4 4 Bytes [28, 00, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtCreateFile + B 7C90D0B9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtMapViewOfSection + 6 7C90D524 1 Byte [28]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtMapViewOfSection + 6 7C90D524 4 Bytes [28, 03, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtMapViewOfSection + B 7C90D529 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtOpenFile + 6 7C90D5A4 4 Bytes [68, 00, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtOpenFile + B 7C90D5A9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtOpenProcess + 6 7C90D604 4 Bytes [A8, 01, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtOpenProcess + B 7C90D609 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtOpenProcessToken + 6 7C90D614 4 Bytes CALL 7B90EC1A
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtOpenProcessToken + B 7C90D619 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtOpenProcessTokenEx + 6 7C90D624 4 Bytes [A8, 02, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtOpenProcessTokenEx + B 7C90D629 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtOpenThread + 6 7C90D664 4 Bytes [68, 01, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtOpenThread + B 7C90D669 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtOpenThreadToken + 6 7C90D674 4 Bytes [68, 02, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtOpenThreadToken + B 7C90D679 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtOpenThreadTokenEx + 6 7C90D684 4 Bytes CALL 7B90EC8B
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtOpenThreadTokenEx + B 7C90D689 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtQueryAttributesFile + 6 7C90D714 4 Bytes [A8, 00, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtQueryAttributesFile + B 7C90D719 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtQueryFullAttributesFile + 6 7C90D7B4 4 Bytes CALL 7B90EDB9
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtQueryFullAttributesFile + B 7C90D7B9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtSetInformationFile + 6 7C90DC64 4 Bytes [28, 01, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtSetInformationFile + B 7C90DC69 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtSetInformationThread + 6 7C90DCB4 4 Bytes [28, 02, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtSetInformationThread + B 7C90DCB9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 1 Byte [68]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 4 Bytes [68, 03, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!NtUnmapViewOfSection + B 7C90DF19 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001801F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001803FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 00591014
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 00590804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 00590A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 00590C0C
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 00590E10
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 005901F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 005903FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 00590600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 005A01F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 005A03FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 005A0804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 005A0A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1040] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 005A0600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 00F90001
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003D1014
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003D0804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003D0A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003D0C0C
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003D0E10
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003D01F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003D03FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003D0600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] USER32.dll!SetWindowPos 77D3C78E 3 Bytes [FF, 25, 1E]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] USER32.dll!SetWindowPos + 4 77D3C792 2 Bytes [A0, 71]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] USER32.dll!SetForegroundWindow 77D466A7 6 Bytes JMP 71A50F5A
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] USER32.dll!ChangeDisplaySettingsExA 77D56A51 6 Bytes JMP 719E0F5A
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003E01F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003E03FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003E0804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003E0A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003E0600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe[1076] USER32.dll!ChangeDisplaySettingsExW 77D791B6 6 Bytes JMP 719B0F5A
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 00D40001
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] USER32.dll!SetWindowPos 77D3C78E 3 Bytes [FF, 25, 1E]
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] USER32.dll!SetWindowPos + 4 77D3C792 2 Bytes [A8, 71] {TEST AL, 0x71}
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] USER32.dll!SetForegroundWindow 77D466A7 6 Bytes JMP 71AF0F5A
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] USER32.dll!ChangeDisplaySettingsExA 77D56A51 6 Bytes JMP 71A60F5A
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 011D01F8
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 011D03FC
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 011D0804
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 011D0A08
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 011D0600
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] USER32.dll!ChangeDisplaySettingsExW 77D791B6 6 Bytes JMP 71A30F5A
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 010A1014
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 010A0804
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 010A0A08
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 010A0C0C
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 010A0E10
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 010A01F8
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 010A03FC
- .text C:\Documents and Settings\Vedel\Skrivebord\Ny mappe\OTL.exe[1096] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 010A0600
- .text C:\WINDOWS\system32\svchost.exe[1116] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000901F8
- .text C:\WINDOWS\system32\svchost.exe[1116] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\svchost.exe[1116] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000903FC
- .text C:\WINDOWS\system32\svchost.exe[1116] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\svchost.exe[1116] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 002F1014
- .text C:\WINDOWS\system32\svchost.exe[1116] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 002F0804
- .text C:\WINDOWS\system32\svchost.exe[1116] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 002F0A08
- .text C:\WINDOWS\system32\svchost.exe[1116] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 002F0C0C
- .text C:\WINDOWS\system32\svchost.exe[1116] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 002F0E10
- .text C:\WINDOWS\system32\svchost.exe[1116] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 002F01F8
- .text C:\WINDOWS\system32\svchost.exe[1116] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 002F03FC
- .text C:\WINDOWS\system32\svchost.exe[1116] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 002F0600
- .text C:\WINDOWS\system32\svchost.exe[1116] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003001F8
- .text C:\WINDOWS\system32\svchost.exe[1116] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003003FC
- .text C:\WINDOWS\system32\svchost.exe[1116] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00300804
- .text C:\WINDOWS\system32\svchost.exe[1116] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00300A08
- .text C:\WINDOWS\system32\svchost.exe[1116] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00300600
- .text C:\WINDOWS\system32\svchost.exe[1180] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000901F8
- .text C:\WINDOWS\system32\svchost.exe[1180] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\svchost.exe[1180] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000903FC
- .text C:\WINDOWS\system32\svchost.exe[1180] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\svchost.exe[1180] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 002F1014
- .text C:\WINDOWS\system32\svchost.exe[1180] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 002F0804
- .text C:\WINDOWS\system32\svchost.exe[1180] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 002F0A08
- .text C:\WINDOWS\system32\svchost.exe[1180] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 002F0C0C
- .text C:\WINDOWS\system32\svchost.exe[1180] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 002F0E10
- .text C:\WINDOWS\system32\svchost.exe[1180] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 002F01F8
- .text C:\WINDOWS\system32\svchost.exe[1180] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 002F03FC
- .text C:\WINDOWS\system32\svchost.exe[1180] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 002F0600
- .text C:\WINDOWS\system32\svchost.exe[1180] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003001F8
- .text C:\WINDOWS\system32\svchost.exe[1180] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003003FC
- .text C:\WINDOWS\system32\svchost.exe[1180] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00300804
- .text C:\WINDOWS\system32\svchost.exe[1180] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00300A08
- .text C:\WINDOWS\system32\svchost.exe[1180] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00300600
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe[1228] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe[1228] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe[1228] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe[1228] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe[1228] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003D01F8
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe[1228] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003D03FC
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe[1228] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003D0804
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe[1228] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003D0A08
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe[1228] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003D0600
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe[1228] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003E1014
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe[1228] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003E0804
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe[1228] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003E0A08
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe[1228] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003E0C0C
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe[1228] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003E0E10
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe[1228] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003E01F8
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe[1228] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003E03FC
- .text C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe[1228] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003E0600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 088C0001
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003D1014
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003D0804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003D0A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003D0C0C
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003D0E10
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003D01F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003D03FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003D0600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] USER32.dll!SetWindowPos 77D3C78E 3 Bytes [FF, 25, 1E]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] USER32.dll!SetWindowPos + 4 77D3C792 2 Bytes [98, 71]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] USER32.dll!SetForegroundWindow 77D466A7 6 Bytes JMP 719D0F5A
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] USER32.dll!ChangeDisplaySettingsExA 77D56A51 6 Bytes JMP 71960F5A
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003E01F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003E03FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003E0804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003E0A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003E0600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1284] USER32.dll!ChangeDisplaySettingsExW 77D791B6 6 Bytes JMP 71930F5A
- .text C:\WINDOWS\System32\svchost.exe[1324] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000901F8
- .text C:\WINDOWS\System32\svchost.exe[1324] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\System32\svchost.exe[1324] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000903FC
- .text C:\WINDOWS\System32\svchost.exe[1324] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\System32\svchost.exe[1324] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 002F1014
- .text C:\WINDOWS\System32\svchost.exe[1324] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 002F0804
- .text C:\WINDOWS\System32\svchost.exe[1324] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 002F0A08
- .text C:\WINDOWS\System32\svchost.exe[1324] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 002F0C0C
- .text C:\WINDOWS\System32\svchost.exe[1324] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 002F0E10
- .text C:\WINDOWS\System32\svchost.exe[1324] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 002F01F8
- .text C:\WINDOWS\System32\svchost.exe[1324] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 002F03FC
- .text C:\WINDOWS\System32\svchost.exe[1324] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 002F0600
- .text C:\WINDOWS\System32\svchost.exe[1324] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003001F8
- .text C:\WINDOWS\System32\svchost.exe[1324] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003003FC
- .text C:\WINDOWS\System32\svchost.exe[1324] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00300804
- .text C:\WINDOWS\System32\svchost.exe[1324] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00300A08
- .text C:\WINDOWS\System32\svchost.exe[1324] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00300600
- .text C:\WINDOWS\system32\svchost.exe[1356] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000901F8
- .text C:\WINDOWS\system32\svchost.exe[1356] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\svchost.exe[1356] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000903FC
- .text C:\WINDOWS\system32\svchost.exe[1356] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\svchost.exe[1356] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 002F1014
- .text C:\WINDOWS\system32\svchost.exe[1356] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 002F0804
- .text C:\WINDOWS\system32\svchost.exe[1356] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 002F0A08
- .text C:\WINDOWS\system32\svchost.exe[1356] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 002F0C0C
- .text C:\WINDOWS\system32\svchost.exe[1356] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 002F0E10
- .text C:\WINDOWS\system32\svchost.exe[1356] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 002F01F8
- .text C:\WINDOWS\system32\svchost.exe[1356] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 002F03FC
- .text C:\WINDOWS\system32\svchost.exe[1356] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 002F0600
- .text C:\WINDOWS\system32\svchost.exe[1356] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003001F8
- .text C:\WINDOWS\system32\svchost.exe[1356] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003003FC
- .text C:\WINDOWS\system32\svchost.exe[1356] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00300804
- .text C:\WINDOWS\system32\svchost.exe[1356] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00300A08
- .text C:\WINDOWS\system32\svchost.exe[1356] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00300600
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 01280001
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003D1014
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003D0804
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003D0A08
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003D0C0C
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003D0E10
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003D01F8
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003D03FC
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003D0600
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] USER32.dll!SetWindowPos 77D3C78E 3 Bytes [FF, 25, 1E]
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] USER32.dll!SetWindowPos + 4 77D3C792 2 Bytes [9F, 71]
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] USER32.dll!SetForegroundWindow 77D466A7 6 Bytes JMP 71AE0F5A
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] USER32.dll!ChangeDisplaySettingsExA 77D56A51 6 Bytes JMP 719D0F5A
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003E01F8
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003E03FC
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003E0804
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003E0A08
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003E0600
- .text C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[1392] USER32.dll!ChangeDisplaySettingsExW 77D791B6 6 Bytes JMP 719A0F5A
- .text C:\WINDOWS\system32\svchost.exe[1492] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000901F8
- .text C:\WINDOWS\system32\svchost.exe[1492] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\svchost.exe[1492] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000903FC
- .text C:\WINDOWS\system32\svchost.exe[1492] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\svchost.exe[1492] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 002F1014
- .text C:\WINDOWS\system32\svchost.exe[1492] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 002F0804
- .text C:\WINDOWS\system32\svchost.exe[1492] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 002F0A08
- .text C:\WINDOWS\system32\svchost.exe[1492] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 002F0C0C
- .text C:\WINDOWS\system32\svchost.exe[1492] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 002F0E10
- .text C:\WINDOWS\system32\svchost.exe[1492] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 002F01F8
- .text C:\WINDOWS\system32\svchost.exe[1492] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 002F03FC
- .text C:\WINDOWS\system32\svchost.exe[1492] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 002F0600
- .text C:\WINDOWS\system32\svchost.exe[1492] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003001F8
- .text C:\WINDOWS\system32\svchost.exe[1492] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003003FC
- .text C:\WINDOWS\system32\svchost.exe[1492] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00300804
- .text C:\WINDOWS\system32\svchost.exe[1492] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00300A08
- .text C:\WINDOWS\system32\svchost.exe[1492] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00300600
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] kernel32.dll!CreateThread + 1A 7C810661 4 Bytes CALL 0044CD69 C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe (PC Tools Security Component/PC Tools)
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 00DB01F8
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 00DB03FC
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00DB0804
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00DB0A08
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00DB0600
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 00DC1014
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 00DC0804
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 00DC0A08
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 00DC0C0C
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 00DC0E10
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 00DC01F8
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 00DC03FC
- .text C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe[1512] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 00DC0600
- .text C:\WINDOWS\system32\PnkBstrA.exe[1552] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001401F8
- .text C:\WINDOWS\system32\PnkBstrA.exe[1552] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\PnkBstrA.exe[1552] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001403FC
- .text C:\WINDOWS\system32\PnkBstrA.exe[1552] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\PnkBstrA.exe[1552] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003C01F8
- .text C:\WINDOWS\system32\PnkBstrA.exe[1552] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003C03FC
- .text C:\WINDOWS\system32\PnkBstrA.exe[1552] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003C0804
- .text C:\WINDOWS\system32\PnkBstrA.exe[1552] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003C0A08
- .text C:\WINDOWS\system32\PnkBstrA.exe[1552] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003C0600
- .text C:\WINDOWS\system32\PnkBstrA.exe[1552] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003D1014
- .text C:\WINDOWS\system32\PnkBstrA.exe[1552] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003D0804
- .text C:\WINDOWS\system32\PnkBstrA.exe[1552] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003D0A08
- .text C:\WINDOWS\system32\PnkBstrA.exe[1552] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003D0C0C
- .text C:\WINDOWS\system32\PnkBstrA.exe[1552] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003D0E10
- .text C:\WINDOWS\system32\PnkBstrA.exe[1552] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003D01F8
- .text C:\WINDOWS\system32\PnkBstrA.exe[1552] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003D03FC
- .text C:\WINDOWS\system32\PnkBstrA.exe[1552] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003D0600
- .text C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe[1556] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe[1556] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe[1556] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe[1556] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe[1556] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003D01F8
- .text C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe[1556] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003D03FC
- .text C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe[1556] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003D0804
- .text C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe[1556] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003D0A08
- .text C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe[1556] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003D0600
- .text C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe[1556] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003E1014
- .text C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe[1556] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003E0804
- .text C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe[1556] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003E0A08
- .text C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe[1556] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003E0C0C
- .text C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe[1556] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003E0E10
- .text C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe[1556] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003E01F8
- .text C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe[1556] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003E03FC
- .text C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe[1556] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003E0600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtCreateFile + 6 7C90D0B4 4 Bytes [28, 00, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtCreateFile + B 7C90D0B9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtMapViewOfSection + 6 7C90D524 1 Byte [28]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtMapViewOfSection + 6 7C90D524 4 Bytes [28, 03, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtMapViewOfSection + B 7C90D529 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtOpenFile + 6 7C90D5A4 4 Bytes [68, 00, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtOpenFile + B 7C90D5A9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtOpenProcess + 6 7C90D604 4 Bytes [A8, 01, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtOpenProcess + B 7C90D609 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtOpenProcessToken + 6 7C90D614 4 Bytes CALL 7B90EC1A
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtOpenProcessToken + B 7C90D619 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtOpenProcessTokenEx + 6 7C90D624 4 Bytes [A8, 02, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtOpenProcessTokenEx + B 7C90D629 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtOpenThread + 6 7C90D664 4 Bytes [68, 01, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtOpenThread + B 7C90D669 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtOpenThreadToken + 6 7C90D674 4 Bytes [68, 02, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtOpenThreadToken + B 7C90D679 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtOpenThreadTokenEx + 6 7C90D684 4 Bytes CALL 7B90EC8B
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtOpenThreadTokenEx + B 7C90D689 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtQueryAttributesFile + 6 7C90D714 4 Bytes [A8, 00, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtQueryAttributesFile + B 7C90D719 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtQueryFullAttributesFile + 6 7C90D7B4 4 Bytes CALL 7B90EDB9
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtQueryFullAttributesFile + B 7C90D7B9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtSetInformationFile + 6 7C90DC64 4 Bytes [28, 01, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtSetInformationFile + B 7C90DC69 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtSetInformationThread + 6 7C90DCB4 4 Bytes [28, 02, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtSetInformationThread + B 7C90DCB9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 1 Byte [68]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 4 Bytes [68, 03, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!NtUnmapViewOfSection + B 7C90DF19 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001801F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001803FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 00591014
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 00590804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 00590A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 00590C0C
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 00590E10
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 005901F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 005903FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 00590600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 005A01F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 005A03FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 005A0804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 005A0A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[1572] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 005A0600
- .text C:\Programmer\AVAST Software\Avast\AvastSvc.exe[1700] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Programmer\AVAST Software\Avast\AvastSvc.exe[1700] kernel32.dll!SetUnhandledExceptionFilter 7C8447ED 4 Bytes [C2, 04, 00, 90] {RET 0x4; NOP }
- .text C:\Programmer\AVAST Software\Avast\AvastSvc.exe[1700] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\Explorer.EXE[1712] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000901F8
- .text C:\WINDOWS\Explorer.EXE[1712] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\Explorer.EXE[1712] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000903FC
- .text C:\WINDOWS\Explorer.EXE[1712] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 00FA0001
- .text C:\WINDOWS\Explorer.EXE[1712] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\Explorer.EXE[1712] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 00371014
- .text C:\WINDOWS\Explorer.EXE[1712] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 00370804
- .text C:\WINDOWS\Explorer.EXE[1712] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 00370A08
- .text C:\WINDOWS\Explorer.EXE[1712] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 00370C0C
- .text C:\WINDOWS\Explorer.EXE[1712] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 00370E10
- .text C:\WINDOWS\Explorer.EXE[1712] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003701F8
- .text C:\WINDOWS\Explorer.EXE[1712] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003703FC
- .text C:\WINDOWS\Explorer.EXE[1712] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 00370600
- .text C:\WINDOWS\Explorer.EXE[1712] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003801F8
- .text C:\WINDOWS\Explorer.EXE[1712] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003803FC
- .text C:\WINDOWS\Explorer.EXE[1712] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00380804
- .text C:\WINDOWS\Explorer.EXE[1712] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00380A08
- .text C:\WINDOWS\Explorer.EXE[1712] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00380600
- .text C:\WINDOWS\system32\spoolsv.exe[1788] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000901F8
- .text C:\WINDOWS\system32\spoolsv.exe[1788] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\spoolsv.exe[1788] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000903FC
- .text C:\WINDOWS\system32\spoolsv.exe[1788] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\spoolsv.exe[1788] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 002F1014
- .text C:\WINDOWS\system32\spoolsv.exe[1788] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 002F0804
- .text C:\WINDOWS\system32\spoolsv.exe[1788] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 002F0A08
- .text C:\WINDOWS\system32\spoolsv.exe[1788] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 002F0C0C
- .text C:\WINDOWS\system32\spoolsv.exe[1788] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 002F0E10
- .text C:\WINDOWS\system32\spoolsv.exe[1788] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 002F01F8
- .text C:\WINDOWS\system32\spoolsv.exe[1788] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 002F03FC
- .text C:\WINDOWS\system32\spoolsv.exe[1788] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 002F0600
- .text C:\WINDOWS\system32\spoolsv.exe[1788] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003001F8
- .text C:\WINDOWS\system32\spoolsv.exe[1788] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003003FC
- .text C:\WINDOWS\system32\spoolsv.exe[1788] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00300804
- .text C:\WINDOWS\system32\spoolsv.exe[1788] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00300A08
- .text C:\WINDOWS\system32\spoolsv.exe[1788] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00300600
- .text C:\WINDOWS\RTHDCPL.EXE[1988] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001401F8
- .text C:\WINDOWS\RTHDCPL.EXE[1988] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\RTHDCPL.EXE[1988] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001403FC
- .text C:\WINDOWS\RTHDCPL.EXE[1988] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 052E0001
- .text C:\WINDOWS\RTHDCPL.EXE[1988] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\RTHDCPL.EXE[1988] USER32.dll!SetWindowPos 77D3C78E 3 Bytes [FF, 25, 1E]
- .text C:\WINDOWS\RTHDCPL.EXE[1988] USER32.dll!SetWindowPos + 4 77D3C792 2 Bytes [9F, 71]
- .text C:\WINDOWS\RTHDCPL.EXE[1988] USER32.dll!SetForegroundWindow 77D466A7 6 Bytes JMP 71A40F5A
- .text C:\WINDOWS\RTHDCPL.EXE[1988] USER32.dll!ChangeDisplaySettingsExA 77D56A51 6 Bytes JMP 719D0F5A
- .text C:\WINDOWS\RTHDCPL.EXE[1988] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003C01F8
- .text C:\WINDOWS\RTHDCPL.EXE[1988] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003C03FC
- .text C:\WINDOWS\RTHDCPL.EXE[1988] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003C0804
- .text C:\WINDOWS\RTHDCPL.EXE[1988] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003C0A08
- .text C:\WINDOWS\RTHDCPL.EXE[1988] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003C0600
- .text C:\WINDOWS\RTHDCPL.EXE[1988] USER32.dll!ChangeDisplaySettingsExW 77D791B6 6 Bytes JMP 719A0F5A
- .text C:\WINDOWS\RTHDCPL.EXE[1988] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003D1014
- .text C:\WINDOWS\RTHDCPL.EXE[1988] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003D0804
- .text C:\WINDOWS\RTHDCPL.EXE[1988] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003D0A08
- .text C:\WINDOWS\RTHDCPL.EXE[1988] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003D0C0C
- .text C:\WINDOWS\RTHDCPL.EXE[1988] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003D0E10
- .text C:\WINDOWS\RTHDCPL.EXE[1988] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003D01F8
- .text C:\WINDOWS\RTHDCPL.EXE[1988] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003D03FC
- .text C:\WINDOWS\RTHDCPL.EXE[1988] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003D0600
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 01A30001
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] USER32.dll!SetWindowPos 77D3C78E 3 Bytes [FF, 25, 1E]
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] USER32.dll!SetWindowPos + 4 77D3C792 2 Bytes [99, 71]
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] USER32.dll!SetForegroundWindow 77D466A7 6 Bytes JMP 719E0F5A
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] USER32.dll!ChangeDisplaySettingsExA 77D56A51 6 Bytes JMP 71970F5A
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003E01F8
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003E03FC
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003E0804
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003E0A08
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003E0600
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] USER32.dll!ChangeDisplaySettingsExW 77D791B6 6 Bytes JMP 71940F5A
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003F1014
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003F0804
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003F0A08
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003F0C0C
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003F0E10
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003F01F8
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003F03FC
- .text C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe[1996] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003F0600
- .text C:\WINDOWS\system32\PnkBstrB.exe[2544] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001401F8
- .text C:\WINDOWS\system32\PnkBstrB.exe[2544] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\PnkBstrB.exe[2544] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001403FC
- .text C:\WINDOWS\system32\PnkBstrB.exe[2544] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\PnkBstrB.exe[2544] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003C01F8
- .text C:\WINDOWS\system32\PnkBstrB.exe[2544] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003C03FC
- .text C:\WINDOWS\system32\PnkBstrB.exe[2544] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003C0804
- .text C:\WINDOWS\system32\PnkBstrB.exe[2544] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003C0A08
- .text C:\WINDOWS\system32\PnkBstrB.exe[2544] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003C0600
- .text C:\WINDOWS\system32\PnkBstrB.exe[2544] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003D1014
- .text C:\WINDOWS\system32\PnkBstrB.exe[2544] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003D0804
- .text C:\WINDOWS\system32\PnkBstrB.exe[2544] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003D0A08
- .text C:\WINDOWS\system32\PnkBstrB.exe[2544] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003D0C0C
- .text C:\WINDOWS\system32\PnkBstrB.exe[2544] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003D0E10
- .text C:\WINDOWS\system32\PnkBstrB.exe[2544] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003D01F8
- .text C:\WINDOWS\system32\PnkBstrB.exe[2544] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003D03FC
- .text C:\WINDOWS\system32\PnkBstrB.exe[2544] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003D0600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtCreateFile + 6 7C90D0B4 4 Bytes [28, 00, 1B, 00] {SUB [EAX], AL; SBB EAX, [EAX]}
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtCreateFile + B 7C90D0B9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtMapViewOfSection + 6 7C90D524 1 Byte [28]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtMapViewOfSection + 6 7C90D524 4 Bytes [28, 03, 1B, 00] {SUB [EBX], AL; SBB EAX, [EAX]}
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtMapViewOfSection + B 7C90D529 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtOpenFile + 6 7C90D5A4 4 Bytes [68, 00, 1B, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtOpenFile + B 7C90D5A9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtOpenProcess + 6 7C90D604 4 Bytes [A8, 01, 1B, 00] {TEST AL, 0x1; SBB EAX, [EAX]}
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtOpenProcess + B 7C90D609 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtOpenProcessToken + 6 7C90D614 4 Bytes CALL 7B90F11A
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtOpenProcessToken + B 7C90D619 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtOpenProcessTokenEx + 6 7C90D624 4 Bytes [A8, 02, 1B, 00] {TEST AL, 0x2; SBB EAX, [EAX]}
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtOpenProcessTokenEx + B 7C90D629 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtOpenThread + 6 7C90D664 4 Bytes [68, 01, 1B, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtOpenThread + B 7C90D669 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtOpenThreadToken + 6 7C90D674 4 Bytes [68, 02, 1B, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtOpenThreadToken + B 7C90D679 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtOpenThreadTokenEx + 6 7C90D684 4 Bytes CALL 7B90F18B
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtOpenThreadTokenEx + B 7C90D689 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtQueryAttributesFile + 6 7C90D714 4 Bytes [A8, 00, 1B, 00] {TEST AL, 0x0; SBB EAX, [EAX]}
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtQueryAttributesFile + B 7C90D719 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtQueryFullAttributesFile + 6 7C90D7B4 4 Bytes CALL 7B90F2B9
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtQueryFullAttributesFile + B 7C90D7B9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtSetInformationFile + 6 7C90DC64 4 Bytes [28, 01, 1B, 00] {SUB [ECX], AL; SBB EAX, [EAX]}
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtSetInformationFile + B 7C90DC69 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtSetInformationThread + 6 7C90DCB4 4 Bytes [28, 02, 1B, 00] {SUB [EDX], AL; SBB EAX, [EAX]}
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtSetInformationThread + B 7C90DCB9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 1 Byte [68]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 4 Bytes [68, 03, 1B, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!NtUnmapViewOfSection + B 7C90DF19 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001D01F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001D03FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 005E1014
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 005E0804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 005E0A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 005E0C0C
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 005E0E10
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 005E01F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 005E03FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 005E0600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 005F01F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 005F03FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 005F0804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 005F0A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[2844] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 005F0600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtCreateFile + 6 7C90D0B4 4 Bytes [28, 00, 3C, 00] {SUB [EAX], AL; CMP AL, 0x0}
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtCreateFile + B 7C90D0B9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtMapViewOfSection + 6 7C90D524 1 Byte [28]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtMapViewOfSection + 6 7C90D524 4 Bytes [28, 03, 3C, 00] {SUB [EBX], AL; CMP AL, 0x0}
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtMapViewOfSection + B 7C90D529 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtOpenFile + 6 7C90D5A4 4 Bytes [68, 00, 3C, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtOpenFile + B 7C90D5A9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtOpenProcess + 6 7C90D604 4 Bytes [A8, 01, 3C, 00] {TEST AL, 0x1; CMP AL, 0x0}
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtOpenProcess + B 7C90D609 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtOpenProcessToken + 6 7C90D614 4 Bytes CALL 7B91121A
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtOpenProcessToken + B 7C90D619 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtOpenProcessTokenEx + 6 7C90D624 4 Bytes [A8, 02, 3C, 00] {TEST AL, 0x2; CMP AL, 0x0}
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtOpenProcessTokenEx + B 7C90D629 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtOpenThread + 6 7C90D664 4 Bytes [68, 01, 3C, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtOpenThread + B 7C90D669 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtOpenThreadToken + 6 7C90D674 4 Bytes [68, 02, 3C, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtOpenThreadToken + B 7C90D679 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtOpenThreadTokenEx + 6 7C90D684 4 Bytes CALL 7B91128B
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtOpenThreadTokenEx + B 7C90D689 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtQueryAttributesFile + 6 7C90D714 4 Bytes [A8, 00, 3C, 00] {TEST AL, 0x0; CMP AL, 0x0}
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtQueryAttributesFile + B 7C90D719 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtQueryFullAttributesFile + 6 7C90D7B4 4 Bytes CALL 7B9113B9
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtQueryFullAttributesFile + B 7C90D7B9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtSetInformationFile + 6 7C90DC64 4 Bytes [28, 01, 3C, 00] {SUB [ECX], AL; CMP AL, 0x0}
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtSetInformationFile + B 7C90DC69 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtSetInformationThread + 6 7C90DCB4 4 Bytes [28, 02, 3C, 00] {SUB [EDX], AL; CMP AL, 0x0}
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtSetInformationThread + B 7C90DCB9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 1 Byte [68]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 4 Bytes [68, 03, 3C, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!NtUnmapViewOfSection + B 7C90DF19 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 003E01F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 003E03FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 007F1014
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 007F0804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 007F0A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 007F0C0C
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 007F0E10
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 007F01F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 007F03FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 007F0600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 008001F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 008003FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00800804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00800A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3012] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00800600
- .text C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe[3088] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe[3088] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe[3088] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe[3088] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe[3088] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003E1014
- .text C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe[3088] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003E0804
- .text C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe[3088] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003E0A08
- .text C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe[3088] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003E0C0C
- .text C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe[3088] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003E0E10
- .text C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe[3088] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003E01F8
- .text C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe[3088] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003E03FC
- .text C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe[3088] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003E0600
- .text C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe[3088] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003F01F8
- .text C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe[3088] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003F03FC
- .text C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe[3088] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003F0804
- .text C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe[3088] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003F0A08
- .text C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe[3088] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003F0600
- .text C:\WINDOWS\notepad.exe[3192] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000A01F8
- .text C:\WINDOWS\notepad.exe[3192] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\notepad.exe[3192] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000A03FC
- .text C:\WINDOWS\notepad.exe[3192] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 00B60001
- .text C:\WINDOWS\notepad.exe[3192] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\notepad.exe[3192] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 00301014
- .text C:\WINDOWS\notepad.exe[3192] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 00300804
- .text C:\WINDOWS\notepad.exe[3192] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 00300A08
- .text C:\WINDOWS\notepad.exe[3192] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 00300C0C
- .text C:\WINDOWS\notepad.exe[3192] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 00300E10
- .text C:\WINDOWS\notepad.exe[3192] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003001F8
- .text C:\WINDOWS\notepad.exe[3192] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003003FC
- .text C:\WINDOWS\notepad.exe[3192] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 00300600
- .text C:\WINDOWS\notepad.exe[3192] USER32.dll!SetWindowPos 77D3C78E 3 Bytes [FF, 25, 1E]
- .text C:\WINDOWS\notepad.exe[3192] USER32.dll!SetWindowPos + 4 77D3C792 2 Bytes [A8, 71] {TEST AL, 0x71}
- .text C:\WINDOWS\notepad.exe[3192] USER32.dll!SetForegroundWindow 77D466A7 6 Bytes JMP 71AF0F5A
- .text C:\WINDOWS\notepad.exe[3192] USER32.dll!ChangeDisplaySettingsExA 77D56A51 6 Bytes JMP 71A60F5A
- .text C:\WINDOWS\notepad.exe[3192] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003101F8
- .text C:\WINDOWS\notepad.exe[3192] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003103FC
- .text C:\WINDOWS\notepad.exe[3192] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00310804
- .text C:\WINDOWS\notepad.exe[3192] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00310A08
- .text C:\WINDOWS\notepad.exe[3192] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00310600
- .text C:\WINDOWS\notepad.exe[3192] USER32.dll!ChangeDisplaySettingsExW 77D791B6 6 Bytes JMP 71A30F5A
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 077A0001
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 003D1014
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 003D0804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 003D0A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 003D0C0C
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 003D0E10
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 003D01F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 003D03FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 003D0600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] USER32.dll!SetWindowPos 77D3C78E 3 Bytes [FF, 25, 1E]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] USER32.dll!SetWindowPos + 4 77D3C792 2 Bytes [9D, 71]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] USER32.dll!SetForegroundWindow 77D466A7 6 Bytes JMP 71A20F5A
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] USER32.dll!ChangeDisplaySettingsExA 77D56A51 6 Bytes JMP 719B0F5A
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003E01F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003E03FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 003E0804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 003E0A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 003E0600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3356] USER32.dll!ChangeDisplaySettingsExW 77D791B6 6 Bytes JMP 71980F5A
- .text C:\WINDOWS\system32\svchost.exe[3456] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000901F8
- .text C:\WINDOWS\system32\svchost.exe[3456] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\svchost.exe[3456] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000903FC
- .text C:\WINDOWS\system32\svchost.exe[3456] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\svchost.exe[3456] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 002F1014
- .text C:\WINDOWS\system32\svchost.exe[3456] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 002F0804
- .text C:\WINDOWS\system32\svchost.exe[3456] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 002F0A08
- .text C:\WINDOWS\system32\svchost.exe[3456] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 002F0C0C
- .text C:\WINDOWS\system32\svchost.exe[3456] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 002F0E10
- .text C:\WINDOWS\system32\svchost.exe[3456] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 002F01F8
- .text C:\WINDOWS\system32\svchost.exe[3456] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 002F03FC
- .text C:\WINDOWS\system32\svchost.exe[3456] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 002F0600
- .text C:\WINDOWS\system32\svchost.exe[3456] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003001F8
- .text C:\WINDOWS\system32\svchost.exe[3456] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003003FC
- .text C:\WINDOWS\system32\svchost.exe[3456] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00300804
- .text C:\WINDOWS\system32\svchost.exe[3456] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00300A08
- .text C:\WINDOWS\system32\svchost.exe[3456] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00300600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtCreateFile + 6 7C90D0B4 4 Bytes [28, 00, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtCreateFile + B 7C90D0B9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtMapViewOfSection + 6 7C90D524 1 Byte [28]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtMapViewOfSection + 6 7C90D524 4 Bytes [28, 03, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtMapViewOfSection + B 7C90D529 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtOpenFile + 6 7C90D5A4 4 Bytes [68, 00, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtOpenFile + B 7C90D5A9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtOpenProcess + 6 7C90D604 4 Bytes [A8, 01, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtOpenProcess + B 7C90D609 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtOpenProcessToken + 6 7C90D614 4 Bytes CALL 7B90EC1A
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtOpenProcessToken + B 7C90D619 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtOpenProcessTokenEx + 6 7C90D624 4 Bytes [A8, 02, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtOpenProcessTokenEx + B 7C90D629 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtOpenThread + 6 7C90D664 4 Bytes [68, 01, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtOpenThread + B 7C90D669 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtOpenThreadToken + 6 7C90D674 4 Bytes [68, 02, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtOpenThreadToken + B 7C90D679 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtOpenThreadTokenEx + 6 7C90D684 4 Bytes CALL 7B90EC8B
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtOpenThreadTokenEx + B 7C90D689 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtQueryAttributesFile + 6 7C90D714 4 Bytes [A8, 00, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtQueryAttributesFile + B 7C90D719 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtQueryFullAttributesFile + 6 7C90D7B4 4 Bytes CALL 7B90EDB9
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtQueryFullAttributesFile + B 7C90D7B9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtSetInformationFile + 6 7C90DC64 4 Bytes [28, 01, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtSetInformationFile + B 7C90DC69 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtSetInformationThread + 6 7C90DCB4 4 Bytes [28, 02, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtSetInformationThread + B 7C90DCB9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 1 Byte [68]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 4 Bytes [68, 03, 16, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!NtUnmapViewOfSection + B 7C90DF19 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001801F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001803FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 00591014
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 00590804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 00590A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 00590C0C
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 00590E10
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 005901F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 005903FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 00590600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 005A01F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 005A03FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 005A0804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 005A0A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3520] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 005A0600
- .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[3540] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 000901F8
- .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[3540] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[3540] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 000903FC
- .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[3540] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[3540] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 002F1014
- .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[3540] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 002F0804
- .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[3540] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 002F0A08
- .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[3540] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 002F0C0C
- .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[3540] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 002F0E10
- .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[3540] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 002F01F8
- .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[3540] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 002F03FC
- .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[3540] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 002F0600
- .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[3540] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 003001F8
- .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[3540] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 003003FC
- .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[3540] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00300804
- .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[3540] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00300A08
- .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[3540] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00300600
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 001501F8
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 001503FC
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] kernel32.dll!LoadLibraryExW + C4 7C801BB5 4 Bytes CALL 00BB0001
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] USER32.dll!SetWindowPos 77D3C78E 3 Bytes [FF, 25, 1E]
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] USER32.dll!SetWindowPos + 4 77D3C792 2 Bytes [A8, 71] {TEST AL, 0x71}
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] USER32.dll!SetForegroundWindow 77D466A7 6 Bytes JMP 71AF0F5A
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] USER32.dll!ChangeDisplaySettingsExA 77D56A51 6 Bytes JMP 71A60F5A
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 00B401F8
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 00B403FC
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00B40804
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00B40A08
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00B40600
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] USER32.dll!ChangeDisplaySettingsExW 77D791B6 6 Bytes JMP 71A30F5A
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 00B31014
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 00B30804
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 00B30A08
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 00B30C0C
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 00B30E10
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 00B301F8
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 00B303FC
- .text C:\Documents and Settings\Vedel\Skrivebord\rmkjh7mv.exe[3576] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 00B30600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtCreateFile + 6 7C90D0B4 4 Bytes [28, 00, 55, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtCreateFile + B 7C90D0B9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtMapViewOfSection + 6 7C90D524 1 Byte [28]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtMapViewOfSection + 6 7C90D524 4 Bytes [28, 03, 55, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtMapViewOfSection + B 7C90D529 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtOpenFile + 6 7C90D5A4 4 Bytes [68, 00, 55, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtOpenFile + B 7C90D5A9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtOpenProcess + 6 7C90D604 4 Bytes [A8, 01, 55, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtOpenProcess + B 7C90D609 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtOpenProcessToken + 6 7C90D614 4 Bytes CALL 7B912B1A
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtOpenProcessToken + B 7C90D619 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtOpenProcessTokenEx + 6 7C90D624 4 Bytes [A8, 02, 55, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtOpenProcessTokenEx + B 7C90D629 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtOpenThread + 6 7C90D664 4 Bytes [68, 01, 55, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtOpenThread + B 7C90D669 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtOpenThreadToken + 6 7C90D674 4 Bytes [68, 02, 55, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtOpenThreadToken + B 7C90D679 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtOpenThreadTokenEx + 6 7C90D684 4 Bytes CALL 7B912B8B
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtOpenThreadTokenEx + B 7C90D689 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtQueryAttributesFile + 6 7C90D714 4 Bytes [A8, 00, 55, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtQueryAttributesFile + B 7C90D719 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtQueryFullAttributesFile + 6 7C90D7B4 4 Bytes CALL 7B912CB9
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtQueryFullAttributesFile + B 7C90D7B9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtSetInformationFile + 6 7C90DC64 4 Bytes [28, 01, 55, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtSetInformationFile + B 7C90DC69 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtSetInformationThread + 6 7C90DCB4 4 Bytes [28, 02, 55, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtSetInformationThread + B 7C90DCB9 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 1 Byte [68]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 4 Bytes [68, 03, 55, 00]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!NtUnmapViewOfSection + B 7C90DF19 1 Byte [E2]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 005701F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!RtlDosSearchPath_U + 1D1 7C916AC2 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 005703FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] kernel32.dll!GetBinaryTypeW + 80 7C867E3C 1 Byte [62]
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ADVAPI32.dll!SetServiceObjectSecurity 77E26C29 5 Bytes JMP 00841014
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ADVAPI32.dll!ChangeServiceConfigA 77E26D11 5 Bytes JMP 00840804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ADVAPI32.dll!ChangeServiceConfigW 77E26EA9 5 Bytes JMP 00840A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ADVAPI32.dll!ChangeServiceConfig2A 77E26FA9 5 Bytes JMP 00840C0C
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ADVAPI32.dll!ChangeServiceConfig2W 77E27031 5 Bytes JMP 00840E10
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ADVAPI32.dll!CreateServiceA 77E270B9 5 Bytes JMP 008401F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ADVAPI32.dll!CreateServiceW 77E27251 5 Bytes JMP 008403FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] ADVAPI32.dll!DeleteService 77E27359 5 Bytes JMP 00840600
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] USER32.dll!SetWinEventHook 77D5E3D3 5 Bytes JMP 008501F8
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] USER32.dll!UnhookWinEvent 77D5E544 5 Bytes JMP 008503FC
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 00850804
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 00850A08
- .text C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe[3704] USER32.dll!SetWindowsHookExA 77D602B2 5 Bytes JMP 00850600
- ---- Devices - GMER 1.0.15 ----
- Device \FileSystem\Ntfs \Ntfs aswSP.SYS (avast! self protection module/AVAST Software)
- AttachedDevice \FileSystem\Ntfs \Ntfs aswMon2.SYS (avast! File System Filter Driver for Windows XP/AVAST Software)
- AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)
- Device \Driver\PCToolsProtectInjDrv \Device\PCToolsProtectInjDrv pcttProtect32.sys
- AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)
- Device \Driver\PCTSDInjDriver32 \Device\PCTSDInjDriver32 PCTSDInj32.sys (UM Injection Driver/PC Tools)
- AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)
- AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)
- ---- EOF - GMER 1.0.15 ----
Advertisement
Add Comment
Please, Sign In to add comment