GMER 1.0.15.15530 - http://www.gmer.net Rootkit scan 2010-11-13 18:47:53 Windows 5.1.2600 Dodatek Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-e Hitachi_HTS542512K9SA00 rev.BB2OC31P Running: gmer.exe; Driver: C:\DOCUME~1\User\USTAWI~1\Temp\fwdyipog.sys ---- System - GMER 1.0.15 ---- SSDT spxf.sys ZwCreateKey [0xB9EB50E0] SSDT spxf.sys ZwEnumerateKey [0xB9ECDDA4] SSDT spxf.sys ZwEnumerateValueKey [0xB9ECE132] SSDT spxf.sys ZwOpenKey [0xB9EB50C0] SSDT spxf.sys ZwQueryKey [0xB9ECE20A] SSDT spxf.sys ZwQueryValueKey [0xB9ECE08A] SSDT spxf.sys ZwSetValueKey [0xB9ECE29C] INT 0x62 ? 89DD3BF8 INT 0x63 ? 89B34BF8 INT 0x74 ? 89B34BF8 INT 0x82 ? 89DD3BF8 INT 0x84 ? 89B34BF8 INT 0x94 ? 89B34BF8 INT 0xA4 ? 89DD3BF8 ---- Kernel code sections - GMER 1.0.15 ---- ? spxf.sys Nie można odnaleźć określonego pliku. ! .text USBPORT.SYS!DllUnload B96918AC 5 Bytes JMP 89B341D8 .text af31il53.SYS B94A7386 35 Bytes [00, 00, 00, 00, 00, 00, 20, ...] .text af31il53.SYS B94A73AA 24 Bytes [00, 00, 00, 00, 00, 00, 00, ...] .text af31il53.SYS B94A73C4 3 Bytes [00, 80, 02] .text af31il53.SYS B94A73C9 1 Byte [30] .text af31il53.SYS B94A73C9 11 Bytes [30, 00, 00, 00, 5E, 02, 00, ...] {XOR [EAX], AL; ADD [EAX], AL; POP ESI; ADD AL, [EAX]; ADD [EAX], AL; ADD [EAX], AL} .text ... ? C:\WINDOWS\system32\Drivers\mchInjDrv.sys Nie można odnaleźć określonego pliku. ! ---- User code sections - GMER 1.0.15 ---- .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\AVG\AVG9\avgchsvx.exe[132] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\igfxpers.exe[140] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\AVG\AVG9\avgrsx.exe[144] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\spoolsv.exe[296] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\Explorer.EXE[1068] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\hkcmd.exe[1184] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\csrss.exe[1204] KERNEL32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\igfxsrvc.exe[1208] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\winlogon.exe[1228] ntdll.dll!NtLockProductActivationKeys 7C90D4AE 5 Bytes JMP 10001000 C:\WINDOWS\system32\antiwpa.dll .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\winlogon.exe[1228] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\winlogon.exe[1228] USER32.dll!GetSystemMetrics 7E368F9C 5 Bytes JMP 10001018 C:\WINDOWS\system32\antiwpa.dll .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\services.exe[1272] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\lsass.exe[1284] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\svchost.exe[1456] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\svchost.exe[1520] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\System32\svchost.exe[1560] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\svchost.exe[1600] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\RTHDCPL.EXE[1664] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1716] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\PROGRA~1\AVG\AVG9\avgtray.exe[1724] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\svchost.exe[1748] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text D:\Instalki\LAUNCH~1\LManager.exe[1840] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Acer\Empowering Technology\ePower\ePower_DMC.exe[1848] KERNEL32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1864] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1868] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe[1936] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\ctfmon.exe[2060] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\Xmarks\IE Extension\xmarkssync.exe[2068] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe[2180] KERNEL32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2256] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\wbem\wmiprvse.exe[2504] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\DOCUME~1\User\USTAWI~1\Temp\RtkBtMnt.exe[2512] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\igfxext.exe[2556] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\PC Connectivity Solution\ServiceLayer.exe[2632] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\System32\alg.exe[2704] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\svchost.exe[2780] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\AVG\AVG9\avgwdsvc.exe[2812] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text D:\Instalki\Java\jre6\bin\jqs.exe[2868] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe[2896] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\svchost.exe[3032] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text D:\Instalki\MaxCrypt2\SysSrvc.exe[3216] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\AVG\AVG9\avgemc.exe[3296] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\AVG\AVG9\avgnsx.exe[3352] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3588] USER32.dll!DialogBoxParamW 7E3747AB 5 Bytes JMP 405D54F5 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3588] USER32.dll!SetWindowsHookExW 7E37820F 5 Bytes JMP 406A9ACD C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3588] USER32.dll!CallNextHookEx 7E37B3C6 5 Bytes JMP 4069D12D C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3588] USER32.dll!CreateWindowExW 7E37D0A3 5 Bytes JMP 406ADB24 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3588] USER32.dll!UnhookWindowsHookEx 7E37D5F3 5 Bytes JMP 40614656 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3588] USER32.dll!DialogBoxIndirectParamW 7E382072 5 Bytes JMP 407A5027 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3588] USER32.dll!MessageBoxIndirectA 7E38A082 5 Bytes JMP 407A4F59 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3588] USER32.dll!DialogBoxParamA 7E38B144 5 Bytes JMP 407A4FC4 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3588] USER32.dll!MessageBoxExW 7E3A0838 5 Bytes JMP 407A4E2A C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3588] USER32.dll!MessageBoxExA 7E3A085C 5 Bytes JMP 407A4E8C C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3588] USER32.dll!DialogBoxIndirectParamA 7E3A6D7D 5 Bytes JMP 407A508A C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3588] USER32.dll!MessageBoxIndirectW 7E3B64D5 5 Bytes JMP 407A4EEE C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3588] ole32.dll!CoCreateInstance 774EF1AC 5 Bytes JMP 406ADB80 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3588] ole32.dll!OleLoadFromStream 7751981B 5 Bytes JMP 407A538F C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\WINDOWS\system32\wbem\unsecapp.exe[3608] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text D:\Instalki\Java\jre6\bin\javaw.exe[3628] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!DialogBoxParamW 7E3747AB 5 Bytes JMP 405D54F5 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!SetWindowsHookExW 7E37820F 5 Bytes JMP 406A9ACD C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!CallNextHookEx 7E37B3C6 5 Bytes JMP 4069D12D C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!CreateWindowExW 7E37D0A3 5 Bytes JMP 406ADB24 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!UnhookWindowsHookEx 7E37D5F3 5 Bytes JMP 40614656 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!DialogBoxIndirectParamW 7E382072 5 Bytes JMP 407A5027 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!MessageBoxIndirectA 7E38A082 5 Bytes JMP 407A4F59 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!DialogBoxParamA 7E38B144 5 Bytes JMP 407A4FC4 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!MessageBoxExW 7E3A0838 5 Bytes JMP 407A4E2A C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!MessageBoxExA 7E3A085C 5 Bytes JMP 407A4E8C C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!DialogBoxIndirectParamA 7E3A6D7D 5 Bytes JMP 407A508A C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!MessageBoxIndirectW 7E3B64D5 5 Bytes JMP 407A4EEE C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3636] ole32.dll!CoCreateInstance 774EF1AC 5 Bytes JMP 406ADB80 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3636] ole32.dll!OleLoadFromStream 7751981B 5 Bytes JMP 407A538F C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\Internet Explorer\iexplore.exe[3916] USER32.dll!DialogBoxParamW 7E3747AB 5 Bytes JMP 405D54F5 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3916] USER32.dll!SetWindowsHookExW 7E37820F 5 Bytes JMP 406A9ACD C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3916] USER32.dll!CallNextHookEx 7E37B3C6 5 Bytes JMP 4069D12D C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3916] USER32.dll!CreateWindowExW 7E37D0A3 5 Bytes JMP 406ADB24 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3916] USER32.dll!UnhookWindowsHookEx 7E37D5F3 5 Bytes JMP 40614656 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3916] USER32.dll!DialogBoxIndirectParamW 7E382072 5 Bytes JMP 407A5027 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3916] USER32.dll!MessageBoxIndirectA 7E38A082 5 Bytes JMP 407A4F59 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3916] USER32.dll!DialogBoxParamA 7E38B144 5 Bytes JMP 407A4FC4 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3916] USER32.dll!MessageBoxExW 7E3A0838 5 Bytes JMP 407A4E2A C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3916] USER32.dll!MessageBoxExA 7E3A085C 5 Bytes JMP 407A4E8C C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3916] USER32.dll!DialogBoxIndirectParamA 7E3A6D7D 5 Bytes JMP 407A508A C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3916] USER32.dll!MessageBoxIndirectW 7E3B64D5 5 Bytes JMP 407A4EEE C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3916] ole32.dll!CoCreateInstance 774EF1AC 5 Bytes JMP 406ADB80 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3916] ole32.dll!OleLoadFromStream 7751981B 5 Bytes JMP 407A538F C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\AVG\AVG9\avgcsrvx.exe[4016] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text D:\Magazyn\gmer.exe[4404] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text D:\Magazyn\gmer.exe[4404] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe[5228] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe[5428] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!DialogBoxParamW 7E3747AB 5 Bytes JMP 405D54F5 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!SetWindowsHookExW 7E37820F 5 Bytes JMP 406A9ACD C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!CallNextHookEx 7E37B3C6 5 Bytes JMP 4069D12D C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!CreateWindowExW 7E37D0A3 5 Bytes JMP 406ADB24 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!UnhookWindowsHookEx 7E37D5F3 5 Bytes JMP 40614656 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!DialogBoxIndirectParamW 7E382072 5 Bytes JMP 407A5027 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!MessageBoxIndirectA 7E38A082 5 Bytes JMP 407A4F59 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!DialogBoxParamA 7E38B144 5 Bytes JMP 407A4FC4 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!MessageBoxExW 7E3A0838 5 Bytes JMP 407A4E2A C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!MessageBoxExA 7E3A085C 5 Bytes JMP 407A4E8C C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!DialogBoxIndirectParamA 7E3A6D7D 5 Bytes JMP 407A508A C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!MessageBoxIndirectW 7E3B64D5 5 Bytes JMP 407A4EEE C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5488] ole32.dll!CoCreateInstance 774EF1AC 5 Bytes JMP 406ADB80 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5488] ole32.dll!OleLoadFromStream 7751981B 5 Bytes JMP 407A538F C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe[5568] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A .text C:\Program Files\Internet Explorer\iexplore.exe[5768] USER32.dll!DialogBoxParamW 7E3747AB 5 Bytes JMP 405D54F5 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5768] USER32.dll!CreateWindowExW 7E37D0A3 5 Bytes JMP 406ADB24 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5768] USER32.dll!DialogBoxIndirectParamW 7E382072 5 Bytes JMP 407A5027 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5768] USER32.dll!MessageBoxIndirectA 7E38A082 5 Bytes JMP 407A4F59 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5768] USER32.dll!DialogBoxParamA 7E38B144 5 Bytes JMP 407A4FC4 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5768] USER32.dll!MessageBoxExW 7E3A0838 5 Bytes JMP 407A4E2A C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5768] USER32.dll!MessageBoxExA 7E3A085C 5 Bytes JMP 407A4E8C C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5768] USER32.dll!DialogBoxIndirectParamA 7E3A6D7D 5 Bytes JMP 407A508A C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[5768] USER32.dll!MessageBoxIndirectW 7E3B64D5 5 Bytes JMP 407A4EEE C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!CreateFileA 7C801A28 6 Bytes JMP 5F1C0F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!LoadLibraryExW 7C801AF5 6 Bytes JMP 5F070F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!FreeLibrary + 15 7C80AC93 4 Bytes CALL 5F00003D .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!FindFirstFileExW 7C80EB1D 6 Bytes JMP 5F100F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!FindClose 7C80EE77 6 Bytes JMP 5F190F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!FindFirstFileW 7C80EF81 6 Bytes JMP 5F160F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!FindNextFileW 7C80EFDA 6 Bytes JMP 5F0A0F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!SetCurrentDirectoryW 7C80F38E 6 Bytes JMP 5F460F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!CreateFileW 7C810800 6 Bytes JMP 5F1F0F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!FindFirstFileA 7C813879 6 Bytes JMP 5F130F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!MoveFileW 7C821261 6 Bytes JMP 5F3A0F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!CreateDirectoryA 7C8217AC 6 Bytes JMP 5F310F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!CopyFileA 7C8286EE 6 Bytes JMP 5F2B0F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!CopyFileW 7C82F87B 6 Bytes JMP 5F280F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!DeleteFileA 7C831EDD 6 Bytes JMP 5F220F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!DeleteFileW 7C831F63 6 Bytes JMP 5F250F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!CreateDirectoryW 7C832402 6 Bytes JMP 5F2E0F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!FindNextFileA 7C834EE1 6 Bytes JMP 5F040F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!MoveFileExW 7C83568B 6 Bytes JMP 5F400F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!MoveFileA 7C835EBF 6 Bytes JMP 5F3D0F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!SetCurrentDirectoryA 7C83610D 6 Bytes JMP 5F490F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!CreateDirectoryExW 7C85B5CA 6 Bytes JMP 5F340F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!CreateDirectoryExA 7C85C213 6 Bytes JMP 5F370F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!FindFirstFileExA 7C85D4EA 6 Bytes JMP 5F0D0F5A .text D:\Instalki\Gadu-Gadu\gg.exe[6076] kernel32.dll!MoveFileExA 7C85E49B 6 Bytes JMP 5F430F5A ---- Kernel IAT/EAT - GMER 1.0.15 ---- IAT atapi.sys[HAL.dll!READ_PORT_UCHAR] [B9EB6042] spxf.sys IAT atapi.sys[HAL.dll!READ_PORT_BUFFER_USHORT] [B9EB613E] spxf.sys IAT atapi.sys[HAL.dll!READ_PORT_USHORT] [B9EB60C0] spxf.sys IAT atapi.sys[HAL.dll!WRITE_PORT_BUFFER_USHORT] [B9EB6800] spxf.sys IAT atapi.sys[HAL.dll!WRITE_PORT_UCHAR] [B9EB66D6] spxf.sys IAT \SystemRoot\system32\DRIVERS\i8042prt.sys[HAL.dll!READ_PORT_UCHAR] [B9EC5B90] spxf.sys IAT \SystemRoot\System32\Drivers\af31il53.SYS[HAL.dll!KfAcquireSpinLock] 18C4830E IAT \SystemRoot\System32\Drivers\af31il53.SYS[HAL.dll!READ_PORT_UCHAR] 1C959E88 IAT \SystemRoot\System32\Drivers\af31il53.SYS[HAL.dll!KeGetCurrentIrql] 9E880000 IAT \SystemRoot\System32\Drivers\af31il53.SYS[HAL.dll!KfRaiseIrql] 00001CB1 IAT \SystemRoot\System32\Drivers\af31il53.SYS[HAL.dll!KfLowerIrql] 0E798366 IAT \SystemRoot\System32\Drivers\af31il53.SYS[HAL.dll!HalGetInterruptVector] 74AAB000 IAT \SystemRoot\System32\Drivers\af31il53.SYS[HAL.dll!HalTranslateBusAddress] 8986C636 IAT \SystemRoot\System32\Drivers\af31il53.SYS[HAL.dll!KeStallExecutionProcessor] 1A00001C IAT \SystemRoot\System32\Drivers\af31il53.SYS[HAL.dll!KfReleaseSpinLock] 1C8B86C6 IAT \SystemRoot\System32\Drivers\af31il53.SYS[HAL.dll!READ_PORT_BUFFER_USHORT] C6020000 IAT \SystemRoot\System32\Drivers\af31il53.SYS[HAL.dll!READ_PORT_USHORT] 001C9686 IAT \SystemRoot\System32\Drivers\af31il53.SYS[HAL.dll!WRITE_PORT_BUFFER_USHORT] 86C60200 IAT \SystemRoot\System32\Drivers\af31il53.SYS[HAL.dll!WRITE_PORT_UCHAR] 00001CB2 IAT \SystemRoot\System32\Drivers\af31il53.SYS[WMILIB.SYS!WmiSystemControl] 8800001C IAT \SystemRoot\System32\Drivers\af31il53.SYS[WMILIB.SYS!WmiCompleteRequest] 001CB99E ---- User IAT/EAT - GMER 1.0.15 ---- IAT C:\Program Files\Internet Explorer\iexplore.exe[3588] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [451F1ACB] C:\Program Files\Internet Explorer\xpshims.dll (Internet Explorer Compatibility Shims for XP/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [451F1ACB] C:\Program Files\Internet Explorer\xpshims.dll (Internet Explorer Compatibility Shims for XP/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[3916] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [451F1ACB] C:\Program Files\Internet Explorer\xpshims.dll (Internet Explorer Compatibility Shims for XP/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[5488] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [451F1ACB] C:\Program Files\Internet Explorer\xpshims.dll (Internet Explorer Compatibility Shims for XP/Microsoft Corporation) ---- Devices - GMER 1.0.15 ---- Device \FileSystem\Ntfs \Ntfs 89DD21F8 Device \FileSystem\Fastfat \FatCdrom 8922B500 AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.) AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.) AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.) Device \Driver\usbuhci \Device\USBPDO-0 89BEF1F8 Device \Driver\usbuhci \Device\USBPDO-1 89BEF1F8 Device \Driver\dmio \Device\DmControl\DmIoDaemon 89E441F8 Device \Driver\dmio \Device\DmControl\DmConfig 89E441F8 Device \Driver\dmio \Device\DmControl\DmPnP 89E441F8 Device \Driver\dmio \Device\DmControl\DmInfo 89E441F8 Device \Driver\usbehci \Device\USBPDO-2 89BD6500 Device \Driver\sptd \Device\664742484 spxf.sys Device \Driver\usbehci \Device\USBPDO-3 89BD6500 Device \Driver\usbuhci \Device\USBPDO-4 89BEF1F8 AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.) Device \Driver\usbuhci \Device\USBPDO-5 89BEF1F8 Device \Driver\PCI_PNP6234 \Device\00000049 spxf.sys Device \Driver\usbuhci \Device\USBPDO-6 89BEF1F8 Device \Driver\Ftdisk \Device\HarddiskVolume1 89DD41F8 Device \Driver\Ftdisk \Device\HarddiskVolume2 89DD41F8 Device \Driver\Cdrom \Device\CdRom0 89B861F8 Device \Driver\atapi \Device\Ide\IdePort0 [B9DEAB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX} Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 [B9DEAB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX} Device \Driver\atapi \Device\Ide\IdePort1 [B9DEAB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX} Device \Driver\atapi \Device\Ide\IdePort2 [B9DEAB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX} Device \Driver\atapi \Device\Ide\IdePort3 [B9DEAB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX} Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-e [B9DEAB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX} Device \Driver\Cdrom \Device\CdRom1 89B861F8 Device \Driver\NetBT \Device\NetBT_Tcpip_{00D217EA-86B0-4E33-900C-ED647740E0E8} 89C41500 Device \Driver\NetBT \Device\NetBt_Wins_Export 89C41500 Device \Driver\NetBT \Device\NetbiosSmb 89C41500 AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.) AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.) Device \Driver\usbuhci \Device\USBFDO-0 89BEF1F8 Device \Driver\usbuhci \Device\USBFDO-1 89BEF1F8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver 893351F8 Device \Driver\usbehci \Device\USBFDO-2 89BD6500 Device \FileSystem\MRxSmb \Device\LanmanRedirector 893351F8 Device \Driver\usbuhci \Device\USBFDO-3 89BEF1F8 Device \Driver\usbuhci \Device\USBFDO-4 89BEF1F8 Device \Driver\Ftdisk \Device\FtControl 89DD41F8 Device \Driver\usbuhci \Device\USBFDO-5 89BEF1F8 Device \Driver\usbehci \Device\USBFDO-6 89BD6500 Device \Driver\NetBT \Device\NetBT_Tcpip_{A0A7F5F1-AB83-4A59-A56F-DC53DEDC770D} 89C41500 Device \Driver\af31il53 \Device\Scsi\af31il531Port4Path0Target0Lun0 89AC4500 Device \Driver\af31il53 \Device\Scsi\af31il531 89AC4500 Device \FileSystem\Fastfat \Fat 8922B500 AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation) Device \FileSystem\Cdfs \Cdfs 89314500 ---- Registry - GMER 1.0.15 ---- Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 771343423 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 285507792 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\ Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x8E 0x11 0xDF 0x40 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x45 0x43 0xB1 0xFD ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x57 0xC2 0xEA 0xAC ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\ Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0 Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x8E 0x11 0xDF 0x40 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x45 0x43 0xB1 0xFD ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x57 0xC2 0xEA 0xAC ... ---- Files - GMER 1.0.15 ---- File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder 0 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder 0 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder\4.jpg 65374 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder\1.BMP 1228854 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder\1.jpg 87215 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder\2.BMP 1228854 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder\2.jpg 71148 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder\3.BMP 1228854 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder\3.jpg 67255 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder\377.JPG 817624 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder\378.JPG 825793 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder\380.JPG 856214 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder\381.JPG 838633 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder\382.JPG 654318 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder\384.JPG 373496 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder\386.JPG 1285822 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder\picasabackground.bmp 3072054 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder\sexycrazycool.jpg 447292 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Nowy folder\Thumbs.db 141312 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion 0 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\2003_06_12_Mazury_Fan_A (3).jpg 67372 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\2003_06_12_Mazury_Fan_A (6).jpg 120381 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\DSC00012.JPG 848469 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\DSC00013.JPG 808003 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\DSC00014.JPG 757954 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\dsc00044.jpg 29375 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\dsc00046.jpg 76171 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\DSC00049.JPG 623624 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\dsc00051.jpg 46005 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\dsc00057.jpg 30415 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\dsc00064000.jpg 55175 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\dsc00065.jpg 33866 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\dsc00119.jpg 55092 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\DSCN5100.JPG 759220 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP0036.jpg 203660 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP1580.jpg 92177 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP1582.jpg 92122 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP1583.jpg 93885 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP1621.JPG 2817640 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP3614.jpg 211244 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP5357.jpg 139968 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP7565.PEF.jpg 213659 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP8038.jpg 164908 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP8150.JPG 3283587 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP8291.jpg 167352 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP8319.JPG 2613156 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP8495.JPG 2840207 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP8511.JPG 2286317 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP8678.jpg 178414 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP8688.jpg 103596 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP8813.JPG 2410508 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP9070.JPG 1803793 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Jerzy-grill.jpg 55544 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\jerzy-lajba.jpg 71917 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\jerzy-nurek.jpg 65266 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Jerzy-nurek1.jpg 63365 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\jerzy-palma-zachod.jpg 81303 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\jerzy-palma.jpg 116148 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\jerzy-wlosy.jpg 97089 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\jerzy-zuzka.jpg 72649 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Jerzy-zuzka1.jpg 50555 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Jerzy-zuzka2.jpg 52512 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Jerzy-zuzka3.jpg 51520 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\jerzy3.jpg 51038 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\jerzy4.jpg 131129 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\jerzy6.jpg 116223 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\jerzy7.jpg 94495 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\jerzy8.jpg 76921 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\jerzy9.jpg 83410 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam 0 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\1.jpg 12638 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\2.jpg 11893 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\3.jpg 11864 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\J.jpg 36773 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\jerzy-bezkaptura.jpg 32536 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\jerzy.jpg 38133 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\jerzy2.jpg 38739 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Thumbs.db 348160 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 13.png 111871 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 14.png 112941 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 15.png 110118 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 16.png 102371 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 17.png 113782 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 18.png 114545 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 19.png 118513 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 2.png 110316 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 20.png 116689 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 21.png 105511 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 22.png 108481 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 23.png 114262 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 24.png 115346 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 25.png 116177 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 27.jpg 17379 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 27.png 115234 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 28.png 112709 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 29.png 105004 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 3.png 117975 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 30.png 103208 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 31.png 100933 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 32.jpg 17912 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 32.png 105230 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 33.png 95166 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 34.png 99976 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 35.png 109575 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 36.png 100332 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 37.png 106884 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 38.png 111106 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 39.png 107228 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 40.jpg 19221 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 40.png 108282 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 41.png 106281 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 42.png 120983 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 43.png 106040 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 44.png 106119 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 45.png 112691 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 46.png 98784 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 47.png 104843 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 48.png 103938 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 49.png 106259 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 5.png 119948 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 50.png 107964 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 51.jpg 18425 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 51.png 117776 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 52.png 107631 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\jerzy-bialy-czapka.jpg 43352 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 12.png 110947 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 26.png 101906 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 4.png 111093 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 53.png 105359 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 67.png 109300 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 54.png 107780 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 55.jpg 18820 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 55.png 108939 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 56.png 107553 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 57.png 103523 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 58.png 107013 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 59.png 120815 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 6.png 109650 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 60.png 98485 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 61.png 101902 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 62.png 98240 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 63.png 93035 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 64.png 100914 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 65.png 106296 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 66.png 110847 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 1.png 104074 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 10.png 108323 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 11.png 107455 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 68.png 103315 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 69.png 103321 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 7.png 112595 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 70.png 104108 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 8.png 116053 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Video call snapshot 9.png 118489 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\wanna.jpg 50725 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\wanna1.jpg 47414 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\wanna2.jpg 47567 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\jerzy-bialy-czapka1.jpg 43354 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\jerzy-bialy-czapka2.jpg 43194 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\jerzy-bialy.jpg 43977 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Jerzy-blue.jpg 38280 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Jerzy-fartuch-usmiech.jpg 51615 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Jerzy-fartuch.jpg 51430 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Jerzy-kam.jpg 30837 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\jerzy-kaptur.jpg 41483 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\jerzy-koszula.jpg 53263 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Jerzy-kuchnia.jpg 37411 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Jerzy-mina.jpg 57860 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Jerzy-mruzy.jpg 38516 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Jerzy-nowy fryz-smutny.jpg 34216 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Jerzy-nowy fryz-wesoly.jpg 40182 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Jerzy-oczko.jpg 35327 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Jerzy-palec.jpg 51072 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Jerzy-ptak.jpg 43217 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\jerzy-ptaszek1.jpg 22819 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Jerzy-reka-ptak.jpg 52027 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Jerzy-spiacy.jpg 39155 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\jerzy-spodenki.jpg 68779 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\jerzy-spodenki1.jpg 54838 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Jerzy-usmiech.jpg 53993 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Jerzy-wlosy.jpg 46356 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\kam\Jerzy-wlosy1.jpg 44794 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Mazury 2007-07-15 11-17-58.JPG 3165430 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Mazury 2007-07-15 18-55-33.JPG 1830701 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Mazury_Jaskolka 2006-05-01 17-54-32.jpg 695532 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Mazury_Tango 2006-09-02 23-32-46.JPG 335207 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Mazury_Tango 2006-09-02 23-33-29.JPG 331678 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Mazury_Tango 2006-09-03 12-58-56.jpg 113712 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Mazury_Tango 2006-09-03 14-09-54.JPG 258914 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Nur_Wraki 2003-07-28 08-31-18.jpg 153340 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Nur_Wraki 2003-07-28 08-46-49.jpg 139807 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Nur_Wraki 2003-07-28 09-03-55.jpg 156665 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Nur_Wraki 2003-07-28 12-54-45.jpg 162791 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Obraz 067.jpg 207348 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\oO.doc 286208 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J 0 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\murek.jpg 31000 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\cudna.jpg 70743 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\cudna1.jpg 63287 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\dsc00024.jpg 32789 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\DSCI0191.jpg 181875 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\IMGP0060.jpg 119662 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\IMGP0525.jpg 168106 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\IMGP0744.jpg 114797 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\IMGP1584.jpg 71061 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\IMGP1585.jpg 87963 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\IMGP1587.jpg 87913 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\IMGP1588.jpg 84977 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\IMGP1591.jpg 87174 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\IMGP1622.jpg 101186 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\IMGP1623.jpg 102996 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\IMGP4651.jpg 140740 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\IMGP8684.jpg 53729 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\julek i pestka.jpg 79577 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\julek.jpg 93424 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\mala_pestka.jpg 88523 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\pestka i cynamon.jpg 89548 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\pestka i julek.jpg 41037 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\pestka i karina.jpg 86009 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\pestka i majka.jpg 160014 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\pestka.jpg 105579 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\pestka1.jpg 95102 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\Thumbs.db 97792 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\zuza i kon.jpg 62709 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\zuza i kon1.jpg 90453 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\roznosci J\zuza i kon2.jpg 125889 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Sopot 2006-07-22 10-13-03.jpg 668709 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Sopot 2006-07-22 10-34-08.jpg 757195 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Sopot 2006-07-22 10-34-37.jpg 775020 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Thumbs.db 293888 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Zegrze_Zuza 2006-06-03 13-29-16.jpg 787548 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Zywiec_Ferie 2006-02-19 14-40-42.jpg 257936 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Ślub (78).JPG 230038 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\IMGP8006.jpg 243380 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\jerzy5.jpg 106732 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Mazury_Tango 2006-09-03 14-09-34.jpg 129670 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Orion\Orion.jpg 155480 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca 0 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\19paz.txt 32317 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\29paz.html 22963 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\10lis.html 11784 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\10lis.txt 8169 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\11paz.html 44313 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\11paz.txt 29988 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\12lis.html 4978 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\12lis.txt 3666 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\12paz.html 12095 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\12paz.txt 8734 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\13paz.html 31285 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\13paz.txt 21162 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\15paz.html 15680 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\15paz.txt 10254 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\18paz.html 19544 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\18paz.txt 13636 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\19Apaz.html 1037 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\19Apaz.txt 340 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\19paz.html 47285 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\9lis.html 5452 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\9lis.txt 3350 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\Thumbs.db 7680 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\1a.html 12798 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\20paz.html 22795 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\20paz.txt 15998 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\21paz.html 31154 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\21paz.txt 21873 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\25paz.html 11135 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\25paz.txt 7175 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\26paz.html 5539 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\26paz.txt 3464 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\27paz.html 25590 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\27paz.txt 17284 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\28paz.html 38816 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\28paz.txt 26331 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\29paz.txt 15801 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\3lis.html 14931 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\3lis.txt 9495 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\4a-lis.html 3477 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\4a-lis.txt 2102 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\4lis.html 28998 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\4lis.txt 19733 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\4paz.html 48197 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\4paz.txt 33528 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\5lis.html 15338 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\5lis.txt 10658 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\6paz.html 58678 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\6paz.txt 39637 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\7paz.html 34504 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\7paz.txt 23478 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\8apaz.html 18818 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\8apaz.txt 12994 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\8lis.html 18790 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\8lis.txt 12491 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\8paz.html 56090 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Praca\8paz.txt 38991 bytes File C:\Documents and Settings\User\Moje dokumenty\Żania\Ja\101MSDCF\small\Nowy folder\Thumbs.db 311808 bytes File C:\WINDOWS\system32\cl.uclmc2 1059 bytes ---- EOF - GMER 1.0.15 ----