GMER 1.0.15.15641 - http://www.gmer.net Rootkit scan 2012-10-02 19:13:19 Windows 6.0.6002 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 ST9160310AS rev.0303 Running: fsypuvhc.exe; Driver: C:\Users\A&I\AppData\Local\Temp\fwrdrpog.sys ---- System - GMER 1.0.15 ---- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwAddBootEntry [0x8F022708] SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwAllocateVirtualMemory [0x8F6DA7C8] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwAssignProcessToJobObject [0x8F02311C] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateEvent [0x8F02DF28] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateEventPair [0x8F02DF74] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateIoCompletion [0x8F02E0F6] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateMutant [0x8F02DE96] SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwCreateSection [0x8F6DABBA] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateSemaphore [0x8F02DEDE] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateThread [0x8F023310] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateTimer [0x8F02E0B0] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwDebugActiveProcess [0x8F023A9C] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwDeleteBootEntry [0x8F022756] SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwFreeVirtualMemory [0x8F6DA8AC] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwLoadDriver [0x8F0223BE] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwModifyBootEntry [0x8F0227A4] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwNotifyChangeKey [0x8F027456] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwNotifyChangeMultipleKeys [0x8F024464] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenEvent [0x8F02DF52] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenEventPair [0x8F02DF96] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenIoCompletion [0x8F02E11A] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenMutant [0x8F02DEBC] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenSection [0x8F02E03A] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenSemaphore [0x8F02DF06] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenTimer [0x8F02E0D4] SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwProtectVirtualMemory [0x8F6DAA2C] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwQueryObject [0x8F024330] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwQueueApcThread [0x8F023EDA] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSetBootEntryOrder [0x8F0227F2] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSetBootOptions [0x8F022840] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSetContextThread [0x8F02391C] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSetSystemInformation [0x8F022448] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSetSystemPowerState [0x8F0225F8] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwShutdownSystem [0x8F02259E] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSuspendProcess [0x8F023BFE] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSuspendThread [0x8F023D5A] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSystemDebugControl [0x8F022668] SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwTerminateProcess [0x8F6DAAF6] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwTerminateThread [0x8F023794] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwVdmControl [0x8F02288E] SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwWriteVirtualMemory [0x8F6DA962] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateThreadEx [0x8F023498] Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwCreateProcessEx [0x8F6F2966] Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ObInsertObject Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ObMakeTemporaryObject ---- Kernel code sections - GMER 1.0.15 ---- .text ntkrnlpa.exe!KeSetEvent + 10D 822B27D0 4 Bytes [08, 27, 02, 8F] .text ntkrnlpa.exe!KeSetEvent + 131 822B27F4 4 Bytes [C8, A7, 6D, 8F] {ENTER 0x6da7, 0x8f} .text ntkrnlpa.exe!KeSetEvent + 191 822B2854 4 Bytes [1C, 31, 02, 8F] .text ntkrnlpa.exe!KeSetEvent + 1D1 822B2894 8 Bytes [28, DF, 02, 8F, 74, DF, 02, ...] {SUB BH, BL; ADD CL, [EDI-0x70fd208c]} .text ntkrnlpa.exe!KeSetEvent + 1DD 822B28A0 4 Bytes [F6, E0, 02, 8F] .text ... PAGE ntkrnlpa.exe!ObMakeTemporaryObject 823DD62F 5 Bytes JMP 8F6EF806 \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) PAGE ntkrnlpa.exe!ObInsertObject 82436543 5 Bytes JMP 8F6F1320 \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) PAGE ntkrnlpa.exe!ZwReplyWaitReceivePortEx + 110 8243FE68 4 Bytes CALL 8F024B07 \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) PAGE ntkrnlpa.exe!ZwAlpcSendWaitReceivePort + 121 82443ADC 4 Bytes CALL 8F024B1D \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) PAGE ntkrnlpa.exe!ZwCreateProcessEx 82497DF6 7 Bytes JMP 8F6F296A \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ---- User code sections - GMER 1.0.15 ---- .text C:\Windows\system32\nvvsvc.exe[392] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\system32\conime.exe[484] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000401F8 .text C:\Windows\system32\conime.exe[484] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000403FC .text C:\Windows\system32\conime.exe[484] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\system32\conime.exe[484] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000603FC .text C:\Windows\system32\conime.exe[484] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00060600 .text C:\Windows\system32\conime.exe[484] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00061014 .text C:\Windows\system32\conime.exe[484] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00060804 .text C:\Windows\system32\conime.exe[484] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00060A08 .text C:\Windows\system32\conime.exe[484] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00060C0C .text C:\Windows\system32\conime.exe[484] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00060E10 .text C:\Windows\system32\conime.exe[484] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000601F8 .text C:\Windows\system32\conime.exe[484] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00070600 .text C:\Windows\system32\conime.exe[484] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00070804 .text C:\Windows\system32\conime.exe[484] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00070A08 .text C:\Windows\system32\conime.exe[484] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 000701F8 .text C:\Windows\system32\conime.exe[484] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 000703FC .text C:\Windows\notepad.exe[576] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000501F8 .text C:\Windows\notepad.exe[576] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000503FC .text C:\Windows\notepad.exe[576] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\notepad.exe[576] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 001703FC .text C:\Windows\notepad.exe[576] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00170600 .text C:\Windows\notepad.exe[576] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00171014 .text C:\Windows\notepad.exe[576] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00170804 .text C:\Windows\notepad.exe[576] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00170A08 .text C:\Windows\notepad.exe[576] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00170C0C .text C:\Windows\notepad.exe[576] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00170E10 .text C:\Windows\notepad.exe[576] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 001701F8 .text C:\Windows\notepad.exe[576] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00180600 .text C:\Windows\notepad.exe[576] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00180804 .text C:\Windows\notepad.exe[576] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00180A08 .text C:\Windows\notepad.exe[576] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 001801F8 .text C:\Windows\notepad.exe[576] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 001803FC .text C:\Program Files\QuickTime\qttask.exe[740] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 001401F8 .text C:\Program Files\QuickTime\qttask.exe[740] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 001403FC .text C:\Program Files\QuickTime\qttask.exe[740] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\QuickTime\qttask.exe[740] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00160600 .text C:\Program Files\QuickTime\qttask.exe[740] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00160804 .text C:\Program Files\QuickTime\qttask.exe[740] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00160A08 .text C:\Program Files\QuickTime\qttask.exe[740] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 001601F8 .text C:\Program Files\QuickTime\qttask.exe[740] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 001603FC .text C:\Program Files\QuickTime\qttask.exe[740] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 001703FC .text C:\Program Files\QuickTime\qttask.exe[740] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00170600 .text C:\Program Files\QuickTime\qttask.exe[740] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00171014 .text C:\Program Files\QuickTime\qttask.exe[740] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00170804 .text C:\Program Files\QuickTime\qttask.exe[740] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00170A08 .text C:\Program Files\QuickTime\qttask.exe[740] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00170C0C .text C:\Program Files\QuickTime\qttask.exe[740] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00170E10 .text C:\Program Files\QuickTime\qttask.exe[740] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 001701F8 .text C:\Windows\system32\svchost.exe[840] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[1172] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 001501F8 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[1172] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 001503FC .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[1172] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[1172] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00190600 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[1172] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00190804 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[1172] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00190A08 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[1172] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 001901F8 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[1172] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 001903FC .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[1172] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 002B03FC .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[1172] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 002B0600 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[1172] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 002B1014 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[1172] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 002B0804 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[1172] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 002B0A08 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[1172] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 002B0C0C .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[1172] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 002B0E10 .text C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe[1172] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 002B01F8 .text C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe[1216] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000501F8 .text C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe[1216] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000503FC .text C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe[1216] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe[1216] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000703FC .text C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe[1216] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00070600 .text C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe[1216] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00071014 .text C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe[1216] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00070804 .text C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe[1216] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00070A08 .text C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe[1216] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00070C0C .text C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe[1216] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00070E10 .text C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe[1216] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000701F8 .text C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe[1216] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00080600 .text C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe[1216] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00080804 .text C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe[1216] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00080A08 .text C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe[1216] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 000801F8 .text C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe[1216] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 000803FC .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1284] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 001601F8 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1284] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 001603FC .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1284] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1284] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 001703FC .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1284] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00170600 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1284] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00171014 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1284] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00170804 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1284] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00170A08 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1284] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00170C0C .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1284] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00170E10 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1284] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 001701F8 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1284] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00180600 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1284] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00180804 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1284] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00180A08 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1284] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 001801F8 .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1284] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 001803FC .text C:\Program Files\Internet Explorer\iexplore.exe[1464] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000401F8 .text C:\Program Files\Internet Explorer\iexplore.exe[1464] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000403FC .text C:\Program Files\Internet Explorer\iexplore.exe[1464] kernel32.dll!CreateThread 7664CB2E 5 Bytes JMP 6A8575CB C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Internet Explorer\iexplore.exe[1464] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000603FC .text C:\Program Files\Internet Explorer\iexplore.exe[1464] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00060600 .text C:\Program Files\Internet Explorer\iexplore.exe[1464] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00061014 .text C:\Program Files\Internet Explorer\iexplore.exe[1464] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00060804 .text C:\Program Files\Internet Explorer\iexplore.exe[1464] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00060A08 .text C:\Program Files\Internet Explorer\iexplore.exe[1464] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00060C0C .text C:\Program Files\Internet Explorer\iexplore.exe[1464] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00060E10 .text C:\Program Files\Internet Explorer\iexplore.exe[1464] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000601F8 .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00070600 .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!CreateDialogParamW 766E72A2 5 Bytes JMP 6A9E90F0 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!GetAsyncKeyState 766E863C 5 Bytes JMP 6A83DEAD C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 6A8925AC C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!CallNextHookEx 766E8E3B 5 Bytes JMP 6A8B7FDF C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 6A8DECE0 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 000701F8 .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 000703FC .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!EnableWindow 766ECD8B 5 Bytes JMP 6A899EAC C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!DefWindowProcA 766EDB88 7 Bytes JMP 6A8597F5 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!CreateWindowExA 766EDC2A 5 Bytes JMP 6A86362B C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!CreateWindowExW 766F1305 5 Bytes JMP 6A8C03B7 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!GetKeyState 766F8CB1 5 Bytes JMP 6A83DD87 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!DefWindowProcW 767003B4 7 Bytes JMP 6A8B8042 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!IsDialogMessageW 76700745 5 Bytes JMP 6A9E9855 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!CreateDialogParamA 767017AA 5 Bytes JMP 6A9E90B8 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!IsDialogMessage 76701847 5 Bytes JMP 6A9E982D C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!CreateDialogIndirectParamA 767026F1 5 Bytes JMP 6A9E9128 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!CreateDialogIndirectParamW 76709A62 5 Bytes JMP 6A9E9160 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!SetKeyboardState 76710987 5 Bytes JMP 6A9EA11D C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!DialogBoxParamW 767110B0 5 Bytes JMP 6A7F187B C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!DialogBoxIndirectParamW 76712EF5 5 Bytes JMP 6A9E8D86 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!SendInput 76712F75 5 Bytes JMP 6A9EA0C5 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!EndDialog 7671326E 5 Bytes JMP 6A9E9B01 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!SetCursorPos 76726FB2 5 Bytes JMP 6A9EA19E C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!DialogBoxParamA 76728152 5 Bytes JMP 6A9E8D21 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!DialogBoxIndirectParamA 7672847D 5 Bytes JMP 6A9E8DEB C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!MessageBoxIndirectA 7673D4D9 5 Bytes JMP 6A9E8CA8 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!MessageBoxIndirectW 7673D5D3 5 Bytes JMP 6A9E8C2F C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!MessageBoxExA 7673D639 5 Bytes JMP 6A9E8BCB C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!MessageBoxExW 7673D65D 5 Bytes JMP 6A9E8B67 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] USER32.dll!keybd_event 7673D972 5 Bytes JMP 6A9EA082 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[1464] SHELL32.dll!SHRestricted + D95 769789A8 4 Bytes [CF, 01, 6C, 64] .text C:\Program Files\Internet Explorer\iexplore.exe[1464] SHELL32.dll!SHRestricted + D9D 769789B0 8 Bytes [E0, 61, 6B, 64, 79, F7, 6B, ...] .text C:\Program Files\Internet Explorer\iexplore.exe[1464] ole32.dll!OleLoadFromStream 763B1E80 5 Bytes JMP 6A9E955F C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Skype\Phone\Skype.exe[1548] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 001501F8 .text C:\Program Files\Skype\Phone\Skype.exe[1548] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 001503FC .text C:\Program Files\Skype\Phone\Skype.exe[1548] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Skype\Phone\Skype.exe[1548] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 001A0600 .text C:\Program Files\Skype\Phone\Skype.exe[1548] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 001A0804 .text C:\Program Files\Skype\Phone\Skype.exe[1548] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 001A0A08 .text C:\Program Files\Skype\Phone\Skype.exe[1548] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 001A01F8 .text C:\Program Files\Skype\Phone\Skype.exe[1548] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 001A03FC .text C:\Program Files\Skype\Phone\Skype.exe[1548] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 001903FC .text C:\Program Files\Skype\Phone\Skype.exe[1548] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00190600 .text C:\Program Files\Skype\Phone\Skype.exe[1548] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00191014 .text C:\Program Files\Skype\Phone\Skype.exe[1548] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00190804 .text C:\Program Files\Skype\Phone\Skype.exe[1548] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00190A08 .text C:\Program Files\Skype\Phone\Skype.exe[1548] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00190C0C .text C:\Program Files\Skype\Phone\Skype.exe[1548] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00190E10 .text C:\Program Files\Skype\Phone\Skype.exe[1548] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 001901F8 .text C:\Program Files\AVAST Software\Avast\AvastSvc.exe[1592] kernel32.dll!SetUnhandledExceptionFilter 7662A8C5 4 Bytes [C2, 04, 00, 90] {RET 0x4; NOP } .text C:\Program Files\AVAST Software\Avast\AvastSvc.exe[1592] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Windows Media Player\wmpnetwk.exe[1884] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000401F8 .text C:\Program Files\Windows Media Player\wmpnetwk.exe[1884] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000403FC .text C:\Program Files\Windows Media Player\wmpnetwk.exe[1884] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Windows Media Player\wmpnetwk.exe[1884] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000603FC .text C:\Program Files\Windows Media Player\wmpnetwk.exe[1884] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00060600 .text C:\Program Files\Windows Media Player\wmpnetwk.exe[1884] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00061014 .text C:\Program Files\Windows Media Player\wmpnetwk.exe[1884] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00060804 .text C:\Program Files\Windows Media Player\wmpnetwk.exe[1884] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00060A08 .text C:\Program Files\Windows Media Player\wmpnetwk.exe[1884] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00060C0C .text C:\Program Files\Windows Media Player\wmpnetwk.exe[1884] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00060E10 .text C:\Program Files\Windows Media Player\wmpnetwk.exe[1884] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000601F8 .text C:\Program Files\Windows Media Player\wmpnetwk.exe[1884] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00070600 .text C:\Program Files\Windows Media Player\wmpnetwk.exe[1884] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00070804 .text C:\Program Files\Windows Media Player\wmpnetwk.exe[1884] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00070A08 .text C:\Program Files\Windows Media Player\wmpnetwk.exe[1884] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 000701F8 .text C:\Program Files\Windows Media Player\wmpnetwk.exe[1884] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 000703FC .text C:\Windows\System32\spoolsv.exe[2024] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\SYSTEM32\taskeng.exe[2028] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\system32\svchost.exe[2136] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\system32\Dwm.exe[2160] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000501F8 .text C:\Windows\system32\Dwm.exe[2160] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000503FC .text C:\Windows\system32\Dwm.exe[2160] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\system32\Dwm.exe[2160] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\Dwm.exe[2160] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\Dwm.exe[2160] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\Dwm.exe[2160] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\Dwm.exe[2160] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\Dwm.exe[2160] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00070C0C .text C:\Windows\system32\Dwm.exe[2160] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\Dwm.exe[2160] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\Dwm.exe[2160] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00080600 .text C:\Windows\system32\Dwm.exe[2160] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00080804 .text C:\Windows\system32\Dwm.exe[2160] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00080A08 .text C:\Windows\system32\Dwm.exe[2160] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 000801F8 .text C:\Windows\system32\Dwm.exe[2160] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 000803FC .text C:\Windows\System32\svchost.exe[2168] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\System32\svchost.exe[2248] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\SYSTEM32\taskeng.exe[2256] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000501F8 .text C:\Windows\SYSTEM32\taskeng.exe[2256] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000503FC .text C:\Windows\SYSTEM32\taskeng.exe[2256] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\SYSTEM32\taskeng.exe[2256] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000703FC .text C:\Windows\SYSTEM32\taskeng.exe[2256] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00070600 .text C:\Windows\SYSTEM32\taskeng.exe[2256] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00071014 .text C:\Windows\SYSTEM32\taskeng.exe[2256] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00070804 .text C:\Windows\SYSTEM32\taskeng.exe[2256] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00070A08 .text C:\Windows\SYSTEM32\taskeng.exe[2256] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00070C0C .text C:\Windows\SYSTEM32\taskeng.exe[2256] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00070E10 .text C:\Windows\SYSTEM32\taskeng.exe[2256] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000701F8 .text C:\Windows\SYSTEM32\taskeng.exe[2256] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00080600 .text C:\Windows\SYSTEM32\taskeng.exe[2256] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00080804 .text C:\Windows\SYSTEM32\taskeng.exe[2256] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00080A08 .text C:\Windows\SYSTEM32\taskeng.exe[2256] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 000801F8 .text C:\Windows\SYSTEM32\taskeng.exe[2256] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 000803FC .text C:\Program Files\Windows Sidebar\sidebar.exe[2260] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000501F8 .text C:\Program Files\Windows Sidebar\sidebar.exe[2260] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000503FC .text C:\Program Files\Windows Sidebar\sidebar.exe[2260] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Windows Sidebar\sidebar.exe[2260] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000803FC .text C:\Program Files\Windows Sidebar\sidebar.exe[2260] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00080600 .text C:\Program Files\Windows Sidebar\sidebar.exe[2260] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00081014 .text C:\Program Files\Windows Sidebar\sidebar.exe[2260] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00080804 .text C:\Program Files\Windows Sidebar\sidebar.exe[2260] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00080A08 .text C:\Program Files\Windows Sidebar\sidebar.exe[2260] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00080C0C .text C:\Program Files\Windows Sidebar\sidebar.exe[2260] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00080E10 .text C:\Program Files\Windows Sidebar\sidebar.exe[2260] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000801F8 .text C:\Program Files\Windows Sidebar\sidebar.exe[2260] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00090600 .text C:\Program Files\Windows Sidebar\sidebar.exe[2260] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00090804 .text C:\Program Files\Windows Sidebar\sidebar.exe[2260] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00090A08 .text C:\Program Files\Windows Sidebar\sidebar.exe[2260] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 000901F8 .text C:\Program Files\Windows Sidebar\sidebar.exe[2260] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 000903FC .text C:\Program Files\Internet Explorer\iexplore.exe[2288] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000401F8 .text C:\Program Files\Internet Explorer\iexplore.exe[2288] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000403FC .text C:\Program Files\Internet Explorer\iexplore.exe[2288] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Internet Explorer\iexplore.exe[2288] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000603FC .text C:\Program Files\Internet Explorer\iexplore.exe[2288] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00060600 .text C:\Program Files\Internet Explorer\iexplore.exe[2288] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00061014 .text C:\Program Files\Internet Explorer\iexplore.exe[2288] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00060804 .text C:\Program Files\Internet Explorer\iexplore.exe[2288] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00060A08 .text C:\Program Files\Internet Explorer\iexplore.exe[2288] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00060C0C .text C:\Program Files\Internet Explorer\iexplore.exe[2288] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00060E10 .text C:\Program Files\Internet Explorer\iexplore.exe[2288] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000601F8 .text C:\Program Files\Internet Explorer\iexplore.exe[2288] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00070600 .text C:\Program Files\Internet Explorer\iexplore.exe[2288] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00070804 .text C:\Program Files\Internet Explorer\iexplore.exe[2288] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00070A08 .text C:\Program Files\Internet Explorer\iexplore.exe[2288] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 000701F8 .text C:\Program Files\Internet Explorer\iexplore.exe[2288] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 000703FC .text C:\Program Files\Internet Explorer\iexplore.exe[2288] USER32.dll!EnableWindow 766ECD8B 5 Bytes JMP 6A899EAC C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2288] USER32.dll!DialogBoxParamW 767110B0 5 Bytes JMP 6A7F187B C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2288] USER32.dll!DialogBoxIndirectParamW 76712EF5 5 Bytes JMP 6A9E8D86 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2288] USER32.dll!DialogBoxParamA 76728152 5 Bytes JMP 6A9E8D21 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2288] USER32.dll!DialogBoxIndirectParamA 7672847D 5 Bytes JMP 6A9E8DEB C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2288] USER32.dll!MessageBoxIndirectA 7673D4D9 5 Bytes JMP 6A9E8CA8 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2288] USER32.dll!MessageBoxIndirectW 7673D5D3 5 Bytes JMP 6A9E8C2F C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2288] USER32.dll!MessageBoxExA 7673D639 5 Bytes JMP 6A9E8BCB C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2288] USER32.dll!MessageBoxExW 7673D65D 5 Bytes JMP 6A9E8B67 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 001401F8 .text C:\Program Files\Internet Explorer\iexplore.exe[2364] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 001403FC .text C:\Program Files\Internet Explorer\iexplore.exe[2364] kernel32.dll!CreateThread 7664CB2E 5 Bytes JMP 6A8575CB C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Internet Explorer\iexplore.exe[2364] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 001603FC .text C:\Program Files\Internet Explorer\iexplore.exe[2364] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00160600 .text C:\Program Files\Internet Explorer\iexplore.exe[2364] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00161014 .text C:\Program Files\Internet Explorer\iexplore.exe[2364] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00160804 .text C:\Program Files\Internet Explorer\iexplore.exe[2364] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00160A08 .text C:\Program Files\Internet Explorer\iexplore.exe[2364] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00160C0C .text C:\Program Files\Internet Explorer\iexplore.exe[2364] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00160E10 .text C:\Program Files\Internet Explorer\iexplore.exe[2364] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 001601F8 .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00170600 .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!CreateDialogParamW 766E72A2 5 Bytes JMP 6A9E90F0 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!GetAsyncKeyState 766E863C 5 Bytes JMP 6A83DEAD C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 6A8925AC C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!CallNextHookEx 766E8E3B 5 Bytes JMP 6A8B7FDF C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 6A8DECE0 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 001701F8 .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 001703FC .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!EnableWindow 766ECD8B 5 Bytes JMP 6A899EAC C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!DefWindowProcA 766EDB88 7 Bytes JMP 6A8597F5 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!CreateWindowExA 766EDC2A 5 Bytes JMP 6A86362B C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!CreateWindowExW 766F1305 5 Bytes JMP 6A8C03B7 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!GetKeyState 766F8CB1 5 Bytes JMP 6A83DD87 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!DefWindowProcW 767003B4 7 Bytes JMP 6A8B8042 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!IsDialogMessageW 76700745 5 Bytes JMP 6A9E9855 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!CreateDialogParamA 767017AA 5 Bytes JMP 6A9E90B8 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!IsDialogMessage 76701847 5 Bytes JMP 6A9E982D C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!CreateDialogIndirectParamA 767026F1 5 Bytes JMP 6A9E9128 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!CreateDialogIndirectParamW 76709A62 5 Bytes JMP 6A9E9160 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!SetKeyboardState 76710987 5 Bytes JMP 6A9EA11D C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!DialogBoxParamW 767110B0 5 Bytes JMP 6A7F187B C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!DialogBoxIndirectParamW 76712EF5 5 Bytes JMP 6A9E8D86 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!SendInput 76712F75 5 Bytes JMP 6A9EA0C5 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!EndDialog 7671326E 5 Bytes JMP 6A9E9B01 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!SetCursorPos 76726FB2 5 Bytes JMP 6A9EA19E C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!DialogBoxParamA 76728152 5 Bytes JMP 6A9E8D21 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!DialogBoxIndirectParamA 7672847D 5 Bytes JMP 6A9E8DEB C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!MessageBoxIndirectA 7673D4D9 5 Bytes JMP 6A9E8CA8 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!MessageBoxIndirectW 7673D5D3 5 Bytes JMP 6A9E8C2F C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!MessageBoxExA 7673D639 5 Bytes JMP 6A9E8BCB C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!MessageBoxExW 7673D65D 5 Bytes JMP 6A9E8B67 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] USER32.dll!keybd_event 7673D972 5 Bytes JMP 6A9EA082 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2364] SHELL32.dll!SHRestricted + D95 769789A8 4 Bytes [CF, 01, 6C, 64] .text C:\Program Files\Internet Explorer\iexplore.exe[2364] SHELL32.dll!SHRestricted + D9D 769789B0 8 Bytes [E0, 61, 6B, 64, 79, F7, 6B, ...] .text C:\Program Files\Internet Explorer\iexplore.exe[2364] ole32.dll!OleLoadFromStream 763B1E80 5 Bytes JMP 6A9E955F C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 001401F8 .text C:\Program Files\Internet Explorer\iexplore.exe[2396] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 001403FC .text C:\Program Files\Internet Explorer\iexplore.exe[2396] kernel32.dll!CreateThread 7664CB2E 5 Bytes JMP 6A8575CB C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Internet Explorer\iexplore.exe[2396] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 001603FC .text C:\Program Files\Internet Explorer\iexplore.exe[2396] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00160600 .text C:\Program Files\Internet Explorer\iexplore.exe[2396] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00161014 .text C:\Program Files\Internet Explorer\iexplore.exe[2396] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00160804 .text C:\Program Files\Internet Explorer\iexplore.exe[2396] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00160A08 .text C:\Program Files\Internet Explorer\iexplore.exe[2396] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00160C0C .text C:\Program Files\Internet Explorer\iexplore.exe[2396] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00160E10 .text C:\Program Files\Internet Explorer\iexplore.exe[2396] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 001601F8 .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00170600 .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!CreateDialogParamW 766E72A2 5 Bytes JMP 6A9E90F0 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!GetAsyncKeyState 766E863C 5 Bytes JMP 6A83DEAD C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 6A8925AC C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!CallNextHookEx 766E8E3B 5 Bytes JMP 6A8B7FDF C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 6A8DECE0 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 001701F8 .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 001703FC .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!EnableWindow 766ECD8B 5 Bytes JMP 6A899EAC C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!DefWindowProcA 766EDB88 7 Bytes JMP 6A8597F5 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!CreateWindowExA 766EDC2A 5 Bytes JMP 6A86362B C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!CreateWindowExW 766F1305 5 Bytes JMP 6A8C03B7 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!GetKeyState 766F8CB1 5 Bytes JMP 6A83DD87 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!DefWindowProcW 767003B4 7 Bytes JMP 6A8B8042 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!IsDialogMessageW 76700745 5 Bytes JMP 6A9E9855 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!CreateDialogParamA 767017AA 5 Bytes JMP 6A9E90B8 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!IsDialogMessage 76701847 5 Bytes JMP 6A9E982D C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!CreateDialogIndirectParamA 767026F1 5 Bytes JMP 6A9E9128 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!CreateDialogIndirectParamW 76709A62 5 Bytes JMP 6A9E9160 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!SetKeyboardState 76710987 5 Bytes JMP 6A9EA11D C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!DialogBoxParamW 767110B0 5 Bytes JMP 6A7F187B C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!DialogBoxIndirectParamW 76712EF5 5 Bytes JMP 6A9E8D86 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!SendInput 76712F75 5 Bytes JMP 6A9EA0C5 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!EndDialog 7671326E 5 Bytes JMP 6A9E9B01 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!SetCursorPos 76726FB2 5 Bytes JMP 6A9EA19E C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!DialogBoxParamA 76728152 5 Bytes JMP 6A9E8D21 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!DialogBoxIndirectParamA 7672847D 5 Bytes JMP 6A9E8DEB C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!MessageBoxIndirectA 7673D4D9 5 Bytes JMP 6A9E8CA8 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!MessageBoxIndirectW 7673D5D3 5 Bytes JMP 6A9E8C2F C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!MessageBoxExA 7673D639 5 Bytes JMP 6A9E8BCB C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!MessageBoxExW 7673D65D 5 Bytes JMP 6A9E8B67 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] USER32.dll!keybd_event 7673D972 5 Bytes JMP 6A9EA082 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[2396] SHELL32.dll!SHRestricted + D95 769789A8 4 Bytes [CF, 01, 6C, 64] .text C:\Program Files\Internet Explorer\iexplore.exe[2396] SHELL32.dll!SHRestricted + D9D 769789B0 8 Bytes [E0, 61, 6B, 64, 79, F7, 6B, ...] .text C:\Program Files\Internet Explorer\iexplore.exe[2396] ole32.dll!OleLoadFromStream 763B1E80 5 Bytes JMP 6A9E955F C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Windows\system32\SearchIndexer.exe[2452] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000501F8 .text C:\Windows\system32\SearchIndexer.exe[2452] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000503FC .text C:\Windows\system32\SearchIndexer.exe[2452] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\system32\SearchIndexer.exe[2452] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\SearchIndexer.exe[2452] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\SearchIndexer.exe[2452] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\SearchIndexer.exe[2452] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\SearchIndexer.exe[2452] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\SearchIndexer.exe[2452] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00070C0C .text C:\Windows\system32\SearchIndexer.exe[2452] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\SearchIndexer.exe[2452] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000701F8 .text C:\Windows\system32\SearchIndexer.exe[2452] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00090600 .text C:\Windows\system32\SearchIndexer.exe[2452] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00090804 .text C:\Windows\system32\SearchIndexer.exe[2452] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00090A08 .text C:\Windows\system32\SearchIndexer.exe[2452] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 000901F8 .text C:\Windows\system32\SearchIndexer.exe[2452] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 000903FC .text C:\Program Files\Nero\Update\NASvc.exe[2480] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000601F8 .text C:\Program Files\Nero\Update\NASvc.exe[2480] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000603FC .text C:\Program Files\Nero\Update\NASvc.exe[2480] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Nero\Update\NASvc.exe[2480] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00070600 .text C:\Program Files\Nero\Update\NASvc.exe[2480] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00070804 .text C:\Program Files\Nero\Update\NASvc.exe[2480] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00070A08 .text C:\Program Files\Nero\Update\NASvc.exe[2480] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 000701F8 .text C:\Program Files\Nero\Update\NASvc.exe[2480] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 000703FC .text C:\Program Files\Nero\Update\NASvc.exe[2480] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000803FC .text C:\Program Files\Nero\Update\NASvc.exe[2480] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00080600 .text C:\Program Files\Nero\Update\NASvc.exe[2480] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00081014 .text C:\Program Files\Nero\Update\NASvc.exe[2480] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00080804 .text C:\Program Files\Nero\Update\NASvc.exe[2480] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00080A08 .text C:\Program Files\Nero\Update\NASvc.exe[2480] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00080C0C .text C:\Program Files\Nero\Update\NASvc.exe[2480] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00080E10 .text C:\Program Files\Nero\Update\NASvc.exe[2480] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000801F8 .text C:\Windows\system32\svchost.exe[2512] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000501F8 .text C:\Windows\system32\svchost.exe[2512] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000503FC .text C:\Windows\system32\svchost.exe[2512] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\system32\svchost.exe[2512] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\svchost.exe[2512] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\svchost.exe[2512] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\svchost.exe[2512] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\svchost.exe[2512] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\svchost.exe[2512] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00070C0C .text C:\Windows\system32\svchost.exe[2512] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\svchost.exe[2512] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000701F8 .text C:\Program Files\Windows Sidebar\sidebar.exe[2556] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000501F8 .text C:\Program Files\Windows Sidebar\sidebar.exe[2556] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000503FC .text C:\Program Files\Windows Sidebar\sidebar.exe[2556] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Windows Sidebar\sidebar.exe[2556] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000C03FC .text C:\Program Files\Windows Sidebar\sidebar.exe[2556] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 000C0600 .text C:\Program Files\Windows Sidebar\sidebar.exe[2556] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 000C1014 .text C:\Program Files\Windows Sidebar\sidebar.exe[2556] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 000C0804 .text C:\Program Files\Windows Sidebar\sidebar.exe[2556] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 000C0A08 .text C:\Program Files\Windows Sidebar\sidebar.exe[2556] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 000C0C0C .text C:\Program Files\Windows Sidebar\sidebar.exe[2556] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 000C0E10 .text C:\Program Files\Windows Sidebar\sidebar.exe[2556] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000C01F8 .text C:\Program Files\Windows Sidebar\sidebar.exe[2556] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 000D0600 .text C:\Program Files\Windows Sidebar\sidebar.exe[2556] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 000D0804 .text C:\Program Files\Windows Sidebar\sidebar.exe[2556] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 000D0A08 .text C:\Program Files\Windows Sidebar\sidebar.exe[2556] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 000D01F8 .text C:\Program Files\Windows Sidebar\sidebar.exe[2556] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 000D03FC .text C:\Windows\system32\svchost.exe[2596] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\SYSTEM32\winlogon.exe[2660] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\AVAST Software\Avast\AvastUI.exe[2880] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\Explorer.EXE[2896] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000501F8 .text C:\Windows\Explorer.EXE[2896] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000503FC .text C:\Windows\Explorer.EXE[2896] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\Explorer.EXE[2896] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000703FC .text C:\Windows\Explorer.EXE[2896] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00070600 .text C:\Windows\Explorer.EXE[2896] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00071014 .text C:\Windows\Explorer.EXE[2896] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00070804 .text C:\Windows\Explorer.EXE[2896] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00070A08 .text C:\Windows\Explorer.EXE[2896] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00070C0C .text C:\Windows\Explorer.EXE[2896] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00070E10 .text C:\Windows\Explorer.EXE[2896] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000701F8 .text C:\Windows\Explorer.EXE[2896] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00080600 .text C:\Windows\Explorer.EXE[2896] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00080804 .text C:\Windows\Explorer.EXE[2896] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00080A08 .text C:\Windows\Explorer.EXE[2896] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 000801F8 .text C:\Windows\Explorer.EXE[2896] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 000803FC .text C:\Windows\system32\AUDIODG.EXE[2916] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\System32\svchost.exe[3000] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000501F8 .text C:\Windows\System32\svchost.exe[3000] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000503FC .text C:\Windows\System32\svchost.exe[3000] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\System32\svchost.exe[3000] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000703FC .text C:\Windows\System32\svchost.exe[3000] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00070600 .text C:\Windows\System32\svchost.exe[3000] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00071014 .text C:\Windows\System32\svchost.exe[3000] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00070804 .text C:\Windows\System32\svchost.exe[3000] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00070A08 .text C:\Windows\System32\svchost.exe[3000] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00070C0C .text C:\Windows\System32\svchost.exe[3000] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00070E10 .text C:\Windows\System32\svchost.exe[3000] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000701F8 .text C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe[3016] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 001401F8 .text C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe[3016] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 001403FC .text C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe[3016] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe[3016] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 001F03FC .text C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe[3016] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 001F0600 .text C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe[3016] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 001F1014 .text C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe[3016] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 001F0804 .text C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe[3016] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 001F0A08 .text C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe[3016] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 001F0C0C .text C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe[3016] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 001F0E10 .text C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe[3016] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 001F01F8 .text C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe[3016] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00200600 .text C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe[3016] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00200804 .text C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe[3016] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00200A08 .text C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe[3016] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 002001F8 .text C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe[3016] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 002003FC .text C:\Program Files\Windows Media Player\wmpnscfg.exe[3060] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000501F8 .text C:\Program Files\Windows Media Player\wmpnscfg.exe[3060] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000503FC .text C:\Program Files\Windows Media Player\wmpnscfg.exe[3060] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Windows Media Player\wmpnscfg.exe[3060] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000703FC .text C:\Program Files\Windows Media Player\wmpnscfg.exe[3060] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00070600 .text C:\Program Files\Windows Media Player\wmpnscfg.exe[3060] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00071014 .text C:\Program Files\Windows Media Player\wmpnscfg.exe[3060] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00070804 .text C:\Program Files\Windows Media Player\wmpnscfg.exe[3060] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00070A08 .text C:\Program Files\Windows Media Player\wmpnscfg.exe[3060] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00070C0C .text C:\Program Files\Windows Media Player\wmpnscfg.exe[3060] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00070E10 .text C:\Program Files\Windows Media Player\wmpnscfg.exe[3060] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000701F8 .text C:\Program Files\Windows Media Player\wmpnscfg.exe[3060] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00080600 .text C:\Program Files\Windows Media Player\wmpnscfg.exe[3060] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00080804 .text C:\Program Files\Windows Media Player\wmpnscfg.exe[3060] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00080A08 .text C:\Program Files\Windows Media Player\wmpnscfg.exe[3060] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 000801F8 .text C:\Program Files\Windows Media Player\wmpnscfg.exe[3060] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 000803FC .text C:\Program Files\CyberLink\Shared Files\RichVideo.exe[3128] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 001501F8 .text C:\Program Files\CyberLink\Shared Files\RichVideo.exe[3128] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 001503FC .text C:\Program Files\CyberLink\Shared Files\RichVideo.exe[3128] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\CyberLink\Shared Files\RichVideo.exe[3128] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00170600 .text C:\Program Files\CyberLink\Shared Files\RichVideo.exe[3128] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00170804 .text C:\Program Files\CyberLink\Shared Files\RichVideo.exe[3128] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00170A08 .text C:\Program Files\CyberLink\Shared Files\RichVideo.exe[3128] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 001701F8 .text C:\Program Files\CyberLink\Shared Files\RichVideo.exe[3128] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 001703FC .text C:\Program Files\CyberLink\Shared Files\RichVideo.exe[3128] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 002803FC .text C:\Program Files\CyberLink\Shared Files\RichVideo.exe[3128] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00280600 .text C:\Program Files\CyberLink\Shared Files\RichVideo.exe[3128] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00281014 .text C:\Program Files\CyberLink\Shared Files\RichVideo.exe[3128] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00280804 .text C:\Program Files\CyberLink\Shared Files\RichVideo.exe[3128] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00280A08 .text C:\Program Files\CyberLink\Shared Files\RichVideo.exe[3128] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00280C0C .text C:\Program Files\CyberLink\Shared Files\RichVideo.exe[3128] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00280E10 .text C:\Program Files\CyberLink\Shared Files\RichVideo.exe[3128] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 002801F8 .text C:\Windows\system32\lsass.exe[3132] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\system32\services.exe[3156] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] ? C:\Windows\system32\services.exe[3156] C:\Windows\system32\smss.exe image checksum mismatch; time/date stamp mismatch; unknown module: MSWSOCK.dll .text C:\Windows\system32\svchost.exe[3204] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\system32\svchost.exe[3340] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\system32\svchost.exe[3344] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000501F8 .text C:\Windows\system32\svchost.exe[3344] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000503FC .text C:\Windows\system32\svchost.exe[3344] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\system32\svchost.exe[3344] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000703FC .text C:\Windows\system32\svchost.exe[3344] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00070600 .text C:\Windows\system32\svchost.exe[3344] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00071014 .text C:\Windows\system32\svchost.exe[3344] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00070804 .text C:\Windows\system32\svchost.exe[3344] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00070A08 .text C:\Windows\system32\svchost.exe[3344] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00070C0C .text C:\Windows\system32\svchost.exe[3344] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00070E10 .text C:\Windows\system32\svchost.exe[3344] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000701F8 .text C:\Windows\System32\svchost.exe[3440] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000501F8 .text C:\Windows\System32\svchost.exe[3440] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000503FC .text C:\Windows\System32\svchost.exe[3440] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\System32\svchost.exe[3440] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000803FC .text C:\Windows\System32\svchost.exe[3440] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00080600 .text C:\Windows\System32\svchost.exe[3440] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00081014 .text C:\Windows\System32\svchost.exe[3440] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00080804 .text C:\Windows\System32\svchost.exe[3440] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00080A08 .text C:\Windows\System32\svchost.exe[3440] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00080C0C .text C:\Windows\System32\svchost.exe[3440] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00080E10 .text C:\Windows\System32\svchost.exe[3440] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000801F8 .text C:\Windows\system32\nvvsvc.exe[3468] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3536] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 001501F8 .text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3536] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 001503FC .text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3536] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3536] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 001703FC .text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3536] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00170600 .text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3536] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00171014 .text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3536] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00170804 .text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3536] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00170A08 .text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3536] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00170C0C .text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3536] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00170E10 .text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3536] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 001701F8 .text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3536] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00BB0600 .text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3536] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00BB0804 .text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3536] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00BB0A08 .text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3536] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 00BB01F8 .text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3536] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 00BB03FC .text C:\Windows\system32\csrss.exe[3548] KERNEL32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\system32\csrss.exe[3660] KERNEL32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe[3824] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 001601F8 .text C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe[3824] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 001603FC .text C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe[3824] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe[3824] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00280600 .text C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe[3824] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00280804 .text C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe[3824] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00280A08 .text C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe[3824] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 002801F8 .text C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe[3824] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 002803FC .text C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe[3824] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 002703FC .text C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe[3824] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00270600 .text C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe[3824] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00271014 .text C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe[3824] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00270804 .text C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe[3824] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00270A08 .text C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe[3824] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00270C0C .text C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe[3824] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00270E10 .text C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe[3824] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 002701F8 .text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[3856] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 001501F8 .text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[3856] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 001503FC .text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[3856] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[3856] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00170600 .text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[3856] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00170804 .text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[3856] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00170A08 .text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[3856] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 001701F8 .text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[3856] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 001703FC .text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[3856] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 001803FC .text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[3856] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00180600 .text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[3856] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00181014 .text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[3856] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00180804 .text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[3856] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00180A08 .text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[3856] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00180C0C .text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[3856] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00180E10 .text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[3856] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 001801F8 .text C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe[3928] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 001501F8 .text C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe[3928] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 001503FC .text C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe[3928] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe[3928] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00170600 .text C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe[3928] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00170804 .text C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe[3928] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00170A08 .text C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe[3928] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 001701F8 .text C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe[3928] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 001703FC .text C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe[3928] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 001903FC .text C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe[3928] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00190600 .text C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe[3928] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00191014 .text C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe[3928] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00190804 .text C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe[3928] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00190A08 .text C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe[3928] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00190C0C .text C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe[3928] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00190E10 .text C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe[3928] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 001901F8 .text C:\Windows\SYSTEM32\wininit.exe[3980] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Internet Explorer\iexplore.exe[4016] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000401F8 .text C:\Program Files\Internet Explorer\iexplore.exe[4016] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000403FC .text C:\Program Files\Internet Explorer\iexplore.exe[4016] kernel32.dll!CreateThread 7664CB2E 5 Bytes JMP 6A8575CB C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Internet Explorer\iexplore.exe[4016] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000603FC .text C:\Program Files\Internet Explorer\iexplore.exe[4016] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00060600 .text C:\Program Files\Internet Explorer\iexplore.exe[4016] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00061014 .text C:\Program Files\Internet Explorer\iexplore.exe[4016] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00060804 .text C:\Program Files\Internet Explorer\iexplore.exe[4016] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00060A08 .text C:\Program Files\Internet Explorer\iexplore.exe[4016] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00060C0C .text C:\Program Files\Internet Explorer\iexplore.exe[4016] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00060E10 .text C:\Program Files\Internet Explorer\iexplore.exe[4016] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000601F8 .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00070600 .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!CreateDialogParamW 766E72A2 5 Bytes JMP 6A9E90F0 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!GetAsyncKeyState 766E863C 5 Bytes JMP 6A83DEAD C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 6A8925AC C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!CallNextHookEx 766E8E3B 5 Bytes JMP 6A8B7FDF C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 6A8DECE0 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 000701F8 .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 000703FC .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!EnableWindow 766ECD8B 5 Bytes JMP 6A899EAC C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!DefWindowProcA 766EDB88 7 Bytes JMP 6A8597F5 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!CreateWindowExA 766EDC2A 5 Bytes JMP 6A86362B C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!CreateWindowExW 766F1305 5 Bytes JMP 6A8C03B7 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!GetKeyState 766F8CB1 5 Bytes JMP 6A83DD87 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!DefWindowProcW 767003B4 7 Bytes JMP 6A8B8042 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!IsDialogMessageW 76700745 5 Bytes JMP 6A9E9855 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!CreateDialogParamA 767017AA 5 Bytes JMP 6A9E90B8 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!IsDialogMessage 76701847 5 Bytes JMP 6A9E982D C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!CreateDialogIndirectParamA 767026F1 5 Bytes JMP 6A9E9128 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!CreateDialogIndirectParamW 76709A62 5 Bytes JMP 6A9E9160 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!SetKeyboardState 76710987 5 Bytes JMP 6A9EA11D C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!DialogBoxParamW 767110B0 5 Bytes JMP 6A7F187B C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!DialogBoxIndirectParamW 76712EF5 5 Bytes JMP 6A9E8D86 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!SendInput 76712F75 5 Bytes JMP 6A9EA0C5 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!EndDialog 7671326E 5 Bytes JMP 6A9E9B01 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!SetCursorPos 76726FB2 5 Bytes JMP 6A9EA19E C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!DialogBoxParamA 76728152 5 Bytes JMP 6A9E8D21 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!DialogBoxIndirectParamA 7672847D 5 Bytes JMP 6A9E8DEB C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!MessageBoxIndirectA 7673D4D9 5 Bytes JMP 6A9E8CA8 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!MessageBoxIndirectW 7673D5D3 5 Bytes JMP 6A9E8C2F C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!MessageBoxExA 7673D639 5 Bytes JMP 6A9E8BCB C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!MessageBoxExW 7673D65D 5 Bytes JMP 6A9E8B67 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] USER32.dll!keybd_event 7673D972 5 Bytes JMP 6A9EA082 C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[4016] SHELL32.dll!SHRestricted + D95 769789A8 4 Bytes [CF, 01, 6C, 64] .text C:\Program Files\Internet Explorer\iexplore.exe[4016] SHELL32.dll!SHRestricted + D9D 769789B0 8 Bytes [E0, 61, 6B, 64, 79, F7, 6B, ...] .text C:\Program Files\Internet Explorer\iexplore.exe[4016] ole32.dll!OleLoadFromStream 763B1E80 5 Bytes JMP 6A9E955F C:\Windows\system32\IEFRAME.dll (Przeglądarka internetowa/Microsoft Corporation) .text C:\Windows\system32\svchost.exe[4020] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\system32\lsm.exe[4036] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4052] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000501F8 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4052] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000503FC .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4052] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4052] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000703FC .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4052] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00070600 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4052] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00071014 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4052] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00070804 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4052] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00070A08 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4052] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00070C0C .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4052] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00070E10 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4052] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000701F8 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4052] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00080600 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4052] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00080804 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4052] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00080A08 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4052] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 000801F8 .text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4052] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 000803FC .text c:\Users\A&I\Downloads\OTL.exe[5096] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 001501F8 .text c:\Users\A&I\Downloads\OTL.exe[5096] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 001503FC .text c:\Users\A&I\Downloads\OTL.exe[5096] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text c:\Users\A&I\Downloads\OTL.exe[5096] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 01F803FC .text c:\Users\A&I\Downloads\OTL.exe[5096] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 01F80600 .text c:\Users\A&I\Downloads\OTL.exe[5096] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 01F81014 .text c:\Users\A&I\Downloads\OTL.exe[5096] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 01F80804 .text c:\Users\A&I\Downloads\OTL.exe[5096] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 01F80A08 .text c:\Users\A&I\Downloads\OTL.exe[5096] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 01F80C0C .text c:\Users\A&I\Downloads\OTL.exe[5096] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 01F80E10 .text c:\Users\A&I\Downloads\OTL.exe[5096] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 01F801F8 .text C:\Users\A&I\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2TYEX206\fsypuvhc.exe[5524] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 001501F8 .text C:\Users\A&I\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2TYEX206\fsypuvhc.exe[5524] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 001503FC .text C:\Users\A&I\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2TYEX206\fsypuvhc.exe[5524] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Users\A&I\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2TYEX206\fsypuvhc.exe[5524] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 002B03FC .text C:\Users\A&I\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2TYEX206\fsypuvhc.exe[5524] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 002B0600 .text C:\Users\A&I\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2TYEX206\fsypuvhc.exe[5524] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 002B1014 .text C:\Users\A&I\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2TYEX206\fsypuvhc.exe[5524] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 002B0804 .text C:\Users\A&I\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2TYEX206\fsypuvhc.exe[5524] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 002B0A08 .text C:\Users\A&I\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2TYEX206\fsypuvhc.exe[5524] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 002B0C0C .text C:\Users\A&I\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2TYEX206\fsypuvhc.exe[5524] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 002B0E10 .text C:\Users\A&I\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2TYEX206\fsypuvhc.exe[5524] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 002B01F8 .text C:\Users\A&I\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2TYEX206\fsypuvhc.exe[5524] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 002C0600 .text C:\Users\A&I\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2TYEX206\fsypuvhc.exe[5524] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 002C0804 .text C:\Users\A&I\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2TYEX206\fsypuvhc.exe[5524] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 002C0A08 .text C:\Users\A&I\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2TYEX206\fsypuvhc.exe[5524] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 002C01F8 .text C:\Users\A&I\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2TYEX206\fsypuvhc.exe[5524] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 002C03FC .text C:\Windows\notepad.exe[6100] ntdll.dll!LdrLoadDll 77589378 5 Bytes JMP 000501F8 .text C:\Windows\notepad.exe[6100] ntdll.dll!LdrUnloadDll 7759B680 5 Bytes JMP 000503FC .text C:\Windows\notepad.exe[6100] kernel32.dll!GetBinaryTypeW + 70 76652467 1 Byte [62] .text C:\Windows\notepad.exe[6100] ADVAPI32.dll!CreateServiceW 76149EB4 5 Bytes JMP 000703FC .text C:\Windows\notepad.exe[6100] ADVAPI32.dll!DeleteService 7614A07E 5 Bytes JMP 00070600 .text C:\Windows\notepad.exe[6100] ADVAPI32.dll!SetServiceObjectSecurity 76186CD9 5 Bytes JMP 00071014 .text C:\Windows\notepad.exe[6100] ADVAPI32.dll!ChangeServiceConfigA 76186DD9 5 Bytes JMP 00070804 .text C:\Windows\notepad.exe[6100] ADVAPI32.dll!ChangeServiceConfigW 76186F81 5 Bytes JMP 00070A08 .text C:\Windows\notepad.exe[6100] ADVAPI32.dll!ChangeServiceConfig2A 76187099 5 Bytes JMP 00070C0C .text C:\Windows\notepad.exe[6100] ADVAPI32.dll!ChangeServiceConfig2W 761871E1 5 Bytes JMP 00070E10 .text C:\Windows\notepad.exe[6100] ADVAPI32.dll!CreateServiceA 761872A1 5 Bytes JMP 000701F8 .text C:\Windows\notepad.exe[6100] USER32.dll!SetWindowsHookExA 766E6322 5 Bytes JMP 00080600 .text C:\Windows\notepad.exe[6100] USER32.dll!SetWindowsHookExW 766E87AD 5 Bytes JMP 00080804 .text C:\Windows\notepad.exe[6100] USER32.dll!UnhookWindowsHookEx 766E98DB 5 Bytes JMP 00080A08 .text C:\Windows\notepad.exe[6100] USER32.dll!SetWinEventHook 766E9F3A 5 Bytes JMP 000801F8 .text C:\Windows\notepad.exe[6100] USER32.dll!UnhookWinEvent 766EC06F 5 Bytes JMP 000803FC ---- User IAT/EAT - GMER 1.0.15 ---- IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CopyFileW] [646CBC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!MoveFileW] [646CE089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateProcessW] [646C7F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetCurrentDirectoryW] [646CF500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] [646D07CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!WritePrivateProfileStringW] [646CB56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetPrivateProfileStringW] [646CABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [646C1555] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegEnumValueW] [646C0E28] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegOpenKeyExW] [646B60B5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryValueExW] [646B7278] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegDeleteKeyW] [646D33C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCreateKeyExW] [646C19CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCloseKey] [646B6692] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CopyFileW] [646CBC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] [646CF9A0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] [646D072B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] [646D07CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesA] [646C0ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryA] [646CEFD7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesA] [646C9229] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryA] [646CE73F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryA] [646CECFB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileA] [646CC6B1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesW] [646B5F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryW] [646CF500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesW] [646C939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryW] [646B6291] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileW] [646CE089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryW] [646CEE67] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileA] [646CDFBD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessA] [646C7BE8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessW] [646C7F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileA] [646BF1F1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!ReplaceFileW] [646CE457] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!WritePrivateProfileStringW] [646CB56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringW] [646CABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringA] [646CAA37] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesW] [646C939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] [646D07CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesW] [646B5F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesA] [646C9229] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileA] [646BF1F1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] [646CF9A0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] [646D072B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathA] [646CF2BD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesA] [646C0ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpW] [646CD6BF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpA] [646CD557] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCloseKey] [646B6692] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExA] [646D2FB4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyA] [646D327D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyA] [646D3B2F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExA] [646BEEBD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExW] [646C19CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExW] [646B60B5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExW] [646C0859] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueW] [646D3983] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyW] [646D33C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyW] [646C1555] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExW] [646B7278] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueW] [646C0E28] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyW] [646D3E89] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExA] [646BF30B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueA] [646D3FED] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyA] [646D3D27] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExA] [646BFCC5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionW] [646CA56D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] [646D07CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!ReplaceFileW] [646CE457] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionNamesW] [646CA89F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileSectionW] [646CB245] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileStringW] [646CB56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateHardLinkW] [646CC49D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetCurrentDirectoryW] [646CF500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CopyFileW] [646CBC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetBinaryTypeW] [646C9F4B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateProcessW] [646C7F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileW] [646CE089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameA] [646C9AF3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesA] [646C0ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileIntW] [646CA249] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileStringW] [646CABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!RemoveDirectoryW] [646CEE67] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateDirectoryW] [646B6291] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetFileAttributesW] [646C939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesW] [646B5F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileExW] [646CE0C1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameW] [646C9C69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesExW] [646C968F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetLongPathNameW] [646C997F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [USER32.dll!LoadImageW] [646CCB0F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [USER32.dll!WinHelpW] [646CD6BF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [USER32.dll!PrivateExtractIconsW] [646CD11F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringByKeyW] [646D0DFB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHCreateStreamOnFileW] [646BF725] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryKeyW] [646BF817] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringW] [646D0D47] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyA] [646D1F32] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCombineW] [646D1095] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHOpenRegStream2W] [646BFB25] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryW] [646D12D2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsURLW] [646BFA79] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootA] [646D1542] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootW] [646D1590] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripToRootW] [646D1C5E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFindOnPathW] [646D1191] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripPathW] [646D1BC6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRemoveArgsW] [646D19EE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetBoolUSValueW] [646BE265] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathSkipRootW] [646D1B2E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryEmptyW] [646D136E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsSystemFolderW] [646D162F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryA] [646D1284] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRelativePathToW] [646D194A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootA] [646D0F4E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetPathW] [646D2769] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegSetPathW] [646D2937] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetUSValueW] [646B7430] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCreateFromUrlW] [646C0178] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHQueryValueExW] [646BFC0B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetValueW] [646B4984] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsNetworkPathW] [646D140A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerShareW] [646D17B8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerW] [646D171C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathUnExpandEnvStringsW] [646D1CAC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathMakeSystemFolderW] [646D18A2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCW] [646BFA2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRelativeW] [646B5D08] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHGetValueW] [646B4927] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootW] [646D0F9F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteValueW] [646D2028] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHSetValueW] [646D2B62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumKeyExW] [646D20D3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumValueW] [646D218A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFileExistsW] [646C0123] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyW] [646D1F83] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile] [646C8C1A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateProcessW] [646C7F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetShortPathNameW] [646C9C69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesExW] [646C968F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesW] [646B5F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathUnExpandEnvStringsA] [646BF6D1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteKeyA] [646D1F32] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteValueW] [646D2028] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueA] [646D2B05] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueW] [646D2B62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCreateFromUrlW] [646C0178] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetUSValueA] [646B64C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueA] [646B4CAA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueW] [646B4927] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueW] [646B4984] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueA] [646B6528] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[1464] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\AVAST Software\Avast\AvastSvc.exe[1592] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [738EF6D0] C:\Program Files\AVAST Software\Avast\aswCmnBS.dll (Common functions/AVAST Software) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CopyFileW] [646CBC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!MoveFileW] [646CE089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateProcessW] [646C7F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetCurrentDirectoryW] [646CF500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] [646D07CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!WritePrivateProfileStringW] [646CB56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetPrivateProfileStringW] [646CABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [646C1555] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegEnumValueW] [646C0E28] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegOpenKeyExW] [646B60B5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryValueExW] [646B7278] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegDeleteKeyW] [646D33C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCreateKeyExW] [646C19CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCloseKey] [646B6692] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CopyFileW] [646CBC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] [646CF9A0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] [646D072B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] [646D07CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesA] [646C0ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryA] [646CEFD7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesA] [646C9229] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryA] [646CE73F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryA] [646CECFB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileA] [646CC6B1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesW] [646B5F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryW] [646CF500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesW] [646C939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryW] [646B6291] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileW] [646CE089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryW] [646CEE67] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileA] [646CDFBD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessA] [646C7BE8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessW] [646C7F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileA] [646BF1F1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!ReplaceFileW] [646CE457] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!WritePrivateProfileStringW] [646CB56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringW] [646CABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringA] [646CAA37] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesW] [646C939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] [646D07CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesW] [646B5F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesA] [646C9229] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileA] [646BF1F1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] [646CF9A0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] [646D072B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathA] [646CF2BD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesA] [646C0ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpW] [646CD6BF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpA] [646CD557] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCloseKey] [646B6692] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExA] [646D2FB4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyA] [646D327D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyA] [646D3B2F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExA] [646BEEBD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExW] [646C19CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExW] [646B60B5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExW] [646C0859] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueW] [646D3983] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyW] [646D33C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyW] [646C1555] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExW] [646B7278] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueW] [646C0E28] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyW] [646D3E89] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExA] [646BF30B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueA] [646D3FED] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyA] [646D3D27] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExA] [646BFCC5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionW] [646CA56D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] [646D07CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!ReplaceFileW] [646CE457] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionNamesW] [646CA89F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileSectionW] [646CB245] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileStringW] [646CB56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateHardLinkW] [646CC49D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetCurrentDirectoryW] [646CF500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CopyFileW] [646CBC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetBinaryTypeW] [646C9F4B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateProcessW] [646C7F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileW] [646CE089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameA] [646C9AF3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesA] [646C0ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileIntW] [646CA249] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileStringW] [646CABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!RemoveDirectoryW] [646CEE67] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateDirectoryW] [646B6291] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetFileAttributesW] [646C939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesW] [646B5F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileExW] [646CE0C1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameW] [646C9C69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesExW] [646C968F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetLongPathNameW] [646C997F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [USER32.dll!LoadImageW] [646CCB0F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [USER32.dll!WinHelpW] [646CD6BF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [USER32.dll!PrivateExtractIconsW] [646CD11F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringByKeyW] [646D0DFB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHCreateStreamOnFileW] [646BF725] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryKeyW] [646BF817] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringW] [646D0D47] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyA] [646D1F32] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCombineW] [646D1095] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHOpenRegStream2W] [646BFB25] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryW] [646D12D2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsURLW] [646BFA79] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootA] [646D1542] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootW] [646D1590] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripToRootW] [646D1C5E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFindOnPathW] [646D1191] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripPathW] [646D1BC6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRemoveArgsW] [646D19EE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetBoolUSValueW] [646BE265] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathSkipRootW] [646D1B2E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryEmptyW] [646D136E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsSystemFolderW] [646D162F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryA] [646D1284] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRelativePathToW] [646D194A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootA] [646D0F4E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetPathW] [646D2769] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegSetPathW] [646D2937] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetUSValueW] [646B7430] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCreateFromUrlW] [646C0178] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHQueryValueExW] [646BFC0B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetValueW] [646B4984] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsNetworkPathW] [646D140A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerShareW] [646D17B8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerW] [646D171C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathUnExpandEnvStringsW] [646D1CAC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathMakeSystemFolderW] [646D18A2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCW] [646BFA2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRelativeW] [646B5D08] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHGetValueW] [646B4927] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootW] [646D0F9F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteValueW] [646D2028] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHSetValueW] [646D2B62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumKeyExW] [646D20D3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumValueW] [646D218A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFileExistsW] [646C0123] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyW] [646D1F83] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile] [646C8C1A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateProcessW] [646C7F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetShortPathNameW] [646C9C69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesExW] [646C968F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesW] [646B5F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathUnExpandEnvStringsA] [646BF6D1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteKeyA] [646D1F32] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteValueW] [646D2028] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueA] [646D2B05] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueW] [646D2B62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCreateFromUrlW] [646C0178] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetUSValueA] [646B64C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueA] [646B4CAA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueW] [646B4927] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueW] [646B4984] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueA] [646B6528] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2364] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CopyFileW] [646CBC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!MoveFileW] [646CE089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateProcessW] [646C7F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetCurrentDirectoryW] [646CF500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] [646D07CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!WritePrivateProfileStringW] [646CB56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetPrivateProfileStringW] [646CABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [646C1555] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegEnumValueW] [646C0E28] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegOpenKeyExW] [646B60B5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryValueExW] [646B7278] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegDeleteKeyW] [646D33C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCreateKeyExW] [646C19CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCloseKey] [646B6692] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CopyFileW] [646CBC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] [646CF9A0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] [646D072B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] [646D07CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesA] [646C0ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryA] [646CEFD7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesA] [646C9229] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryA] [646CE73F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryA] [646CECFB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileA] [646CC6B1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesW] [646B5F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryW] [646CF500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesW] [646C939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryW] [646B6291] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileW] [646CE089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryW] [646CEE67] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileA] [646CDFBD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessA] [646C7BE8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessW] [646C7F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileA] [646BF1F1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!ReplaceFileW] [646CE457] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!WritePrivateProfileStringW] [646CB56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringW] [646CABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringA] [646CAA37] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesW] [646C939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] [646D07CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesW] [646B5F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesA] [646C9229] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileA] [646BF1F1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] [646CF9A0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] [646D072B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathA] [646CF2BD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesA] [646C0ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpW] [646CD6BF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpA] [646CD557] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCloseKey] [646B6692] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExA] [646D2FB4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyA] [646D327D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyA] [646D3B2F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExA] [646BEEBD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExW] [646C19CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExW] [646B60B5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExW] [646C0859] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueW] [646D3983] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyW] [646D33C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyW] [646C1555] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExW] [646B7278] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueW] [646C0E28] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyW] [646D3E89] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExA] [646BF30B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueA] [646D3FED] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyA] [646D3D27] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExA] [646BFCC5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionW] [646CA56D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] [646D07CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!ReplaceFileW] [646CE457] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionNamesW] [646CA89F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileSectionW] [646CB245] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileStringW] [646CB56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateHardLinkW] [646CC49D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetCurrentDirectoryW] [646CF500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CopyFileW] [646CBC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetBinaryTypeW] [646C9F4B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateProcessW] [646C7F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileW] [646CE089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameA] [646C9AF3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesA] [646C0ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileIntW] [646CA249] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileStringW] [646CABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!RemoveDirectoryW] [646CEE67] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateDirectoryW] [646B6291] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetFileAttributesW] [646C939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesW] [646B5F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileExW] [646CE0C1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameW] [646C9C69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesExW] [646C968F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetLongPathNameW] [646C997F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [USER32.dll!LoadImageW] [646CCB0F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [USER32.dll!WinHelpW] [646CD6BF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [USER32.dll!PrivateExtractIconsW] [646CD11F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringByKeyW] [646D0DFB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHCreateStreamOnFileW] [646BF725] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryKeyW] [646BF817] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringW] [646D0D47] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyA] [646D1F32] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCombineW] [646D1095] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHOpenRegStream2W] [646BFB25] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryW] [646D12D2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsURLW] [646BFA79] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootA] [646D1542] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootW] [646D1590] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripToRootW] [646D1C5E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFindOnPathW] [646D1191] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripPathW] [646D1BC6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRemoveArgsW] [646D19EE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetBoolUSValueW] [646BE265] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathSkipRootW] [646D1B2E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryEmptyW] [646D136E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsSystemFolderW] [646D162F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryA] [646D1284] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRelativePathToW] [646D194A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootA] [646D0F4E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetPathW] [646D2769] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegSetPathW] [646D2937] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetUSValueW] [646B7430] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCreateFromUrlW] [646C0178] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHQueryValueExW] [646BFC0B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetValueW] [646B4984] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsNetworkPathW] [646D140A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerShareW] [646D17B8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerW] [646D171C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathUnExpandEnvStringsW] [646D1CAC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathMakeSystemFolderW] [646D18A2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCW] [646BFA2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRelativeW] [646B5D08] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHGetValueW] [646B4927] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootW] [646D0F9F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteValueW] [646D2028] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHSetValueW] [646D2B62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumKeyExW] [646D20D3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumValueW] [646D218A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFileExistsW] [646C0123] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyW] [646D1F83] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile] [646C8C1A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateProcessW] [646C7F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetShortPathNameW] [646C9C69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesExW] [646C968F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesW] [646B5F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathUnExpandEnvStringsA] [646BF6D1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteKeyA] [646D1F32] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteValueW] [646D2028] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueA] [646D2B05] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueW] [646D2B62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCreateFromUrlW] [646C0178] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetUSValueA] [646B64C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueA] [646B4CAA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueW] [646B4927] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueW] [646B4984] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueA] [646B6528] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[2396] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\AVAST Software\Avast\AvastUI.exe[2880] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [738EF6D0] C:\Program Files\AVAST Software\Avast\aswCmnBS.dll (Common functions/AVAST Software) IAT C:\Windows\Explorer.EXE[2896] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown] [74477817] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2896] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage] [744BB4E9] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2896] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI] [7447BB22] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2896] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode] [7446F695] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2896] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup] [744775E9] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2896] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC] [7446E7CA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2896] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStreamICM] [744A73F5] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2896] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStream] [7447DA60] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2896] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight] [7446FFFA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2896] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth] [7446FF61] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2896] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage] [744671CF] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2896] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFileICM] [744FCAE2] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2896] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFile] [7449C8D8] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2896] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics] [7446D968] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2896] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree] [74466853] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2896] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc] [7446687E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[2896] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode] [74472AD1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\services.exe [ADVAPI32.dll!CreateProcessAsUserW] 000A0002 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\services.exe [KERNEL32.dll!CreateProcessW] 000A0000 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!DbgPrintEx] 51EC8B55 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlUpcaseUnicodeChar] 8B565351 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtClose] FF560875 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtSetInformationFile] 0C510815 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtOpenFile] 85D88B00 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtQueryInformationFile] C2840FDB IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlCompareUnicodeString] 57000000 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlAppendUnicodeStringToString] 0068406A IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlAllocateHeap] FF000010 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlFreeHeap] 006A5073 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtSetValueKey] 508415FF IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtCreateKey] F88B000C IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlUnicodeStringToInteger] 85FC7D89 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlFreeUnicodeString] 9E840FFF IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtCreatePagingFile] 8B000000 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!_alldiv] A4F3544B IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtQuerySystemInformation] 1443B70F IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!_allmul] 0653B70F IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlExtendedIntegerMultiply] 1818448D IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtQueryVolumeInformationFile] 8B0CC083 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlInitUnicodeStringEx] 08758B08 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtQueryInformationProcess] 03FC7D8B IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlInitUnicodeString] 8BF903F1 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlDosPathNameToNtPathName_U] C083FC48 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlExpandEnvironmentStrings_U] A4F34A28 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtQueryValueKey] 758BE975 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtCreateFile] 443D8BFC IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtOpenKey] 2B000C51 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!_vsnwprintf] 458D0875 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtSetSecurityObject] 056A50F8 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlSetOwnerSecurityDescriptor] 75FF016A IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlSetDaclSecurityDescriptor] 85D7FFFC IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlAddAccessAllowedAce] EB2574C0 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlCreateAcl] 04488B1D IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlCreateSecurityDescriptor] 56F84D29 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlAllocateAndInitializeSid] 8B08508D IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlCreateUnicodeString] FC450300 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtReadFile] 52F8C183 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!_chkstk] 5051E9D1 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlNumberOfSetBitsUlongPtr] 514015FF IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtMakeTemporaryObject] 7D83000C IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtCreateSymbolicLinkObject] DD7500F8 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtOpenDirectoryObject] 50F8458D IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!qsort] 016A016A IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlRandomEx] FFFC75FF IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!memcpy] 74C085D7 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtCreateDirectoryObject] 0C488D20 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlEqualUnicodeString] C085018B IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!_wcsicmp] F18B1774 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlSetEnvironmentVariable] 03FC4D8B IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!iswspace] 15FF50C1 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlUnlockBootStatusData] [000C5080] C:\Windows\system32\smss.exe (Windows Session Manager/Microsoft Corporation) IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlGetSetBootStatusData] 8B14C683 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlLockBootStatusData] 75C08506 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlSetSaclSecurityDescriptor] FC458BEB IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlAddMandatoryAce] C95B5E5F IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlLengthSid] 560004C2 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlGetAce] 7140BF57 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlPrefixUnicodeString] 8B57000C IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtQuerySymbolicLinkObject] 7C15FFF1 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtOpenSymbolicLinkObject] 6A000C50 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtQueryDirectoryObject] 3C83580F IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlTimeToTimeFields] 0C715885 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!memset] 09740000 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!EtwEventWrite] 8548C88B IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!EtwEventEnabled] EBEF75C9 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlAppendUnicodeToString] 85348907 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtMapViewOfSection] [000C7158] C:\Windows\system32\smss.exe (Windows Session Manager/Microsoft Corporation) IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtCreateSection] 3415FF57 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlQueryRegistryValues] 5F000C50 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtResumeThread] 5756C35E IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtWaitForSingleObject] 0C7140BF IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtTerminateProcess] F18B5700 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlDestroyProcessParameters] 507C15FF IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlCreateUserProcess] 0F6A000C IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlCreateProcessParametersEx] 85343958 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!_wcsupr] [000C7158] C:\Windows\system32\smss.exe (Windows Session Manager/Microsoft Corporation) IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlAnsiStringToUnicodeString] C88B0974 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlInitAnsiString] [75C98548] C:\Windows\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!_stricmp] 8308EBF0 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!LdrVerifyImageMatchesChecksumEx] 71588524 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlDosSearchPath_U] 5700000C IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlQueryEnvironmentVariable_U] 503415FF IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtDisplayString] 5E5F000C IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtWriteFile] 800068C3 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlAdjustPrivilege] 006A0000 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtInitializeRegistry] 7815FF51 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtSetSystemInformation] 50000C50 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtSetEvent] 513C15FF IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlSetCurrentEnvironment] 55C3000C IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtDeleteValueKey] 5351EC8B IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlCreateEnvironment] 35FF5756 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtOpenEvent] [000C7198] C:\Windows\system32\smss.exe (Windows Session Manager/Microsoft Corporation) IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtAlpcCreatePort] 513815FF IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtSetInformationProcess] 8D59000C IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlCreateTagHeap] E8400044 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlCreateUserThread] 00002B8C IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlReleaseSRWLockExclusive] 75FFFC8B IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlAcquireSRWLockExclusive] FC7D8908 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtSetInformationThread] 719835FF IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtQueryInformationToken] EC68000C IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtOpenThreadToken] 57000C53 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtAlpcImpersonateClientOfPort] 513415FF IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlReleaseSRWLockShared] DB33000C IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlAcquireSRWLockShared] 3910C483 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtAlpcDisconnectPort] 6E7D085D IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlInitializeSRWLock] FFF63357 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtConnectPort] 0C507415 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!AlpcGetMessageAttribute] 85F88B00 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtAlpcAcceptConnectPort] 8D3774FF IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtAlpcOpenSenderProcess] 6A500845 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtAlpcCancelMessage] FF575602 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlExitUserThread] 0C513015 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtAlpcSendWaitReceivePort] 7CC08500 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!AlpcInitializeMessageAttribute] FF556A25 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlSetThreadIsCritical] 15FFFC75 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtRequestWaitReplyPort] [000C512C] C:\Windows\system32\smss.exe (Windows Session Manager/Microsoft Corporation) IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtDuplicateObject] C9335959 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtCreateEvent] 08896657 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlWakeConditionVariable] FFFE1FE8 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlClearBits] 85D88BFF IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlDeleteNoSplay] 8B0774DB IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtClearEvent] F72B0875 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlSleepConditionVariableSRW] FF57F303 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlWakeAllConditionVariable] 0C507015 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlSetBits] 74F68500 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlTestBit] FC4D8B53 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlFindClearBits] 0C7084BA IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlClearAllBits] 85D6FF00 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlInitializeBitMap] 684575C0 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlFreeSid] 00008000 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtRaiseHardError] 15FF5350 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtWaitForMultipleObjects] [000C5078] C:\Windows\system32\smss.exe (Windows Session Manager/Microsoft Corporation) IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlSetProcessIsCritical] 5D3936EB IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!EtwEventRegister] BB31740C IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlSetHeapInformation] [000C7140] C:\Windows\system32\smss.exe (Windows Session Manager/Microsoft Corporation) IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlInitializeConditionVariable] 7C15FF53 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtDelayExecution] BE000C50 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlUnicodeStringToAnsiString] [000C7194] C:\Windows\system32\smss.exe (Windows Session Manager/Microsoft Corporation) IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!NtQueryEvent] C085068B IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlReleasePrivilege] 4D8B0774 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlAcquirePrivilege] FFD78B08 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!LdrQueryImageFileExecutionOptions] 83C68BD0 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!wcstoul] 583D04EE IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlUnhandledExceptionFilter] 75000C71 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlUnwind] 15FF53E7 IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!DbgBreakPoint] [000C5034] C:\Windows\system32\smss.exe (Windows Session Manager/Microsoft Corporation) IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlNormalizeProcessParams] 5FF0658D IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlConnectToSm] C2C95B5E IAT C:\Windows\system32\services.exe[3156] @ C:\Windows\system32\smss.exe [ntdll.dll!RtlSendMsgToSm] 8B550008 IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CopyFileW] [646CBC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!MoveFileW] [646CE089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateProcessW] [646C7F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetCurrentDirectoryW] [646CF500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] [646D07CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!WritePrivateProfileStringW] [646CB56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetPrivateProfileStringW] [646CABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [646C1555] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegEnumValueW] [646C0E28] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegOpenKeyExW] [646B60B5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryValueExW] [646B7278] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegDeleteKeyW] [646D33C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCreateKeyExW] [646C19CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCloseKey] [646B6692] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CopyFileW] [646CBC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] [646CF9A0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] [646D072B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] [646D07CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesA] [646C0ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryA] [646CEFD7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesA] [646C9229] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryA] [646CE73F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryA] [646CECFB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileA] [646CC6B1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesW] [646B5F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryW] [646CF500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesW] [646C939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryW] [646B6291] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileW] [646CE089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryW] [646CEE67] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileA] [646CDFBD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessA] [646C7BE8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessW] [646C7F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileA] [646BF1F1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!ReplaceFileW] [646CE457] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!WritePrivateProfileStringW] [646CB56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringW] [646CABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringA] [646CAA37] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesW] [646C939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] [646D07CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesW] [646B5F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesA] [646C9229] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileA] [646BF1F1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] [646CF9A0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] [646D072B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathA] [646CF2BD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesA] [646C0ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpW] [646CD6BF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpA] [646CD557] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCloseKey] [646B6692] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExA] [646D2FB4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyA] [646D327D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyA] [646D3B2F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExA] [646BEEBD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExW] [646C19CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExW] [646B60B5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExW] [646C0859] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueW] [646D3983] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyW] [646D33C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyW] [646C1555] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExW] [646B7278] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueW] [646C0E28] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyW] [646D3E89] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExA] [646BF30B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueA] [646D3FED] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyA] [646D3D27] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExA] [646BFCC5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionW] [646CA56D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] [646D07CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!ReplaceFileW] [646CE457] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionNamesW] [646CA89F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileSectionW] [646CB245] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileStringW] [646CB56B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateHardLinkW] [646CC49D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetCurrentDirectoryW] [646CF500] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CopyFileW] [646CBC51] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetBinaryTypeW] [646C9F4B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateProcessW] [646C7F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileW] [646CE089] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameA] [646C9AF3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesA] [646C0ADF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileIntW] [646CA249] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileStringW] [646CABDB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!RemoveDirectoryW] [646CEE67] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateDirectoryW] [646B6291] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetFileAttributesW] [646C939B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesW] [646B5F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileExW] [646CE0C1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameW] [646C9C69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesExW] [646C968F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetLongPathNameW] [646C997F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [USER32.dll!LoadImageW] [646CCB0F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [USER32.dll!WinHelpW] [646CD6BF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [USER32.dll!PrivateExtractIconsW] [646CD11F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringByKeyW] [646D0DFB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHCreateStreamOnFileW] [646BF725] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryKeyW] [646BF817] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringW] [646D0D47] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyA] [646D1F32] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCombineW] [646D1095] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHOpenRegStream2W] [646BFB25] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryW] [646D12D2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsURLW] [646BFA79] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootA] [646D1542] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootW] [646D1590] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripToRootW] [646D1C5E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFindOnPathW] [646D1191] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripPathW] [646D1BC6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRemoveArgsW] [646D19EE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetBoolUSValueW] [646BE265] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathSkipRootW] [646D1B2E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryEmptyW] [646D136E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsSystemFolderW] [646D162F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryA] [646D1284] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRelativePathToW] [646D194A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootA] [646D0F4E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetPathW] [646D2769] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegSetPathW] [646D2937] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetUSValueW] [646B7430] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCreateFromUrlW] [646C0178] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHQueryValueExW] [646BFC0B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetValueW] [646B4984] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsNetworkPathW] [646D140A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerShareW] [646D17B8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerW] [646D171C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathUnExpandEnvStringsW] [646D1CAC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathMakeSystemFolderW] [646D18A2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCW] [646BFA2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRelativeW] [646B5D08] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHGetValueW] [646B4927] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootW] [646D0F9F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteValueW] [646D2028] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHSetValueW] [646D2B62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumKeyExW] [646D20D3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumValueW] [646D218A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFileExistsW] [646C0123] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyW] [646D1F83] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile] [646C8C1A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindClose] [646CF94D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] [646CFCF6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [646B5EC7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!SearchPathW] [646C029E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateProcessW] [646C7F4F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!DeleteFileW] [646CC811] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetShortPathNameW] [646C9C69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesExW] [646C968F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateFileW] [646B63E7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [646B4E2B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesW] [646B5F62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [646B6D22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathUnExpandEnvStringsA] [646BF6D1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteKeyA] [646D1F32] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteValueW] [646D2028] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueA] [646D2B05] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueW] [646D2B62] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCreateFromUrlW] [646C0178] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetUSValueA] [646B64C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueA] [646B4CAA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueW] [646B4927] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueW] [646B4984] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueA] [646B6528] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) IAT C:\Program Files\Internet Explorer\iexplore.exe[4016] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] [646B47BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation) ---- Devices - GMER 1.0.15 ---- Device \FileSystem\Ntfs \Ntfs aswSP.SYS (avast! self protection module/AVAST Software) AttachedDevice \Driver\volsnap \Device\HarddiskVolumeShadowCopy1 NBVolUp.sys (Nero Backup Volume Upper Filter Driver for the Disk Stack/Nero AG) AttachedDevice \Driver\tdx \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software) AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 NBVol.sys (Nero Backup Volume Filter Driver for the Disk Stack/Nero AG) AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 NBVol.sys (Nero Backup Volume Filter Driver for the Disk Stack/Nero AG) AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 NBVol.sys (Nero Backup Volume Filter Driver for the Disk Stack/Nero AG) AttachedDevice \Driver\volmgr \Device\HarddiskVolume4 NBVol.sys (Nero Backup Volume Filter Driver for the Disk Stack/Nero AG) AttachedDevice \Driver\tdx \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software) AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Menedżer filtrów systemu plików firmy Microsoft/Microsoft Corporation) ---- Registry - GMER 1.0.15 ---- Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@ C:\Windows\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@cd042efbbd7f7af1647644e76e06692b 0xC8 0x28 0x51 0xAF ... Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@ C:\Windows\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@bca643cdc5c2726b20d2ecedcc62c59b 0x6A 0x9C 0xD6 0x61 ... Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@ C:\Windows\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@2c81e34222e8052573023a60d06dd016 0xFF 0x7C 0x85 0xE0 ... Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@ C:\Windows\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@2582ae41fb52324423be06337561aa48 0x86 0x8C 0x21 0x01 ... Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@ C:\Windows\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@caaeda5fd7a9ed7697d9686d4b818472 0xCD 0x44 0xCD 0xB9 ... Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@ C:\Windows\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@a4a1bcf2cc2b8bc3716b74b2b4522f5d 0xB0 0x18 0xED 0xA7 ... Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@ C:\Windows\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@4d370831d2c43cd13623e232fed27b7b 0xFB 0xA7 0x78 0xE6 ... Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@ C:\Windows\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@1d68fe701cdea33e477eb204b76f993d 0xAA 0x52 0xC6 0x00 ... Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@ C:\Windows\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@1fac81b91d8e3c5aa4b0a51804d844a3 0xF6 0x0F 0x4E 0x58 ... Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@ C:\Windows\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@f5f62a6129303efb32fbe080bb27835b 0xB1 0xCD 0x45 0x5A ... Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@ C:\Windows\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@fd4e2e1a3940b94dceb5a6a021f2e3c6 0xE3 0x0E 0x66 0xD5 ... Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@ C:\Windows\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@8a8aec57dd6508a385616fbc86791ec2 0xFA 0xEA 0x66 0x7F ... ---- EOF - GMER 1.0.15 ----