GMER 1.0.15.15530 - http://www.gmer.net Rootkit scan 2011-03-12 14:58:17 Windows 5.1.2600 Dodatek Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-6 Hitachi_HDS721616PLA380 rev.P22OABEA Running: lp8f3bce.exe; Driver: C:\DOCUME~1\UKASZ~1\USTAWI~1\Temp\pwroqpoc.sys ---- System - GMER 1.0.15 ---- SSDT 899A5C90 ZwAssignProcessToJobObject SSDT 899A6200 ZwDebugActiveProcess SSDT 899A62F0 ZwDuplicateObject SSDT 899A5590 ZwOpenProcess SSDT 899A5800 ZwOpenThread SSDT 899A5FD0 ZwProtectVirtualMemory SSDT 899A60E0 ZwQueueApcThread SSDT 899A5EC0 ZwSetContextThread SSDT 899A5D90 ZwSetInformationThread SSDT 899A2DA0 ZwSetSecurityObject SSDT 899A5B90 ZwSuspendProcess SSDT 899A5A80 ZwSuspendThread SSDT 899A56E0 ZwTerminateProcess SSDT 899A5A50 ZwTerminateThread SSDT 899A66D0 ZwWriteVirtualMemory ---- Kernel code sections - GMER 1.0.15 ---- .xreloc C:\WINDOWS\system32\drivers\ps7alucb.sys unknown last section [0xB9F66000, 0x9F4, 0x40000040] .text C:\WINDOWS\system32\DRIVERS\ati2mtag.sys section is writeable [0xB9879000, 0x1A5044, 0xE8000020] .text C:\WINDOWS\system32\DRIVERS\atksgt.sys section is writeable [0xAA65B300, 0x3AE88, 0xE8000020] .text C:\WINDOWS\system32\DRIVERS\lirsgt.sys section is writeable [0xBA3D8300, 0x1B7E, 0xE8000020] ---- User code sections - GMER 1.0.15 ---- .text C:\WINDOWS\system32\SearchIndexer.exe[1612] kernel32.dll!WriteFile 7C810E27 7 Bytes JMP 00585C0C C:\WINDOWS\system32\MSSRCH.DLL (mssrch.dll/Microsoft Corporation) .text C:\Program Files\ESET\ESET Smart Security\ekrn.exe[1944] kernel32.dll!SetUnhandledExceptionFilter 7C84495D 4 Bytes [C2, 04, 00, 00] ---- User IAT/EAT - GMER 1.0.15 ---- IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [0040EFD0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [0040EDB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [0040EFD0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [0040EFB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [0040EDB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [0040EFD0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [0040EFB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegOpenKeyExA] [00410020] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegCreateKeyExW] [0040FEA0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegCloseKey] [0040FBB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegOpenKeyExW] [004101D0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegOpenUserClassesRoot] [0040F950] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [0040EFD0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [0040EFB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [0040EDB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [0040EF20] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] [0040EDB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [0040EFB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [0040EFD0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegCreateKeyExA] [0040FCB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegOpenKeyExA] [00410020] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegCloseKey] [0040FBB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegOpenKeyExW] [004101D0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [0040EFD0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [0040EFB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\Secur32.dll [ADVAPI32.dll!RegCreateKeyExW] [0040FEA0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\Secur32.dll [ADVAPI32.dll!RegCloseKey] [0040FBB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\Secur32.dll [ADVAPI32.dll!RegOpenKeyExW] [004101D0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [0040EFD0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [0040EFB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegCloseKey] [0040FBB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExW] [004101D0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExA] [0040FCB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExW] [0040FEA0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExA] [00410020] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [0040EF20] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [0040EDB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [0040EFB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [0040EFD0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\IPHLPAPI.DLL [ADVAPI32.dll!RegOpenKeyExA] [00410020] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\IPHLPAPI.DLL [ADVAPI32.dll!RegOpenKeyExW] [004101D0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\IPHLPAPI.DLL [ADVAPI32.dll!RegCloseKey] [0040FBB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\IPHLPAPI.DLL [KERNEL32.dll!LoadLibraryA] [0040EFD0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\WS2_32.dll [ADVAPI32.dll!RegOpenKeyExA] [00410020] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\WS2_32.dll [ADVAPI32.dll!RegCreateKeyExA] [0040FCB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\WS2_32.dll [ADVAPI32.dll!RegCloseKey] [0040FBB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] [0040EFD0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!RegOpenKeyExA] [00410020] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!RegCloseKey] [0040FBB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!LoadLibraryA] [0040EFD0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegCloseKey] [0040FBB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegCreateKeyExW] [0040FEA0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegOpenKeyExW] [004101D0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegOpenKeyExA] [00410020] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [0040EFD0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [0040EFB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [0040EDB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [0040EF20] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegCloseKey] [0040FBB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegCreateKeyExA] [0040FCB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegCreateKeyExW] [0040FEA0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegOpenKeyExA] [00410020] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegOpenKeyExW] [004101D0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryA] [0040EFD0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExA] [0040EF20] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExW] [0040EDB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\USERENV.dll [ADVAPI32.dll!RegCreateKeyExW] [0040FEA0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\USERENV.dll [ADVAPI32.dll!RegCloseKey] [0040FBB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\USERENV.dll [ADVAPI32.dll!RegOpenKeyExW] [004101D0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryW] [0040EFB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryExA] [0040EF20] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] [0040EFD0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\PSAPI.DLL [KERNEL32.dll!LoadLibraryA] [0040EFD0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\NETAPI32.dll [ADVAPI32.dll!RegOpenKeyExA] [00410020] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\NETAPI32.dll [ADVAPI32.dll!RegCreateKeyExW] [0040FEA0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\NETAPI32.dll [ADVAPI32.dll!RegOpenKeyExW] [004101D0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\NETAPI32.dll [ADVAPI32.dll!RegCloseKey] [0040FBB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] [0040EFB0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe[328] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] [0040EFD0] C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [00407760] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [00407980] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [00407960] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [00407760] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [00407980] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [00407960] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] [00407760] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [00407960] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [00407980] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegCreateKeyExA] [00408A00] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegOpenKeyExA] [00408D70] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegCloseKey] [00408900] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegOpenKeyExW] [00408F20] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [00407980] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [00407960] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\Secur32.dll [ADVAPI32.dll!RegCreateKeyExW] [00408BF0] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\Secur32.dll [ADVAPI32.dll!RegCloseKey] [00408900] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\Secur32.dll [ADVAPI32.dll!RegOpenKeyExW] [00408F20] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [00407980] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [00407960] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegCloseKey] [00408900] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegCreateKeyExW] [00408BF0] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegOpenKeyExW] [00408F20] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegOpenKeyExA] [00408D70] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [00407980] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [00407960] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [00407760] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [004078D0] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [00407980] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegCloseKey] [00408900] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExW] [00408F20] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExA] [00408A00] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExW] [00408BF0] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExA] [00408D70] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [004078D0] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [00407760] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [00407960] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [00407980] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegOpenKeyExA] [00408D70] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegCreateKeyExW] [00408BF0] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegCloseKey] [00408900] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegOpenKeyExW] [00408F20] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegOpenUserClassesRoot] [004086A0] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [00407980] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [00407960] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [00407760] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [004078D0] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\PSAPI.DLL [KERNEL32.dll!LoadLibraryA] [00407980] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\WININET.dll [ADVAPI32.dll!RegCreateKeyExW] [00408BF0] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\WININET.dll [ADVAPI32.dll!RegOpenKeyExW] [00408F20] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\WININET.dll [ADVAPI32.dll!RegCreateKeyExA] [00408A00] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\WININET.dll [ADVAPI32.dll!RegOpenKeyExA] [00408D70] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\WININET.dll [ADVAPI32.dll!RegCloseKey] [00408900] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryW] [00407960] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryExW] [00407760] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryA] [00407980] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\NETAPI32.dll [ADVAPI32.dll!RegOpenKeyExA] [00408D70] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\NETAPI32.dll [ADVAPI32.dll!RegCreateKeyExW] [00408BF0] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\NETAPI32.dll [ADVAPI32.dll!RegOpenKeyExW] [00408F20] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\NETAPI32.dll [ADVAPI32.dll!RegCloseKey] [00408900] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] [00407960] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] [00407980] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\USERENV.dll [ADVAPI32.dll!RegCreateKeyExW] [00408BF0] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\USERENV.dll [ADVAPI32.dll!RegCloseKey] [00408900] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\USERENV.dll [ADVAPI32.dll!RegOpenKeyExW] [00408F20] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryW] [00407960] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryExA] [004078D0] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) IAT C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe[1248] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] [00407980] C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (Nero MediaHome/Nero AG) ---- Devices - GMER 1.0.15 ---- AttachedDevice \FileSystem\Ntfs \Ntfs eamon.sys (Amon monitor/ESET) AttachedDevice \Driver\Tcpip \Device\Ip epfwtdi.sys (ESET Personal Firewall TDI filter/ESET) AttachedDevice \Driver\Tcpip \Device\Tcp epfwtdi.sys (ESET Personal Firewall TDI filter/ESET) AttachedDevice \Driver\Tcpip \Device\Udp epfwtdi.sys (ESET Personal Firewall TDI filter/ESET) AttachedDevice \Driver\Tcpip \Device\RawIp epfwtdi.sys (ESET Personal Firewall TDI filter/ESET) ---- Registry - GMER 1.0.15 ---- Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0xD4 0xC3 0x97 0x02 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xFC 0xF0 0x34 0xE2 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xFE 0x4F 0x70 0xC5 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools Lite\ Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0xC2 0x81 0x94 0xD2 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x83 0x07 0x0C 0xB5 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41@khjeh 0x17 0x8E 0x91 0x35 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0xD4 0xC3 0x97 0x02 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0 Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xFC 0xF0 0x34 0xE2 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 1 Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xFE 0x4F 0x70 0xC5 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools Lite\ Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0xC2 0x81 0x94 0xD2 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x83 0x07 0x0C 0xB5 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41@khjeh 0x17 0x8E 0x91 0x35 ... Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@cd042efbbd7f7af1647644e76e06692b 0xC8 0x28 0x51 0xAF ... Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@bca643cdc5c2726b20d2ecedcc62c59b 0x6A 0x9C 0xD6 0x61 ... Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@2c81e34222e8052573023a60d06dd016 0x25 0xDA 0xEC 0x7E ... Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@2582ae41fb52324423be06337561aa48 0x6B 0x65 0x49 0x6A ... Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@caaeda5fd7a9ed7697d9686d4b818472 0xF5 0x1D 0x4D 0x73 ... Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@a4a1bcf2cc2b8bc3716b74b2b4522f5d 0xDF 0x20 0x58 0x62 ... Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@4d370831d2c43cd13623e232fed27b7b 0xFB 0xA7 0x78 0xE6 ... Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@1d68fe701cdea33e477eb204b76f993d 0xAA 0x52 0xC6 0x00 ... Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@1fac81b91d8e3c5aa4b0a51804d844a3 0xF6 0x0F 0x4E 0x58 ... Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@f5f62a6129303efb32fbe080bb27835b 0x37 0xA4 0xAA 0xC3 ... Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@fd4e2e1a3940b94dceb5a6a021f2e3c6 0x2A 0xB7 0xCC 0xB5 ... Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32 Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@ThreadingModel Apartment Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@8a8aec57dd6508a385616fbc86791ec2 0x6C 0x43 0x2D 0x1E ... ---- EOF - GMER 1.0.15 ----