GMER 2.2.19882 - http://www.gmer.net Rootkit scan 2016-05-31 20:01:23 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD25 rev.01.0 232,89GB Running: 5hgfbprh.exe; Driver: C:\Users\Lusia\AppData\Local\Temp\pxldqkod.sys ---- User code sections - GMER 2.2 ---- .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3800] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076ef1401 2 bytes JMP 74dbb263 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3800] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076ef1419 2 bytes JMP 74dbb38e C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3800] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076ef1431 2 bytes JMP 74e390f1 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3800] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000076ef144a 2 bytes CALL 74d948ad C:\Windows\syswow64\kernel32.dll .text ... * 9 .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3800] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000076ef14dd 2 bytes JMP 74e389ea C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3800] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000076ef14f5 2 bytes JMP 74e38bc0 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3800] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000076ef150d 2 bytes JMP 74e388e0 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3800] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076ef1525 2 bytes JMP 74e38caa C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3800] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000076ef153d 2 bytes JMP 74dafce8 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3800] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076ef1555 2 bytes JMP 74db6937 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3800] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000076ef156d 2 bytes JMP 74e391a9 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3800] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076ef1585 2 bytes JMP 74e38d0a C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3800] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000076ef159d 2 bytes JMP 74e388a4 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3800] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000076ef15b5 2 bytes JMP 74dafd81 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3800] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000076ef15cd 2 bytes JMP 74dbb324 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3800] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000076ef16b2 2 bytes JMP 74e3906c C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3800] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000076ef16bd 2 bytes JMP 74e38839 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[936] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076ef1401 2 bytes JMP 74dbb263 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[936] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076ef1419 2 bytes JMP 74dbb38e C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[936] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076ef1431 2 bytes JMP 74e390f1 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[936] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000076ef144a 2 bytes CALL 74d948ad C:\Windows\syswow64\kernel32.dll .text ... * 9 .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[936] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000076ef14dd 2 bytes JMP 74e389ea C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[936] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000076ef14f5 2 bytes JMP 74e38bc0 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[936] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000076ef150d 2 bytes JMP 74e388e0 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[936] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076ef1525 2 bytes JMP 74e38caa C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[936] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000076ef153d 2 bytes JMP 74dafce8 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[936] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076ef1555 2 bytes JMP 74db6937 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[936] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000076ef156d 2 bytes JMP 74e391a9 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[936] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076ef1585 2 bytes JMP 74e38d0a C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[936] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000076ef159d 2 bytes JMP 74e388a4 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[936] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000076ef15b5 2 bytes JMP 74dafd81 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[936] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000076ef15cd 2 bytes JMP 74dbb324 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[936] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000076ef16b2 2 bytes JMP 74e3906c C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[936] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000076ef16bd 2 bytes JMP 74e38839 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4144] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076ef1401 2 bytes JMP 74dbb263 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4144] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076ef1419 2 bytes JMP 74dbb38e C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4144] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076ef1431 2 bytes JMP 74e390f1 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4144] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000076ef144a 2 bytes CALL 74d948ad C:\Windows\syswow64\kernel32.dll .text ... * 9 .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4144] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000076ef14dd 2 bytes JMP 74e389ea C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4144] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000076ef14f5 2 bytes JMP 74e38bc0 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4144] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000076ef150d 2 bytes JMP 74e388e0 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4144] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076ef1525 2 bytes JMP 74e38caa C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4144] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000076ef153d 2 bytes JMP 74dafce8 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4144] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076ef1555 2 bytes JMP 74db6937 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4144] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000076ef156d 2 bytes JMP 74e391a9 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4144] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076ef1585 2 bytes JMP 74e38d0a C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4144] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000076ef159d 2 bytes JMP 74e388a4 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4144] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000076ef15b5 2 bytes JMP 74dafd81 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4144] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000076ef15cd 2 bytes JMP 74dbb324 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4144] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000076ef16b2 2 bytes JMP 74e3906c C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4144] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000076ef16bd 2 bytes JMP 74e38839 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1880] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076ef1401 2 bytes JMP 74dbb263 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1880] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076ef1419 2 bytes JMP 74dbb38e C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1880] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076ef1431 2 bytes JMP 74e390f1 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1880] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000076ef144a 2 bytes CALL 74d948ad C:\Windows\syswow64\kernel32.dll .text ... * 9 .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1880] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000076ef14dd 2 bytes JMP 74e389ea C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1880] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000076ef14f5 2 bytes JMP 74e38bc0 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1880] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000076ef150d 2 bytes JMP 74e388e0 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1880] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076ef1525 2 bytes JMP 74e38caa C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1880] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000076ef153d 2 bytes JMP 74dafce8 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1880] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076ef1555 2 bytes JMP 74db6937 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1880] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000076ef156d 2 bytes JMP 74e391a9 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1880] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076ef1585 2 bytes JMP 74e38d0a C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1880] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000076ef159d 2 bytes JMP 74e388a4 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1880] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000076ef15b5 2 bytes JMP 74dafd81 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1880] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000076ef15cd 2 bytes JMP 74dbb324 C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1880] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000076ef16b2 2 bytes JMP 74e3906c C:\Windows\syswow64\kernel32.dll .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1880] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000076ef16bd 2 bytes JMP 74e38839 C:\Windows\syswow64\kernel32.dll ---- User IAT/EAT - GMER 2.2 ---- IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\USER32.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\GDI32.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\advapi32.DLL[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\shell32.DLL[USER32.dll!MessageBoxW] [7fef09f6840] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\shell32.DLL[USER32.dll!DialogBoxParamW] [7fef09f62b0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\shell32.DLL[USER32.dll!MessageBoxIndirectW] [7fef09d0750] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\shell32.DLL[USER32.dll!EnableWindow] [7fef09bef00] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\SHLWAPI.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\SHLWAPI.dll[USER32.dll!DialogBoxParamW] [7fef09f62b0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\SHLWAPI.dll[USER32.dll!DialogBoxParamA] [7fef09f61b0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\SHLWAPI.dll[USER32.dll!MessageBoxW] [7fef09f6840] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\iertutil.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\version.DLL[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\IMM32.DLL[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\MSCTF.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\IEFRAME.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\IEFRAME.dll[USER32.dll!EnableWindow] [7fef09bef00] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\IEFRAME.dll[USER32.dll!DialogBoxParamW] [7fef09f62b0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\IEFRAME.dll[USER32.dll!MessageBoxW] [7fef09f6840] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\IEFRAME.dll[USER32.dll!MessageBoxIndirectW] [7fef09d0750] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\ole32.dll[USER32.dll!EnableWindow] [7fef09bef00] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\ole32.dll[USER32.dll!DialogBoxParamW] [7fef09f62b0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\ole32.dll[USER32.dll!MessageBoxW] [7fef09f6840] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\OLEAUT32.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\OLEAUT32.dll[USER32.dll!EnableWindow] [7fef09bef00] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\comctl32.dll[USER32.dll!EnableWindow] [7fef09bef00] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\comctl32.dll[USER32.dll!DialogBoxIndirectParamW] [7fef09f60d0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\comctl32.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\uxtheme.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\urlmon.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\urlmon.dll[USER32.dll!EnableWindow] [7fef09bef00] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\urlmon.dll[USER32.dll!DialogBoxParamW] [7fef09f62b0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\WININET.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\dwmapi.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\rsaenh.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Program Files\Internet Explorer\ieproxy.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\System32\fwpuclnt.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\srvcli.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\wkscli.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\CRYPT32.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\IEUI.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\PROPSYS.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\windowscodecs.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\oleacc.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\WLDAP32.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\SETUPAPI.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\SETUPAPI.dll[USER32.dll!DialogBoxParamW] [7fef09f62b0] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\SETUPAPI.dll[USER32.dll!EnableWindow] [7fef09bef00] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\SETUPAPI.dll[USER32.dll!MessageBoxW] [7fef09f6840] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\explorerframe.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\explorerframe.dll[USER32.dll!EnableWindow] [7fef09bef00] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\MLANG.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\twext.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\twext.dll[USER32.dll!EnableWindow] [7fef09bef00] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\EhStorShell.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\MPR.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\System32\WINSTA.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\System32\DAVHLPR.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\EhStorAPI.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\credssp.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\schannel.DLL[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\bcrypt.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\cryptnet.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\System32\msxml6.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\system32\tquery.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\System32\StructuredQuery.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\System32\Wpc.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll IAT C:\Program Files\Internet Explorer\iexplore.exe[1764] @ C:\Windows\System32\wevtapi.dll[KERNEL32.dll!GetProcAddress] [7fef09b1c40] C:\Program Files\Internet Explorer\IEShims.dll ---- EOF - GMER 2.2 ----