1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Inactive redirecting to Qbyrd

Discussion in 'Malware and Virus Removal Archive' started by achil, 2010/12/30.

Thread Status:
Not open for further replies.
  1. 2010/12/30
    achil

    achil Inactive Thread Starter

    Joined:
    2010/12/30
    Messages:
    6
    Likes Received:
    0
    [Inactive] redirecting to Qbyrd

    Hi all,

    My browser is randomly redirecting toqbyrd when I click on links. Not all links, but there doesn't seem to be a pattern as to which are affected. Any help appreciated. Thanks!

    Similar problem to http://www.windowsbbs.com/malware-virus-removal/97029-active-firefox-redirecting-ask-qbyrd.html


    ran Combofix as suggested by

    broni
    Malware Analyst

    results:


    ComboFix 10-12-30.01 - berto 12/30/2010 21:42:42.2.2 - x86
    Microsoft® Windows Vistaâ„¢ Home Premium 6.0.6002.2.1252.1.1033.18.3581.2644 [GMT -5:00]
    Running from: c:\users\berto\Desktop\ComboFix.exe
    AV: ESET NOD32 Antivirus 4.0 *Disabled/Updated* {CB0F8167-5331-BA19-698E-64816B6801A5}
    SP: ESET NOD32 Antivirus 4.0 *Disabled/Updated* {706E6083-750B-B597-533E-5FF310EF4B18}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\users\berto\AppData\Local\Temp\2396.tmp

    .
    ((((((((((((((((((((((((( Files Created from 2010-11-28 to 2010-12-31 )))))))))))))))))))))))))))))))
    .

    2010-12-31 02:48 . 2010-12-31 02:48 -------- d-----w- c:\users\Default\AppData\Local\temp
    2010-12-30 17:53 . 2010-12-30 17:53 -------- d-----w- c:\users\berto\AppData\Roaming\Malwarebytes
    2010-12-30 17:53 . 2010-12-30 17:53 -------- d-----w- c:\programdata\Malwarebytes
    2010-12-30 02:18 . 2010-12-08 18:11 53632 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\LMIproc.dll
    2010-12-30 02:18 . 2010-12-08 18:11 29568 ----a-w- c:\windows\system32\LMIport.dll
    2010-12-30 02:18 . 2010-12-08 18:12 83360 ----a-w- c:\windows\system32\LMIRfsClientNP.dll
    2010-12-30 02:18 . 2010-09-17 20:40 47640 ----a-w- c:\windows\system32\drivers\LMIRfsDriver.sys
    2010-12-30 02:18 . 2010-12-08 18:11 87424 ----a-w- c:\windows\system32\LMIinit.dll
    2010-12-28 07:26 . 2010-11-16 17:01 6273872 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{549F792C-C0A2-46CD-979F-4D2DC05C18C6}\mpengine.dll
    2010-12-23 01:08 . 2010-12-23 01:08 -------- d-----w- c:\users\berto\AppData\Local\{1538168C-3A74-4795-BF14-48F316E65CA1}
    2010-12-22 01:36 . 2010-12-22 01:36 -------- d-----w- c:\users\berto\AppData\Local\{72022AA2-6E9A-4781-A7AE-2E60179C5732}
    2010-12-21 19:20 . 2010-12-21 20:52 -------- d-----w- c:\users\berto\AppData\Local\Windows Live
    2010-12-20 01:58 . 2010-12-20 01:58 -------- d-----w- c:\programdata\hssff
    2010-12-19 15:54 . 2010-11-04 18:43 506880 ----a-w- c:\program files\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\components\afurladvisor.dll

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-12-31 02:49 . 2010-04-30 01:08 17408 ----a-w- c:\windows\system32\rpcnetp.exe
    2010-12-31 02:49 . 2010-04-30 00:18 57752 ----a-w- c:\windows\system32\rpcnet.dll
    2010-12-30 16:41 . 2010-04-30 01:10 17408 ----a-w- c:\windows\system32\rpcnetp.dll
    2010-11-14 15:55 . 2010-11-14 15:55 29184 ----a-w- c:\windows\system32\CtLoJack.dll
    2010-11-10 07:54 . 2010-11-10 07:54 49016 ----a-w- c:\windows\system32\sirenacm.dll
    2010-10-19 15:41 . 2010-04-30 02:41 222080 ------w- c:\windows\system32\MpSigStub.exe
    2009-05-01 21:02 . 2010-04-30 00:55 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
    2009-05-01 21:02 . 2010-04-30 00:55 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Google Update "= "c:\users\berto\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-08-06 136176]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "OEM02Mon.exe "= "c:\windows\OEM02Mon.exe" [2007-05-10 36864]
    "egui "= "c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-11-16 2054360]
    "AppleSyncNotifier "= "c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-07-23 116040]
    "QuickTime Task "= "c:\program files\QuickTime\QTTask.exe" [2008-05-27 413696]
    "iTunesHelper "= "c:\program files\iTunes\iTunesHelper.exe" [2008-07-30 289064]
    "GrooveMonitor "= "c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
    "NvCplDaemon "= "c:\windows\system32\NvCpl.dll" [2009-06-16 13793824]
    "NVHotkey "= "c:\windows\system32\nvHotkey.dll" [2009-06-16 92704]
    "DivXUpdate "= "c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-06-03 1144104]
    "VMware hqtray "= "c:\program files\VMware\VMware Player\hqtray.exe" [2010-05-21 64048]
    "SunJavaUpdateSched "= "c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
    "Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
    "Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]

    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2006-11-3 703280]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "EnableUIADesktopToggle "= 0 (0x0)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "mixer "=wdmaud.drv

    [HKLM\~\startupfolder\C:^Users^berto^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
    path=c:\users\berto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
    backup=c:\windows\pss\OneNote 2007 Screen Clipper and Launcher.lnk.Startup
    backupExtension=.Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
    2007-09-11 04:43 67488 ----a-w- c:\program files\Adobe\Photoshop Elements 6.01\apdproxy.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue RegistryBooster 2009]
    2008-09-09 10:15 99624 ----a-w- c:\users\berto\Desktop\unieblue dvx\Uniblue\RegistryBooster\StartRegistryBooster.exe

    R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
    R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\RaInfo.sys [x]
    R3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2009-10-20 50704]
    R3 PSSDK42;PSSDK42;c:\windows\system32\Drivers\pssdk42.sys [2010-07-12 38976]
    R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [2010-03-11 25088]
    R3 ucgnsta;BUFFALO WLI-UC-GN Series Wireless LAN Driver;c:\windows\system32\DRIVERS\ucgnsta.sys [2009-03-26 662016]
    R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
    R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
    S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
    S2 AESTFilters;Andrea ST Filters Service;c:\windows\system32\aestsrv.exe [2007-09-20 73728]
    S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
    S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2009-11-16 95896]
    S2 HssWd;Hotspot Shield Monitoring Service;c:\program files\Hotspot Shield\bin\hsswd.exe [2010-10-15 326704]
    S2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [2010-12-07 2228008]
    S2 vmci;VMware vmci;c:\windows\system32\Drivers\vmci.sys [2010-05-21 70704]
    S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files\Common Files\VMware\USB\vmware-usbarbitrator.exe [2010-05-21 539184]
    S3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw5v32.sys [2010-05-31 6638080]


    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    bthsvcs REG_MULTI_SZ BthServ
    LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
    .
    Contents of the 'Scheduled Tasks' folder

    2010-12-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3951315635-3939502661-3455052707-1000Core.job
    - c:\users\berto\AppData\Local\Google\Update\GoogleUpdate.exe [2010-08-06 16:12]

    2010-12-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3951315635-3939502661-3455052707-1000UA.job
    - c:\users\berto\AppData\Local\Google\Update\GoogleUpdate.exe [2010-08-06 16:12]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.yahoo.com/
    mStart Page = hxxp://eis.esnips.com/page/search/?client_uuid=bda82ac0-85c3-4b48-b0d2-41fde8d1391d
    uInternet Settings,ProxyOverride = *.local
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
    IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    LSP: c:\program files\VMware\VMware Player\vsocklib.dll
    TCP: {3812B523-FBE3-4A65-ACB5-0E9EFD3861AD} = 10.63.8.1
    FF - ProfilePath - c:\users\berto\AppData\Roaming\Mozilla\Firefox\Profiles\tu63q4l2.default\
    FF - prefs.js: browser.search.selectedEngine - Google
    FF - prefs.js: browser.startup.homepage - hxxp://en-US.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:eek:fficial
    FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
    FF - Ext: Kaspersky URL Advisor: linkfilter@kaspersky.ru - c:\program files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru
    FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
    FF - Ext: afurladvisor: afurladvisor@anchorfree.com - c:\program files\Mozilla Firefox\extensions\afurladvisor@anchorfree.com
    FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
    FF - Ext: Bonjour Extension for Firefox: bonjour4firefox@apple.com - c:\program files\Bonjour SDK\Bin\FirefoxExtension
    FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
    FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
    FF - Ext: FireTorrent: firetorrent@radicalsoft.com - %profile%\extensions\firetorrent@radicalsoft.com
    FF - Ext: FireFTP: {a7c6cf7f-112c-4500-a7ea-39801a327e5f} - %profile%\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}
    .

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-12-30 21:49
    Windows 6.0.6002 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------

    [HKEY_USERS\S-1-5-21-3951315635-3939502661-3455052707-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*’%«* %]
    @Class= "Shell "

    [HKEY_USERS\S-1-5-21-3951315635-3939502661-3455052707-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*’%«* %\OpenWithList]
    @Class= "Shell "
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    - - - - - - - > 'Explorer.exe'(2724)
    c:\windows\system32\btncopy.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\windows\system32\nvvsvc.exe
    c:\windows\system32\nvvsvc.exe
    c:\windows\system32\WLANExt.exe
    c:\program files\Adobe\Photoshop Elements 6.01\PhotoshopElementsFileAgent.exe
    c:\program files\Bonjour\mDNSResponder.exe
    c:\program files\Hotspot Shield\bin\openvpnas.exe
    c:\program files\Hotspot Shield\HssWPR\hsssrv.exe
    c:\program files\Common Files\Intel\WirelessCommon\RegSrvc.exe
    c:\windows\system32\rpcnet.exe
    c:\windows\system32\STacSV.exe
    c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    c:\program files\Intel\WiFi\bin\EvtEng.exe
    c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
    c:\program files\VMware\VMware Player\vmware-authd.exe
    c:\windows\system32\wbem\unsecapp.exe
    c:\program files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
    c:\windows\system32\wbem\unsecapp.exe
    c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
    .
    **************************************************************************
    .
    Completion time: 2010-12-30 21:55:07 - machine was rebooted
    ComboFix-quarantined-files.txt 2010-12-31 02:54
    ComboFix2.txt 2010-12-30 21:57

    Pre-Run: 13,917,069,312 bytes free
    Post-Run: 13,890,306,048 bytes free
     
    achil,
    #1
  2. 2010/12/30
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Welcome aboard :)

    Never follow steps from some other topic.
    Each computer is a very unique machine.

    Combofix is a very powerful tool, which shouldn't be run without supervision.

    Please, read HERE and post requested logs.

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running tools or applying updates other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.
     
    broni,
    #2


  3. to hide this advert.

  4. 2010/12/31
    achil

    achil Inactive Thread Starter

    Joined:
    2010/12/30
    Messages:
    6
    Likes Received:
    0
    Malwarebytes' Anti-Malware 1.50.1.1100
    www.malwarebytes.org

    Database version: 5429

    Windows 6.0.6002 Service Pack 2
    Internet Explorer 9.0.7930.16406

    12/31/2010 3:04:37 PM
    mbam-log-2010-12-31 (15-04-37).txt

    Scan type: Quick scan
    Objects scanned: 142806
    Time elapsed: 3 minute(s), 28 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)









    GMER 1.0.15.15530 - http://www.gmer.net
    Rootkit scan 2010-12-31 11:37:06
    Windows 6.0.6002 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-2 Hitachi_HTS543232L9A300 rev.FB4OC40C
    Running: sspoc50w.exe; Driver: C:\Users\berto\AppData\Local\Temp\uglcqpow.sys


    ---- User code sections - GMER 1.0.15 ----

    .text C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe[1828] kernel32.dll!SetUnhandledExceptionFilter 76E7A84F 4 Bytes [C2, 04, 00, 00]
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] kernel32.dll!CreateThread 76E9C90E 5 Bytes JMP 6D8D474C C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!CreateDialogParamW 769972A2 5 Bytes JMP 6DA03958 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!GetAsyncKeyState 7699863C 5 Bytes JMP 6DA03100 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!SetWindowsHookExW 769987AD 5 Bytes JMP 6D8AFC34 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!CallNextHookEx 76998E3B 5 Bytes JMP 6D9057CD C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!UnhookWindowsHookEx 769998DB 5 Bytes JMP 6D860359 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!EnableWindow 7699CD8B 5 Bytes JMP 6D800D3E C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!DefWindowProcA 7699DB88 7 Bytes JMP 6D8DE1E6 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!CreateWindowExA 7699DC2A 5 Bytes JMP 6D8AF1A3 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!CreateWindowExW 769A1305 5 Bytes JMP 6D8F4491 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!GetKeyState 769A8CB1 5 Bytes JMP 6D84BC3D C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!DefWindowProcW 769B03B4 7 Bytes JMP 6D8FFC01 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!IsDialogMessageW 769B0745 5 Bytes JMP 6D80289B C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!CreateDialogParamA 769B17AA 5 Bytes JMP 6DA03921 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!IsDialogMessage 769B1847 5 Bytes JMP 6DA03176 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!CreateDialogIndirectParamA 769B26F1 5 Bytes JMP 6DA0398F C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!CreateDialogIndirectParamW 769B9A62 5 Bytes JMP 6DA039C6 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!SetKeyboardState 769C0987 5 Bytes JMP 6DA0351B C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!DialogBoxParamW 769C10B0 5 Bytes JMP 6D8F9DAC C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!DialogBoxIndirectParamW 769C2EF5 5 Bytes JMP 6DA02DA1 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!SendInput 769C2F75 5 Bytes JMP 6DA04080 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!EndDialog 769C326E 5 Bytes JMP 6D8057B6 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!SetCursorPos 769D6FB2 5 Bytes JMP 6DA040D8 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!DialogBoxParamA 769D8152 5 Bytes JMP 6DA02D3E C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!DialogBoxIndirectParamA 769D847D 5 Bytes JMP 6DA02E04 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!MessageBoxIndirectA 769ED4D9 5 Bytes JMP 6DA02CD3 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!MessageBoxIndirectW 769ED5D3 5 Bytes JMP 6DA02C68 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!MessageBoxExA 769ED639 2 Bytes JMP 6DA02C06 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!MessageBoxExA + 3 769ED63C 2 Bytes [01, F7] {ADD EDI, ESI}
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!MessageBoxExW 769ED65D 2 Bytes JMP 6DA02BA4 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!MessageBoxExW + 3 769ED660 2 Bytes [01, F7] {ADD EDI, ESI}
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] USER32.dll!keybd_event 769ED972 5 Bytes JMP 6DA04413 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] SHELL32.dll!SHRestricted + D95 76FB89A8 4 Bytes [52, 3F, 63, 6D]
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] SHELL32.dll!SHRestricted + D9D 76FB89B0 8 Bytes [A0, 3E, 63, 6D, 95, 75, 62, ...] {MOV AL, [0x956d633e]; JNZ 0x69; INSD }
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] ole32.dll!OleLoadFromStream 76851E80 5 Bytes JMP 6DA02FDA C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[2844] ole32.dll!CoCreateInstance 76889F3E 5 Bytes JMP 6D8DD418 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[3868] USER32.dll!DialogBoxParamW 769C10B0 5 Bytes JMP 6D8F9DAC C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[3868] USER32.dll!DialogBoxIndirectParamW 769C2EF5 5 Bytes JMP 6DA02DA1 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[3868] USER32.dll!DialogBoxParamA 769D8152 5 Bytes JMP 6DA02D3E C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[3868] USER32.dll!DialogBoxIndirectParamA 769D847D 5 Bytes JMP 6DA02E04 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[3868] USER32.dll!MessageBoxIndirectA 769ED4D9 5 Bytes JMP 6DA02CD3 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[3868] USER32.dll!MessageBoxIndirectW 769ED5D3 5 Bytes JMP 6DA02C68 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[3868] USER32.dll!MessageBoxExA 769ED639 2 Bytes JMP 6DA02C06 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[3868] USER32.dll!MessageBoxExA + 3 769ED63C 2 Bytes [01, F7] {ADD EDI, ESI}
    .text C:\Program Files\Internet Explorer\iexplore.exe[3868] USER32.dll!MessageBoxExW 769ED65D 2 Bytes JMP 6DA02BA4 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[3868] USER32.dll!MessageBoxExW + 3 769ED660 2 Bytes [01, F7] {ADD EDI, ESI}
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] kernel32.dll!CreateThread 76E9C90E 5 Bytes JMP 6D8D474C C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!CreateDialogParamW 769972A2 5 Bytes JMP 6DA03958 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!GetAsyncKeyState 7699863C 5 Bytes JMP 6DA03100 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!SetWindowsHookExW 769987AD 5 Bytes JMP 6D8AFC34 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!CallNextHookEx 76998E3B 5 Bytes JMP 6D9057CD C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!UnhookWindowsHookEx 769998DB 5 Bytes JMP 6D860359 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!EnableWindow 7699CD8B 5 Bytes JMP 6D800D3E C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!DefWindowProcA 7699DB88 7 Bytes JMP 6D8DE1E6 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!CreateWindowExA 7699DC2A 5 Bytes JMP 6D8AF1A3 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!CreateWindowExW 769A1305 5 Bytes JMP 6D8F4491 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!GetKeyState 769A8CB1 5 Bytes JMP 6D84BC3D C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!DefWindowProcW 769B03B4 7 Bytes JMP 6D8FFC01 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!IsDialogMessageW 769B0745 5 Bytes JMP 6D80289B C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!CreateDialogParamA 769B17AA 5 Bytes JMP 6DA03921 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!IsDialogMessage 769B1847 5 Bytes JMP 6DA03176 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!CreateDialogIndirectParamA 769B26F1 5 Bytes JMP 6DA0398F C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!CreateDialogIndirectParamW 769B9A62 5 Bytes JMP 6DA039C6 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!SetKeyboardState 769C0987 5 Bytes JMP 6DA0351B C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!DialogBoxParamW 769C10B0 5 Bytes JMP 6D8F9DAC C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!DialogBoxIndirectParamW 769C2EF5 5 Bytes JMP 6DA02DA1 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!SendInput 769C2F75 5 Bytes JMP 6DA04080 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!EndDialog 769C326E 5 Bytes JMP 6D8057B6 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!SetCursorPos 769D6FB2 5 Bytes JMP 6DA040D8 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!DialogBoxParamA 769D8152 5 Bytes JMP 6DA02D3E C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!DialogBoxIndirectParamA 769D847D 5 Bytes JMP 6DA02E04 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!MessageBoxIndirectA 769ED4D9 5 Bytes JMP 6DA02CD3 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!MessageBoxIndirectW 769ED5D3 5 Bytes JMP 6DA02C68 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!MessageBoxExA 769ED639 2 Bytes JMP 6DA02C06 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!MessageBoxExA + 3 769ED63C 2 Bytes [01, F7] {ADD EDI, ESI}
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!MessageBoxExW 769ED65D 2 Bytes JMP 6DA02BA4 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!MessageBoxExW + 3 769ED660 2 Bytes [01, F7] {ADD EDI, ESI}
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] USER32.dll!keybd_event 769ED972 5 Bytes JMP 6DA04413 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] SHELL32.dll!SHRestricted + D95 76FB89A8 4 Bytes [52, 3F, 63, 6D]
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] SHELL32.dll!SHRestricted + D9D 76FB89B0 8 Bytes [A0, 3E, 63, 6D, 95, 75, 62, ...] {MOV AL, [0x956d633e]; JNZ 0x69; INSD }
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] ole32.dll!OleLoadFromStream 76851E80 5 Bytes JMP 6DA02FDA C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\iexplore.exe[4528] ole32.dll!CoCreateInstance 76889F3E 5 Bytes JMP 6D8DD418 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)

    ---- User IAT/EAT - GMER 1.0.15 ----
     
    achil,
    #3
  5. 2010/12/31
    achil

    achil Inactive Thread Starter

    Joined:
    2010/12/30
    Messages:
    6
    Likes Received:
    0
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SearchPathW] [6D623A9D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [6D622040] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CopyFileW] [6D6201B0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!MoveFileW] [6D622947] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!DeleteFileW] [6D620E0D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateProcessW] [6D61C1A7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6D623D06] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindClose] [6D625AC1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] [6D6248DA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] [6D624FD2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [6D621BA8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateFileW] [6D620827] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6D61FC25] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [6D621D2C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6D61F487] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6D630FAF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegEnumValueW] [6D631875] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegOpenKeyExW] [6D630079] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryValueExW] [6D630C54] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegDeleteKeyW] [6D630426] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCreateKeyExW] [6D62FB73] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCloseKey] [6D6302A6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [6D622040] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [6D621BA8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CopyFileW] [6D6201B0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [6D621D2C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CreateFileW] [6D620827] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SearchPathW] [6D623A9D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!DeleteFileW] [6D620E0D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindClose] [6D625AC1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] [6D624C5A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] [6D624867] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] [6D624FD2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] [6D6248DA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesA] [6D61DD52] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryA] [6D6236F2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesA] [6D61DFAA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryA] [6D622EC2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryA] [6D62349C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileA] [6D620CE2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesW] [6D61DE7D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryW] [6D623D06] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesW] [6D61E0D8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryW] [6D622FF0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileW] [6D620E0D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileW] [6D622947] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryW] [6D6235C7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileA] [6D6228D4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [6D621BA8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessA] [6D61BE1B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessW] [6D61C1A7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileA] [6D6206DE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileW] [6D620827] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] [6D621D2C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6D621D2C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!ReplaceFileW] [6D622C48] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!WritePrivateProfileStringW] [6D61FC25] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringW] [6D61F487] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringA] [6D61F332] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!DeleteFileW] [6D620E0D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [6D622040] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesW] [6D61E0D8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileW] [6D620827] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] [6D624FD2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] [6D6248DA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathW] [6D623A9D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesW] [6D61DE7D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesA] [6D61DFAA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileA] [6D6206DE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] [6D624C5A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] [6D624867] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindClose] [6D625AC1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathA] [6D62431D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesA] [6D61DD52] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [6D621BA8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpW] [6D621A71] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpA] [6D62193A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCloseKey] [6D6302A6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExA] [6D62FA0B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyA] [6D6302F9] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyA] [6D630DCF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExA] [6D62FF1D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExW] [6D62FB73] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExW] [6D630079] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExW] [6D63159D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueW] [6D63095D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyW] [6D630426] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6D630FAF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExW] [6D630C54] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueW] [6D631875] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyW] [6D6312E0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExA] [6D631431] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueA] [6D631709] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyA] [6D63118F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExA] [6D630AD9] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionW] [6D61EF7B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] [6D6248DA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!ReplaceFileW] [6D622C48] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionNamesW] [6D61F1FB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileSectionW] [6D61F9A5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6D61FC25] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateHardLinkW] [6D620B2F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6D623D06] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CopyFileW] [6D6201B0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetBinaryTypeW] [6D61EA7E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [6D622040] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateProcessW] [6D61C1A7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileW] [6D622947] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] [6D624FD2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindClose] [6D625AC1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameA] [6D61E6E2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesA] [6D61DD52] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SearchPathW] [6D623A9D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileIntW] [6D61ECF5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6D61F487] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!RemoveDirectoryW] [6D6235C7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateDirectoryW] [6D622FF0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!DeleteFileW] [6D620E0D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetFileAttributesW] [6D61E0D8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesW] [6D61DE7D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileExW] [6D62296C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameW] [6D61E81F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6D621D2C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateFileW] [6D620827] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesExW] [6D61E343] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [6D621BA8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetLongPathNameW] [6D61E5B1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [USER32.dll!LoadImageW] [6D621097] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [USER32.dll!WinHelpW] [6D621A71] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [USER32.dll!PrivateExtractIconsW] [6D62158C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringByKeyW] [6D627C22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHCreateStreamOnFileW] [6D62936C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryKeyW] [6D627A89] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringW] [6D627B54] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyA] [6D6293CD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCombineW] [6D627FE0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHOpenRegStream2W] [6D629825] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryW] [6D628392] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsURLW] [6D628AB4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootA] [6D6286C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootW] [6D628720] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripToRootW] [6D628FC2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFindOnPathW] [6D62821D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripPathW] [6D628F10] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRemoveArgsW] [6D628CEA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetBoolUSValueW] [6D629F57] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathSkipRootW] [6D628E5E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryEmptyW] [6D628448] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsSystemFolderW] [6D6287D9] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryA] [6D628337] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRelativePathToW] [6D628C2C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootA] [6D627E07] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetPathW] [6D62A083] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegSetPathW] [6D62A58D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetUSValueW] [6D62A15A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCreateFromUrlW] [6D6280A5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHQueryValueExW] [6D629A89] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetValueW] [6D62A237] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsNetworkPathW] [6D6284FE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerShareW] [6D6289FE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerW] [6D628948] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathUnExpandEnvStringsW] [6D62907E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathMakeSystemFolderW] [6D628B6A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCW] [6D628892] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRelativeW] [6D62866A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHGetValueW] [6D629757] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootW] [6D627E65] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteValueW] [6D6294EA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHSetValueW] [6D62A806] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumKeyExW] [6D6295AF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumValueW] [6D629680] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFileExistsW] [6D628164] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyW] [6D62942B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile] [6D61DB30] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindClose] [6D625AC1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] [6D624FD2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [6D622040] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!SearchPathW] [6D623A9D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateProcessW] [6D61C1A7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!DeleteFileW] [6D620E0D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetShortPathNameW] [6D61E81F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesExW] [6D61E343] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateFileW] [6D620827] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6D621D2C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesW] [6D61DE7D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [6D621BA8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathUnExpandEnvStringsA] [6D62901D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteKeyA] [6D6293CD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteValueW] [6D6294EA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
     
    achil,
    #4
  6. 2010/12/31
    achil

    achil Inactive Thread Starter

    Joined:
    2010/12/30
    Messages:
    6
    Likes Received:
    0
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueA] [6D62A79C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueW] [6D62A806] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCreateFromUrlW] [6D6280A5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetUSValueA] [6D62A0EA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueA] [6D6296ED] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueW] [6D629757] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueA] [6D62A1CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueW] [6D62A237] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[2844] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SearchPathW] [6D623A9D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [6D622040] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CopyFileW] [6D6201B0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!MoveFileW] [6D622947] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!DeleteFileW] [6D620E0D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateProcessW] [6D61C1A7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6D623D06] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindClose] [6D625AC1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] [6D6248DA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] [6D624FD2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [6D621BA8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateFileW] [6D620827] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6D61FC25] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [6D621D2C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6D61F487] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6D630FAF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegEnumValueW] [6D631875] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegOpenKeyExW] [6D630079] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryValueExW] [6D630C54] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegDeleteKeyW] [6D630426] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCreateKeyExW] [6D62FB73] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCloseKey] [6D6302A6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [6D622040] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [6D621BA8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CopyFileW] [6D6201B0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [6D621D2C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CreateFileW] [6D620827] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SearchPathW] [6D623A9D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!DeleteFileW] [6D620E0D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindClose] [6D625AC1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] [6D624C5A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] [6D624867] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] [6D624FD2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] [6D6248DA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesA] [6D61DD52] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryA] [6D6236F2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesA] [6D61DFAA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryA] [6D622EC2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryA] [6D62349C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileA] [6D620CE2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesW] [6D61DE7D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryW] [6D623D06] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesW] [6D61E0D8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryW] [6D622FF0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileW] [6D620E0D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileW] [6D622947] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryW] [6D6235C7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileA] [6D6228D4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [6D621BA8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessA] [6D61BE1B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessW] [6D61C1A7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileA] [6D6206DE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileW] [6D620827] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] [6D621D2C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6D621D2C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!ReplaceFileW] [6D622C48] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!WritePrivateProfileStringW] [6D61FC25] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringW] [6D61F487] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringA] [6D61F332] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!DeleteFileW] [6D620E0D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [6D622040] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesW] [6D61E0D8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileW] [6D620827] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] [6D624FD2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] [6D6248DA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathW] [6D623A9D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesW] [6D61DE7D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesA] [6D61DFAA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileA] [6D6206DE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] [6D624C5A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] [6D624867] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindClose] [6D625AC1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathA] [6D62431D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesA] [6D61DD52] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [6D621BA8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpW] [6D621A71] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpA] [6D62193A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCloseKey] [6D6302A6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExA] [6D62FA0B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyA] [6D6302F9] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyA] [6D630DCF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExA] [6D62FF1D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExW] [6D62FB73] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExW] [6D630079] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExW] [6D63159D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueW] [6D63095D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyW] [6D630426] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6D630FAF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExW] [6D630C54] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueW] [6D631875] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyW] [6D6312E0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExA] [6D631431] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueA] [6D631709] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyA] [6D63118F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExA] [6D630AD9] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionW] [6D61EF7B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] [6D6248DA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!ReplaceFileW] [6D622C48] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionNamesW] [6D61F1FB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileSectionW] [6D61F9A5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6D61FC25] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateHardLinkW] [6D620B2F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6D623D06] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CopyFileW] [6D6201B0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetBinaryTypeW] [6D61EA7E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [6D622040] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateProcessW] [6D61C1A7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileW] [6D622947] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] [6D624FD2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindClose] [6D625AC1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameA] [6D61E6E2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesA] [6D61DD52] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SearchPathW] [6D623A9D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileIntW] [6D61ECF5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6D61F487] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!RemoveDirectoryW] [6D6235C7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateDirectoryW] [6D622FF0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!DeleteFileW] [6D620E0D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetFileAttributesW] [6D61E0D8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesW] [6D61DE7D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileExW] [6D62296C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameW] [6D61E81F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6D621D2C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateFileW] [6D620827] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesExW] [6D61E343] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [6D621BA8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetLongPathNameW] [6D61E5B1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [USER32.dll!LoadImageW] [6D621097] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [USER32.dll!WinHelpW] [6D621A71] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
     
    achil,
    #5
  7. 2010/12/31
    achil

    achil Inactive Thread Starter

    Joined:
    2010/12/30
    Messages:
    6
    Likes Received:
    0
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [USER32.dll!PrivateExtractIconsW] [6D62158C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringByKeyW] [6D627C22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHCreateStreamOnFileW] [6D62936C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryKeyW] [6D627A89] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringW] [6D627B54] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyA] [6D6293CD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCombineW] [6D627FE0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHOpenRegStream2W] [6D629825] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryW] [6D628392] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsURLW] [6D628AB4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootA] [6D6286C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootW] [6D628720] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripToRootW] [6D628FC2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFindOnPathW] [6D62821D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripPathW] [6D628F10] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRemoveArgsW] [6D628CEA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetBoolUSValueW] [6D629F57] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathSkipRootW] [6D628E5E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryEmptyW] [6D628448] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsSystemFolderW] [6D6287D9] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryA] [6D628337] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRelativePathToW] [6D628C2C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootA] [6D627E07] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetPathW] [6D62A083] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegSetPathW] [6D62A58D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetUSValueW] [6D62A15A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCreateFromUrlW] [6D6280A5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHQueryValueExW] [6D629A89] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetValueW] [6D62A237] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsNetworkPathW] [6D6284FE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerShareW] [6D6289FE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerW] [6D628948] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathUnExpandEnvStringsW] [6D62907E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathMakeSystemFolderW] [6D628B6A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCW] [6D628892] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRelativeW] [6D62866A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHGetValueW] [6D629757] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootW] [6D627E65] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteValueW] [6D6294EA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHSetValueW] [6D62A806] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumKeyExW] [6D6295AF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumValueW] [6D629680] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFileExistsW] [6D628164] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyW] [6D62942B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile] [6D61DB30] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindClose] [6D625AC1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] [6D624FD2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [6D622040] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!SearchPathW] [6D623A9D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateProcessW] [6D61C1A7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!DeleteFileW] [6D620E0D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetShortPathNameW] [6D61E81F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesExW] [6D61E343] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateFileW] [6D620827] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6D621D2C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesW] [6D61DE7D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [6D621BA8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathUnExpandEnvStringsA] [6D62901D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteKeyA] [6D6293CD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteValueW] [6D6294EA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueA] [6D62A79C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueW] [6D62A806] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCreateFromUrlW] [6D6280A5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetUSValueA] [6D62A0EA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueA] [6D6296ED] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueW] [6D629757] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueA] [6D62A1CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueW] [6D62A237] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
    IAT C:\Program Files\Internet Explorer\iexplore.exe[4528] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] [6D61A057] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
     
    achil,
    #6
  8. 2010/12/31
    achil

    achil Inactive Thread Starter

    Joined:
    2010/12/30
    Messages:
    6
    Likes Received:
    0
    ---- Devices - GMER 1.0.15 ----

    AttachedDevice \FileSystem\Ntfs \Ntfs eamon.sys (Amon monitor/ESET)
    AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 VMkbd.sys
    AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 VMkbd.sys

    Device \Driver\usbuhci \Device\USBPDO-0 hcmon.sys
    Device \Driver\usbuhci \Device\USBPDO-1 hcmon.sys
    Device \Driver\usbehci \Device\USBPDO-2 hcmon.sys
    Device \Driver\usbuhci \Device\USBPDO-3 hcmon.sys
    Device \Driver\usbuhci \Device\USBPDO-4 hcmon.sys
    Device \Driver\usbuhci \Device\USBPDO-5 hcmon.sys
    Device \Driver\usbehci \Device\USBPDO-6 hcmon.sys
    Device \Driver\usbhub \Device\USBPDO-7 hcmon.sys
    Device \Driver\usbhub \Device\USBPDO-9 hcmon.sys
    Device \Driver\usbhub \Device\00000075 hcmon.sys
    Device \Driver\usbhub \Device\00000076 hcmon.sys
    Device \Driver\usbhub \Device\00000077 hcmon.sys
    Device \Driver\usbhub \Device\00000078 hcmon.sys
    Device \Driver\usbhub \Device\00000079 hcmon.sys
    Device \Driver\usbuhci \Device\USBFDO-0 hcmon.sys
    Device \Driver\usbuhci \Device\USBFDO-1 hcmon.sys
    Device \Driver\usbhub \Device\0000007a hcmon.sys
    Device \Driver\usbehci \Device\USBFDO-2 hcmon.sys
    Device \Driver\usbhub \Device\0000007b hcmon.sys
    Device \Driver\usbuhci \Device\USBFDO-3 hcmon.sys
    Device \Driver\usbuhci \Device\USBFDO-4 hcmon.sys
    Device \Driver\usbuhci \Device\USBFDO-5 hcmon.sys
    Device \Driver\usbehci \Device\USBFDO-6 hcmon.sys

    ---- Registry - GMER 1.0.15 ----

    Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001fe2dbac3c
    Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001fe2dbac3c@0017e6241710 0x34 0x20 0x47 0x7E ...
    Reg HKLM\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\001fe2dbac3c (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\001fe2dbac3c@0017e6241710 0x34 0x20 0x47 0x7E ...

    ---- EOF - GMER 1.0.15 ----






    MBRCheck, version 1.2.3
    (c) 2010, AD

    Command-line:
    Windows Version: Windows Vista Home Premium Edition
    Windows Information: Service Pack 2 (build 6002), 32-bit
    Base Board Manufacturer: Dell Inc.
    BIOS Manufacturer: Dell Inc.
    System Manufacturer: Dell Inc.
    System Product Name: XPS M1530
    Logical Drives Mask: 0x0000000e

    Kernel Drivers (total 160):
    0x82246000 \SystemRoot\system32\ntkrnlpa.exe
    0x82213000 \SystemRoot\system32\hal.dll
    0x8040F000 \SystemRoot\system32\kdcom.dll
    0x80416000 \SystemRoot\system32\mcupdate_GenuineIntel.dll
    0x80486000 \SystemRoot\system32\PSHED.dll
    0x80497000 \SystemRoot\system32\BOOTVID.dll
    0x8049F000 \SystemRoot\system32\CLFS.SYS
    0x804E0000 \SystemRoot\system32\CI.dll
    0x80603000 \SystemRoot\system32\drivers\Wdf01000.sys
    0x8067F000 \SystemRoot\system32\drivers\WDFLDR.SYS
    0x8068C000 \SystemRoot\system32\drivers\acpi.sys
    0x806D2000 \SystemRoot\system32\drivers\WMILIB.SYS
    0x806DB000 \SystemRoot\system32\drivers\msisadrv.sys
    0x806E3000 \SystemRoot\system32\drivers\pci.sys
    0x8070A000 \SystemRoot\System32\drivers\partmgr.sys
    0x80719000 \SystemRoot\system32\DRIVERS\compbatt.sys
    0x8071C000 \SystemRoot\system32\DRIVERS\BATTC.SYS
    0x80726000 \SystemRoot\system32\drivers\volmgr.sys
    0x80735000 \SystemRoot\System32\drivers\volmgrx.sys
    0x8077F000 \SystemRoot\system32\drivers\intelide.sys
    0x80786000 \SystemRoot\system32\drivers\PCIIDEX.SYS
    0x80794000 \SystemRoot\System32\drivers\mountmgr.sys
    0x807A4000 \SystemRoot\system32\drivers\atapi.sys
    0x807AC000 \SystemRoot\system32\drivers\ataport.SYS
    0x807CA000 \SystemRoot\system32\drivers\msahci.sys
    0x805C0000 \SystemRoot\system32\drivers\fltmgr.sys
    0x807D4000 \SystemRoot\system32\drivers\fileinfo.sys
    0x807E4000 \SystemRoot\System32\Drivers\PxHelp20.sys
    0x8B405000 \SystemRoot\System32\Drivers\ksecdd.sys
    0x8B476000 \SystemRoot\system32\drivers\ndis.sys
    0x8B581000 \SystemRoot\system32\drivers\msrpc.sys
    0x8B5AC000 \SystemRoot\system32\drivers\NETIO.SYS
    0x8B60D000 \SystemRoot\System32\drivers\tcpip.sys
    0x8B6F7000 \SystemRoot\System32\drivers\fwpkclnt.sys
    0x8B804000 \SystemRoot\System32\Drivers\Ntfs.sys
    0x8B914000 \SystemRoot\system32\drivers\volsnap.sys
    0x8B94D000 \SystemRoot\System32\Drivers\spldr.sys
    0x8B955000 \SystemRoot\System32\Drivers\mup.sys
    0x8B964000 \SystemRoot\System32\drivers\ecache.sys
    0x8B98B000 \SystemRoot\system32\drivers\disk.sys
    0x8B99C000 \SystemRoot\system32\drivers\CLASSPNP.SYS
    0x8B9BD000 \SystemRoot\system32\drivers\crcdisk.sys
    0x8B9E8000 \SystemRoot\system32\DRIVERS\tunnel.sys
    0x8B9F3000 \SystemRoot\system32\DRIVERS\tunmp.sys
    0x8B712000 \SystemRoot\system32\DRIVERS\intelppm.sys
    0x8F404000 \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    0x8FD55000 \SystemRoot\system32\DRIVERS\nvBridge.kmd
    0x8FD57000 \SystemRoot\System32\drivers\dxgkrnl.sys
    0x8B721000 \SystemRoot\System32\drivers\watchdog.sys
    0x8B72D000 \SystemRoot\system32\DRIVERS\usbuhci.sys
    0x8B738000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
    0x8B776000 \SystemRoot\system32\DRIVERS\usbehci.sys
    0x8FE09000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
    0x8FE96000 \SystemRoot\system32\DRIVERS\yk60x86.sys
    0x90002000 \SystemRoot\system32\DRIVERS\NETw5v32.sys
    0x90661000 \SystemRoot\system32\DRIVERS\ohci1394.sys
    0x90671000 \SystemRoot\system32\DRIVERS\1394BUS.SYS
    0x9067F000 \SystemRoot\system32\DRIVERS\sdbus.sys
    0x90699000 \SystemRoot\system32\DRIVERS\rimmptsk.sys
    0x906A8000 \SystemRoot\system32\DRIVERS\rimsptsk.sys
    0x906BC000 \SystemRoot\system32\DRIVERS\rixdptsk.sys
    0x9070D000 \SystemRoot\system32\DRIVERS\i8042prt.sys
    0x90720000 \SystemRoot\system32\DRIVERS\mouclass.sys
    0x9072B000 \SystemRoot\system32\DRIVERS\kbdclass.sys
    0x90736000 \??\C:\Windows\system32\drivers\VMkbd.sys
    0x9073B000 \SystemRoot\system32\DRIVERS\cdrom.sys
    0x90753000 \SystemRoot\System32\Drivers\GEARAspiWDM.sys
    0x90756000 \SystemRoot\system32\DRIVERS\CmBatt.sys
    0x9075A000 \SystemRoot\system32\DRIVERS\wmiacpi.sys
    0x90763000 \SystemRoot\system32\DRIVERS\lmimirr.sys
    0x90764000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
    0x90785000 \SystemRoot\system32\DRIVERS\msiscsi.sys
    0x907B4000 \SystemRoot\system32\DRIVERS\storport.sys
    0x907F5000 \SystemRoot\system32\DRIVERS\TDI.SYS
    0x8FEE2000 \SystemRoot\system32\DRIVERS\HssDrv.sys
    0x8FEF2000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
    0x8FF09000 \SystemRoot\system32\DRIVERS\ndistapi.sys
    0x8FF14000 \SystemRoot\system32\DRIVERS\ndiswan.sys
    0x8FF37000 \SystemRoot\system32\DRIVERS\raspppoe.sys
    0x8FF46000 \SystemRoot\system32\DRIVERS\raspptp.sys
    0x8FF5A000 \SystemRoot\system32\DRIVERS\rassstp.sys
    0x8FF6F000 \SystemRoot\system32\DRIVERS\taphss.sys
    0x8FF76000 \SystemRoot\system32\DRIVERS\termdd.sys
    0x90000000 \SystemRoot\system32\DRIVERS\swenum.sys
    0x8FF86000 \SystemRoot\system32\DRIVERS\ks.sys
    0x8FFB0000 \SystemRoot\system32\DRIVERS\mssmbios.sys
    0x8FFBA000 \SystemRoot\system32\DRIVERS\umbus.sys
    0x8FFC7000 \SystemRoot\system32\DRIVERS\usbhub.sys
    0x8B785000 \SystemRoot\System32\Drivers\NDProxy.SYS
    0x8B796000 \SystemRoot\system32\drivers\stwrt.sys
    0x90C05000 \SystemRoot\system32\drivers\portcls.sys
    0x90C32000 \SystemRoot\system32\drivers\drmk.sys
    0x90C57000 \SystemRoot\System32\Drivers\tcusb.sys
    0x90C5F000 \SystemRoot\System32\Drivers\USBD.SYS
    0x90C61000 \SystemRoot\system32\DRIVERS\usbccgp.sys
    0x90C78000 \SystemRoot\system32\DRIVERS\hidusb.sys
    0x90C81000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
    0x90C91000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
    0x90C98000 \SystemRoot\system32\DRIVERS\OEM02Dev.sys
    0x90CD2000 \SystemRoot\system32\DRIVERS\OEM02Vfx.sys
    0x90CD4000 \SystemRoot\system32\DRIVERS\NuidFltr.sys
    0x90CDB000 \SystemRoot\system32\DRIVERS\mouhid.sys
    0x90CE3000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
    0x90CEC000 \SystemRoot\System32\Drivers\Null.SYS
    0x90CF3000 \SystemRoot\System32\Drivers\Beep.SYS
    0x90CFA000 \SystemRoot\system32\DRIVERS\ehdrv.sys
    0x90D20000 \SystemRoot\System32\drivers\vga.sys
    0x90D2C000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
    0x90D34000 \SystemRoot\system32\drivers\rdpencdd.sys
    0x90D3C000 \SystemRoot\System32\Drivers\Msfs.SYS
    0x90D47000 \SystemRoot\System32\Drivers\Npfs.SYS
    0x90D55000 \SystemRoot\System32\DRIVERS\rasacd.sys
    0x90D5E000 \SystemRoot\system32\DRIVERS\tdx.sys
    0x90D74000 \SystemRoot\system32\DRIVERS\smb.sys
    0x90D88000 \SystemRoot\system32\drivers\afd.sys
    0x9140B000 \SystemRoot\System32\DRIVERS\netbt.sys
    0x9143D000 \SystemRoot\system32\drivers\ws2ifsl.sys
    0x91446000 \SystemRoot\system32\DRIVERS\pacer.sys
    0x9145C000 \SystemRoot\system32\DRIVERS\netbios.sys
    0x9146A000 \SystemRoot\system32\DRIVERS\wanarp.sys
    0x9147D000 \SystemRoot\system32\DRIVERS\rdbss.sys
    0x914B9000 \SystemRoot\system32\drivers\nsiproxy.sys
    0x914C3000 \SystemRoot\System32\Drivers\dfsc.sys
    0x914DA000 \SystemRoot\System32\Drivers\crashdmp.sys
    0x914E7000 \SystemRoot\System32\Drivers\dump_dumpata.sys
    0x914F2000 \SystemRoot\System32\Drivers\dump_msahci.sys
    0x996E0000 \SystemRoot\System32\win32k.sys
    0x914FC000 \SystemRoot\System32\drivers\Dxapi.sys
    0x99900000 \SystemRoot\System32\TSDDD.dll
    0x99920000 \SystemRoot\System32\cdd.dll
    0x91515000 \SystemRoot\system32\drivers\luafv.sys
    0x91530000 \SystemRoot\system32\DRIVERS\eamon.sys
    0x9F209000 \SystemRoot\system32\drivers\spsys.sys
    0x9F2B9000 \SystemRoot\system32\DRIVERS\lltdio.sys
    0x9F2C9000 \SystemRoot\system32\DRIVERS\nwifi.sys
    0x9F2F3000 \SystemRoot\system32\DRIVERS\ndisuio.sys
    0x9F2FD000 \SystemRoot\system32\DRIVERS\rspndr.sys
    0x9F310000 \SystemRoot\system32\drivers\HTTP.sys
    0x9F37D000 \SystemRoot\System32\DRIVERS\srvnet.sys
    0x9F39A000 \SystemRoot\system32\DRIVERS\bowser.sys
    0x9F3B3000 \SystemRoot\System32\drivers\mpsdrv.sys
    0x9F3C8000 \SystemRoot\system32\drivers\mrxdav.sys
    0x90DD0000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
    0xA0203000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
    0xA023C000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
    0xA0254000 \SystemRoot\System32\DRIVERS\srv2.sys
    0xA027C000 \SystemRoot\System32\DRIVERS\srv.sys
    0xA02E2000 \??\C:\Windows\system32\drivers\hcmon.sys
    0xA02EC000 \??\C:\Windows\system32\Drivers\vmci.sys
    0xA02FC000 \??\C:\Windows\system32\Drivers\vmx86.sys
    0xA03CB000 \SystemRoot\system32\DRIVERS\epfwwfpr.sys
    0xA03E5000 \??\C:\Windows\system32\drivers\LMIRfsDriver.sys
    0xA300A000 \SystemRoot\system32\drivers\peauth.sys
    0xA30E8000 \SystemRoot\System32\Drivers\secdrv.SYS
    0xA30F2000 \SystemRoot\System32\drivers\tcpipreg.sys
    0xA30FE000 \??\C:\Program Files\VMware\VMware Player\vstor2-ws60.sys
    0xA3102000 \SystemRoot\system32\DRIVERS\cdfs.sys
    0xA3118000 \??\C:\Users\berto\AppData\Local\Temp\uglcqpow.sys
    0xA3130000 \SystemRoot\system32\DRIVERS\monitor.sys
    0x77D20000 \Windows\System32\ntdll.dll

    Processes (total 73):
    0 System Idle Process
    4 System
    512 C:\Windows\System32\smss.exe
    580 csrss.exe
    628 C:\Windows\System32\wininit.exe
    640 csrss.exe
    672 C:\Windows\System32\services.exe
    688 C:\Windows\System32\lsass.exe
    696 C:\Windows\System32\lsm.exe
    816 C:\Windows\System32\winlogon.exe
    896 C:\Windows\System32\svchost.exe
    940 C:\Windows\System32\nvvsvc.exe
    968 C:\Windows\System32\svchost.exe
    1104 C:\Windows\System32\svchost.exe
    1128 C:\Windows\System32\svchost.exe
    1140 C:\Windows\System32\svchost.exe
    1220 C:\Windows\System32\audiodg.exe
    1244 C:\Windows\System32\svchost.exe
    1260 C:\Windows\System32\SLsvc.exe
    1312 C:\Windows\System32\svchost.exe
    1436 C:\Windows\System32\nvvsvc.exe
    1556 C:\Windows\System32\svchost.exe
    1764 C:\Windows\System32\wlanext.exe
    1892 C:\Windows\System32\spoolsv.exe
    1916 C:\Windows\System32\svchost.exe
    1028 C:\Program Files\Adobe\Photoshop Elements 6.01\PhotoshopElementsFileAgent.exe
    1300 C:\Windows\System32\AEstSrv.exe
    1564 C:\Program Files\Bonjour\mDNSResponder.exe
    1688 C:\Windows\System32\svchost.exe
    1828 C:\Program Files\Eset\ESET NOD32 Antivirus\ekrn.exe
    1760 C:\Windows\System32\taskeng.exe
    536 C:\Program Files\Hotspot Shield\bin\openvpnas.exe
    2060 C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
    2080 C:\Program Files\Hotspot Shield\bin\hsswd.exe
    2144 C:\Windows\System32\svchost.exe
    2188 C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
    2204 C:\Windows\System32\rpcnet.exe
    2392 C:\Windows\System32\stacsv.exe
    2456 C:\Windows\System32\svchost.exe
    2476 C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
    2544 C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe
    2576 C:\Windows\System32\svchost.exe
    2608 C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
    2632 C:\Windows\System32\SearchIndexer.exe
    2680 C:\Program Files\Intel\WiFi\bin\EvtEng.exe
    2708 C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
    2792 C:\Program Files\VMware\VMware Player\vmware-authd.exe
    3248 C:\Program Files\Eset\ESET NOD32 Antivirus\EHttpSrv.exe
    3336 C:\Windows\System32\dwm.exe
    3360 C:\Windows\explorer.exe
    3460 unsecapp.exe
    3556 WmiPrvSE.exe
    3700 C:\Windows\OEM02Mon.exe
    3708 C:\Program Files\Eset\ESET NOD32 Antivirus\egui.exe
    3764 C:\Program Files\iTunes\iTunesHelper.exe
    3772 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    3788 C:\Windows\System32\rundll32.exe
    3796 C:\Program Files\DivX\DivX Update\DivXUpdate.exe
    3804 C:\Program Files\VMware\VMware Player\hqtray.exe
    3812 C:\Program Files\Common Files\Java\Java Update\jusched.exe
    3992 C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
    852 C:\Program Files\iPod\bin\iPodService.exe
    3628 C:\Windows\System32\wbem\unsecapp.exe
    4012 C:\Windows\System32\taskeng.exe
    3868 C:\Program Files\Internet Explorer\iexplore.exe
    2820 C:\Windows\System32\svchost.exe
    884 C:\Windows\System32\Macromed\Flash\FlashUtil10l_ActiveX.exe
    4528 C:\Program Files\Internet Explorer\iexplore.exe
    2844 C:\Program Files\Internet Explorer\iexplore.exe
    4376 C:\Windows\System32\SearchProtocolHost.exe
    5120 C:\Windows\System32\SearchFilterHost.exe
    5184 C:\Windows\System32\notepad.exe
    5988 C:\Users\berto\Desktop\MBRCheck.exe

    \\.\B: --> \\.\PhysicalDrive0 at offset 0x00000048`14c00000 (NTFS)
    \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00100000 (NTFS)

    PhysicalDrive0 Model Number: HitachiHTS543232L9A300, Rev: FB4OC40C

    Size Device Name MBR Status
    --------------------------------------------
    298 GB \\.\PhysicalDrive0 Windows 2008 MBR code detected
    SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979


    Done!







    DDS (Ver_10-12-12.02) - NTFSx86
    Run by berto at 15:19:12.25 on Fri 12/31/2010
    Internet Explorer: 9.0.7930.16406 BrowserJavaVersion: 1.6.0_21
    Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3581.2357 [GMT -5:00]

    AV: ESET NOD32 Antivirus 4.0 *Disabled/Updated* {CB0F8167-5331-BA19-698E-64816B6801A5}
    SP: ESET NOD32 Antivirus 4.0 *Disabled/Updated* {706E6083-750B-B597-533E-5FF310EF4B18}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    ============== Running Processes ===============

    C:\Windows\system32\wininit.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\nvvsvc.exe
    C:\Windows\system32\svchost.exe -k rpcss
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    C:\Windows\system32\SLsvc.exe
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\system32\nvvsvc.exe
    C:\Windows\system32\WLANExt.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Program Files\Adobe\Photoshop Elements 6.01\PhotoshopElementsFileAgent.exe
    C:\Windows\system32\aestsrv.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Windows\system32\svchost.exe -k bthsvcs
    C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
    C:\Program Files\Hotspot Shield\bin\openvpnas.exe
    C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
    C:\Program Files\Hotspot Shield\bin\hsswd.exe
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
    C:\Windows\system32\rpcnet.exe
    C:\Windows\system32\STacSV.exe
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
    C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe
    C:\Windows\System32\svchost.exe -k WerSvcGroup
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    C:\Windows\system32\SearchIndexer.exe
    C:\Program Files\Intel\WiFi\bin\EvtEng.exe
    C:\Program Files\VMware\VMware Player\vmware-authd.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\OEM02Mon.exe
    C:\Program Files\Eset\ESET NOD32 Antivirus\egui.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\DivX\DivX Update\DivXUpdate.exe
    C:\Program Files\VMware\VMware Player\hqtray.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Windows\system32\Macromed\Flash\FlashUtil10l_ActiveX.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\System32\svchost.exe -k swprv
    C:\Windows\system32\SearchProtocolHost.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Windows\system32\DllHost.exe
    C:\Windows\system32\DllHost.exe
    C:\Users\berto\Desktop\dds.scr
    C:\Windows\system32\DllHost.exe
    C:\Windows\system32\wbem\wmiprvse.exe

    ============== Pseudo HJT Report ===============

    uStart Page = hxxp://www.yahoo.com/
    mStart Page = hxxp://eis.esnips.com/page/search/?client_uuid=bda82ac0-85c3-4b48-b0d2-41fde8d1391d
    uInternet Settings,ProxyOverride = *.local
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
    BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: {B530A9A4-1722-4D16-AAD6-AA85E3AD2ADE} - No File
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    uRun: [Google Update] "c:\users\berto\appdata\local\google\update\GoogleUpdate.exe" /c
    mRun: [OEM02Mon.exe] c:\windows\OEM02Mon.exe
    mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice
    mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\bin\AppleSyncNotifier.exe
    mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
    mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe "
    mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe "
    mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
    mRun: [NVHotkey] rundll32.exe c:\windows\system32\nvHotkey.dll,Start
    mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW
    mRun: [VMware hqtray] "c:\program files\vmware\vmware player\hqtray.exe "
    mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe "
    mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe "
    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe "
    StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\blueto~1.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe
    mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
    mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
    IE: Send image to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
    IE: Send page to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
    IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
    IE: {7F9DB11C-E358-4ca6-A83D-ACC663939424} - {9999A076-A9E2-4C99-8A2B-632FC9429223} - c:\program files\bonjour sdk\bin\ExplorerPlugin.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
    LSP: c:\program files\vmware\vmware player\vsocklib.dll
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
    DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    TCP: {3812B523-FBE3-4A65-ACB5-0E9EFD3861AD} = 10.63.8.1
    Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
    SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

    ================= FIREFOX ===================

    FF - ProfilePath - c:\users\berto\appdata\roaming\mozilla\firefox\profiles\tu63q4l2.default\
    FF - prefs.js: browser.search.selectedEngine - Google
    FF - prefs.js: browser.startup.homepage - hxxp://en-US.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:eek:fficial
    FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
    FF - component: c:\program files\bonjour sdk\bin\firefoxextension\platform\winnt\components\DNSSDService.dll
    FF - component: c:\program files\mozilla firefox\extensions\afurladvisor@anchorfree.com\components\afurladvisor.dll
    FF - component: c:\users\berto\appdata\roaming\mozilla\firefox\profiles\tu63q4l2.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}\platform\winnt_x86-msvc\components\ipc_fireftp.dll
    FF - component: c:\users\berto\appdata\roaming\mozilla\firefox\profiles\tu63q4l2.default\extensions\firetorrent@radicalsoft.com\components\firetorrent.dll
    FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
    FF - plugin: c:\program files\veetle\player\npvlc.dll
    FF - plugin: c:\program files\veetle\plugins\npVeetle.dll
    FF - plugin: c:\program files\veetle\vlcbroadcast\npvbp.dll
    FF - plugin: c:\users\berto\appdata\local\google\update\1.2.183.39\npGoogleOneClick8.dll
    FF - Ext: Kaspersky URL Advisor: linkfilter@kaspersky.ru - c:\program files\mozilla firefox\extensions\linkfilter@kaspersky.ru
    FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
    FF - Ext: afurladvisor: afurladvisor@anchorfree.com - c:\program files\mozilla firefox\extensions\afurladvisor@anchorfree.com
    FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
    FF - Ext: Bonjour Extension for Firefox: bonjour4firefox@apple.com - c:\program files\bonjour sdk\bin\FirefoxExtension
    FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
    FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
    FF - Ext: FireTorrent: firetorrent@radicalsoft.com - %profile%\extensions\firetorrent@radicalsoft.com
    FF - Ext: FireFTP: {a7c6cf7f-112c-4500-a7ea-39801a327e5f} - %profile%\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}

    ============= SERVICES / DRIVERS ===============

    R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2009-11-16 108792]
    R2 AESTFilters;Andrea ST Filters Service;c:\windows\system32\AEstSrv.exe [2010-4-29 73728]
    R2 ekrn;ESET Service;c:\program files\eset\eset nod32 antivirus\ekrn.exe [2009-11-16 735960]
    R2 epfwwfpr;epfwwfpr;c:\windows\system32\drivers\epfwwfpr.sys [2009-11-16 95896]
    R2 HssWd;Hotspot Shield Monitoring Service;c:\program files\hotspot shield\bin\hsswd.exe -product hss --> c:\program files\hotspot shield\bin\hsswd.exe -product HSS [?]
    R2 LMIRfsDriver;LogMeIn Remote File System Driver;c:\windows\system32\drivers\LMIRfsDriver.sys [2010-12-29 47640]
    R2 TeamViewer6;TeamViewer 6;c:\program files\teamviewer\version6\TeamViewer_Service.exe [2010-12-7 2228008]
    R2 vmci;VMware vmci;c:\windows\system32\drivers\vmci.sys [2010-5-20 70704]
    R2 VMUSBArbService;VMware USB Arbitration Service;c:\program files\common files\vmware\usb\vmware-usbarbitrator.exe [2010-5-20 539184]
    R3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504]
    R3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\NETw5v32.sys [2010-5-31 6638080]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2009-10-20 50704]
    S3 PSSDK42;PSSDK42;c:\windows\system32\drivers\pssdk42.sys [2010-7-12 38976]
    S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\drivers\teamviewervpn.sys [2010-3-11 25088]
    S3 ucgnsta;BUFFALO WLI-UC-GN Series Wireless LAN Driver;c:\windows\system32\drivers\ucgnsta.sys [2010-7-27 662016]
    S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [2009-2-13 11520]
    S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]

    =============== Created Last 30 ================

    2010-12-31 19:44:04 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2010-12-31 19:44:01 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
    2010-12-31 19:44:01 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2010-12-31 06:52:10 6273872 ----a-w- c:\progra~2\microsoft\windows defender\definition updates\{6fe961a5-d8cd-4547-9523-bb9837c3149d}\mpengine.dll
    2010-12-31 06:30:17 302592 ----a-w- c:\windows\system32\mfmp4src.dll
    2010-12-31 06:30:17 280064 ----a-w- c:\windows\system32\XpsGdiConverter.dll
    2010-12-31 06:30:17 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
    2010-12-31 06:30:17 161280 ----a-w- c:\windows\system32\d3d10_1.dll
    2010-12-31 06:30:17 135680 ----a-w- c:\windows\system32\XpsRasterService.dll
    2010-12-31 06:30:16 979456 ----a-w- c:\windows\system32\MFH264Dec.dll
    2010-12-31 06:30:16 357376 ----a-w- c:\windows\system32\MFHEAACdec.dll
    2010-12-31 06:30:16 261632 ----a-w- c:\windows\system32\mfreadwrite.dll
    2010-12-31 06:30:15 797184 ----a-w- c:\windows\system32\FntCache.dll
    2010-12-31 06:30:15 680960 ----a-w- c:\windows\system32\d2d1.dll
    2010-12-31 06:30:15 1174528 ----a-w- c:\windows\system32\d3d10warp.dll
    2010-12-31 06:30:15 1068032 ----a-w- c:\windows\system32\DWrite.dll
    2010-12-31 06:29:52 -------- d-----w- c:\program files\Feedback Tool
    2010-12-31 03:15:17 2048 ----a-w- c:\windows\system32\tzres.dll
    2010-12-31 03:15:05 2409784 ----a-w- c:\program files\windows mail\OESpamFilter.dat
    2010-12-31 03:15:00 531968 ----a-w- c:\windows\system32\comctl32.dll
    2010-12-31 03:14:56 231424 ----a-w- c:\windows\system32\msshsq.dll
    2010-12-31 03:14:52 502272 ----a-w- c:\windows\system32\usp10.dll
    2010-12-31 03:11:50 1696256 ----a-w- c:\windows\system32\gameux.dll
    2010-12-31 03:11:49 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
    2010-12-31 03:11:49 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
    2010-12-31 02:55:08 -------- d-----w- c:\users\berto\appdata\local\temp
    2010-12-31 02:49:26 -------- d-----w- C:\$RECYCLE.BIN
    2010-12-30 21:39:21 98816 ----a-w- c:\windows\sed.exe
    2010-12-30 21:39:21 89088 ----a-w- c:\windows\MBR.exe
    2010-12-30 21:39:21 256512 ----a-w- c:\windows\PEV.exe
    2010-12-30 21:39:21 161792 ----a-w- c:\windows\SWREG.exe
    2010-12-30 17:53:46 -------- d-----w- c:\users\berto\appdata\roaming\Malwarebytes
    2010-12-30 17:53:33 -------- d-----w- c:\progra~2\Malwarebytes
    2010-12-30 02:18:24 53632 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\LMIproc.dll
    2010-12-30 02:18:24 29568 ----a-w- c:\windows\system32\LMIport.dll
    2010-12-30 02:18:23 83360 ----a-w- c:\windows\system32\LMIRfsClientNP.dll
    2010-12-30 02:18:23 47640 ----a-w- c:\windows\system32\drivers\LMIRfsDriver.sys
    2010-12-30 02:18:18 87424 ----a-w- c:\windows\system32\LMIinit.dll
    2010-12-23 01:08:18 -------- d-----w- c:\users\berto\appdata\local\{1538168C-3A74-4795-BF14-48F316E65CA1}
    2010-12-22 01:36:35 -------- d-----w- c:\users\berto\appdata\local\{72022AA2-6E9A-4781-A7AE-2E60179C5732}
    2010-12-21 19:20:00 -------- d-----w- c:\users\berto\appdata\local\Windows Live
    2010-12-20 01:58:09 -------- d-----w- c:\progra~2\hssff
    2010-12-19 15:54:10 506880 ----a-w- c:\program files\mozilla firefox\extensions\afurladvisor@anchorfree.com\components\afurladvisor.dll
    2010-12-14 06:57:42 168960 ----a-w- c:\program files\windows media player\wmplayer.exe
    2010-12-14 06:57:41 8147456 ----a-w- c:\windows\system32\wmploc.DLL
    2010-12-14 06:56:32 7680 ----a-w- c:\program files\internet explorer\iecompat.dll
    2010-12-14 06:56:03 125952 ----a-w- c:\windows\system32\srvsvc.dll
    2010-12-14 06:56:02 304128 ----a-w- c:\windows\system32\drivers\srv.sys
    2010-12-14 06:56:02 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys
    2010-12-14 06:56:01 17920 ----a-w- c:\windows\system32\netevent.dll
    2010-12-14 06:56:01 145408 ----a-w- c:\windows\system32\drivers\srv2.sys
    2010-12-14 06:55:52 317952 ----a-w- c:\windows\system32\MP4SDECD.DLL
    2010-12-14 06:55:49 128000 ----a-w- c:\windows\system32\spoolsv.exe
    2010-12-14 06:53:31 739328 ----a-w- c:\windows\system32\inetcomm.dll

    ==================== Find3M ====================

    2010-12-31 19:47:46 17408 ----a-w- c:\windows\system32\rpcnetp.exe
    2010-12-31 19:47:44 57752 ----a-w- c:\windows\system32\rpcnet.dll
    2010-12-30 16:41:27 17408 ----a-w- c:\windows\system32\rpcnetp.dll
    2010-11-14 15:55:53 29184 ----a-w- c:\windows\system32\CtLoJack.dll
    2010-11-10 07:54:18 49016 ----a-w- c:\windows\system32\sirenacm.dll
    2010-11-04 18:56:07 345600 ----a-w- c:\windows\system32\wmicmiplugin.dll
    2010-11-04 18:55:38 352768 ----a-w- c:\windows\system32\taskschd.dll
    2010-11-04 18:55:38 270336 ----a-w- c:\windows\system32\taskcomp.dll
    2010-11-04 18:55:12 601600 ----a-w- c:\windows\system32\schedsvc.dll
    2010-11-04 16:34:06 171520 ----a-w- c:\windows\system32\taskeng.exe
    2010-10-28 15:44:56 34304 ----a-w- c:\windows\system32\atmlib.dll
    2010-10-28 13:27:47 292352 ----a-w- c:\windows\system32\atmfd.dll
    2010-10-19 15:41:44 222080 ------w- c:\windows\system32\MpSigStub.exe
    2010-10-18 13:37:35 81920 ----a-w- c:\windows\system32\consent.exe
    2010-10-18 13:31:24 2038272 ----a-w- c:\windows\system32\win32k.sys

    ============= FINISH: 15:19:23.81 ===============


    NLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_10-12-12.02)

    Microsoft® Windows Vista™ Home Premium
    Boot Device: \Device\HarddiskVolume1
    Install Date: 4/29/2010 9:12:32 PM
    System Uptime: 12/31/2010 2:47:16 PM (1 hours ago)

    Motherboard: Dell Inc. | | 0D501F
    Processor: Intel(R) Core(TM)2 Duo CPU T9300 @ 2.50GHz | Microprocessor | 2501/200mhz

    ==== Disk Partitions =========================

    B: is FIXED (NTFS) - 10 GiB total, 9.689 GiB free.
    C: is FIXED (NTFS) - 288 GiB total, 16.485 GiB free.
    D: is CDROM ()

    ==== Disabled Device Manager Items =============

    ==== System Restore Points ===================

    RP303: 12/30/2010 10:06:16 PM - Windows Update
    RP304: 12/30/2010 10:17:19 PM - Windows Update
    RP305: 12/31/2010 1:26:20 AM - Windows Update
    RP306: 12/31/2010 1:29:56 AM - Windows Update
    RP307: 12/31/2010 1:31:24 AM - Windows Update
    RP308: 12/31/2010 1:49:56 AM - Windows Update

    ==== Installed Programs ======================

    ACID Pro 7.0
    Acrobat.com
    Adobe AIR
    Adobe Common File Installer
    Adobe Flash Player 10 ActiveX
    Adobe Flash Player 10 Plugin
    Adobe Photoshop Elements 6.0
    Adobe Premiere Elements 4.0
    Adobe Premiere Elements 4.0 Templates
    Adobe Reader 9.4.1
    Apple Mobile Device Support
    Apple Software Update
    AviSynth 2.5
    BitTorrent
    Bonjour
    Bonjour SDK
    CCleaner
    Combined Community Codec Pack 2008-09-21 16:18
    D3DX10
    Dell Resource CD
    DivX Setup
    ESET NOD32 Antivirus
    Feedback Tool
    Google Chrome
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotspot Shield 1.56
    ImgBurn
    ImTOO iPod Computer Transfer
    Intel PROSet Wireless
    Intel(R) PROSet/Wireless WiFi Software
    iTunes
    Java Auto Updater
    Java(TM) 6 Update 21
    JDownloader
    Laptop Integrated Webcam Driver (1.04.01.1011)
    Malwarebytes' Anti-Malware
    MeGUI (remove only)
    Metasploit Framework 3.4.1
    Microsoft .NET Framework 3.5 SP1
    Microsoft .NET Framework 4 Client Profile
    Microsoft Application Error Reporting
    Microsoft Office 2007 Service Pack 2 (SP2)
    Microsoft Office Access MUI (English) 2007
    Microsoft Office Access Setup Metadata MUI (English) 2007
    Microsoft Office Enterprise 2007
    Microsoft Office Excel MUI (English) 2007
    Microsoft Office Groove MUI (English) 2007
    Microsoft Office Groove Setup Metadata MUI (English) 2007
    Microsoft Office InfoPath MUI (English) 2007
    Microsoft Office OneNote MUI (English) 2007
    Microsoft Office Outlook MUI (English) 2007
    Microsoft Office PowerPoint MUI (English) 2007
    Microsoft Office Professional 2007
    Microsoft Office Professional 2007 Trial
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proofing (English) 2007
    Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
    Microsoft Office Publisher MUI (English) 2007
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office Word MUI (English) 2007
    Microsoft Silverlight
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    MKVtoolnix 4.4.0
    Mozilla Firefox (3.6.13)
    MSVCRT
    Nessus
    Network Stumbler 0.4.0 (remove only)
    Nmap 5.21
    NVIDIA Drivers
    OGA Notifier 2.0.0048.0
    Polipo 1.0.4.1
    QuickTime
    RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01
    Security Update for 2007 Microsoft Office System (KB2288621)
    Security Update for 2007 Microsoft Office System (KB2288931)
    Security Update for 2007 Microsoft Office System (KB2289158)
    Security Update for 2007 Microsoft Office System (KB2344875)
    Security Update for 2007 Microsoft Office System (KB2345043)
    Security Update for 2007 Microsoft Office System (KB969559)
    Security Update for 2007 Microsoft Office System (KB976321)
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
    Security Update for Microsoft Office Access 2007 (KB979440)
    Security Update for Microsoft Office Excel 2007 (KB2345035)
    Security Update for Microsoft Office InfoPath 2007 (KB979441)
    Security Update for Microsoft Office Outlook 2007 (KB2288953)
    Security Update for Microsoft Office PowerPoint 2007 (KB982158)
    Security Update for Microsoft Office PowerPoint Viewer (KB2413381)
    Security Update for Microsoft Office Publisher 2007 (KB2284697)
    Security Update for Microsoft Office system 2007 (972581)
    Security Update for Microsoft Office system 2007 (KB974234)
    Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
    Security Update for Microsoft Office Word 2007 (KB2344993)
    Segoe UI
    SigmaTel Audio
    Skype™ 5.0
    System Requirements Lab for Intel
    TeamViewer 6
    tools-freebsd
    tools-linux
    tools-netware
    tools-solaris
    tools-windows
    tools-winPre2k
    Tor 0.2.1.26
    Update for 2007 Microsoft Office System (KB967642)
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    Update for Microsoft Office 2007 Help for Common Features (KB963673)
    Update for Microsoft Office Access 2007 Help (KB963663)
    Update for Microsoft Office Excel 2007 Help (KB963678)
    Update for Microsoft Office Infopath 2007 Help (KB963662)
    Update for Microsoft Office OneNote 2007 (KB980729)
    Update for Microsoft Office OneNote 2007 Help (KB963670)
    Update for Microsoft Office Outlook 2007 Help (KB963677)
    Update for Microsoft Office Powerpoint 2007 Help (KB963669)
    Update for Microsoft Office Publisher 2007 Help (KB963667)
    Update for Microsoft Office Script Editor Help (KB963671)
    Update for Microsoft Office Word 2007 Help (KB963665)
    Update for Outlook 2007 Junk Email Filter (KB2466076)
    VC80CRTRedist - 8.0.50727.4053
    Veetle Broadcaster 0.9.18
    Veetle TV 0.9.18
    Vidalia 0.2.9
    VLC media player 1.0.5
    VMware Player
    WIDCOMM Bluetooth Software 6.0.1.3100
    Windows Live Communications Platform
    Windows Live Essentials
    Windows Live ID Sign-in Assistant
    Windows Live Installer
    Windows Live Messenger
    Windows Live Photo Common
    Windows Live PIMT Platform
    Windows Live SOXE
    Windows Live SOXE Definitions
    Windows Live UX Platform
    Windows Live UX Platform Language Pack
    WinPcap 4.1.1
    WinRAR archiver
    WinX DVD Ripper Platinum 5.1.1
    Wireshark 1.2.9
    Xilisoft HD Video Converter 6

    ==== Event Viewer Messages From Past Week ========

    12/31/2010 2:47:53 PM, Error: Service Control Manager [7000] - The Parallel port driver service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
    12/31/2010 2:47:53 PM, Error: Service Control Manager [7000] - The LogMeIn Kernel Information Provider service failed to start due to the following error: The system cannot find the path specified.
    12/31/2010 2:45:35 PM, Error: Service Control Manager [7034] - The NVIDIA Display Driver Service service terminated unexpectedly. It has done this 1 time(s).
    12/31/2010 1:10:21 AM, Error: EventLog [6008] - The previous system shutdown at 1:08:47 AM on 12/31/2010 was unexpected.
    12/30/2010 9:48:13 PM, Error: Service Control Manager [7030] - The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
    12/30/2010 4:52:58 PM, Error: Service Control Manager [7022] - The Windows Update service hung on starting.
    12/30/2010 2:24:08 AM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
    12/30/2010 2:23:58 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD DfsC ehdrv NetBIOS netbt nsiproxy PSched RasAcd rdbss Smb spldr tdx Wanarpv6 ws2ifsl
    12/30/2010 2:23:58 AM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
    12/30/2010 2:23:58 AM, Error: Service Control Manager [7001] - The WebDav Client Redirector Driver service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
    12/30/2010 2:23:58 AM, Error: Service Control Manager [7001] - The WebClient service depends on the WebDav Client Redirector Driver service which failed to start because of the following error: The dependency service or group failed to start.
    12/30/2010 2:23:58 AM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancilliary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
    12/30/2010 2:23:58 AM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
    12/30/2010 2:23:58 AM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
    12/30/2010 2:23:58 AM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
    12/30/2010 2:23:58 AM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service service which failed to start because of the following error: A device attached to the system is not functioning.
    12/30/2010 2:23:58 AM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
    12/30/2010 2:23:58 AM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
    12/30/2010 2:23:58 AM, Error: Service Control Manager [7001] - The Hotspot Shield Service service depends on the DHCP Client service which failed to start because of the following error: The dependency service or group failed to start.
    12/30/2010 2:23:58 AM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
    12/30/2010 2:23:58 AM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancilliary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
    12/30/2010 2:23:58 AM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.
    12/30/2010 2:23:55 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments " " in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
    12/30/2010 2:23:21 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments " " in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
    12/30/2010 2:23:21 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments " " in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
    12/30/2010 2:23:21 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments " " in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF}
    12/30/2010 2:23:18 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments " " in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
    12/30/2010 2:23:12 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments " " in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
    12/30/2010 2:22:48 AM, Error: EventLog [6008] - The previous system shutdown at 2:20:58 AM on 12/30/2010 was unexpected.
    12/30/2010 2:00:04 AM, Error: EventLog [6008] - The previous system shutdown at 1:58:31 AM on 12/30/2010 was unexpected.
    12/30/2010 11:44:03 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Microsoft .NET Framework NGEN v4.0.30319_X86 service to connect.
    12/30/2010 10:30:59 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect.
    12/30/2010 10:30:59 PM, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    12/30/2010 10:21:03 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments " " in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
    12/30/2010 1:10:30 AM, Error: Service Control Manager [7030] - The FileZilla Server FTP server service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
    12/29/2010 9:33:22 PM, Error: Microsoft-Windows-Dhcp-Client [1001] - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 7A794758212C. The following error occurred: The operation was canceled by the user.. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
    12/29/2010 9:32:45 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the LogMeIn Hamachi 2.0 Tunneling Engine service to connect.
    12/29/2010 9:32:45 PM, Error: Service Control Manager [7000] - The LogMeIn Hamachi 2.0 Tunneling Engine service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    12/29/2010 9:32:43 PM, Error: Service Control Manager [7030] - The LogMeIn Hamachi 2.0 Tunneling Engine service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
    12/29/2010 4:33:38 PM, Error: Microsoft-Windows-DistributedCOM [10000] - Unable to start a DCOM Server: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}. The error: "1450" Happened while starting this command: C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

    ==== End Of File ===========================
     
    achil,
    #7
  9. 2010/12/31
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Please download ComboFix from [color= "Red"]Here[/color] or [color= "#FF0000"]Here[/color] to your Desktop.

    [color= "Blue"]**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**[/color]
    1. Please, never rename Combofix unless instructed.
    2. Close any open browsers.
    3. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
      • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results ".
      • Click on [color= "Red"]this link[/color] to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
      NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
      • Close any open browsers.
      • [color= "Red"]WARNING:[/color] Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
    4. Double click on combofix.exe & follow the prompts.
    5. When finished, it will produce a report for you.
    6. Please post the "C:\ComboFix.txt"
    **Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
    **Note 2 for AVG users: ComboFix will not run until AVG is uninstalled as a protective measure against the anti-virus. This is because AVG "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results ". Since AVG cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG first.
    Use AppRemover to uninstall it: http://www.appremover.com/
    We can reinstall it when we're done with CF.
    **Note 3: If you receive an error "Illegal operation attempted on a registery key that has been marked for deletion ", restart computer to fix the issue.



    Make sure, you re-enable your security programs, when you're done with Combofix.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    NOTE.
    If, for some reason, Combofix refuses to run, try one of the following:

    1. Run Combofix from Safe Mode.

    2. Delete Combofix file, download fresh one, but rename combofix.exe to your_name.exe BEFORE saving it to your desktop.
    Do NOT run it yet.

    Please download and run the below tool named Rkill (courtesy of BleepingComputer.com) which may help allow other programs to run.

    There are 4 different versions. If one of them won't run then download and try to run the other one.

    Vista and Win7 users need to right click Rkill and choose Run as Administrator

    You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

    Rkill.com
    Rkill.scr
    Rkill.pif
    Rkill.exe

    • Double-click on the Rkill desktop icon to run the tool.
    • If using Vista or Windows 7 right-click on it and choose Run As Administrator.
    • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
    • If not, delete the file, then download and use the one provided in Link 2.
    • If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
    • Do not reboot until instructed.
    • If the tool does not run from any of the links provided, please let me know.

    Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

    If normal mode still doesn't work, run BOTH tools from safe mode.

    In case #2, please post BOTH logs, rKill and Combofix.

    DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
     
    broni,
    #8
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...