Thank you for your help so far.
This is my personal computer, although I do use some programs (Adobe Photoshop, Illustrator, etc) occasionally for business work. I had a trial version of AutoCad 2011 on my computer (for business work) a few months ago and just recently uninstalled it. I see there are still some Autocad Material libraries on my computer that maybe I should uninstall as well? I had actually tried doing that the other day but I got an error from Microsoft Windows that it was no longer working and closed all my windows.
CKScanner file:
CKScanner - Additional Security Risks - These are not necessarily bad
c:\users\megan\music\adobe photoshop cs2 v9.0 final + keygen & activator==.zip
scanner sequence 3.NA.11
----- EOF -----
I had some problems with the GMER scan. The first time it basically froze up my computer and then gave me the blue screen. The second time I attempted to save the Log halfway through because I wanted to at least have something to give you ... after it saved it again froze on me and gave me the blue screen. The third time I ran it, I watched it for two hours. I unfortunately couldn't watch the computer any longer and when I came back about 2 hours later, the scan screen was gone. I can try and run it again and post if I get the whole way through the scan tomorrow. Here are the message errors I received both times when I restarted my computer after I got the blue screens, just in case it may be helpful to you:
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6001.2.1.0.768.3
Locale ID: 1033
Additional information about the problem:
BCCode: f4
BCP1: 00000003
BCP2: 8A11E7C0
BCP3: 8A11E90C
BCP4: 820714B0
OS Version: 6_0_6001
Service Pack: 1_0
Product: 768_1
Files that help describe the problem:
C:\Windows\Minidump\Mini060510-02.dmp
C:\Users\Megan\AppData\Local\Temp\WER-152022-0.sysdata.xml
C:\Users\Megan\AppData\Local\Temp\WERB366.tmp.version.txt
Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid= ... cid=0x0409And here is half of the Gmerroot Log I was able to save on the second try (it's too big to fit in one post so I have to break it up):
GMER 1.0.15.15281 -
http://www.gmer.netRootkit scan 2010-06-05 15:17:40
Windows 6.0.6001 Service Pack 1
Running: 55kznwwy.exe; Driver: C:\Users\Megan\AppData\Local\Temp\aglcypow.sys
---- System - GMER 1.0.15 ----
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwCreateFile [0xAD7CC83B]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwCreateProcess [0xAD7CC865]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwMapViewOfSection [0xAD7CC88D]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwProtectVirtualMemory [0xAD7CC84F]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwTerminateProcess [0xAD7CC827]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwUnmapViewOfSection [0xAD7CC8A3]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwYieldExecution [0xAD7CC879]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) NtCreateFile
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) NtMapViewOfSection
---- Kernel code sections - GMER 1.0.15 ----
.text ntkrnlpa.exe!ZwYieldExecution 81E5A1C0 5 Bytes JMP AD7CC87D \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.)
PAGE ntkrnlpa.exe!ZwTerminateProcess 82015FBC 5 Bytes JMP AD7CC82B \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.)
PAGE ntkrnlpa.exe!NtMapViewOfSection 820577CE 7 Bytes JMP AD7CC891 \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.)
PAGE ntkrnlpa.exe!ZwUnmapViewOfSection 82057E25 5 Bytes JMP AD7CC8A7 \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.)
PAGE ntkrnlpa.exe!NtCreateFile 8205A036 5 Bytes JMP AD7CC83F \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.)
PAGE ntkrnlpa.exe!ZwProtectVirtualMemory 8206994E 7 Bytes JMP AD7CC853 \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.)
PAGE ntkrnlpa.exe!ZwCreateProcess 820C726F 2 Bytes JMP AD7CC869 \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.)
PAGE ntkrnlpa.exe!ZwCreateProcess + 3 820C7272 2 Bytes [70, 2B] {JO 0x2d}
---- User code sections - GMER 1.0.15 ----
.text C:\Windows\Explorer.EXE[368] ntdll.dll!NtClose + 6 77847F4E 4 Bytes [D4, 19, 3A, 03] {AAM 0x19; CMP AL, [EBX]}
.text C:\Windows\Explorer.EXE[368] ntdll.dll!NtDeviceIoControlFile + 6 7784843E 4 Bytes [D8, 19, 3A, 03] {FCOMP DWORD [ECX]; CMP AL, [EBX]}
.text C:\Windows\Explorer.EXE[368] ntdll.dll!NtQueryDirectoryFile + 7 778489EF 3 Bytes [1C, 3A, 03]
.text C:\Windows\Explorer.EXE[368] ntdll.dll!NtResumeThread + 6 77848DEE 4 Bytes [F4, 1A, 3A, 03]
.text C:\Windows\Explorer.EXE[368] kernel32.dll!GetStartupInfoW 76B71929 5 Bytes JMP 01710F4B
.text C:\Windows\Explorer.EXE[368] kernel32.dll!GetStartupInfoA 76B719C9 5 Bytes JMP 01710087
.text C:\Windows\Explorer.EXE[368] kernel32.dll!CreateProcessW 76B71C01 5 Bytes JMP 01710F1F
.text C:\Windows\Explorer.EXE[368] kernel32.dll!CreateProcessA 76B71C36 5 Bytes JMP 017100B6
.text C:\Windows\Explorer.EXE[368] kernel32.dll!VirtualProtect 76B71DD1 5 Bytes JMP 0171005B
.text C:\Windows\Explorer.EXE[368] kernel32.dll!CreateNamedPipeW 76B75C44 5 Bytes JMP 01710FAF
.text C:\Windows\Explorer.EXE[368] kernel32.dll!LoadLibraryExW 76B930C3 5 Bytes JMP 01710040
.text C:\Windows\Explorer.EXE[368] kernel32.dll!LoadLibraryW 76B9361F 5 Bytes JMP 0171001B
.text C:\Windows\Explorer.EXE[368] kernel32.dll!VirtualProtectEx 76B98D7E 5 Bytes JMP 0171006C
.text C:\Windows\Explorer.EXE[368] kernel32.dll!LoadLibraryExA 76B99469 5 Bytes JMP 01710F83
.text C:\Windows\Explorer.EXE[368] kernel32.dll!LoadLibraryA 76B99491 5 Bytes JMP 01710F9E
.text C:\Windows\Explorer.EXE[368] kernel32.dll!CreatePipe 76BA0284 5 Bytes JMP 01710F5C
.text C:\Windows\Explorer.EXE[368] kernel32.dll!GetProcAddress 76BBB8B6 5 Bytes JMP 017100D1
.text C:\Windows\Explorer.EXE[368] kernel32.dll!CreateFileW 76BBCC4E 5 Bytes JMP 01710FD4
.text C:\Windows\Explorer.EXE[368] kernel32.dll!CreateFileA 76BBCF71 5 Bytes JMP 01710FEF
.text C:\Windows\Explorer.EXE[368] kernel32.dll!CreateNamedPipeA 76C0430E 5 Bytes JMP 0171000A
.text C:\Windows\Explorer.EXE[368] kernel32.dll!WinExec 76C054FF 5 Bytes JMP 01710F3A
.text C:\Windows\Explorer.EXE[368] ADVAPI32.dll!RegCreateKeyExA 76F9B5E7 5 Bytes JMP 02F70076
.text C:\Windows\Explorer.EXE[368] ADVAPI32.dll!RegCreateKeyA 76F9B8AE 5 Bytes JMP 02F7004A
.text C:\Windows\Explorer.EXE[368] ADVAPI32.dll!RegOpenKeyA 76FA0BF5 5 Bytes JMP 02F70000
.text C:\Windows\Explorer.EXE[368] ADVAPI32.dll!RegCreateKeyW 76FAB83D 5 Bytes JMP 02F7005B
.text C:\Windows\Explorer.EXE[368] ADVAPI32.dll!RegCreateKeyExW 76FABCE1 5 Bytes JMP 02F70FB9
.text C:\Windows\Explorer.EXE[368] ADVAPI32.dll!RegOpenKeyExA 76FAD4E8 5 Bytes JMP 02F7002F
.text C:\Windows\Explorer.EXE[368] ADVAPI32.dll!RegOpenKeyW 76FB3CB0 5 Bytes JMP 02F70FEF
.text C:\Windows\Explorer.EXE[368] ADVAPI32.dll!RegOpenKeyExW 76FBF09D 5 Bytes JMP 02F70FDE
.text C:\Windows\Explorer.EXE[368] msvcrt.dll!_wsystem 774B8A47 5 Bytes JMP 02F80F8B
.text C:\Windows\Explorer.EXE[368] msvcrt.dll!system 774B8B63 5 Bytes JMP 02F80F9C
.text C:\Windows\Explorer.EXE[368] msvcrt.dll!_creat 774BC6F1 5 Bytes JMP 02F8000C
.text C:\Windows\Explorer.EXE[368] msvcrt.dll!_open 774BDA7E 5 Bytes JMP 02F80FEF
.text C:\Windows\Explorer.EXE[368] msvcrt.dll!_wcreat 774BDC9E 5 Bytes JMP 02F80FB7
.text C:\Windows\Explorer.EXE[368] msvcrt.dll!_wopen 774BDE79 5 Bytes JMP 02F80FDE
.text C:\Windows\Explorer.EXE[368] WS2_32.dll!socket 779636D1 5 Bytes JMP 02FC0FEF
.text C:\Windows\Explorer.EXE[368] WININET.dll!InternetOpenA 7753D690 5 Bytes JMP 02F90FE5
.text C:\Windows\Explorer.EXE[368] WININET.dll!InternetOpenW 7753DB09 5 Bytes JMP 02F90FCA
.text C:\Windows\Explorer.EXE[368] WININET.dll!InternetOpenUrlA 7753F3A4 5 Bytes JMP 02F9000A
.text C:\Windows\Explorer.EXE[368] WININET.dll!InternetOpenUrlW 77586DDF 5 Bytes JMP 02F9001B
.text C:\Windows\system32\services.exe[640] kernel32.dll!GetStartupInfoW 76B71929 5 Bytes JMP 000600CE
.text C:\Windows\system32\services.exe[640] kernel32.dll!GetStartupInfoA 76B719C9 5 Bytes JMP 000600B3
.text C:\Windows\system32\services.exe[640] kernel32.dll!CreateProcessW 76B71C01 5 Bytes JMP 00060F37
.text C:\Windows\system32\services.exe[640] kernel32.dll!CreateProcessA 76B71C36 5 Bytes JMP 00060F52
.text C:\Windows\system32\services.exe[640] kernel32.dll!VirtualProtect 76B71DD1 5 Bytes JMP 00060F88
.text C:\Windows\system32\services.exe[640] kernel32.dll!CreateNamedPipeW 76B75C44 5 Bytes JMP 00060FDE
.text C:\Windows\system32\services.exe[640] kernel32.dll!LoadLibraryExW 76B930C3 5 Bytes JMP 0006006C
.text C:\Windows\system32\services.exe[640] kernel32.dll!LoadLibraryW 76B9361F 5 Bytes JMP 0006005B
.text C:\Windows\system32\services.exe[640] kernel32.dll!VirtualProtectEx 76B98D7E 5 Bytes JMP 00060087
.text C:\Windows\system32\services.exe[640] kernel32.dll!LoadLibraryExA 76B99469 5 Bytes JMP 00060FB9
.text C:\Windows\system32\services.exe[640] kernel32.dll!LoadLibraryA 76B99491 5 Bytes JMP 0006004A
.text C:\Windows\system32\services.exe[640] kernel32.dll!CreatePipe 76BA0284 5 Bytes JMP 000600A2
.text C:\Windows\system32\services.exe[640] kernel32.dll!GetProcAddress 76BBB8B6 5 Bytes JMP 00060F1C
.text C:\Windows\system32\services.exe[640] kernel32.dll!CreateFileW 76BBCC4E 5 Bytes JMP 0006001B
.text C:\Windows\system32\services.exe[640] kernel32.dll!CreateFileA 76BBCF71 5 Bytes JMP 0006000A
.text C:\Windows\system32\services.exe[640] kernel32.dll!CreateNamedPipeA 76C0430E 5 Bytes JMP 00060FEF
.text C:\Windows\system32\services.exe[640] kernel32.dll!WinExec 76C054FF 5 Bytes JMP 00060F6D
.text C:\Windows\system32\services.exe[640] ADVAPI32.dll!RegCreateKeyExA 76F9B5E7 5 Bytes JMP 00070F83
.text C:\Windows\system32\services.exe[640] ADVAPI32.dll!RegCreateKeyA 76F9B8AE 5 Bytes JMP 00070FAF
.text C:\Windows\system32\services.exe[640] ADVAPI32.dll!RegOpenKeyA 76FA0BF5 5 Bytes JMP 00070FE5
.text C:\Windows\system32\services.exe[640] ADVAPI32.dll!RegCreateKeyW 76FAB83D 5 Bytes JMP 00070F9E
.text C:\Windows\system32\services.exe[640] ADVAPI32.dll!RegCreateKeyExW 76FABCE1 5 Bytes JMP 00070F72
.text C:\Windows\system32\services.exe[640] ADVAPI32.dll!RegOpenKeyExA 76FAD4E8 5 Bytes JMP 00070025
.text C:\Windows\system32\services.exe[640] ADVAPI32.dll!RegOpenKeyW 76FB3CB0 5 Bytes JMP 0007000A
.text C:\Windows\system32\services.exe[640] ADVAPI32.dll!RegOpenKeyExW 76FBF09D 5 Bytes JMP 00070FD4
.text C:\Windows\system32\services.exe[640] msvcrt.dll!_wsystem 774B8A47 5 Bytes JMP 0008002F
.text C:\Windows\system32\services.exe[640] msvcrt.dll!system 774B8B63 5 Bytes JMP 00080014
.text C:\Windows\system32\services.exe[640] msvcrt.dll!_creat 774BC6F1 5 Bytes JMP 00080FB5
.text C:\Windows\system32\services.exe[640] msvcrt.dll!_open 774BDA7E 5 Bytes JMP 00080FE3
.text C:\Windows\system32\services.exe[640] msvcrt.dll!_wcreat 774BDC9E 5 Bytes JMP 00080FA4
.text C:\Windows\system32\services.exe[640] msvcrt.dll!_wopen 774BDE79 5 Bytes JMP 00080FD2
.text C:\Windows\system32\services.exe[640] WS2_32.dll!socket 779636D1 5 Bytes JMP 00090FE5
.text C:\Windows\system32\lsass.exe[652] kernel32.dll!GetStartupInfoW 76B71929 5 Bytes JMP 002300A9
.text C:\Windows\system32\lsass.exe[652] kernel32.dll!GetStartupInfoA 76B719C9 5 Bytes JMP 00230098
.text C:\Windows\system32\lsass.exe[652] kernel32.dll!CreateProcessW 76B71C01 5 Bytes JMP 00230F3E
.text C:\Windows\system32\lsass.exe[652] kernel32.dll!CreateProcessA 76B71C36 5 Bytes JMP 002300D5
.text C:\Windows\system32\lsass.exe[652] kernel32.dll!VirtualProtect 76B71DD1 5 Bytes JMP 00230F8F
.text C:\Windows\system32\lsass.exe[652] kernel32.dll!CreateNamedPipeW 76B75C44 5 Bytes JMP 00230025
.text C:\Windows\system32\lsass.exe[652] kernel32.dll!LoadLibraryExW 76B930C3 5 Bytes JMP 00230073
.text C:\Windows\system32\lsass.exe[652] kernel32.dll!LoadLibraryW 76B9361F 5 Bytes JMP 00230051
.text C:\Windows\system32\lsass.exe[652] kernel32.dll!VirtualProtectEx 76B98D7E 5 Bytes JMP 00230F7E
.text C:\Windows\system32\lsass.exe[652] kernel32.dll!LoadLibraryExA 76B99469 5 Bytes JMP 00230062
.text C:\Windows\system32\lsass.exe[652] kernel32.dll!LoadLibraryA 76B99491 5 Bytes JMP 00230036
.text C:\Windows\system32\lsass.exe[652] kernel32.dll!CreatePipe 76BA0284 5 Bytes JMP 00230F6D
.text C:\Windows\system32\lsass.exe[652] kernel32.dll!GetProcAddress 76BBB8B6 5 Bytes JMP 002300E6
.text C:\Windows\system32\lsass.exe[652] kernel32.dll!CreateFileW 76BBCC4E 5 Bytes JMP 00230FEF
.text C:\Windows\system32\lsass.exe[652] kernel32.dll!CreateFileA 76BBCF71 5 Bytes JMP 0023000A
.text C:\Windows\system32\lsass.exe[652] kernel32.dll!CreateNamedPipeA 76C0430E 5 Bytes JMP 00230FD4
.text C:\Windows\system32\lsass.exe[652] kernel32.dll!WinExec 76C054FF 5 Bytes JMP 002300BA
.text C:\Windows\system32\lsass.exe[652] ADVAPI32.dll!RegCreateKeyExA 76F9B5E7 5 Bytes JMP 0024002C
.text C:\Windows\system32\lsass.exe[652] ADVAPI32.dll!RegCreateKeyA 76F9B8AE 5 Bytes JMP 00240FAF
.text C:\Windows\system32\lsass.exe[652] ADVAPI32.dll!RegOpenKeyA 76FA0BF5 5 Bytes JMP 00240000
.text C:\Windows\system32\lsass.exe[652] ADVAPI32.dll!RegCreateKeyW 76FAB83D 5 Bytes JMP 00240F94
.text C:\Windows\system32\lsass.exe[652] ADVAPI32.dll!RegCreateKeyExW 76FABCE1 5 Bytes JMP 00240F6F
.text C:\Windows\system32\lsass.exe[652] ADVAPI32.dll!RegOpenKeyExA 76FAD4E8 5 Bytes JMP 00240FCA
.text C:\Windows\system32\lsass.exe[652] ADVAPI32.dll!RegOpenKeyW 76FB3CB0 5 Bytes JMP 00240FE5
.text C:\Windows\system32\lsass.exe[652] ADVAPI32.dll!RegOpenKeyExW 76FBF09D 5 Bytes JMP 0024001B
.text C:\Windows\system32\lsass.exe[652] msvcrt.dll!_wsystem 774B8A47 5 Bytes JMP 00250FB7
.text C:\Windows\system32\lsass.exe[652] msvcrt.dll!system 774B8B63 5 Bytes JMP 00250FD2
.text C:\Windows\system32\lsass.exe[652] msvcrt.dll!_creat 774BC6F1 5 Bytes JMP 00250038
.text C:\Windows\system32\lsass.exe[652] msvcrt.dll!_open 774BDA7E 5 Bytes JMP 00250000
.text C:\Windows\system32\lsass.exe[652] msvcrt.dll!_wcreat 774BDC9E 5 Bytes JMP 00250FE3
.text C:\Windows\system32\lsass.exe[652] msvcrt.dll!_wopen 774BDE79 5 Bytes JMP 0025001D
.text C:\Windows\system32\lsass.exe[652] WS2_32.dll!socket 779636D1 5 Bytes JMP 0089000A
.text C:\Windows\system32\svchost.exe[836] kernel32.dll!GetStartupInfoW 76B71929 5 Bytes JMP 00C40F1F
.text C:\Windows\system32\svchost.exe[836] kernel32.dll!GetStartupInfoA 76B719C9 5 Bytes JMP 00C4006F
.text C:\Windows\system32\svchost.exe[836] kernel32.dll!CreateProcessW 76B71C01 5 Bytes JMP 00C40EF3
.text C:\Windows\system32\svchost.exe[836] kernel32.dll!CreateProcessA 76B71C36 5 Bytes JMP 00C4008A
.text C:\Windows\system32\svchost.exe[836] kernel32.dll!VirtualProtect 76B71DD1 5 Bytes JMP 00C40F7A
.text C:\Windows\system32\svchost.exe[836] kernel32.dll!CreateNamedPipeW 76B75C44 5 Bytes JMP 00C40FDE
.text C:\Windows\system32\svchost.exe[836] kernel32.dll!LoadLibraryExW 76B930C3 5 Bytes JMP 00C40F8B
.text C:\Windows\system32\svchost.exe[836] kernel32.dll!LoadLibraryW 76B9361F 5 Bytes JMP 00C40FBC
.text C:\Windows\system32\svchost.exe[836] kernel32.dll!VirtualProtectEx 76B98D7E 5 Bytes JMP 00C40F69
.text C:\Windows\system32\svchost.exe[836] kernel32.dll!LoadLibraryExA 76B99469 5 Bytes JMP 00C40054
.text C:\Windows\system32\svchost.exe[836] kernel32.dll!LoadLibraryA 76B99491 5 Bytes JMP 00C40FCD
.text C:\Windows\system32\svchost.exe[836] kernel32.dll!CreatePipe 76BA0284 5 Bytes JMP 00C40F4E
.text C:\Windows\system32\svchost.exe[836] kernel32.dll!GetProcAddress 76BBB8B6 5 Bytes JMP 00C4009B
.text C:\Windows\system32\svchost.exe[836] kernel32.dll!CreateFileW 76BBCC4E 5 Bytes JMP 00C4000A
.text C:\Windows\system32\svchost.exe[836] kernel32.dll!CreateFileA 76BBCF71 5 Bytes JMP 00C40FEF
.text C:\Windows\system32\svchost.exe[836] kernel32.dll!CreateNamedPipeA 76C0430E 5 Bytes JMP 00C4002F
.text C:\Windows\system32\svchost.exe[836] kernel32.dll!WinExec 76C054FF 5 Bytes JMP 00C40F0E
.text C:\Windows\system32\svchost.exe[836] msvcrt.dll!_wsystem 774B8A47 5 Bytes JMP 00CA0FB4
.text C:\Windows\system32\svchost.exe[836] msvcrt.dll!system 774B8B63 5 Bytes JMP 00CA0FC5
.text C:\Windows\system32\svchost.exe[836] msvcrt.dll!_creat 774BC6F1 5 Bytes JMP 00CA002E
.text C:\Windows\system32\svchost.exe[836] msvcrt.dll!_open 774BDA7E 5 Bytes JMP 00CA0000
.text C:\Windows\system32\svchost.exe[836] msvcrt.dll!_wcreat 774BDC9E 5 Bytes JMP 00CA003F
.text C:\Windows\system32\svchost.exe[836] msvcrt.dll!_wopen 774BDE79 5 Bytes JMP 00CA0011
.text C:\Windows\system32\svchost.exe[836] ADVAPI32.dll!RegCreateKeyExA 76F9B5E7 5 Bytes JMP 00C90F94
.text C:\Windows\system32\svchost.exe[836] ADVAPI32.dll!RegCreateKeyA 76F9B8AE 5 Bytes JMP 00C9001B
.text C:\Windows\system32\svchost.exe[836] ADVAPI32.dll!RegOpenKeyA 76FA0BF5 5 Bytes JMP 00C90FEF
.text C:\Windows\system32\svchost.exe[836] ADVAPI32.dll!RegCreateKeyW 76FAB83D 5 Bytes JMP 00C9002C
.text C:\Windows\system32\svchost.exe[836] ADVAPI32.dll!RegCreateKeyExW 76FABCE1 5 Bytes JMP 00C90051
.text C:\Windows\system32\svchost.exe[836] ADVAPI32.dll!RegOpenKeyExA 76FAD4E8 5 Bytes JMP 00C9000A
.text C:\Windows\system32\svchost.exe[836] ADVAPI32.dll!RegOpenKeyW 76FB3CB0 5 Bytes JMP 00C90FD4
.text C:\Windows\system32\svchost.exe[836] ADVAPI32.dll!RegOpenKeyExW 76FBF09D 5 Bytes JMP 00C90FB9
.text C:\Windows\system32\svchost.exe[844] kernel32.dll!GetStartupInfoW 76B71929 5 Bytes JMP 001F0F57
.text C:\Windows\system32\svchost.exe[844] kernel32.dll!GetStartupInfoA 76B719C9 5 Bytes JMP 001F00A7
.text C:\Windows\system32\svchost.exe[844] kernel32.dll!CreateProcessW 76B71C01 5 Bytes JMP 001F00DD
.text C:\Windows\system32\svchost.exe[844] kernel32.dll!CreateProcessA 76B71C36 5 Bytes JMP 001F00C2
.text C:\Windows\system32\svchost.exe[844] kernel32.dll!VirtualProtect 76B71DD1 5 Bytes JMP 001F0060
.text C:\Windows\system32\svchost.exe[844] kernel32.dll!CreateNamedPipeW 76B75C44 5 Bytes JMP 001F0FB2
.text C:\Windows\system32\svchost.exe[844] kernel32.dll!LoadLibraryExW 76B930C3 5 Bytes JMP 001F004F
.text C:\Windows\system32\svchost.exe[844] kernel32.dll!LoadLibraryW 76B9361F 5 Bytes JMP 001F0028
.text C:\Windows\system32\svchost.exe[844] kernel32.dll!VirtualProtectEx 76B98D7E 5 Bytes JMP 001F0071
.text C:\Windows\system32\svchost.exe[844] kernel32.dll!LoadLibraryExA 76B99469 5 Bytes JMP 001F0F86
.text C:\Windows\system32\svchost.exe[844] kernel32.dll!LoadLibraryA 76B99491 5 Bytes JMP 001F0F97
.text C:\Windows\system32\svchost.exe[844] kernel32.dll!CreatePipe 76BA0284 5 Bytes JMP 001F008C
.text C:\Windows\system32\svchost.exe[844] kernel32.dll!GetProcAddress 76BBB8B6 5 Bytes JMP 001F0F2B
.text C:\Windows\system32\svchost.exe[844] kernel32.dll!CreateFileW 76BBCC4E 5 Bytes JMP 001F0FD4
.text C:\Windows\system32\svchost.exe[844] kernel32.dll!CreateFileA 76BBCF71 5 Bytes JMP 001F0FEF
.text C:\Windows\system32\svchost.exe[844] kernel32.dll!CreateNamedPipeA 76C0430E 5 Bytes JMP 001F0FC3
.text C:\Windows\system32\svchost.exe[844] kernel32.dll!WinExec 76C054FF 5 Bytes JMP 001F0F46
.text C:\Windows\system32\svchost.exe[844] msvcrt.dll!_wsystem 774B8A47 5 Bytes JMP 00210F92
.text C:\Windows\system32\svchost.exe[844] msvcrt.dll!system 774B8B63 5 Bytes JMP 0021001D
.text C:\Windows\system32\svchost.exe[844] msvcrt.dll!_creat 774BC6F1 5 Bytes JMP 00210FD2
.text C:\Windows\system32\svchost.exe[844] msvcrt.dll!_open 774BDA7E 5 Bytes JMP 0021000C
.text C:\Windows\system32\svchost.exe[844] msvcrt.dll!_wcreat 774BDC9E 5 Bytes JMP 00210FAD
.text C:\Windows\system32\svchost.exe[844] msvcrt.dll!_wopen 774BDE79 5 Bytes JMP 00210FEF
.text C:\Windows\system32\svchost.exe[844] ADVAPI32.dll!RegCreateKeyExA 76F9B5E7 5 Bytes JMP 00200F94
.text C:\Windows\system32\svchost.exe[844] ADVAPI32.dll!RegCreateKeyA 76F9B8AE 5 Bytes JMP 00200025
.text C:\Windows\system32\svchost.exe[844] ADVAPI32.dll!RegOpenKeyA 76FA0BF5 5 Bytes JMP 00200FEF
.text C:\Windows\system32\svchost.exe[844] ADVAPI32.dll!RegCreateKeyW 76FAB83D 5 Bytes JMP 00200036
.text C:\Windows\system32\svchost.exe[844] ADVAPI32.dll!RegCreateKeyExW 76FABCE1 5 Bytes JMP 00200051
.text C:\Windows\system32\svchost.exe[844] ADVAPI32.dll!RegOpenKeyExA 76FAD4E8 5 Bytes JMP 0020000A
.text C:\Windows\system32\svchost.exe[844] ADVAPI32.dll!RegOpenKeyW 76FB3CB0 5 Bytes JMP 00200FDE
.text C:\Windows\system32\svchost.exe[844] ADVAPI32.dll!RegOpenKeyExW 76FBF09D 5 Bytes JMP 00200FB9
.text C:\Windows\system32\svchost.exe[844] WS2_32.dll!socket 779636D1 5 Bytes JMP 006E0000
.text C:\Windows\system32\svchost.exe[908] kernel32.dll!GetStartupInfoW 76B71929 5 Bytes JMP 000A009D
.text C:\Windows\system32\svchost.exe[908] kernel32.dll!GetStartupInfoA 76B719C9 5 Bytes JMP 000A0F57
.text C:\Windows\system32\svchost.exe[908] kernel32.dll!CreateProcessW 76B71C01 5 Bytes JMP 000A00D0
.text C:\Windows\system32\svchost.exe[908] kernel32.dll!CreateProcessA 76B71C36 5 Bytes JMP 000A00BF
.text C:\Windows\system32\svchost.exe[908] kernel32.dll!VirtualProtect 76B71DD1 5 Bytes JMP 000A0082
.text C:\Windows\system32\svchost.exe[908] kernel32.dll!CreateNamedPipeW 76B75C44 5 Bytes JMP 000A0014
.text C:\Windows\system32\svchost.exe[908] kernel32.dll!LoadLibraryExW 76B930C3 5 Bytes JMP 000A0065
.text C:\Windows\system32\svchost.exe[908] kernel32.dll!LoadLibraryW 76B9361F 5 Bytes JMP 000A0040
.text C:\Windows\system32\svchost.exe[908] kernel32.dll!VirtualProtectEx 76B98D7E 5 Bytes JMP 000A0F83
.text C:\Windows\system32\svchost.exe[908] kernel32.dll!LoadLibraryExA 76B99469 5 Bytes JMP 000A0FA8
.text C:\Windows\system32\svchost.exe[908] kernel32.dll!LoadLibraryA 76B99491 5 Bytes JMP 000A002F
.text C:\Windows\system32\svchost.exe[908] kernel32.dll!CreatePipe 76BA0284 5 Bytes JMP 000A0F68
.text C:\Windows\system32\svchost.exe[908] kernel32.dll!GetProcAddress 76BBB8B6 5 Bytes JMP 000A0F1E
.text C:\Windows\system32\svchost.exe[908] kernel32.dll!CreateFileW 76BBCC4E 5 Bytes JMP 000A0FD4
.text C:\Windows\system32\svchost.exe[908] kernel32.dll!CreateFileA 76BBCF71 5 Bytes JMP 000A0FEF
.text C:\Windows\system32\svchost.exe[908] kernel32.dll!CreateNamedPipeA 76C0430E 5 Bytes JMP 000A0FC3
.text C:\Windows\system32\svchost.exe[908] kernel32.dll!WinExec 76C054FF 5 Bytes JMP 000A00AE
.text C:\Windows\system32\svchost.exe[908] msvcrt.dll!_wsystem 774B8A47 5 Bytes JMP 001D0F7A
.text C:\Windows\system32\svchost.exe[908] msvcrt.dll!system 774B8B63 5 Bytes JMP 001D0F95
.text C:\Windows\system32\svchost.exe[908] msvcrt.dll!_creat 774BC6F1 5 Bytes JMP 001D0FC1
.text C:\Windows\system32\svchost.exe[908] msvcrt.dll!_open 774BDA7E 5 Bytes JMP 001D0FEF
.text C:\Windows\system32\svchost.exe[908] msvcrt.dll!_wcreat 774BDC9E 5 Bytes JMP 001D0FA6
.text C:\Windows\system32\svchost.exe[908] msvcrt.dll!_wopen 774BDE79 5 Bytes JMP 001D0FDE
.text C:\Windows\system32\svchost.exe[908] ADVAPI32.dll!RegCreateKeyExA 76F9B5E7 5 Bytes JMP 000B0F9E
.text C:\Windows\system32\svchost.exe[908] ADVAPI32.dll!RegCreateKeyA 76F9B8AE 5 Bytes JMP 000B0FB9
.text C:\Windows\system32\svchost.exe[908] ADVAPI32.dll!RegOpenKeyA 76FA0BF5 5 Bytes JMP 000B0FE5
.text C:\Windows\system32\svchost.exe[908] ADVAPI32.dll!RegCreateKeyW 76FAB83D 5 Bytes JMP 000B004A
.text C:\Windows\system32\svchost.exe[908] ADVAPI32.dll!RegCreateKeyExW 76FABCE1 5 Bytes JMP 000B005B
.text C:\Windows\system32\svchost.exe[908] ADVAPI32.dll!RegOpenKeyExA 76FAD4E8 5 Bytes JMP 000B000A
.text C:\Windows\system32\svchost.exe[908] ADVAPI32.dll!RegOpenKeyW 76FB3CB0 5 Bytes JMP 000B0FD4
.text C:\Windows\system32\svchost.exe[908] ADVAPI32.dll!RegOpenKeyExW 76FBF09D 5 Bytes JMP 000B002F
.text C:\Windows\system32\svchost.exe[908] WS2_32.dll!socket 779636D1 3 Bytes JMP 0022000A
.text C:\Windows\system32\svchost.exe[908] WS2_32.dll!socket + 4 779636D5 1 Byte [88]
.text C:\Windows\System32\svchost.exe[948] kernel32.dll!GetStartupInfoW 76B71929 5 Bytes JMP 00900F85
.text C:\Windows\System32\svchost.exe[948] kernel32.dll!GetStartupInfoA 76B719C9 5 Bytes JMP 009000CB
.text C:\Windows\System32\svchost.exe[948] kernel32.dll!CreateProcessW 76B71C01 5 Bytes JMP 009000FA
.text C:\Windows\System32\svchost.exe[948] kernel32.dll!CreateProcessA 76B71C36 5 Bytes JMP 00900F63
.text C:\Windows\System32\svchost.exe[948] kernel32.dll!VirtualProtect 76B71DD1 5 Bytes JMP 0090008E
.text C:\Windows\System32\svchost.exe[948] kernel32.dll!CreateNamedPipeW 76B75C44 5 Bytes JMP 0090002C
.text C:\Windows\System32\svchost.exe[948] kernel32.dll!LoadLibraryExW 76B930C3 5 Bytes JMP 00900073
.text C:\Windows\System32\svchost.exe[948] kernel32.dll!LoadLibraryW 76B9361F 5 Bytes JMP 0090004E
.text C:\Windows\System32\svchost.exe[948] kernel32.dll!VirtualProtectEx 76B98D7E 5 Bytes JMP 0090009F
.text C:\Windows\System32\svchost.exe[948] kernel32.dll!LoadLibraryExA 76B99469 5 Bytes JMP 00900FB6
.text C:\Windows\System32\svchost.exe[948] kernel32.dll!LoadLibraryA 76B99491 5 Bytes JMP 0090003D
.text C:\Windows\System32\svchost.exe[948] kernel32.dll!CreatePipe 76BA0284 5 Bytes JMP 009000BA
.text C:\Windows\System32\svchost.exe[948] kernel32.dll!GetProcAddress 76BBB8B6 5 Bytes JMP 0090010B
.text C:\Windows\System32\svchost.exe[948] kernel32.dll!CreateFileW 76BBCC4E 5 Bytes JMP 00900000
.text C:\Windows\System32\svchost.exe[948] kernel32.dll!CreateFileA 76BBCF71 5 Bytes JMP 00900FEF
.text C:\Windows\System32\svchost.exe[948] kernel32.dll!CreateNamedPipeA 76C0430E 5 Bytes JMP 00900011
.text C:\Windows\System32\svchost.exe[948] kernel32.dll!WinExec 76C054FF 5 Bytes JMP 00900F74
.text C:\Windows\System32\svchost.exe[948] msvcrt.dll!_wsystem 774B8A47 5 Bytes JMP 00920F97
.text C:\Windows\System32\svchost.exe[948] msvcrt.dll!system 774B8B63 5 Bytes JMP 00920022
.text C:\Windows\System32\svchost.exe[948] msvcrt.dll!_creat 774BC6F1 5 Bytes JMP 00920011
.text C:\Windows\System32\svchost.exe[948] msvcrt.dll!_open 774BDA7E 5 Bytes JMP 00920000
.text C:\Windows\System32\svchost.exe[948] msvcrt.dll!_wcreat 774BDC9E 5 Bytes JMP 00920FB2
.text C:\Windows\System32\svchost.exe[948] msvcrt.dll!_wopen 774BDE79 5 Bytes JMP 00920FD7
.text C:\Windows\System32\svchost.exe[948] ADVAPI32.dll!RegCreateKeyExA 76F9B5E7 5 Bytes JMP 0091003D
.text C:\Windows\System32\svchost.exe[948] ADVAPI32.dll!RegCreateKeyA 76F9B8AE 5 Bytes JMP 0091001B
.text C:\Windows\System32\svchost.exe[948] ADVAPI32.dll!RegOpenKeyA 76FA0BF5 5 Bytes JMP 00910000
.text C:\Windows\System32\svchost.exe[948] ADVAPI32.dll!RegCreateKeyW 76FAB83D 5 Bytes JMP 0091002C
.text C:\Windows\System32\svchost.exe[948] ADVAPI32.dll!RegCreateKeyExW 76FABCE1 5 Bytes JMP 00910062
.text C:\Windows\System32\svchost.exe[948] ADVAPI32.dll!RegOpenKeyExA 76FAD4E8 5 Bytes JMP 00910FCA
.text C:\Windows\System32\svchost.exe[948] ADVAPI32.dll!RegOpenKeyW 76FB3CB0 5 Bytes JMP 00910FE5
.text C:\Windows\System32\svchost.exe[948] ADVAPI32.dll!RegOpenKeyExW 76FBF09D 5 Bytes JMP 00910FB9
.text C:\Windows\System32\svchost.exe[948] WS2_32.dll!socket 779636D1 5 Bytes JMP 01820FEF
.text C:\Windows\System32\svchost.exe[948] wininet.dll!InternetOpenA 7753D690 5 Bytes JMP 01810FEF
.text C:\Windows\System32\svchost.exe[948] wininet.dll!InternetOpenW 7753DB09 5 Bytes JMP 01810FD4
.text C:\Windows\System32\svchost.exe[948] wininet.dll!InternetOpenUrlA 7753F3A4 5 Bytes JMP 01810FC3
.text C:\Windows\System32\svchost.exe[948] wininet.dll!InternetOpenUrlW 77586DDF 5 Bytes JMP 01810FB2
.text C:\Windows\System32\svchost.exe[1052] kernel32.dll!GetStartupInfoW 76B71929 5 Bytes JMP 001B00DA
.text C:\Windows\System32\svchost.exe[1052] kernel32.dll!GetStartupInfoA 76B719C9 5 Bytes JMP 001B00C9
.text C:\Windows\System32\svchost.exe[1052] kernel32.dll!CreateProcessW 76B71C01 5 Bytes JMP 001B0F5E
.text C:\Windows\System32\svchost.exe[1052] kernel32.dll!CreateProcessA 76B71C36 5 Bytes JMP 001B0F79
.text C:\Windows\System32\svchost.exe[1052] kernel32.dll!VirtualProtect 76B71DD1 5 Bytes JMP 001B0089
.text C:\Windows\System32\svchost.exe[1052] kernel32.dll!CreateNamedPipeW 76B75C44 5 Bytes JMP 001B0FE5
.text C:\Windows\System32\svchost.exe[1052] kernel32.dll!LoadLibraryExW 76B930C3 5 Bytes JMP 001B0078
.text C:\Windows\System32\svchost.exe[1052] kernel32.dll!LoadLibraryW 76B9361F 5 Bytes JMP 001B0FB9
.text C:\Windows\System32\svchost.exe[1052] kernel32.dll!VirtualProtectEx 76B98D7E 5 Bytes JMP 001B0F9E
.text C:\Windows\System32\svchost.exe[1052] kernel32.dll!LoadLibraryExA 76B99469 5 Bytes JMP 001B005B
.text C:\Windows\System32\svchost.exe[1052] kernel32.dll!LoadLibraryA 76B99491 5 Bytes JMP 001B0FCA
.text C:\Windows\System32\svchost.exe[1052] kernel32.dll!CreatePipe 76BA0284 5 Bytes JMP 001B00A4
.text C:\Windows\System32\svchost.exe[1052] kernel32.dll!GetProcAddress 76BBB8B6 5 Bytes JMP 001B0F4D
.text C:\Windows\System32\svchost.exe[1052] kernel32.dll!CreateFileW 76BBCC4E 5 Bytes JMP 001B001B
.text C:\Windows\System32\svchost.exe[1052] kernel32.dll!CreateFileA 76BBCF71 5 Bytes JMP 001B0000
.text C:\Windows\System32\svchost.exe[1052] kernel32.dll!CreateNamedPipeA 76C0430E 5 Bytes JMP 001B0036
.text C:\Windows\System32\svchost.exe[1052] kernel32.dll!WinExec 76C054FF 5 Bytes JMP 001B00EB
.text C:\Windows\System32\svchost.exe[1052] msvcrt.dll!_wsystem 774B8A47 5 Bytes JMP 001D0FCA
.text C:\Windows\System32\svchost.exe[1052] msvcrt.dll!system 774B8B63 5 Bytes JMP 001D0055
.text C:\Windows\System32\svchost.exe[1052] msvcrt.dll!_creat 774BC6F1 5 Bytes JMP 001D0029
.text C:\Windows\System32\svchost.exe[1052] msvcrt.dll!_open 774BDA7E 5 Bytes JMP 001D0FEF
.text C:\Windows\System32\svchost.exe[1052] msvcrt.dll!_wcreat 774BDC9E 5 Bytes JMP 001D003A
.text C:\Windows\System32\svchost.exe[1052] msvcrt.dll!_wopen 774BDE79 5 Bytes JMP 001D000C
.text C:\Windows\System32\svchost.exe[1052] ADVAPI32.dll!RegCreateKeyExA 76F9B5E7 5 Bytes JMP 001C005B
.text C:\Windows\System32\svchost.exe[1052] ADVAPI32.dll!RegCreateKeyA 76F9B8AE 5 Bytes JMP 001C0036
.text C:\Windows\System32\svchost.exe[1052] ADVAPI32.dll!RegOpenKeyA 76FA0BF5 5 Bytes JMP 001C0FEF
.text C:\Windows\System32\svchost.exe[1052] ADVAPI32.dll!RegCreateKeyW 76FAB83D 5 Bytes JMP 001C0FAF
.text C:\Windows\System32\svchost.exe[1052] ADVAPI32.dll!RegCreateKeyExW 76FABCE1 5 Bytes JMP 001C006C
.text C:\Windows\System32\svchost.exe[1052] ADVAPI32.dll!RegOpenKeyExA 76FAD4E8 5 Bytes JMP 001C0025
.text C:\Windows\System32\svchost.exe[1052] ADVAPI32.dll!RegOpenKeyW 76FB3CB0 5 Bytes JMP 001C000A
.text C:\Windows\System32\svchost.exe[1052] ADVAPI32.dll!RegOpenKeyExW 76FBF09D 5 Bytes JMP 001C0FD4
.text C:\Windows\System32\svchost.exe[1052] WS2_32.dll!socket 779636D1 5 Bytes JMP 001E0FEF
.text C:\Windows\System32\svchost.exe[1124] kernel32.dll!GetStartupInfoW 76B71929 5 Bytes JMP 00DD00B8
.text C:\Windows\System32\svchost.exe[1124] kernel32.dll!GetStartupInfoA 76B719C9 5 Bytes JMP 00DD0F68
.text C:\Windows\System32\svchost.exe[1124] kernel32.dll!CreateProcessW 76B71C01 5 Bytes JMP 00DD00F5
.text C:\Windows\System32\svchost.exe[1124] kernel32.dll!CreateProcessA 76B71C36 5 Bytes JMP 00DD00DA
.text C:\Windows\System32\svchost.exe[1124] kernel32.dll!VirtualProtect 76B71DD1 5 Bytes JMP 00DD0F9E
.text C:\Windows\System32\svchost.exe[1124] kernel32.dll!CreateNamedPipeW 76B75C44 5 Bytes JMP 00DD0040
.text C:\Windows\System32\svchost.exe[1124] kernel32.dll!LoadLibraryExW 76B930C3 5 Bytes JMP 00DD0078
.text C:\Windows\System32\svchost.exe[1124] kernel32.dll!LoadLibraryW 76B9361F 5 Bytes JMP 00DD0FCA
.text C:\Windows\System32\svchost.exe[1124] kernel32.dll!VirtualProtectEx 76B98D7E 5 Bytes JMP 00DD0F8D
.text C:\Windows\System32\svchost.exe[1124] kernel32.dll!LoadLibraryExA 76B99469 5 Bytes JMP 00DD0FB9
.text C:\Windows\System32\svchost.exe[1124] kernel32.dll!LoadLibraryA 76B99491 5 Bytes JMP 00DD0051
.text C:\Windows\System32\svchost.exe[1124] kernel32.dll!CreatePipe 76BA0284 5 Bytes JMP 00DD009D
.text C:\Windows\System32\svchost.exe[1124] kernel32.dll!GetProcAddress 76BBB8B6 5 Bytes JMP 00DD0F39
.text C:\Windows\System32\svchost.exe[1124] kernel32.dll!CreateFileW 76BBCC4E 5 Bytes JMP 00DD0025
.text C:\Windows\System32\svchost.exe[1124] kernel32.dll!CreateFileA 76BBCF71 5 Bytes JMP 00DD0000
.text C:\Windows\System32\svchost.exe[1124] kernel32.dll!CreateNamedPipeA 76C0430E 5 Bytes JMP 00DD0FEF
.text C:\Windows\System32\svchost.exe[1124] kernel32.dll!WinExec 76C054FF 5 Bytes JMP 00DD00C9
.text C:\Windows\System32\svchost.exe[1124] msvcrt.dll!_wsystem 774B8A47 5 Bytes JMP 00DF003D
.text C:\Windows\System32\svchost.exe[1124] msvcrt.dll!system 774B8B63 5 Bytes JMP 00DF002C
.text C:\Windows\System32\svchost.exe[1124] msvcrt.dll!_creat 774BC6F1 5 Bytes JMP 00DF0FD7
.text C:\Windows\System32\svchost.exe[1124] msvcrt.dll!_open 774BDA7E 5 Bytes JMP 00DF0000
.text C:\Windows\System32\svchost.exe[1124] msvcrt.dll!_wcreat 774BDC9E 5 Bytes JMP 00DF0FBC
.text C:\Windows\System32\svchost.exe[1124] msvcrt.dll!_wopen 774BDE79 5 Bytes JMP 00DF0011
.text C:\Windows\System32\svchost.exe[1124] ADVAPI32.dll!RegCreateKeyExA 76F9B5E7 5 Bytes JMP 00DE004A
.text C:\Windows\System32\svchost.exe[1124] ADVAPI32.dll!RegCreateKeyA 76F9B8AE 5 Bytes JMP 00DE002F
.text C:\Windows\System32\svchost.exe[1124] ADVAPI32.dll!RegOpenKeyA 76FA0BF5 5 Bytes JMP 00DE0000
.text C:\Windows\System32\svchost.exe[1124] ADVAPI32.dll!RegCreateKeyW 76FAB83D 5 Bytes JMP 00DE0FA8
.text C:\Windows\System32\svchost.exe[1124] ADVAPI32.dll!RegCreateKeyExW 76FABCE1 5 Bytes JMP 00DE0F8D
.text C:\Windows\System32\svchost.exe[1124] ADVAPI32.dll!RegOpenKeyExA 76FAD4E8 5 Bytes JMP 00DE0FD4
.text C:\Windows\System32\svchost.exe[1124] ADVAPI32.dll!RegOpenKeyW 76FB3CB0 5 Bytes JMP 00DE0FEF
.text C:\Windows\System32\svchost.exe[1124] ADVAPI32.dll!RegOpenKeyExW 76FBF09D 5 Bytes JMP 00DE0FC3
.text C:\Windows\System32\svchost.exe[1124] WS2_32.dll!socket 779636D1 5 Bytes JMP 01000FEF
.text C:\Windows\system32\svchost.exe[1136] kernel32.dll!GetStartupInfoW 76B71929 5 Bytes JMP 011A008E
.text C:\Windows\system32\svchost.exe[1136] kernel32.dll!GetStartupInfoA 76B719C9 5 Bytes JMP 011A0F52
.text C:\Windows\system32\svchost.exe[1136] kernel32.dll!CreateProcessW 76B71C01 5 Bytes JMP 011A0F12
.text C:\Windows\system32\svchost.exe[1136] kernel32.dll!CreateProcessA 76B71C36 5 Bytes JMP 011A00A9
.text C:\Windows\system32\svchost.exe[1136] kernel32.dll!VirtualProtect 76B71DD1 5 Bytes JMP 011A0F77
.text C:\Windows\system32\svchost.exe[1136] kernel32.dll!CreateNamedPipeW 76B75C44 5 Bytes JMP 011A0FC3
.text C:\Windows\system32\svchost.exe[1136] kernel32.dll!LoadLibraryExW 76B930C3 5 Bytes JMP 011A0F88
.text C:\Windows\system32\svchost.exe[1136] kernel32.dll!LoadLibraryW 76B9361F 5 Bytes JMP 011A0036
.text C:\Windows\system32\svchost.exe[1136] kernel32.dll!VirtualProtectEx 76B98D7E 5 Bytes JMP 011A006C
.text C:\Windows\system32\svchost.exe[1136] kernel32.dll!LoadLibraryExA 76B99469 5 Bytes JMP 011A0051
.text C:\Windows\system32\svchost.exe[1136] kernel32.dll!LoadLibraryA 76B99491 5 Bytes JMP 011A0025
.text C:\Windows\system32\svchost.exe[1136] kernel32.dll!CreatePipe 76BA0284 5 Bytes JMP 011A007D
.text C:\Windows\system32\svchost.exe[1136] kernel32.dll!GetProcAddress 76BBB8B6 5 Bytes JMP 011A0F01
.text C:\Windows\system32\svchost.exe[1136] kernel32.dll!CreateFileW 76BBCC4E 5 Bytes JMP 011A0000
.text C:\Windows\system32\svchost.exe[1136] kernel32.dll!CreateFileA 76BBCF71 5 Bytes JMP 011A0FEF
.text C:\Windows\system32\svchost.exe[1136] kernel32.dll!CreateNamedPipeA 76C0430E 5 Bytes JMP 011A0FD4
.text C:\Windows\system32\svchost.exe[1136] kernel32.dll!WinExec 76C054FF 5 Bytes JMP 011A0F2D
.text C:\Windows\system32\svchost.exe[1136] msvcrt.dll!_wsystem 774B8A47 5 Bytes JMP 011C0F97
.text C:\Windows\system32\svchost.exe[1136] msvcrt.dll!system 774B8B63 5 Bytes JMP 011C002C
.text C:\Windows\system32\svchost.exe[1136] msvcrt.dll!_creat 774BC6F1 5 Bytes JMP 011C0FD7
.text C:\Windows\system32\svchost.exe[1136] msvcrt.dll!_open 774BDA7E 5 Bytes JMP 011C0000
.text C:\Windows\system32\svchost.exe[1136] msvcrt.dll!_wcreat 774BDC9E 5 Bytes JMP 011C0FBC
.text C:\Windows\system32\svchost.exe[1136] msvcrt.dll!_wopen 774BDE79 5 Bytes JMP 011C0011
.text C:\Windows\system32\svchost.exe[1136] ADVAPI32.dll!RegCreateKeyExA 76F9B5E7 5 Bytes JMP 011B0F94
.text C:\Windows\system32\svchost.exe[1136] ADVAPI32.dll!RegCreateKeyA 76F9B8AE 5 Bytes JMP 011B0FAF
.text C:\Windows\system32\svchost.exe[1136] ADVAPI32.dll!RegOpenKeyA 76FA0BF5 5 Bytes JMP 011B0FEF
.text C:\Windows\system32\svchost.exe[1136] ADVAPI32.dll!RegCreateKeyW 76FAB83D 5 Bytes JMP 011B0036
.text C:\Windows\system32\svchost.exe[1136] ADVAPI32.dll!RegCreateKeyExW 76FABCE1 5 Bytes JMP 011B0F83
.text C:\Windows\system32\svchost.exe[1136] ADVAPI32.dll!RegOpenKeyExA 76FAD4E8 5 Bytes JMP 011B0000
.text C:\Windows\system32\svchost.exe[1136] ADVAPI32.dll!RegOpenKeyW 76FB3CB0 5 Bytes JMP 011B0FCA
.text C:\Windows\system32\svchost.exe[1136] ADVAPI32.dll!RegOpenKeyExW 76FBF09D 5 Bytes JMP 011B001B
.text C:\Windows\system32\svchost.exe[1136] WS2_32.dll!socket 779636D1 5 Bytes JMP 01210000
.text C:\Windows\system32\svchost.exe[1228] kernel32.dll!GetStartupInfoW 76B71929 5 Bytes JMP 00070F7F
.text C:\Windows\system32\svchost.exe[1228] kernel32.dll!GetStartupInfoA 76B719C9 5 Bytes JMP 00070F90
.text C:\Windows\system32\svchost.exe[1228] kernel32.dll!CreateProcessW 76B71C01 5 Bytes JMP 00070F4C
.text C:\Windows\system32\svchost.exe[1228] kernel32.dll!CreateProcessA 76B71C36 5 Bytes JMP 00070F5D
.text C:\Windows\system32\svchost.exe[1228] kernel32.dll!VirtualProtect 76B71DD1 5 Bytes JMP 000700A7
.text C:\Windows\system32\svchost.exe[1228] kernel32.dll!CreateNamedPipeW 76B75C44 5 Bytes JMP 0007002F
.text C:\Windows\system32\svchost.exe[1228] kernel32.dll!LoadLibraryExW 76B930C3 5 Bytes JMP 00070FCD
.text C:\Windows\system32\svchost.exe[1228] kernel32.dll!LoadLibraryW 76B9361F 5 Bytes JMP 0007006F
.text C:\Windows\system32\svchost.exe[1228] kernel32.dll!VirtualProtectEx 76B98D7E 5 Bytes JMP 00070FBC
.text C:\Windows\system32\svchost.exe[1228] kernel32.dll!LoadLibraryExA 76B99469 5 Bytes JMP 0007008A
.text C:\Windows\system32\svchost.exe[1228] kernel32.dll!LoadLibraryA 76B99491 5 Bytes JMP 0007004A
.text C:\Windows\system32\svchost.exe[1228] kernel32.dll!CreatePipe 76BA0284 5 Bytes JMP 00070FA1
.text C:\Windows\system32\svchost.exe[1228] kernel32.dll!GetProcAddress 76BBB8B6 5 Bytes JMP 000700F4
.text C:\Windows\system32\svchost.exe[1228] kernel32.dll!CreateFileW 76BBCC4E 5 Bytes JMP 0007000A
.text C:\Windows\system32\svchost.exe[1228] kernel32.dll!CreateFileA 76BBCF71 5 Bytes JMP 00070FEF
.text C:\Windows\system32\svchost.exe[1228] kernel32.dll!CreateNamedPipeA 76C0430E 5 Bytes JMP 00070FDE
.text C:\Windows\system32\svchost.exe[1228] kernel32.dll!WinExec 76C054FF 5 Bytes JMP 00070F6E
.text C:\Windows\system32\svchost.exe[1228] msvcrt.dll!_wsystem 774B8A47 5 Bytes JMP 00090053
.text C:\Windows\system32\svchost.exe[1228] msvcrt.dll!system 774B8B63 5 Bytes JMP 00090FC8
.text C:\Windows\system32\svchost.exe[1228] msvcrt.dll!_creat 774BC6F1 5 Bytes JMP 0009001D
.text C:\Windows\system32\svchost.exe[1228] msvcrt.dll!_open 774BDA7E 5 Bytes JMP 0009000C
.text C:\Windows\system32\svchost.exe[1228] msvcrt.dll!_wcreat 774BDC9E 5 Bytes JMP 00090038
.text C:\Windows\system32\svchost.exe[1228] msvcrt.dll!_wopen 774BDE79 5 Bytes JMP 00090FE3
.text C:\Windows\system32\svchost.exe[1228] ADVAPI32.dll!RegCreateKeyExA 76F9B5E7 5 Bytes JMP 00080051
.text C:\Windows\system32\svchost.exe[1228] ADVAPI32.dll!RegCreateKeyA 76F9B8AE 5 Bytes JMP 00080FC0
.text C:\Windows\system32\svchost.exe[1228] ADVAPI32.dll!RegOpenKeyA 76FA0BF5 5 Bytes JMP 0008000A
.text C:\Windows\system32\svchost.exe[1228] ADVAPI32.dll!RegCreateKeyW 76FAB83D 5 Bytes JMP 00080FAF
.text C:\Windows\system32\svchost.exe[1228] ADVAPI32.dll!RegCreateKeyExW 76FABCE1 5 Bytes JMP 00080F9E
.text C:\Windows\system32\svchost.exe[1228] ADVAPI32.dll!RegOpenKeyExA 76FAD4E8 5 Bytes JMP 00080FE5
.text C:\Windows\system32\svchost.exe[1228] ADVAPI32.dll!RegOpenKeyW 76FB3CB0 5 Bytes JMP 0008001B
.text C:\Windows\system32\svchost.exe[1228] ADVAPI32.dll!RegOpenKeyExW 76FBF09D 5 Bytes JMP 00080036
.text C:\Windows\system32\svchost.exe[1228] WS2_32.dll!socket 779636D1 5 Bytes JMP 000A000A
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] kernel32.dll!GetStartupInfoW 76B71929 5 Bytes JMP 008C0F23
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] kernel32.dll!GetStartupInfoA 76B719C9 5 Bytes JMP 008C0F34
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] kernel32.dll!CreateProcessW 76B71C01 5 Bytes JMP 008C0EED
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] kernel32.dll!CreateProcessA 76B71C36 5 Bytes JMP 008C0084
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] kernel32.dll!VirtualProtect 76B71DD1 5 Bytes JMP 008C0F6A
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] kernel32.dll!CreateNamedPipeW 76B75C44 5 Bytes JMP 008C0022
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] kernel32.dll!LoadLibraryExW 76B930C3 5 Bytes JMP 008C004E
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] kernel32.dll!LoadLibraryW 76B9361F 5 Bytes JMP 008C0FAC
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] kernel32.dll!VirtualProtectEx 76B98D7E 5 Bytes JMP 008C0F59
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] kernel32.dll!LoadLibraryExA 76B99469 5 Bytes JMP 008C0F91
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] kernel32.dll!LoadLibraryA 76B99491 5 Bytes JMP 008C0033
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] kernel32.dll!CreatePipe 76BA0284 5 Bytes JMP 008C005F
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] kernel32.dll!GetProcAddress 76BBB8B6 5 Bytes JMP 008C0EDC
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] kernel32.dll!CreateFileW 76BBCC4E 5 Bytes JMP 008C0FE5
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] kernel32.dll!CreateFileA 76BBCF71 5 Bytes JMP 008C0000
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] kernel32.dll!CreateNamedPipeA 76C0430E 5 Bytes JMP 008C0011
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] kernel32.dll!WinExec 76C054FF 5 Bytes JMP 008C0F12
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] msvcrt.dll!_wsystem 774B8A47 5 Bytes JMP 008E0FAB
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] msvcrt.dll!system 774B8B63 5 Bytes JMP 008E0FC6
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] msvcrt.dll!_creat 774BC6F1 5 Bytes JMP 008E001B
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] msvcrt.dll!_open 774BDA7E 5 Bytes JMP 008E0FE3
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] msvcrt.dll!_wcreat 774BDC9E 5 Bytes JMP 008E002C
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] msvcrt.dll!_wopen 774BDE79 5 Bytes JMP 008E0000
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] ADVAPI32.dll!RegCreateKeyExA 76F9B5E7 5 Bytes JMP 008D0040
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] ADVAPI32.dll!RegCreateKeyA 76F9B8AE 5 Bytes JMP 008D0FB9
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] ADVAPI32.dll!RegOpenKeyA 76FA0BF5 5 Bytes JMP 008D0FE5
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] ADVAPI32.dll!RegCreateKeyW 76FAB83D 5 Bytes JMP 008D0F9E
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] ADVAPI32.dll!RegCreateKeyExW 76FABCE1 5 Bytes JMP 008D0F83
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] ADVAPI32.dll!RegOpenKeyExA 76FAD4E8 5 Bytes JMP 008D0FD4
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] ADVAPI32.dll!RegOpenKeyW 76FB3CB0 5 Bytes JMP 008D0000
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] ADVAPI32.dll!RegOpenKeyExW 76FBF09D 5 Bytes JMP 008D0025
.text C:\Program Files\McAfee\Common Framework\FrameworkService.exe[1240] WS2_32.dll!socket 779636D1 5 Bytes JMP 008F0FEF
.text C:\Windows\system32\svchost.exe[1304] kernel32.dll!GetStartupInfoW 76B71929 5 Bytes JMP 000800DB
.text C:\Windows\system32\svchost.exe[1304] kernel32.dll!GetStartupInfoA 76B719C9 5 Bytes JMP 000800C0
.text C:\Windows\system32\svchost.exe[1304] kernel32.dll!CreateProcessW 76B71C01 5 Bytes JMP 00080107
.text C:\Windows\system32\svchost.exe[1304] kernel32.dll!CreateProcessA 76B71C36 5 Bytes JMP 000800F6
.text C:\Windows\system32\svchost.exe[1304] kernel32.dll!VirtualProtect 76B71DD1 5 Bytes JMP 00080F8B
.text C:\Windows\system32\svchost.exe[1304] kernel32.dll!CreateNamedPipeW 76B75C44 5 Bytes JMP 00080FDE
.text C:\Windows\system32\svchost.exe[1304] kernel32.dll!LoadLibraryExW 76B930C3 5 Bytes JMP 00080065
.text C:\Windows\system32\svchost.exe[1304] kernel32.dll!LoadLibraryW 76B9361F 5 Bytes JMP 00080FBC
.text C:\Windows\system32\svchost.exe[1304] kernel32.dll!VirtualProtectEx 76B98D7E 5 Bytes JMP 00080080
.text C:\Windows\system32\svchost.exe[1304] kernel32.dll!LoadLibraryExA 76B99469 5 Bytes JMP 00080054
.text C:\Windows\system32\svchost.exe[1304] kernel32.dll!LoadLibraryA 76B99491 5 Bytes JMP 00080FCD
.text C:\Windows\system32\svchost.exe[1304] kernel32.dll!CreatePipe 76BA0284 5 Bytes JMP 000800A5
.text C:\Windows\system32\svchost.exe[1304] kernel32.dll!GetProcAddress 76BBB8B6 5 Bytes JMP 00080118
.text C:\Windows\system32\svchost.exe[1304] kernel32.dll!CreateFileW 76BBCC4E 5 Bytes JMP 00080FEF
.text C:\Windows\system32\svchost.exe[1304] kernel32.dll!CreateFileA 76BBCF71 5 Bytes JMP 00080000
.text C:\Windows\system32\svchost.exe[1304] kernel32.dll!CreateNamedPipeA 76C0430E 5 Bytes JMP 00080025
.text C:\Windows\system32\svchost.exe[1304] kernel32.dll!WinExec 76C054FF 5 Bytes JMP 00080F7A
.text C:\Windows\system32\svchost.exe[1304] msvcrt.dll!_wsystem 774B8A47 5 Bytes JMP 00CF0040
.text C:\Windows\system32\svchost.exe[1304] msvcrt.dll!system 774B8B63 5 Bytes JMP 00CF0025
.text C:\Windows\system32\svchost.exe[1304] msvcrt.dll!_creat 774BC6F1 5 Bytes JMP 00CF0000
.text C:\Windows\system32\svchost.exe[1304] msvcrt.dll!_open 774BDA7E 5 Bytes JMP 00CF0FE3
.text C:\Windows\system32\svchost.exe[1304] msvcrt.dll!_wcreat 774BDC9E 5 Bytes JMP 00CF0FB5
.text C:\Windows\system32\svchost.exe[1304] msvcrt.dll!_wopen 774BDE79 5 Bytes JMP 00CF0FD2
.text C:\Windows\system32\svchost.exe[1304] ADVAPI32.dll!RegCreateKeyExA 76F9B5E7 5 Bytes JMP 00CA0FAF
.text C:\Windows\system32\svchost.exe[1304] ADVAPI32.dll!RegCreateKeyA 76F9B8AE 5 Bytes JMP 00CA0047
.text C:\Windows\system32\svchost.exe[1304] ADVAPI32.dll!RegOpenKeyA 76FA0BF5 5 Bytes JMP 00CA000A
.text C:\Windows\system32\svchost.exe[1304] ADVAPI32.dll!RegCreateKeyW 76FAB83D 5 Bytes JMP 00CA0FC0
.text C:\Windows\system32\svchost.exe[1304] ADVAPI32.dll!RegCreateKeyExW 76FABCE1 5 Bytes JMP 00CA0076
.text C:\Windows\system32\svchost.exe[1304] ADVAPI32.dll!RegOpenKeyExA 76FAD4E8 5 Bytes JMP 00CA001B
.text C:\Windows\system32\svchost.exe[1304] ADVAPI32.dll!RegOpenKeyW 76FB3CB0 5 Bytes JMP 00CA0FEF
.text C:\Windows\system32\svchost.exe[1304] ADVAPI32.dll!RegOpenKeyExW 76FBF09D 5 Bytes JMP 00CA002C
.text C:\Windows\system32\svchost.exe[1304] WS2_32.dll!socket 779636D1 5 Bytes JMP 00D1000A
.text C:\Windows\system32\svchost.exe[1304] WinInet.dll!InternetOpenA 7753D690 5 Bytes JMP 00D00FEF
.text C:\Windows\system32\svchost.exe[1304] WinInet.dll!InternetOpenW 7753DB09 5 Bytes JMP 00D0000A
.text C:\Windows\system32\svchost.exe[1304] WinInet.dll!InternetOpenUrlA 7753F3A4 5 Bytes JMP 00D00025
.text C:\Windows\system32\svchost.exe[1304] WinInet.dll!InternetOpenUrlW 77586DDF 5 Bytes JMP 00D00036
.text C:\Windows\system32\svchost.exe[1476] kernel32.dll!GetStartupInfoW 76B71929 5 Bytes JMP 00230089
.text C:\Windows\system32\svchost.exe[1476] kernel32.dll!GetStartupInfoA 76B719C9 5 Bytes JMP 00230F43
.text C:\Windows\system32\svchost.exe[1476] kernel32.dll!CreateProcessW 76B71C01 5 Bytes JMP 00230F03
.text C:\Windows\system32\svchost.exe[1476] kernel32.dll!CreateProcessA 76B71C36 5 Bytes JMP 00230F28
.text C:\Windows\system32\svchost.exe[1476] kernel32.dll!VirtualProtect 76B71DD1 5 Bytes JMP 00230067
.text C:\Windows\system32\svchost.exe[1476] kernel32.dll!CreateNamedPipeW 76B75C44 5 Bytes JMP 0023001B
.text C:\Windows\system32\svchost.exe[1476] kernel32.dll!LoadLibraryExW 76B930C3 5 Bytes JMP 00230F83
.text C:\Windows\system32\svchost.exe[1476] kernel32.dll!LoadLibraryW 76B9361F 5 Bytes JMP 0023002C
.text C:\Windows\system32\svchost.exe[1476] kernel32.dll!VirtualProtectEx 76B98D7E 5 Bytes JMP 00230078
.text C:\Windows\system32\svchost.exe[1476] kernel32.dll!LoadLibraryExA 76B99469 5 Bytes JMP 00230F94
.text C:\Windows\system32\svchost.exe[1476] kernel32.dll!LoadLibraryA 76B99491 5 Bytes JMP 00230FA5
.text C:\Windows\system32\svchost.exe[1476] kernel32.dll!CreatePipe 76BA0284 5 Bytes JMP 00230F5E
.text C:\Windows\system32\svchost.exe[1476] kernel32.dll!GetProcAddress 76BBB8B6 5 Bytes JMP 00230EF2
.text C:\Windows\system32\svchost.exe[1476] kernel32.dll!CreateFileW 76BBCC4E 5 Bytes JMP 0023000A
.text C:\Windows\system32\svchost.exe[1476] kernel32.dll!CreateFileA 76BBCF71 5 Bytes JMP 00230FE5
.text C:\Windows\system32\svchost.exe[1476] kernel32.dll!CreateNamedPipeA 76C0430E 5 Bytes JMP 00230FCA
.text C:\Windows\system32\svchost.exe[1476] kernel32.dll!WinExec 76C054FF 5 Bytes JMP 002300A4
.text C:\Windows\system32\svchost.exe[1476] msvcrt.dll!_wsystem 774B8A47 5 Bytes JMP 003A0042